last executing test programs:

3.39208176s ago: executing program 3 (id=8548):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x10, 0x453, 0x2, 0xa1, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="f5af25bd7000000000000e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffaa, 0x0, 0xffffffffffffffff, 0x48}, 0x48)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48)
r6 = socket$inet6(0xa, 0x3, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r6}, 0x20)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082dbd7000fddbdf250d00000008003200fbffff060800340009000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40001)

3.190987107s ago: executing program 3 (id=8550):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) (async)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) (async)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000f900ffff0000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000200900010073797a3cb4000000080003"], 0x64}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010628bd7000fedbdf250b000000180001801400020064756d6d7930"], 0x2c}}, 0x4000800) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000300012800c0001006d6163766c616e002000028008000300030000000a0004000180c2000001000006000200b3"], 0x5c}}, 0x0) (async, rerun: 64)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001e002102000000000000000007000000140019801000f384040028800800318004004080"], 0x28}}, 0x0) (async)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000000)={0x4}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4b, 0x10, 0x0, 0x513464c15e446462, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)

3.168075341s ago: executing program 4 (id=8551):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@ctrl_frame=@bar={{}, {0x2}, @device_b, @device_b, @basic={{0x1}, {0x6, 0xb}}}, 0x14)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="9eca5056916ff0e67073f6d7ca7521ab79da96c0a5499a16e33e7a531c1cd0b7145a652e71d3bce384611bf841aeb5a2248b5b6a9c6a8ac81abdd32bf525a94f6501b9719cb425fb79c62f6fedebe7a385b181161b1b05f73db3c40430a321", 0x5f}, {&(0x7f00000001c0)="0c8c64de48d49f876663ad5695d17e07fc11dd4cffcf8cf31e1d00cc2dc1e705f7e1e5fc0296fec99edcc0271c38ecc1423d7decb3b606048946c01e56a0c86b46834204be883438c21ebd1265615824c55c669c9be1235dbf9dc88cbc8ed944f8f9cc17526982cb8c88e077210a1e28e132dfffaaf7e2be76d8dd282d80af87dc25aac1830e7d6cb98b0813017e802ecef98bc66bfc824f40371dd728f8b46e", 0xa0}], 0x2, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x37c}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7021}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11}}], 0xd8}, 0x20040004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_inject_frame(&(0x7f0000000400), &(0x7f0000000440)=@ctrl_frame=@cts={{}, {0x6361}, @broadcast}, 0xa)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) (async)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x400000, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x400000, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@broadcast, &(0x7f0000000500)=@ctrl_frame=@rts={{}, {0xf}, @broadcast}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x402400, 0x0)
syz_80211_inject_frame(&(0x7f0000000580)=@broadcast, &(0x7f00000005c0)=@ctrl_frame=@cf_end={{}, {0x10}}, 0x10)
r2 = socket(0x8, 0x2, 0x7678)
close(r1)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={r0, &(0x7f0000000600)="f3878d8cf0e0e92749106447b46aaf1f2dffe8070745b06ebdcdb8c359ed725eacbe48e8e5de2e2ee95f3a50090e3de7265d0b93c1f22b89360b7e9767cb78273ef815603bd5f9d770f0acfb7755d17e59209af28c3a066f85e00acdc6afffa543b6cd083a8d653d03bdddfa5c4a51b7", &(0x7f0000000680)=""/13, 0x4}, 0x20)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
getsockname$l2tp6(r2, &(0x7f0000000740)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000780)=0x20) (async)
getsockname$l2tp6(r2, &(0x7f0000000740)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000780)=0x20)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0)
accept4$bt_l2cap(r0, &(0x7f00000007c0), &(0x7f0000000800)=0xe, 0x80800) (async)
r4 = accept4$bt_l2cap(r0, &(0x7f00000007c0), &(0x7f0000000800)=0xe, 0x80800)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000008c0)={0xa, &(0x7f0000000840)=[{0x1, 0x5, 0x0, 0x1}, {0x3, 0x90, 0x3, 0x800}, {0x1, 0x8, 0x3, 0x8}, {0x7, 0xe, 0x27, 0x3}, {0x1e, 0x4, 0x4, 0x80}, {0x5, 0x0, 0x1, 0x2}, {0x1ff, 0x2, 0x1, 0x5}, {0x7fff, 0xe8, 0x0, 0x531b}, {0x81, 0x3, 0x2}, {0x5480, 0xc, 0x3}]}, 0x10)
syz_80211_inject_frame(&(0x7f0000000900)=@device_b, &(0x7f0000000940)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @random="ddad6bec6cf2", {0x2, 0x7}, @value=@ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x5, @default, 0x40, @val={0x0, 0x7, @random="f05212a0b1ae88"}, @void, @val={0x3, 0x1, 0x84}, @void, @val={0x6, 0x2, 0x89f}, @void, @val={0x25, 0x3, {0x0, 0xa1, 0x40}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb6}}, @val={0x76, 0x6, {0x3, 0x2, 0xe, 0x5}}, [{0xdd, 0xc9, "f8ec8542e40d53f44b45ef2ff2f8f38b74856154b4c6cd45594cc796de6b813709a33dbc27df0db78b9fd11e003f5ff42d9cbc9647dd257eff8c5de65b8d734303a56eac452b4d132d4b53940551b60c169a257239b6687c564decc5749282eae655a665858578f3b323da1f3301a26968cb666ca5a91dc4bbe9003a8587ac0ab48ec395e1a040e5a5ec811dd1faf03d7d9caec5abd243baed364cbbb2c74d9b280bc0254c6fd00a650139dbd4ec4320d2bcedbced05dbd54a2c8e8de4208833c32b4e59216dbce757"}, {0xdd, 0x51, "f30a85f9eb729ac578ca827598674909d5ee5d762eead96f258cd4792f5e0a38436b4cd43a4ba770792cb4fe9bbf9afd2cf43515bb5a1936ca5ea1c363a41ccfaffff664be5c5331bfdd70c264e151dbe9"}, {0xdd, 0x74, "5ec36c57fdfaeaf19fabb7fe88c0e3107686463a36b452a6167a450b717a31962616c9b8502ed319aeaeb87dc2d35731dfe54f2bf62a3aabdbff32b8c59e9ab2375ed055d8b3968c05f416f70bd6a24eb7b2d08afbe83f996bb18927f2ed27cfa01e0876cb74aa04deeb7685733c251475a4f6f4"}]}, 0x1e5) (async)
syz_80211_inject_frame(&(0x7f0000000900)=@device_b, &(0x7f0000000940)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @random="ddad6bec6cf2", {0x2, 0x7}, @value=@ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x5, @default, 0x40, @val={0x0, 0x7, @random="f05212a0b1ae88"}, @void, @val={0x3, 0x1, 0x84}, @void, @val={0x6, 0x2, 0x89f}, @void, @val={0x25, 0x3, {0x0, 0xa1, 0x40}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb6}}, @val={0x76, 0x6, {0x3, 0x2, 0xe, 0x5}}, [{0xdd, 0xc9, "f8ec8542e40d53f44b45ef2ff2f8f38b74856154b4c6cd45594cc796de6b813709a33dbc27df0db78b9fd11e003f5ff42d9cbc9647dd257eff8c5de65b8d734303a56eac452b4d132d4b53940551b60c169a257239b6687c564decc5749282eae655a665858578f3b323da1f3301a26968cb666ca5a91dc4bbe9003a8587ac0ab48ec395e1a040e5a5ec811dd1faf03d7d9caec5abd243baed364cbbb2c74d9b280bc0254c6fd00a650139dbd4ec4320d2bcedbced05dbd54a2c8e8de4208833c32b4e59216dbce757"}, {0xdd, 0x51, "f30a85f9eb729ac578ca827598674909d5ee5d762eead96f258cd4792f5e0a38436b4cd43a4ba770792cb4fe9bbf9afd2cf43515bb5a1936ca5ea1c363a41ccfaffff664be5c5331bfdd70c264e151dbe9"}, {0xdd, 0x74, "5ec36c57fdfaeaf19fabb7fe88c0e3107686463a36b452a6167a450b717a31962616c9b8502ed319aeaeb87dc2d35731dfe54f2bf62a3aabdbff32b8c59e9ab2375ed055d8b3968c05f416f70bd6a24eb7b2d08afbe83f996bb18927f2ed27cfa01e0876cb74aa04deeb7685733c251475a4f6f4"}]}, 0x1e5)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@loopback, @in6=@dev}}, {{@in6=@private1}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000000c80)=0xe8) (async)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private1}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000000c80)=0xe8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000d00)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d40), &(0x7f0000000d80)=0xc) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d40)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000d80)=0xc)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001500)=@nat={'nat\x00', 0x19, 0x5, 0x70e, [0x200000000dc0, 0x0, 0x0, 0x200000000df0, 0x2000000010ec], 0x0, &(0x7f0000000b40), &(0x7f0000000dc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x0, 0x2, [{0x3, 0x45, 0x890d, 'syzkaller1\x00', 'ip6erspan0\x00', 'bridge_slave_1\x00', 'pimreg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, [0xff, 0xff, 0x0, 0x0, 0x0, 0x1fe], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0xee, 0x15e, 0x1d6, [@owner={{'owner\x00', 0x0, 0x18}, {{0xee00, r5, r6, r7, 0x3, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x8, 0x10001, 0x3562, 0x4e46, 0x6, 0x9, 0x3}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffc}}}, @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xfffffffffffffffd}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0x3, 0x0, 0x1, 0x0, "fb594ce015b3aa7284179025c81c0e3ebd906d6f8c7b33624734f9a196c882e1f62e554d970e1a2667e0885bca2c7ce8eaad7195e711a90b836742a61988d90a"}}}}, {0x0, 0x44, 0x1a, 'hsr0\x00', 'pimreg\x00', 'syzkaller1\x00', 'batadv_slave_0\x00', @link_local, [0xff, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xbe, 0xbe, 0xf6, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xffffff00, 0x0, 0xffffff00], 0x4e24, 0x0, 0x0, 0x4e22, 0x20, 0x2}}}], [], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x1, 0xd, 'ipvlan0\x00', 'vlan1\x00', 'batadv_slave_1\x00', 'nicvf0\x00', @broadcast, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@link_local, 0x10}}}}]}, {0x0, '\x00', 0x3, 0x0, 0x2, [{0x3, 0x1, 0x6003, 'hsr0\x00', 'team_slave_0\x00', 'pim6reg\x00', 'veth0_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, [0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xee, 0x126, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x6, 0x6, {0x8}}}}, @arpreply={'arpreply\x00', 0x10, {{@multicast, 0x2}}}], @snat={'snat\x00', 0x10, {{@random="42b2517487da", 0xfffffffffffffffd}}}}, {0x9, 0x4, 0xa01, 'bridge_slave_1\x00', 'veth0_macvtap\x00', 'syzkaller1\x00', 'veth0_virt_wifi\x00', @local, [0xff, 0xff, 0xff, 0xff], @random="36048ea5fab2", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0xde, 0x17e, 0x1b6, [@stp={{'stp\x00', 0x0, 0x48}, {{0x27, {0x0, 0xfff9, 0xfffc, @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff], 0x4, 0x9, 0x3b04, 0x1, @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x4e24, 0x4e24, 0xe, 0x0, 0x1ff, 0xa2, 0x40, 0x0, 0xfffc, 0x2d3}, 0x101, 0x20}}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x6, {0x4}}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz0\x00', {0x9}}}}], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0x10}}}}]}]}, 0x786)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000001580)={<r8=>0x0, 0xf000, 0x10, 0x874, 0x4}, &(0x7f00000015c0)=0x18)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001600)={r8, 0xffff, 0x9}, &(0x7f0000001640)=0x10)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r2) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r2)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000001780)={&(0x7f0000001680), 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x8080) (async)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000001780)={&(0x7f0000001680), 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x8080)
sendto$l2tp6(r0, &(0x7f00000017c0)="b4d89d3f9bce2d98b39f189b59c9c1686f62bd84a65b5b120342f10ffe40ef9c989624803a9d08a949074e2eb7bce38517fc9a8d47e4a9b445747a343f1612460f4c96bc448c6869788f506c7cb5db181a465a2cad388797dfb1c46e4c039ac5c39fa5266510b8d4b4e43ea71c224130de5d759f15587dd3137c6d498c1a", 0x7e, 0x800, &(0x7f0000001840)={0xa, 0x0, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x2}, 0x20)

2.991620988s ago: executing program 3 (id=8553):
r0 = epoll_create1(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xa, 0x0, &(0x7f0000000000)="259a53f271a76d2688a2", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
unshare(0x22020600)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=<r5=>0x0, @ANYBLOB="b70000"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r5, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000919315431522456f7392969d805837ac03a8bcfbf170a96590e42e13ceb9f475887444d2dd6f269476fa", @ANYRESDEC=r4, @ANYRESOCT=r2, @ANYRES8], 0x50)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r7, 0x6, 0x1c, 0x0, &(0x7f0000000000)=0xfffffffffffffe3f)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r6}, 0x38)
socket$xdp(0x2c, 0x3, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000}, {0x4, 0x7ffffffffffffffd, 0x407ffffffffffe, 0x800000000000002}, 0x3, 0x1, 0x1, 0x0, 0x2, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x2b}, 0x0, @in6=@private2, 0x3503, 0x4, 0x3, 0x0, 0x0, 0x0, 0x113b}]}]}, 0xfc}}, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850000f8ac00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)

2.278006192s ago: executing program 4 (id=8561):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000880)={0x2, 0x4e1d, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2800000000000000000000000700000083070400000000070f09"], 0x28}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x82, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41000}, 0x94)

2.182299801s ago: executing program 4 (id=8562):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x4e, &(0x7f0000000940)={@random="757e938fd660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x8, '\x00', @mcast1}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @random="4ef1adb02bd2", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6403a6", 0x0, 0x32, 0x0, @empty, @mcast2}}}}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1412, 0x8, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001", @ANYRESHEX], 0xd4}}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$NILFS_IOCTL_GET_CPSTAT(r2, 0x80186e83, &(0x7f0000000040))

1.997465699s ago: executing program 3 (id=8566):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5)
sendmsg$NFC_CMD_GET_SE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r6, 0x5953a6d8b15e6715, 0x70bd2c}, 0x14}}, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="e8ee8100000000000000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf250f000000400003800600040078000000140002006272696467655f736c6176655f300000050008001000000008000500ac1e0001060007004e20000008000300010000003800038008000500ac1e0101060004000600000008000500ac1e0101060004000e0000001400020070696d72656731000000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x48880}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendfile(r2, r3, 0x0, 0xffffffff000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r9, &(0x7f00000002c0)=""/16, 0x10, 0x40000660, 0x0, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00'})
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r6, @ANYBLOB="8e2bc2b23922148881957e933896c36bc215c56bc16043259d319e3ba666f488dfb22629bcecdad99768cf3996e63a41ad4b45b7302cd932220502b61bcf98921f3698aff7d6a04274af26f01d442d6d86325288ed584f900e5d2b49cb2edcc296c182e758a4403a19aeecc024d639c774f55f4a4ea23d73c6673dcc25", @ANYBLOB="000000000000000008001b000000000004001a80180002c3099a589de41ef697fa1e7eaf8894b03da47607d56e8e4698cf5fb06a2b019901f69c4e03527d4c6b70dd3040ec7c11ba257f164b303f74a2b58ace53f50a7d32d1497068e3cd0562c0348287eabd497ba343"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r10 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0)

1.778358857s ago: executing program 2 (id=8569):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'sit0\x00'})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000780)=0x2, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f0000000240)={0x11, 0xfa, 0x0, 0x1, 0x10, 0x6, @local}, 0x14)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'wg1\x00', @random="508cf012196c"})
write$tun(r3, &(0x7f0000000240)=ANY=[], 0xfdef)
r5 = accept4(r1, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000600100019002cbd7000fa73b42a03c3db5f", @ANYRES32=0x0, @ANYBLOB="870d040069920700280012800e00010069703667726574617000000014000280060011004e20000006001000000700001400030069703667726574617030000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r5, 0x8915, &(0x7f0000000140)={'caif0\x00', @ifru_settings={0x2, 0x6b8, @fr_pvc_info=&(0x7f0000000040)={0x7e8, 'syz_tun\x00'}}})
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6e3a05b9", "12772541f8eb02d5"}, 0x28)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r7, r8, 0x0, 0xffffffff004)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r9, 0x1, 0x4, &(0x7f0000000280), &(0x7f0000000200)=0xb94142cc0708e485)
close(r7)

1.752343908s ago: executing program 4 (id=8570):
r0 = socket$inet(0x2, 0x1, 0x6)
r1 = socket$packet(0x11, 0xa, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080001"], 0xa4}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c89001984"], 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0xe, 0x2f, 0x0, @multicast2, @empty}}}})
socket$inet(0x2, 0x1, 0x6) (async)
socket$packet(0x11, 0xa, 0x300) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080001"], 0xa4}}, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async)
syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c89001984"], 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0xe, 0x2f, 0x0, @multicast2, @empty}}}}) (async)

1.614363412s ago: executing program 1 (id=8571):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000100)={0x34, r1, 0x1, 0x170bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x114}, 0x20000000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wg1\x00', @remote})

1.455446215s ago: executing program 1 (id=8573):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff850000007b000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x1, 0x8}}]}}}]}, 0x5c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x40, 0x7, 0xb, 0x2, {{0x9, 0x4, 0x3, 0x11, 0x24, 0x68, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast1, {[@generic={0x104, 0xf, "517f290fedc9bd2156f1150d40"}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b00500002200000079100800000000001ea0000000000000956acb97c02a0300"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

1.380420676s ago: executing program 1 (id=8574):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x29)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="09ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1.131870328s ago: executing program 1 (id=8576):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x64, 0x3, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x400}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20048010) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async)
listen(r1, 0x0) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/142, 0x8e}], 0x1, &(0x7f0000000480)=""/131, 0x83}, 0x8}], 0x1, 0x6021, 0x0) (async)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "bb3f27819cc613dcbf91dc167dfa2dee90"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x12c}}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)

1.131239698s ago: executing program 4 (id=8577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000003e0007012bbdfc000000000000000001000000800e0001806d147f5f4031496535e8ffe1000000"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc0c0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x160, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x72}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_DATA={0xbc, 0xc5, "14b9cc5eef895bcf658fe0e426a847516e4ed1c956b46b5c8378d7989dcb1a4c921a0b8cb1dfed1f3c5b0511f8a4ee2829b344880ef66b4b15f8fd7ea63281ce95e54d90cde2d434094fb008d5f1a8d240269e9bdf812d4307390c162eadfb620602d2eff45c3c7c099fafe3b9beb176a171c69d9f2ca45673cee9aa346f52f06dc5cc27431c2a7202fbd1e1f5dcc40efd46fb6b0073187f36a6f2fe66e2493bfc51dffc143bc72ecd3770e912a7970510d50fa0e31e8c48"}, @NL80211_ATTR_VENDOR_DATA={0x7b, 0xc5, "3a63249a714f95cdbfbfb33a0c408fc012b929ccf28d3cd56f8c222d9e862894db5f5a60f1cbc3a1ac6b7c2b621258c265deb0d4e1597ca147d883ce595d893b2a3a6ec87269bfcb2d6de0ac9a8ff6d000923ab0d30cd8dbedb1844e14b7cb46865b04c1b0ea822430ae9b665fea0f85917363a60f309b"}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
write$bt_hci(r6, &(0x7f00000000c0)=ANY=[], 0xa)
accept$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
openat$cgroup_type(r7, &(0x7f0000000280), 0x2, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = openat$cgroup_devices(r8, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r9, &(0x7f0000000200)={'a', ' *:* ', 'rwm\x00'}, 0xa)
sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x11, 0x4e21, @loopback}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000440)="08000000001f009e", 0x8}], 0x1}}], 0x2, 0x40444c4)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r10)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a)
sendfile(r10, r11, 0x0, 0xffffffff004)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x1d, &(0x7f00000001c0)={0x8, 0x3ff, 0x10000, 0x2, 0x3}, 0x14)

1.005609162s ago: executing program 3 (id=8579):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xec, 0xfbed, 0x1, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e, 0xfff10000}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)

961.399466ms ago: executing program 0 (id=8580):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={<r2=>r0, 0x3, 0xf092, 0x2da})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r2}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
accept$alg(r1, 0x0, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x190a1, 0x2c0e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x6, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, @call={0x85, 0x0, 0x0, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) (async, rerun: 32)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000400), 0x4) (async, rerun: 32)
syz_emit_ethernet(0x1d, 0x0, 0x0) (async)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x40000000)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000280)=""/130, &(0x7f0000000340)=0x82)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r8, 0xffffe000) (async)
sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x6}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x40}, 0x1, 0x0, 0x0, 0x4803}, 0x4008014) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r9=>0x0})
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r9, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000070605000000000000000000030000040900020073797a32000000000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x400c811}, 0x8004)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r10, r12, 0x4, r12}, 0x10)

849.934244ms ago: executing program 0 (id=8581):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000200081dc010000000300000002000000000000031f00000004001500"], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x40084)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x2f0, 0x100000c, 0x148, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@set4={{0x50}, {{}, {{0x44}, 0x5a}, {{0x2000004}, 0xa}, 0x3}}, @common=@icmp={{0x28}, {0x12, "be45"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(anubis-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newtaction={0x1b0, 0x30, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{0x19c, 0x1, [@m_ipt={0x198, 0x16, 0x0, 0x0, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x14d, 0x6, {0x4, 'mangle\x00', 0xd, 0x400, "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"}}]}, {0x15, 0x6, "5a2d0e869135a294681ef6728f70a65a4e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}]}]}, 0x1b0}}, 0x4000000)
recvmmsg$unix(r5, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)=""/198, 0xc6}, {&(0x7f0000000740)=""/249, 0xf9}], 0x2}}], 0x1, 0x140, 0x0)
getpid()
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffef2, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="040100001000000100000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08001d00080000000500100007000000"], 0x104}}, 0x4000000)

823.551901ms ago: executing program 2 (id=8582):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fc0100000000000013d38000911150000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40)

660.596104ms ago: executing program 0 (id=8583):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2040, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x400)
pread64(r4, 0x0, 0x0, 0x3)
socket(0x400000000010, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000000000}, &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2b, 'net_cls'}, {0x2d, 'cpuacct'}, {0x2b, 'cpuacct'}, {0x2d, 'perf_event'}, {0x3669ef26e190c74a, 'net_prio'}, {0x2b, 'rdma'}, {0x61ba1d2ba73209f6, 'devices'}, {0x2b, 'hugetlb'}, {0x2d, 'io'}]}, 0x4d)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)

507.916145ms ago: executing program 2 (id=8584):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x15b8, 0x1418, 0x0, 0xe8, 0x12f8, 0x12f8, 0x14e8, 0x14e8, 0x14e8, 0x14e8, 0x14e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x2, 0x5, 0x0, 0x8b, 0x1000000, 0x9, 0x1, 0x3]}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'ip6gretap0\x00'}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.cpu/syz0\x00', 0x4, {0x31b}}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1618)

442.129593ms ago: executing program 3 (id=8585):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0xa, 0x5, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={r3}, &(0x7f0000000140)=0x8)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="6c5b89505230fd16b171bfd2e0184750416a065bb99ebe0a95090608a69459de5543e238325859037bc2147ca4da103ca9110913f36e111711adc63e3664e363f0840e452a26a5395746370cd8fda5254ece19b081f294f3b8f175665714c543e20d504b3c701ab0e0a25841b8407c343f42ea18902533dbc906f37c188ed10c0e8a463dbf2e78d8f062e554ea40890a9b03cb17b0dba43d3dfaabf4978c17eb409951c4edf208b51bf631471cd0"], 0x7c}}, 0x40014)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
r4 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) (async)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0)
close(r0)

439.51264ms ago: executing program 2 (id=8586):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x55, 0x123, 0x4, 0x70bd28, 0x25dfdbfd, {0x16}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000000c0)='veth0_to_team\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="a19001000e2c00001c0022009949beedf19b7936f1c407cb41a95c1af2c50b219e0908f2383a3defa438df9b9332ec71793a01fe6bbac3d73f2373bc5c6581cfbbba1c546e45dfe345309b312a43e44e7d9f2c699ff337070b31ddab46d16e3672e274251b0f3751301476ab367c4779524de3ec61ec13ed56760fdf43c65912134f915fda3be4c40058661e4ad367087c33bac43c0e10dad79e9e4955396eb86f342bb9a63e8b8e4664302555df97c0a8a965175e739a3563c2a9a1bce4a0a993021ef3e496c2db7f26d9aa6d7df9d4e47c1b013f"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getchain={0x54, 0x66, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x426ae670c5e3fe49, 0xe}, {0x10, 0xffe0}, {0xc, 0xfff2}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x4f}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0xfffffff9}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000002}, 0xa4380b910c83e5a5)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x55, 0x123, 0x4, 0x70bd28, 0x25dfdbfd, {0x16}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000000c0)='veth0_to_team\x00') (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="a19001000e2c00001c0022009949beedf19b7936f1c407cb41a95c1af2c50b219e0908f2383a3defa438df9b9332ec71793a01fe6bbac3d73f2373bc5c6581cfbbba1c546e45dfe345309b312a43e44e7d9f2c699ff337070b31ddab46d16e3672e274251b0f3751301476ab367c4779524de3ec61ec13ed56760fdf43c65912134f915fda3be4c40058661e4ad367087c33bac43c0e10dad79e9e4955396eb86f342bb9a63e8b8e4664302555df97c0a8a965175e739a3563c2a9a1bce4a0a993021ef3e496c2db7f26d9aa6d7df9d4e47c1b013f"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getchain={0x54, 0x66, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x426ae670c5e3fe49, 0xe}, {0x10, 0xffe0}, {0xc, 0xfff2}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x4f}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0xfffffff9}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000002}, 0xa4380b910c83e5a5) (async)

391.776154ms ago: executing program 0 (id=8587):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x24, 0x0, @val=@perf_event={0x7ff}}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_batadv\x00'}]}, 0x50}}, 0x44)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})
r7 = epoll_create1(0x0)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f00000001c0)={0x10000004})
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x1b0, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1b0}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0xa0000001})
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r10, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x40, r12, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "00ffffff0700"}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
pwrite64(r6, &(0x7f0000000380)="288707bb2cdc492bb106e3e12801a6bb66a0b12cb668ddb4d986eeb8fc82152c0a8a6f3f2c8c5f2c52a0d45dfdfb4ecaf57e191942a4b8e9647cda96fccc0c3fab3cb7fd3ca532d5cf831d6f4d6dd25def440ebc613e559737abe3b7f6f4ff39464dfbe009f14de1896420", 0x6b, 0x4)

374.695468ms ago: executing program 2 (id=8588):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r5=>0x0})
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x403, 0x70bd25, 0x1, {0x0, 0x0, 0x4, 0x0, 0x1300}, [@IFLA_LINKINFO={0xfffffffffffffed0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x3, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008081}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x0)
recvmmsg$unix(r7, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="d2a534b308834d054586feb5c9428624db4b878120e41be144acec28b091f1237c91d74cf1ce0c17632e8dce6ac8c6822c2382fc3ac7c89f2d955bc265df5364df0d56866c920de52e29535b686bb2b4e7e485d65da8513267bc112d12e86bf2a6c815e7e152ecfcde4de24108b1", 0x6e}, {&(0x7f0000000f40)="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", 0x54f}], 0x2}}], 0x2, 0x40)

299.968955ms ago: executing program 0 (id=8589):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000)
mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7000001, 0x11, 0xffffffffffffffff, 0x639c956a1dbf62e8)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0)

293.678073ms ago: executing program 1 (id=8590):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x850)
getsockopt(0xffffffffffffffff, 0x114, 0x2720, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4000004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000000000000500"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2e, 0x9, 0x70bf27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

146.966221ms ago: executing program 0 (id=8591):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000440))
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48)
close(r2)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)=0x10004)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0x0, 0x9}, 0x20)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)=0x1)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg$sock(r7, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x51, 0x2}}], 0x18}}], 0x1, 0x20000000)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4200, 0x44200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r10, 0x310, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040850}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0)

47.68ms ago: executing program 2 (id=8592):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0xa, @empty, 0xfefff7fe}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}, {{0x0, 0x218, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="280000000000000029000000390000003302020100000000fc0000000000000000000000000000011400000000000000290000000b000000000000000000000000010000000000002900000037000000111c000000000000050200010001000502004000010005d472e92e05a98f7d288ec9b35e6dadfb0cbe9e2c77631d71d7ede8706697fdc5b538f11d492aae2821c8c92130d08dd869e6de4a98f41b98948f"], 0x228}}], 0x2, 0x20080058)

10.860201ms ago: executing program 1 (id=8593):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x2000c8d0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007ffffffed7"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}}]}, 0x30}}, 0x0)
getsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

0s ago: executing program 4 (id=8594):
socket(0x2, 0x80805, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
connect$vsock_stream(r2, &(0x7f0000001040)={0x28, 0x0, 0x648a98aefca5f810, @hyper}, 0x10)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_emit_ethernet(0x36, 0x0, 0x0)
socket$packet(0x11, 0x1, 0x300)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040), 0x10)
listen(r3, 0x0)
socket(0x28, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2})
socket$kcm(0x11, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x2001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffd, 0xb}, {0xffff}, {0xfff2, 0x5}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x5, 0x10, 0x5, 0x2, 0x6, 0xfffffff8, 0x3}}, {0xa, 0x2, [0xd7, 0x907, 0x5]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

kernel console output (not intermixed with test programs):

in process `syz.0.7190'.
[  839.016411][ T1161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7190'.
[  839.058565][ T1161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7190'.
[  839.261458][ T1178] wg1 speed is unknown, defaulting to 1000
[  839.354480][ T1186] netlink: 'syz.1.7196': attribute type 7 has an invalid length.
[  840.073217][ T1207] macvtap0: entered promiscuous mode
[  840.292822][ T1224] netlink: 'syz.2.7210': attribute type 3 has an invalid length.
[  840.336943][ T1224] netlink: 'syz.2.7210': attribute type 3 has an invalid length.
[  840.375646][ T1225] netlink: 'syz.2.7210': attribute type 3 has an invalid length.
[  840.447628][ T1225] netlink: 'syz.2.7210': attribute type 3 has an invalid length.
[  840.600199][ T1206] macvtap0: left promiscuous mode
[  841.253911][ T1252] bond8: entered promiscuous mode
[  841.279035][ T1252] 8021q: adding VLAN 0 to HW filter on device bond8
[  841.339782][ T1260] bridge4: entered promiscuous mode
[  841.354704][ T1260] bond8: (slave bridge4): Enslaving as an active interface with an up link
[  841.364806][ T1269] tipc: Invalid UDP bearer configuration
[  841.364850][ T1269] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  841.695839][ T1294] vlan0: entered promiscuous mode
[  841.905705][ T1314] netlink: 'syz.1.7234': attribute type 1 has an invalid length.
[  841.950732][ T1314] bond9: entered promiscuous mode
[  841.957694][ T1314] 8021q: adding VLAN 0 to HW filter on device bond9
[  843.094679][ T1375] netlink: 'syz.3.7253': attribute type 2 has an invalid length.
[  843.123331][ T1375] !¼Þ: entered promiscuous mode
[  843.229117][ T1385] batman_adv: batadv0: Adding interface: ipvlan2
[  843.245682][ T1385] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  843.249647][ T1387] __nla_validate_parse: 97 callbacks suppressed
[  843.249663][ T1387] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7255'.
[  843.303697][ T1385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  843.316048][ T1385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  843.326578][ T1385] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  843.706857][ T1409] wg1 speed is unknown, defaulting to 1000
[  843.772082][ T1416] FAULT_INJECTION: forcing a failure.
[  843.772082][ T1416] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  843.791954][ T1416] CPU: 1 UID: 0 PID: 1416 Comm: syz.4.7263 Not tainted syzkaller #0 PREEMPT(full) 
[  843.791991][ T1416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  843.792009][ T1416] Call Trace:
[  843.792023][ T1416]  <TASK>
[  843.792033][ T1416]  dump_stack_lvl+0xe8/0x150
[  843.792062][ T1416]  should_fail_ex+0x412/0x560
[  843.792093][ T1416]  prepare_alloc_pages+0x22a/0x650
[  843.792123][ T1416]  __alloc_frozen_pages_noprof+0x12f/0x380
[  843.792149][ T1416]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  843.792174][ T1416]  ? __pfx_policy_nodemask+0x10/0x10
[  843.792194][ T1416]  ? ima_match_policy+0x2146/0x21e0
[  843.792226][ T1416]  alloc_pages_mpol+0x232/0x4a0
[  843.792252][ T1416]  alloc_pages_noprof+0xa8/0x1a0
[  843.792276][ T1416]  pte_alloc_one+0x22/0x370
[  843.792304][ T1416]  __pte_alloc+0x25/0x1a0
[  843.792329][ T1416]  do_pte_missing+0x2c47/0x3490
[  843.792357][ T1416]  ? mtree_range_walk+0x6a7/0x840
[  843.792384][ T1416]  handle_mm_fault+0x1bec/0x3310
[  843.792400][ T1416]  ? mt_find+0x186/0x630
[  843.792430][ T1416]  ? handle_mm_fault+0xee/0x3310
[  843.792454][ T1416]  ? __pfx_handle_mm_fault+0x10/0x10
[  843.792498][ T1416]  __get_user_pages+0x165b/0x29d0
[  843.792552][ T1416]  __gup_longterm_locked+0xdcf/0x1630
[  843.792587][ T1416]  ? gup_fast_fallback+0x151/0x22e0
[  843.792611][ T1416]  ? sanity_check_pinned_pages+0x1219/0x12d0
[  843.792644][ T1416]  gup_fast_fallback+0x1d82/0x22e0
[  843.792695][ T1416]  ? rcu_is_watching+0x15/0xb0
[  843.792720][ T1416]  ? __pfx_gup_fast_fallback+0x10/0x10
[  843.792747][ T1416]  ? is_valid_gup_args+0x11f/0x200
[  843.792783][ T1416]  ? pin_user_pages_fast+0x4d/0xb0
[  843.792810][ T1416]  rds_info_getsockopt+0x20e/0x4a0
[  843.792842][ T1416]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  843.792869][ T1416]  ? __might_fault+0xaf/0x130
[  843.792891][ T1416]  ? rds_getsockopt+0x31d/0x500
[  843.792911][ T1416]  ? __pfx_rds_getsockopt+0x10/0x10
[  843.792936][ T1416]  do_sock_getsockopt+0x2d3/0x3f0
[  843.792965][ T1416]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  843.792989][ T1416]  ? __fget_files+0x3a0/0x420
[  843.793005][ T1416]  ? __fget_files+0x2a/0x420
[  843.793028][ T1416]  __x64_sys_getsockopt+0x1a4/0x240
[  843.793060][ T1416]  do_syscall_64+0x14d/0xf80
[  843.793078][ T1416]  ? trace_irq_disable+0x3b/0x150
[  843.793094][ T1416]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.793111][ T1416]  ? clear_bhb_loop+0x40/0x90
[  843.793133][ T1416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.793150][ T1416] RIP: 0033:0x7f195399c819
[  843.793168][ T1416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  843.793184][ T1416] RSP: 002b:00007f19547b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  843.793203][ T1416] RAX: ffffffffffffffda RBX: 00007f1953c16090 RCX: 00007f195399c819
[  843.793215][ T1416] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 000000000000000c
[  843.793227][ T1416] RBP: 00007f19547b9090 R08: 0000200000000000 R09: 0000000000000000
[  843.793238][ T1416] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001
[  843.793249][ T1416] R13: 00007f1953c16128 R14: 00007f1953c16090 R15: 00007ffe3e76c538
[  843.793279][ T1416]  </TASK>
[  844.106394][ T1419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7267'.
[  844.508640][ T1425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7270'.
[  844.523491][ T1425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7270'.
[  844.532998][ T1425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7270'.
[  844.542314][ T1425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7270'.
[  844.551508][ T1425] netlink: 'syz.3.7270': attribute type 6 has an invalid length.
[  844.675437][ T1429] wg1 speed is unknown, defaulting to 1000
[  844.758484][ T1452] netlink: 'syz.4.7276': attribute type 13 has an invalid length.
[  844.803513][ T1452] netlink: 'syz.4.7276': attribute type 17 has an invalid length.
[  844.829006][T19436] IPVS: starting estimator thread 0...
[  844.926780][ T1459] IPVS: using max 40 ests per chain, 96000 per kthread
[  845.024690][ T1480] FAULT_INJECTION: forcing a failure.
[  845.024690][ T1480] name failslab, interval 1, probability 0, space 0, times 0
[  845.072925][ T1481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7276'.
[  845.082557][ T1480] CPU: 1 UID: 0 PID: 1480 Comm: syz.1.7283 Not tainted syzkaller #0 PREEMPT(full) 
[  845.082581][ T1480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  845.082600][ T1480] Call Trace:
[  845.082608][ T1480]  <TASK>
[  845.082616][ T1480]  dump_stack_lvl+0xe8/0x150
[  845.082647][ T1480]  should_fail_ex+0x412/0x560
[  845.082679][ T1480]  should_failslab+0xa8/0x100
[  845.082702][ T1480]  ? ptlock_alloc+0x20/0x70
[  845.082721][ T1480]  kmem_cache_alloc_noprof+0x87/0x650
[  845.082750][ T1480]  ptlock_alloc+0x20/0x70
[  845.082768][ T1480]  pte_alloc_one+0x7a/0x370
[  845.082797][ T1480]  __pte_alloc+0x25/0x1a0
[  845.082823][ T1480]  do_pte_missing+0x2c47/0x3490
[  845.082853][ T1480]  ? mtree_range_walk+0x6a7/0x840
[  845.082879][ T1480]  handle_mm_fault+0x1bec/0x3310
[  845.082896][ T1480]  ? mt_find+0x186/0x630
[  845.082924][ T1480]  ? handle_mm_fault+0xee/0x3310
[  845.082948][ T1480]  ? __pfx_handle_mm_fault+0x10/0x10
[  845.083001][ T1480]  __get_user_pages+0x165b/0x29d0
[  845.083065][ T1480]  __gup_longterm_locked+0xdcf/0x1630
[  845.083101][ T1480]  ? gup_fast_fallback+0x151/0x22e0
[  845.083127][ T1480]  ? sanity_check_pinned_pages+0x1219/0x12d0
[  845.083161][ T1480]  gup_fast_fallback+0x1d82/0x22e0
[  845.083214][ T1480]  ? rcu_is_watching+0x15/0xb0
[  845.083240][ T1480]  ? __pfx_gup_fast_fallback+0x10/0x10
[  845.083269][ T1480]  ? is_valid_gup_args+0x11f/0x200
[  845.083297][ T1480]  ? pin_user_pages_fast+0x4d/0xb0
[  845.083325][ T1480]  rds_info_getsockopt+0x20e/0x4a0
[  845.083358][ T1480]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  845.083386][ T1480]  ? __might_fault+0xaf/0x130
[  845.083409][ T1480]  ? rds_getsockopt+0x31d/0x500
[  845.083430][ T1480]  ? __pfx_rds_getsockopt+0x10/0x10
[  845.083453][ T1480]  do_sock_getsockopt+0x2d3/0x3f0
[  845.083483][ T1480]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  845.083508][ T1480]  ? __fget_files+0x3a0/0x420
[  845.083526][ T1480]  ? __fget_files+0x2a/0x420
[  845.083550][ T1480]  __x64_sys_getsockopt+0x1a4/0x240
[  845.083589][ T1480]  do_syscall_64+0x14d/0xf80
[  845.083666][ T1480]  ? trace_irq_disable+0x3b/0x150
[  845.083681][ T1480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  845.083700][ T1480]  ? clear_bhb_loop+0x40/0x90
[  845.083723][ T1480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  845.083741][ T1480] RIP: 0033:0x7f277cd9c819
[  845.083759][ T1480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  845.083774][ T1480] RSP: 002b:00007f277aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  845.083794][ T1480] RAX: ffffffffffffffda RBX: 00007f277d016090 RCX: 00007f277cd9c819
[  845.083806][ T1480] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 000000000000000c
[  845.083818][ T1480] RBP: 00007f277aff6090 R08: 0000200000000000 R09: 0000000000000000
[  845.083829][ T1480] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001
[  845.083840][ T1480] R13: 00007f277d016128 R14: 00007f277d016090 R15: 00007ffe1807a688
[  845.083871][ T1480]  </TASK>
[  845.405685][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state
[  845.413391][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state
[  845.570371][ T1497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7285'.
[  845.981017][ T1451] veth0_macvtap: left allmulticast mode
[  846.045989][ T1451] veth1_to_hsr: left allmulticast mode
[  846.111447][ T1452] syz_tun: left promiscuous mode
[  846.154290][ T1452] 8021q: adding VLAN 0 to HW filter on device bond0
[  846.172194][ T1452] 8021q: adding VLAN 0 to HW filter on device team0
[  846.190323][ T1452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  846.270714][ T8824] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  846.307026][ T8824] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  846.315937][ T8824] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  846.412308][ T8824] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  846.422205][ T1473] wg1 speed is unknown, defaulting to 1000
[  846.490610][T21898] Bluetooth: hci4: command 0x0406 tx timeout
[  846.791643][ T1519] bond4: Removing last ns target with arp_interval on
[  846.856093][ T1526] netlink: 276 bytes leftover after parsing attributes in process `syz.2.7294'.
[  846.930355][ T1530] x_tables: ip_tables: icmp match: only valid for protocol 1
[  847.020278][ T1533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7296'.
[  847.241659][ T1544] wg1 speed is unknown, defaulting to 1000
[  847.657329][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805ae5d800: rx timeout, send abort
[  847.665957][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ae5d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  848.007706][ T1567] wg1 speed is unknown, defaulting to 1000
[  848.221252][ T1576] "syz.4.7309" (1576) uses obsolete ecb(arc4) skcipher
[  848.232380][ T1572] bond5: option fail_over_mac: invalid value (127)
[  848.248985][ T1572] bond5 (unregistering): Released all slaves
[  848.618388][ T1588] __nla_validate_parse: 1 callbacks suppressed
[  848.618407][ T1588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7314'.
[  848.801247][ T1600] netlink: 'syz.3.7315': attribute type 13 has an invalid length.
[  848.990563][ T1581] netlink: 'syz.1.7311': attribute type 4 has an invalid length.
[  849.103028][ T1616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7318'.
[  849.173574][ T1614] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  849.202208][ T1614] CPU: 1 UID: 0 PID: 1614 Comm: syz.2.7318 Not tainted syzkaller #0 PREEMPT(full) 
[  849.202237][ T1614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  849.202250][ T1614] Call Trace:
[  849.202259][ T1614]  <TASK>
[  849.202269][ T1614]  dump_stack_lvl+0xe8/0x150
[  849.202305][ T1614]  sysfs_warn_dup+0x8e/0xa0
[  849.202337][ T1614]  sysfs_do_create_link_sd+0xc0/0x110
[  849.202371][ T1614]  device_add_class_symlinks+0x1cf/0x240
[  849.202405][ T1614]  device_add+0x475/0xb70
[  849.202438][ T1614]  wiphy_register+0x1dc5/0x2dc0
[  849.202487][ T1614]  ? __pfx_wiphy_register+0x10/0x10
[  849.202509][ T1614]  ? __pfx_netdev_run_todo+0x10/0x10
[  849.202532][ T1614]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  849.202566][ T1614]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  849.202604][ T1614]  ieee80211_register_hw+0x3cb7/0x4980
[  849.202627][ T1614]  ? __lock_acquire+0x6b5/0x2cf0
[  849.202670][ T1614]  ? ieee80211_register_hw+0x1841/0x4980
[  849.202721][ T1614]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  849.202752][ T1614]  ? __hrtimer_setup+0x181/0x200
[  849.202781][ T1614]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  849.202807][ T1614]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  849.202872][ T1614]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  849.202901][ T1614]  ? kstrndup+0xbf/0x160
[  849.202940][ T1614]  hwsim_new_radio_nl+0xf6a/0x1c00
[  849.202994][ T1614]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  849.203035][ T1614]  ? rcu_is_watching+0x15/0xb0
[  849.203065][ T1614]  ? trace_kmalloc+0x2a/0x110
[  849.203096][ T1614]  ? __nla_parse+0x40/0x60
[  849.203124][ T1614]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  849.203147][ T1614]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  849.203179][ T1614]  genl_family_rcv_msg_doit+0x22a/0x330
[  849.203210][ T1614]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  849.203246][ T1614]  ? bpf_lsm_capable+0x9/0x20
[  849.203274][ T1614]  ? security_capable+0x7e/0x2c0
[  849.203313][ T1614]  genl_rcv_msg+0x61c/0x7a0
[  849.203341][ T1614]  ? __pfx_genl_rcv_msg+0x10/0x10
[  849.203361][ T1614]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  849.203392][ T1614]  ? __lock_acquire+0x6b5/0x2cf0
[  849.203431][ T1614]  netlink_rcv_skb+0x232/0x4b0
[  849.203460][ T1614]  ? __pfx_genl_rcv_msg+0x10/0x10
[  849.203488][ T1614]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  849.203532][ T1614]  ? down_read+0x272/0x2e0
[  849.203552][ T1614]  ? genl_rcv+0xd/0x40
[  849.203575][ T1614]  genl_rcv+0x28/0x40
[  849.203594][ T1614]  netlink_unicast+0x80f/0x9b0
[  849.203629][ T1614]  ? __pfx_netlink_unicast+0x10/0x10
[  849.203657][ T1614]  ? netlink_sendmsg+0x650/0xb40
[  849.203684][ T1614]  ? skb_put+0x11b/0x210
[  849.203717][ T1614]  netlink_sendmsg+0x813/0xb40
[  849.203756][ T1614]  ? __pfx_netlink_sendmsg+0x10/0x10
[  849.203788][ T1614]  ? aa_sock_msg_perm+0xf1/0x1b0
[  849.203810][ T1614]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  849.203838][ T1614]  ____sys_sendmsg+0x972/0x9f0
[  849.203868][ T1614]  ? futex_unqueue+0x211/0x240
[  849.203902][ T1614]  ? __pfx_____sys_sendmsg+0x10/0x10
[  849.203941][ T1614]  ? import_iovec+0x73/0xa0
[  849.203971][ T1614]  ___sys_sendmsg+0x2a5/0x360
[  849.204008][ T1614]  ? __pfx____sys_sendmsg+0x10/0x10
[  849.204045][ T1614]  ? futex_wait+0x29a/0x380
[  849.204103][ T1614]  ? __fget_files+0x2a/0x420
[  849.204122][ T1614]  ? __fget_files+0x3a0/0x420
[  849.204152][ T1614]  __x64_sys_sendmsg+0x1bd/0x2a0
[  849.204188][ T1614]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  849.204228][ T1614]  ? rcu_is_watching+0x15/0xb0
[  849.204271][ T1614]  do_syscall_64+0x14d/0xf80
[  849.204290][ T1614]  ? trace_irq_disable+0x3b/0x150
[  849.204308][ T1614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.204329][ T1614]  ? clear_bhb_loop+0x40/0x90
[  849.204355][ T1614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.204375][ T1614] RIP: 0033:0x7f8b0d59c819
[  849.204395][ T1614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  849.204413][ T1614] RSP: 002b:00007f8b0e50a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  849.204436][ T1614] RAX: ffffffffffffffda RBX: 00007f8b0d815fa0 RCX: 00007f8b0d59c819
[  849.204452][ T1614] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  849.204466][ T1614] RBP: 00007f8b0d632c91 R08: 0000000000000000 R09: 0000000000000000
[  849.204486][ T1614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  849.204499][ T1614] R13: 00007f8b0d816038 R14: 00007f8b0d815fa0 R15: 00007ffd01eb2048
[  849.204534][ T1614]  </TASK>
[  849.640094][ T1599] wg1 speed is unknown, defaulting to 1000
[  849.992494][ T1636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7324'.
[  850.143267][ T1644] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7326'.
[  850.335498][ T1636] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  850.347550][ T1655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7330'.
[  850.643511][ T1668] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7333'.
[  850.886457][ T1674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7336'.
[  850.896626][ T1674] netlink: 'syz.0.7336': attribute type 1 has an invalid length.
[  850.930177][ T1674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7336'.
[  850.965507][ T1674] mac80211_hwsim hwsim99 syzkaller0: Caught tx_queue_len zero misconfig
[  850.988436][ T1674] netlink: 'syz.0.7336': attribute type 1 has an invalid length.
[  851.013361][ T1674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7336'.
[  851.588139][ T1720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7350'.
[  851.631394][ T1719] team0 (unregistering): Port device team_slave_0 removed
[  851.652037][ T1719] team0 (unregistering): Port device team_slave_1 removed
[  851.681007][ T1726] team0: No ports can be present during mode change
[  851.715659][ T1727] xt_CT: No such helper "pptp"
[  851.900807][ T1744] sctp: [Deprecated]: syz.1.7356 (pid 1744) Use of int in max_burst socket option.
[  851.900807][ T1744] Use struct sctp_assoc_value instead
[  851.971146][ T1748] netlink: 'syz.0.7357': attribute type 14 has an invalid length.
[  851.980400][ T1748] bond0: Caught tx_queue_len zero misconfig
[  852.079191][ T1750] IPVS: Error connecting to the multicast addr
[  852.275778][ T1764] x_tables: unsorted entry at hook 1
[  852.309052][ T1760] netlink: 'syz.1.7363': attribute type 13 has an invalid length.
[  852.343848][ T1763] bond3 (unregistering): Released all slaves
[  852.388560][ T1760] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  852.567312][ T1780] mac80211_hwsim hwsim92 syzkaller0: Caught tx_queue_len zero misconfig
[  852.579098][ T1780] mac80211_hwsim hwsim92 syzkaller0: entered promiscuous mode
[  852.586625][ T1780] mac80211_hwsim hwsim92 syzkaller0: entered allmulticast mode
[  853.391199][ T1820] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  853.545141][ T1820] macvlan2: entered promiscuous mode
[  853.645909][ T1824] wg1 speed is unknown, defaulting to 1000
[  853.962671][ T1841] __nla_validate_parse: 16 callbacks suppressed
[  853.962691][ T1841] netlink: 1323 bytes leftover after parsing attributes in process `syz.3.7387'.
[  853.995052][ T1844] wg1 speed is unknown, defaulting to 1000
[  854.001525][ T1847] tc_dump_action: action bad kind
[  854.173352][ T1854] netlink: 'syz.3.7390': attribute type 1 has an invalid length.
[  854.358123][ T1855] bond3: (slave bridge5): making interface the new active one
[  854.387598][ T1855] bond3: (slave bridge5): Enslaving as an active interface with an up link
[  854.407459][ T1861] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7391'.
[  854.605192][ T1869] "syz.1.7394" (1869) uses obsolete ecb(arc4) skcipher
[  854.849737][ T1880] Bluetooth: MGMT ver 1.23
[  854.875964][ T1880] veth0_vlan: left promiscuous mode
[  854.881357][ T1880] veth0_vlan: entered allmulticast mode
[  854.887749][ T1880] veth0_vlan: entered promiscuous mode
[  855.130596][ T1888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7397'.
[  855.142093][ T1888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7397'.
[  855.366312][ T1896] netlink: 'syz.1.7401': attribute type 1 has an invalid length.
[  855.383997][ T1899] netlink: 'syz.3.7403': attribute type 11 has an invalid length.
[  855.539142][ T1909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7406'.
[  855.559270][ T1911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7406'.
[  855.782861][ T1914] wg1 speed is unknown, defaulting to 1000
[  855.825573][ T1922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7408'.
[  855.855181][ T1922] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  855.892375][ T1923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7408'.
[  855.929970][ T1923] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  856.144834][   T29] audit: type=1804 audit(1776027323.526:80): pid=1933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7411" name="/newroot/169/cgroup.controllers" dev="tmpfs" ino=886 res=1 errno=0
[  856.188196][   T29] audit: type=1800 audit(1776027323.556:81): pid=1933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7411" name="cgroup.controllers" dev="tmpfs" ino=886 res=0 errno=0
[  856.205167][ T1930] wg1 speed is unknown, defaulting to 1000
[  856.461008][ T1937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7412'.
[  856.470827][ T1939] wg1 speed is unknown, defaulting to 1000
[  856.907377][ T1948] syzkaller1: entered promiscuous mode
[  856.916836][ T1948] syzkaller1: entered allmulticast mode
[  857.051254][ T1951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7415'.
[  857.223171][ T1954] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  857.879825][ T1967] syzkaller1: entered promiscuous mode
[  857.885504][ T1967] syzkaller1: entered allmulticast mode
[  857.922633][ T1984] wg1 speed is unknown, defaulting to 1000
[  858.323111][ T1998] .70·: renamed from hsr0
[  858.338992][ T1998] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  858.353691][ T1998] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  858.364498][ T1998] .70·: entered allmulticast mode
[  858.377107][ T1998] hsr_slave_0: entered allmulticast mode
[  858.382744][ T1998] hsr_slave_1: entered allmulticast mode
[  858.408661][ T1998] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check.
[  858.501970][ T2009] netlink: 'syz.2.7429': attribute type 1 has an invalid length.
[  858.712471][ T2020] netlink: 'syz.2.7434': attribute type 10 has an invalid length.
[  858.814300][ T2020] team0: Port device dummy0 added
[  858.902950][ T2033] netlink: 'syz.1.7435': attribute type 13 has an invalid length.
[  858.939617][ T2033] netlink: 'syz.1.7435': attribute type 17 has an invalid length.
[  859.013167][ T2039] pim6reg: entered allmulticast mode
[  859.071880][ T2045] __nla_validate_parse: 5 callbacks suppressed
[  859.071899][ T2045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7440'.
[  859.109302][ T2045] netlink: 'syz.2.7440': attribute type 1 has an invalid length.
[  859.190285][ T2033] 8021q: adding VLAN 0 to HW filter on device bond0
[  859.203978][ T2033] 8021q: adding VLAN 0 to HW filter on device team0
[  859.236385][ T2033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  859.263766][T19092] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  859.292738][ T2043] pim6reg: left allmulticast mode
[  859.326779][T19092] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  859.335690][T19092] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  859.368839][T19092] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  859.541654][ T2071] netlink: 'syz.0.7447': attribute type 2 has an invalid length.
[  859.577419][ T2071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7447'.
[  859.585382][ T2075] wg1 speed is unknown, defaulting to 1000
[  859.605481][ T2071] erspan0: entered promiscuous mode
[  859.612090][ T2071] gretap0: entered promiscuous mode
[  859.623150][ T2071] hsr1: entered promiscuous mode
[  859.643192][ T2071] x_tables: duplicate underflow at hook 2
[  859.773636][ T2088] netlink: 'syz.2.7452': attribute type 4 has an invalid length.
[  859.807751][ T2088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7452'.
[  859.855659][ T2089] wg1 speed is unknown, defaulting to 1000
[  860.395048][ T2121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7460'.
[  860.499212][ T2120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  860.535612][ T2119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  860.560034][ T2115] wg1 speed is unknown, defaulting to 1000
[  860.905535][ T2138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  861.090825][ T2152] SET target dimension over the limit!
[  861.150580][ T2140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  861.305921][ T2147] wg1 speed is unknown, defaulting to 1000
[  861.321788][ T2151] wg1 speed is unknown, defaulting to 1000
[  861.355615][ T2160] netlink: 'syz.4.7473': attribute type 1 has an invalid length.
[  861.478636][ T2160] 8021q: adding VLAN 0 to HW filter on device bond2
[  861.563826][ T2160] bond2 (unregistering): Released all slaves
[  861.677201][  T958] Bluetooth: hci0: command 0x0405 tx timeout
[  861.722294][ T2169] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7476'.
[  861.747209][ T2168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7476'.
[  861.777492][ T2169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7476'.
[  861.812531][ T2171] bridge6: entered promiscuous mode
[  861.828819][ T2171] bridge6: entered allmulticast mode
[  862.232106][ T2203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7485'.
[  862.241983][ T2201] netlink: 'syz.4.7484': attribute type 8 has an invalid length.
[  862.252075][ T2203] tipc: Invalid UDP bearer configuration
[  862.252169][ T2203] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  862.286799][ T2201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7484'.
[  862.630668][ T2216] netlink: 'syz.1.7488': attribute type 1 has an invalid length.
[  862.690194][ T2216] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  862.702546][ T2216] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  862.785824][ T2222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7490'.
[  863.178002][ T2236] wg2: Caught tx_queue_len zero misconfig
[  864.099182][ T2286] __nla_validate_parse: 4 callbacks suppressed
[  864.099202][ T2286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7502'.
[  864.278481][ T2297] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  864.745349][ T2317] netlink: 'syz.0.7508': attribute type 10 has an invalid length.
[  864.772057][ T2319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7509'.
[  864.846332][ T2319] bond2: entered promiscuous mode
[  864.857965][ T2319] 8021q: adding VLAN 0 to HW filter on device bond2
[  865.181986][ T2355] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7516'.
[  865.410751][ T2372] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  865.442825][ T2375] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.7523'.
[  865.445372][ T2372] netlink: 'syz.0.7520': attribute type 11 has an invalid length.
[  865.607057][ T2388] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7525'.
[  865.642405][ T2394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7524'.
[  865.698152][ T2394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7524'.
[  865.721020][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7525'.
[  865.738735][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7524'.
[  865.885908][ T2408] netlink: 'syz.0.7528': attribute type 1 has an invalid length.
[  865.902200][ T2409] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  865.931301][ T2409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7529'.
[  866.089837][ T2424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  866.203484][ T2438] xt_CT: You must specify a L4 protocol and not use inversions on it
[  866.225823][ T2434] lo: Caught tx_queue_len zero misconfig
[  866.240504][ T2434] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  866.572093][ T2470] netlink: 'syz.2.7542': attribute type 21 has an invalid length.
[  866.607665][ T2471] netlink: 'syz.4.7539': attribute type 1 has an invalid length.
[  866.622155][ T2471] openvswitch: netlink: Missing valid actions attribute.
[  866.635754][ T2471] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  867.899034][ T2459] tun0: tun_chr_ioctl cmd 1074812118
[  867.908811][ T2458] ip6tnl2: entered promiscuous mode
[  867.914030][ T2458] ip6tnl2: entered allmulticast mode
[  867.925340][ T2465] tun0: tun_chr_ioctl cmd 1074033169
[  867.937240][ T2479] netlink: 'syz.1.7543': attribute type 5 has an invalid length.
[  868.189730][ T2501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  868.223234][ T2499] vlan3: entered allmulticast mode
[  868.235624][ T2499] bridge3: entered allmulticast mode
[  868.269438][ T2507] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  868.285156][ T2499] bridge3: port 1(erspan0) entered blocking state
[  868.292757][ T2499] bridge3: port 1(erspan0) entered disabled state
[  868.299998][ T2499] erspan0: entered allmulticast mode
[  868.311166][ T2499] erspan0: entered promiscuous mode
[  868.387920][ T2499] bond5 (unregistering): Released all slaves
[  868.911501][T18923] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  868.924187][T18923] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  868.942123][T18923] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  868.951698][T18923] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  869.156179][ T2559] __nla_validate_parse: 11 callbacks suppressed
[  869.156198][ T2559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7556'.
[  869.443308][ T2576] mac80211_hwsim hwsim99 syzkaller0: entered promiscuous mode
[  869.457264][ T2576] mac80211_hwsim hwsim99 syzkaller0: entered allmulticast mode
[  869.596638][ T2585] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  869.654498][ T2587] Cannot find add_set index 3 as target
[  870.009485][ T2615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7567'.
[  870.044890][ T2623] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7569'.
[  870.155738][ T2629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7570'.
[  870.307693][ T2642] netlink: 'syz.0.7574': attribute type 1 has an invalid length.
[  870.319267][ T2631] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7572'.
[  870.406768][ T2642] bond4: entered promiscuous mode
[  870.412687][ T2642] 8021q: adding VLAN 0 to HW filter on device bond4
[  870.435387][ T2655] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  870.621697][ T2666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  870.632415][ T2666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7580'.
[  870.684032][ T2667] netlink: 'syz.2.7581': attribute type 30 has an invalid length.
[  870.695874][ T2674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7580'.
[  870.780553][ T2667] bond5: option arp_missed_max: invalid value (0)
[  870.788076][ T2667] bond5: option arp_missed_max: allowed values 1 - 255
[  870.803096][ T2683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7583'.
[  870.825632][ T2688] netlink: 'syz.3.7584': attribute type 1 has an invalid length.
[  870.830784][ T2667] bond5 (unregistering): Released all slaves
[  870.886964][ T2688] 8021q: adding VLAN 0 to HW filter on device bond4
[  871.105922][ T2703] netlink: 'syz.2.7587': attribute type 11 has an invalid length.
[  871.125169][   T29] audit: type=1107 audit(1776027338.506:82): pid=2708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  871.140247][ T2703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7587'.
[  871.275894][ T2723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7593'.
[  871.293237][ T2720] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  871.413445][   T29] audit: type=1804 audit(1776027338.796:83): pid=2736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7598" name="/newroot/241/cgroup.controllers" dev="tmpfs" ino=1248 res=1 errno=0
[  871.439920][   T29] audit: type=1800 audit(1776027338.826:84): pid=2736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7598" name="cgroup.controllers" dev="tmpfs" ino=1248 res=0 errno=0
[  871.448437][ T2741] bridge0: entered promiscuous mode
[  871.775240][ T2761] wg1 speed is unknown, defaulting to 1000
[  872.011865][ T2783] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  872.304199][ T2794] mac80211_hwsim hwsim99 wlan1: Caught tx_queue_len zero misconfig
[  872.587014][ T2810] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  872.774531][ T2826] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  873.008647][ T2857] dummy0: mtu less than device minimum
[  873.130960][ T2866] netlink: 'syz.2.7629': attribute type 2 has an invalid length.
[  873.139001][ T2866] netlink: 'syz.2.7629': attribute type 1 has an invalid length.
[  873.151028][ T2866] netlink: 'syz.2.7629': attribute type 3 has an invalid length.
[  873.717872][ T2907] wg1 speed is unknown, defaulting to 1000
[  874.142189][ T2936] wg1 speed is unknown, defaulting to 1000
[  874.604253][ T2953] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  874.668921][ T2959] netlink: 'syz.2.7652': attribute type 15 has an invalid length.
[  874.779964][ T2961] openvswitch: netlink: Missing key (keys=40, expected=80)
[  875.193014][ T2969] wg1 speed is unknown, defaulting to 1000
[  875.200606][ T2973] netlink: 'syz.0.7660': attribute type 4 has an invalid length.
[  875.232098][ T2973] netlink: 'syz.0.7660': attribute type 4 has an invalid length.
[  875.258334][ T2973] __nla_validate_parse: 16 callbacks suppressed
[  875.258352][ T2973] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7660'.
[  875.443522][ T2982] lo: Caught tx_queue_len zero misconfig
[  876.172420][ T3017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  876.233875][ T3017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.310048][ T3017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  876.340275][ T3017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.405576][ T3022] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7671'.
[  876.410636][ T3017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  876.432583][ T3017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  876.529889][ T3025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7672'.
[  876.725932][ T3035] validate_nla: 1 callbacks suppressed
[  876.725949][ T3035] netlink: 'syz.2.7676': attribute type 1 has an invalid length.
[  876.802105][ T3043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7673'.
[  876.813563][ T3035] 8021q: adding VLAN 0 to HW filter on device bond5
[  876.856642][ T3047] x_tables: duplicate underflow at hook 2
[  876.873191][ T3046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7673'.
[  876.887616][ T3050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7676'.
[  876.896888][ T3051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7676'.
[  876.910047][ T3035] bond5: (slave gretap1): making interface the new active one
[  876.924191][ T3035] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  876.998144][ T3051] bond5 (unregistering): (slave gretap1): Releasing active interface
[  877.014252][ T3059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  877.033646][ T3051] bond5 (unregistering): Released all slaves
[  877.153586][ T3066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7681'.
[  877.282190][ T3066] 8021q: adding VLAN 0 to HW filter on device bond14
[  877.291287][ T3066] bond13: (slave bond14): Enslaving as an active interface with an up link
[  877.571196][ T3092] bond15: option xmit_hash_policy: invalid value (10)
[  877.590707][ T3092] bond15 (unregistering): Released all slaves
[  877.727058][ T3105] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7691'.
[  877.837191][ T3108] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  878.112353][ T3132] netlink: 'syz.1.7700': attribute type 4 has an invalid length.
[  878.135820][ T3126] bridge0: entered promiscuous mode
[  878.141249][ T3126] macsec1: entered promiscuous mode
[  878.219572][ T3140] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7702'.
[  878.290823][ T3145] netlink: 'syz.1.7704': attribute type 1 has an invalid length.
[  878.991953][ T3191] bond3: option primary_reselect: invalid value (4)
[  879.000808][ T3191] bond3 (unregistering): Released all slaves
[  879.034981][ T3194] ˜~Ú®: entered allmulticast mode
[  879.171485][ T3209] tap0: tun_chr_ioctl cmd 1074025680
[  879.392884][ T3216] bond6: entered allmulticast mode
[  879.429296][ T3216] bond6: left allmulticast mode
[  879.730200][ T3223] bridge0: port 3(syz_tun) entered blocking state
[  879.761986][ T3223] bridge0: port 3(syz_tun) entered disabled state
[  879.798641][ T3223] syz_tun: entered allmulticast mode
[  879.834648][ T3223] syz_tun: entered promiscuous mode
[  879.875493][ T3223] bridge0: port 3(syz_tun) entered blocking state
[  879.882109][ T3223] bridge0: port 3(syz_tun) entered listening state
[  880.344923][ T3240] netlink: 'syz.1.7731': attribute type 39 has an invalid length.
[  880.409080][ T3240] bridge0: port 3(syz_tun) entered disabled state
[  880.447348][ T3247] __nla_validate_parse: 8 callbacks suppressed
[  880.447366][ T3247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7733'.
[  880.478285][ T3240] syz_tun (unregistering): left allmulticast mode
[  880.506973][ T3240] syz_tun (unregistering): left promiscuous mode
[  880.513414][ T3240] bridge0: port 3(syz_tun) entered disabled state
[  880.869466][ T3266] bond5: option tlb_dynamic_lb: invalid value (5)
[  880.881139][ T3266] bond5 (unregistering): Released all slaves
[  880.912946][ T3261] wg1 speed is unknown, defaulting to 1000
[  880.941814][ T3274] team_slave_1: Caught tx_queue_len zero misconfig
[  881.102381][ T3284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7742'.
[  881.127819][ T3284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7742'.
[  881.249321][ T3294] geneve2: entered promiscuous mode
[  881.254579][ T3294] geneve2: entered allmulticast mode
[  881.542123][ T3313] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  881.654441][ T3316] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  881.675214][ T3313] FAULT_INJECTION: forcing a failure.
[  881.675214][ T3313] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  881.705566][ T3313] CPU: 1 UID: 0 PID: 3313 Comm: syz.0.7749 Not tainted syzkaller #0 PREEMPT(full) 
[  881.705592][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  881.705603][ T3313] Call Trace:
[  881.705612][ T3313]  <TASK>
[  881.705620][ T3313]  dump_stack_lvl+0xe8/0x150
[  881.705649][ T3313]  should_fail_ex+0x412/0x560
[  881.705681][ T3313]  _copy_from_iter+0x3b0/0x1670
[  881.705702][ T3313]  ? tomoyo_check_open_permission+0x1d3/0x470
[  881.705733][ T3313]  ? __lock_acquire+0x6b5/0x2cf0
[  881.705756][ T3313]  ? __pfx__copy_from_iter+0x10/0x10
[  881.705778][ T3313]  ? __lock_acquire+0x6b5/0x2cf0
[  881.705808][ T3313]  tun_get_user+0x275/0x3ed0
[  881.705842][ T3313]  ? __lock_acquire+0x6b5/0x2cf0
[  881.705867][ T3313]  ? __pfx_tun_get_user+0x10/0x10
[  881.705894][ T3313]  ? __lock_acquire+0x6b5/0x2cf0
[  881.705919][ T3313]  ? aa_file_perm+0x192/0x15e0
[  881.705942][ T3313]  ? ref_tracker_alloc+0x35c/0x4c0
[  881.705961][ T3313]  ? aa_file_perm+0x192/0x15e0
[  881.705980][ T3313]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  881.706004][ T3313]  ? tun_get+0x1c/0x2f0
[  881.706031][ T3313]  ? tun_get+0x1c/0x2f0
[  881.706051][ T3313]  ? tun_get+0x1c/0x2f0
[  881.706076][ T3313]  tun_chr_write_iter+0x113/0x200
[  881.706098][ T3313]  do_iter_readv_writev+0x619/0x8c0
[  881.706123][ T3313]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  881.706149][ T3313]  ? bpf_lsm_file_permission+0x9/0x20
[  881.706171][ T3313]  ? security_file_permission+0x75/0x260
[  881.706195][ T3313]  ? rw_verify_area+0x255/0x4d0
[  881.706226][ T3313]  vfs_writev+0x33c/0x990
[  881.706258][ T3313]  ? __pfx_vfs_writev+0x10/0x10
[  881.706296][ T3313]  ? __fget_files+0x2a/0x420
[  881.706317][ T3313]  ? __fget_files+0x3a0/0x420
[  881.706333][ T3313]  ? __fget_files+0x2a/0x420
[  881.706358][ T3313]  do_writev+0x154/0x2e0
[  881.706384][ T3313]  ? __pfx_do_writev+0x10/0x10
[  881.706419][ T3313]  do_syscall_64+0x14d/0xf80
[  881.706436][ T3313]  ? trace_irq_disable+0x3b/0x150
[  881.706452][ T3313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.706470][ T3313]  ? clear_bhb_loop+0x40/0x90
[  881.706492][ T3313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.706510][ T3313] RIP: 0033:0x7f6bbbd9c819
[  881.706531][ T3313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  881.706546][ T3313] RSP: 002b:00007f6bbcbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  881.706566][ T3313] RAX: ffffffffffffffda RBX: 00007f6bbc015fa0 RCX: 00007f6bbbd9c819
[  881.706579][ T3313] RDX: 0000000000000004 RSI: 00002000000006c0 RDI: 0000000000000003
[  881.706591][ T3313] RBP: 00007f6bbcbd5090 R08: 0000000000000000 R09: 0000000000000000
[  881.706602][ T3313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  881.706614][ T3313] R13: 00007f6bbc016038 R14: 00007f6bbc015fa0 R15: 00007ffd9f911198
[  881.706644][ T3313]  </TASK>
[  882.443365][ T3337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7756'.
[  882.596313][ T3345] tipc: Started in network mode
[  882.601523][ T3345] tipc: Node identity ff75, cluster identity 4711
[  882.608120][ T3345] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  882.621622][ T3345] netlink: 'syz.0.7758': attribute type 1 has an invalid length.
[  882.656046][ T3345] 8021q: adding VLAN 0 to HW filter on device bond5
[  882.675537][ T3345] 8021q: adding VLAN 0 to HW filter on device bond5
[  882.683558][ T3345] bond5: (slave vcan2): The slave device specified does not support setting the MAC address
[  882.694869][ T3345] bond5: (slave vcan2): Error -95 calling set_mac_address
[  882.720744][ T3351] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002
[  882.727384][ T3350] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7759'.
[  883.069212][ T3358] bridge0: port 3(batadv0) entered disabled state
[  883.076003][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state
[  883.083614][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state
[  883.112122][ T3366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7764'.
[  883.165916][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  883.180851][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  883.249074][ T3358] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  883.265316][ T3358] geneve2: left promiscuous mode
[  883.274364][ T3358] bond1: left promiscuous mode
[  883.280360][ T3358] gre1: left promiscuous mode
[  883.321079][ T3358] mac80211_hwsim hwsim92 syzkaller0: left promiscuous mode
[  883.329187][ T3358] mac80211_hwsim hwsim92 syzkaller0: left allmulticast mode
[  883.343080][ T3358] macvlan2: left promiscuous mode
[  883.350876][ T3358] bridge6: left promiscuous mode
[  883.355889][ T3358] bridge6: left allmulticast mode
[  883.379552][ T8824] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  883.408119][ T8824] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  883.452532][ T3374] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  883.466858][ T8824] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  883.485922][ T8824] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  883.502560][ T8824] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  883.512039][ T8824] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  883.526526][ T8824] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  883.535892][ T8824] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  883.551742][ T3374] FAULT_INJECTION: forcing a failure.
[  883.551742][ T3374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  883.565876][ T3374] CPU: 0 UID: 0 PID: 3374 Comm: syz.4.7768 Not tainted syzkaller #0 PREEMPT(full) 
[  883.565900][ T3374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  883.565912][ T3374] Call Trace:
[  883.565919][ T3374]  <TASK>
[  883.565927][ T3374]  dump_stack_lvl+0xe8/0x150
[  883.565957][ T3374]  should_fail_ex+0x412/0x560
[  883.565988][ T3374]  _copy_from_iter+0x4ff/0x1670
[  883.566017][ T3374]  ? __lock_acquire+0x6b5/0x2cf0
[  883.566041][ T3374]  ? __pfx__copy_from_iter+0x10/0x10
[  883.566064][ T3374]  ? __lock_acquire+0x6b5/0x2cf0
[  883.566106][ T3374]  tun_get_user+0x275/0x3ed0
[  883.566140][ T3374]  ? __lock_acquire+0x6b5/0x2cf0
[  883.566167][ T3374]  ? __pfx_tun_get_user+0x10/0x10
[  883.566195][ T3374]  ? __lock_acquire+0x6b5/0x2cf0
[  883.566221][ T3374]  ? aa_file_perm+0x192/0x15e0
[  883.566244][ T3374]  ? ref_tracker_alloc+0x35c/0x4c0
[  883.566264][ T3374]  ? aa_file_perm+0x192/0x15e0
[  883.566282][ T3374]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  883.566306][ T3374]  ? tun_get+0x1c/0x2f0
[  883.566332][ T3374]  ? tun_get+0x1c/0x2f0
[  883.566351][ T3374]  ? tun_get+0x1c/0x2f0
[  883.566376][ T3374]  tun_chr_write_iter+0x113/0x200
[  883.566400][ T3374]  do_iter_readv_writev+0x619/0x8c0
[  883.566425][ T3374]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  883.566450][ T3374]  ? bpf_lsm_file_permission+0x9/0x20
[  883.566472][ T3374]  ? security_file_permission+0x75/0x260
[  883.566496][ T3374]  ? rw_verify_area+0x255/0x4d0
[  883.566520][ T3374]  vfs_writev+0x33c/0x990
[  883.566552][ T3374]  ? __pfx_vfs_writev+0x10/0x10
[  883.566591][ T3374]  ? __fget_files+0x2a/0x420
[  883.566613][ T3374]  ? __fget_files+0x3a0/0x420
[  883.566629][ T3374]  ? __fget_files+0x2a/0x420
[  883.566657][ T3374]  do_writev+0x154/0x2e0
[  883.566682][ T3374]  ? __pfx_do_writev+0x10/0x10
[  883.566715][ T3374]  do_syscall_64+0x14d/0xf80
[  883.566731][ T3374]  ? trace_irq_disable+0x3b/0x150
[  883.566746][ T3374]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.566764][ T3374]  ? clear_bhb_loop+0x40/0x90
[  883.566784][ T3374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.566801][ T3374] RIP: 0033:0x7f195399c819
[  883.566818][ T3374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  883.566834][ T3374] RSP: 002b:00007f19547da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  883.566854][ T3374] RAX: ffffffffffffffda RBX: 00007f1953c15fa0 RCX: 00007f195399c819
[  883.566867][ T3374] RDX: 0000000000000004 RSI: 00002000000006c0 RDI: 0000000000000003
[  883.566879][ T3374] RBP: 00007f19547da090 R08: 0000000000000000 R09: 0000000000000000
[  883.566891][ T3374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  883.566902][ T3374] R13: 00007f1953c16038 R14: 00007f1953c15fa0 R15: 00007ffe3e76c538
[  883.566932][ T3374]  </TASK>
[  883.862889][ T3383] syzkaller0: entered promiscuous mode
[  883.868599][ T3383] syzkaller0: entered allmulticast mode
[  883.878231][ T3383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7772'.
[  883.887408][ T3383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7772'.
[  883.898923][ T3385] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7773'.
[  883.914578][ T3383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  883.924737][ T3382] tipc: Resetting bearer <eth:syzkaller0>
[  883.950826][ T3382] tipc: Disabling bearer <eth:syzkaller0>
[  884.044492][ T3392] netlink: 'syz.2.7775': attribute type 10 has an invalid length.
[  884.098288][ T3404] netlink: 'syz.2.7775': attribute type 10 has an invalid length.
[  884.130395][ T3404] team0: Port device dummy0 removed
[  884.139217][ T3404] dummy0: entered allmulticast mode
[  884.145149][ T3404] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  884.614078][ T3427] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  884.788714][ T3436] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  885.079883][ T3445] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7789'.
[  885.488616][ T3479] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  885.667732][ T3484] wg1 speed is unknown, defaulting to 1000
[  885.762174][ T3493] FAULT_INJECTION: forcing a failure.
[  885.762174][ T3493] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  885.782180][ T3493] CPU: 0 UID: 0 PID: 3493 Comm: syz.3.7798 Not tainted syzkaller #0 PREEMPT(full) 
[  885.782205][ T3493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  885.782217][ T3493] Call Trace:
[  885.782225][ T3493]  <TASK>
[  885.782233][ T3493]  dump_stack_lvl+0xe8/0x150
[  885.782263][ T3493]  should_fail_ex+0x412/0x560
[  885.782296][ T3493]  prepare_alloc_pages+0x22a/0x650
[  885.782327][ T3493]  __alloc_frozen_pages_noprof+0x12f/0x380
[  885.782355][ T3493]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  885.782381][ T3493]  ? __pfx_policy_nodemask+0x10/0x10
[  885.782409][ T3493]  ? __lock_acquire+0x6b5/0x2cf0
[  885.782436][ T3493]  alloc_pages_mpol+0x232/0x4a0
[  885.782465][ T3493]  vma_alloc_folio_noprof+0xea/0x210
[  885.782491][ T3493]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  885.782526][ T3493]  do_pte_missing+0x1656/0x3490
[  885.782566][ T3493]  handle_mm_fault+0x1bec/0x3310
[  885.782598][ T3493]  ? handle_mm_fault+0xee/0x3310
[  885.782624][ T3493]  ? __pfx_handle_mm_fault+0x10/0x10
[  885.782643][ T3493]  ? follow_page_pte+0x841/0x1450
[  885.782670][ T3493]  ? __pfx_follow_page_pte+0x10/0x10
[  885.782699][ T3493]  __get_user_pages+0x165b/0x29d0
[  885.782756][ T3493]  __gup_longterm_locked+0xdcf/0x1630
[  885.782789][ T3493]  ? gup_fast_fallback+0x151/0x22e0
[  885.782815][ T3493]  ? sanity_check_pinned_pages+0x1219/0x12d0
[  885.782847][ T3493]  gup_fast_fallback+0x1d82/0x22e0
[  885.782900][ T3493]  ? rcu_is_watching+0x15/0xb0
[  885.782926][ T3493]  ? __pfx_gup_fast_fallback+0x10/0x10
[  885.782953][ T3493]  ? is_valid_gup_args+0x11f/0x200
[  885.782980][ T3493]  ? pin_user_pages_fast+0x4d/0xb0
[  885.783005][ T3493]  rds_info_getsockopt+0x20e/0x4a0
[  885.783034][ T3493]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  885.783057][ T3493]  ? __might_fault+0xaf/0x130
[  885.783076][ T3493]  ? rds_getsockopt+0x31d/0x500
[  885.783100][ T3493]  ? __pfx_rds_getsockopt+0x10/0x10
[  885.783120][ T3493]  do_sock_getsockopt+0x2d3/0x3f0
[  885.783146][ T3493]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  885.783170][ T3493]  ? __fget_files+0x3a0/0x420
[  885.783186][ T3493]  ? __fget_files+0x2a/0x420
[  885.783207][ T3493]  __x64_sys_getsockopt+0x1a4/0x240
[  885.783239][ T3493]  do_syscall_64+0x14d/0xf80
[  885.783256][ T3493]  ? trace_irq_disable+0x3b/0x150
[  885.783271][ T3493]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.783289][ T3493]  ? clear_bhb_loop+0x40/0x90
[  885.783309][ T3493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.783326][ T3493] RIP: 0033:0x7fbdae59c819
[  885.783342][ T3493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  885.783357][ T3493] RSP: 002b:00007fbdac7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  885.783375][ T3493] RAX: ffffffffffffffda RBX: 00007fbdae816180 RCX: 00007fbdae59c819
[  885.783388][ T3493] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 000000000000000c
[  885.783399][ T3493] RBP: 00007fbdac7f6090 R08: 0000200000000000 R09: 0000000000000000
[  885.783410][ T3493] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002
[  885.783421][ T3493] R13: 00007fbdae816218 R14: 00007fbdae816180 R15: 00007ffc5007fbf8
[  885.783449][ T3493]  </TASK>
[  886.195617][ T3499] wg1 speed is unknown, defaulting to 1000
[  886.478697][ T3506] xt_l2tp: invalid flags combination: 0
[  886.512117][ T3507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7802'.
[  886.539267][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7804'.
[  886.581925][ T3505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7804'.
[  886.603238][ T3504] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  886.620874][ T3504] bond5 (unregistering): Released all slaves
[  886.814331][ T3522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7808'.
[  886.824965][ T3523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7808'.
[  886.834274][ T3522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7808'.
[  886.843317][ T3523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7808'.
[  886.852304][ T3523] netlink: 'syz.4.7808': attribute type 12 has an invalid length.
[  886.852406][ T3522] netlink: 'syz.4.7808': attribute type 12 has an invalid length.
[  886.882683][ T3519] netlink: 'syz.2.7807': attribute type 39 has an invalid length.
[  886.889551][ T3523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7808'.
[  886.899476][ T3514] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  886.899545][ T3523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7808'.
[  886.918398][ T3523] netlink: 'syz.4.7808': attribute type 12 has an invalid length.
[  886.921045][ T3514] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  886.953968][ T3514] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  886.977921][ T3522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7808'.
[  887.017411][ T3522] netlink: 'syz.4.7808': attribute type 12 has an invalid length.
[  887.040980][ T3514] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  887.085835][ T3526] macsec2: entered promiscuous mode
[  887.093580][ T3526] macsec2: entered allmulticast mode
[  887.415174][ T3538] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  887.567469][ T3544] vlan0: entered allmulticast mode
[  887.790708][ T3567] ip6gre1: entered promiscuous mode
[  887.795965][ T3567] ip6gre1: entered allmulticast mode
[  887.940980][ T3572] syz_tun: entered promiscuous mode
[  887.947506][ T3572] syz_tun: entered allmulticast mode
[  887.954685][ T3576] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  887.983083][ T3574] wg1 speed is unknown, defaulting to 1000
[  888.009334][ T3579] FAULT_INJECTION: forcing a failure.
[  888.009334][ T3579] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  888.032863][ T3579] CPU: 0 UID: 0 PID: 3579 Comm: syz.1.7824 Not tainted syzkaller #0 PREEMPT(full) 
[  888.032887][ T3579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  888.032898][ T3579] Call Trace:
[  888.032909][ T3579]  <TASK>
[  888.032917][ T3579]  dump_stack_lvl+0xe8/0x150
[  888.032948][ T3579]  should_fail_ex+0x412/0x560
[  888.032978][ T3579]  prepare_alloc_pages+0x22a/0x650
[  888.033009][ T3579]  __alloc_frozen_pages_noprof+0x12f/0x380
[  888.033036][ T3579]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  888.033063][ T3579]  ? __pfx_policy_nodemask+0x10/0x10
[  888.033090][ T3579]  ? __lock_acquire+0x6b5/0x2cf0
[  888.033117][ T3579]  alloc_pages_mpol+0x232/0x4a0
[  888.033145][ T3579]  vma_alloc_folio_noprof+0xea/0x210
[  888.033172][ T3579]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  888.033206][ T3579]  do_pte_missing+0x1656/0x3490
[  888.033246][ T3579]  handle_mm_fault+0x1bec/0x3310
[  888.033277][ T3579]  ? handle_mm_fault+0xee/0x3310
[  888.033303][ T3579]  ? __pfx_handle_mm_fault+0x10/0x10
[  888.033322][ T3579]  ? follow_page_pte+0x841/0x1450
[  888.033349][ T3579]  ? __pfx_follow_page_pte+0x10/0x10
[  888.033378][ T3579]  __get_user_pages+0x165b/0x29d0
[  888.033434][ T3579]  __gup_longterm_locked+0xdcf/0x1630
[  888.033469][ T3579]  ? gup_fast_fallback+0x151/0x22e0
[  888.033495][ T3579]  ? sanity_check_pinned_pages+0x1219/0x12d0
[  888.033528][ T3579]  gup_fast_fallback+0x1d82/0x22e0
[  888.033582][ T3579]  ? rcu_is_watching+0x15/0xb0
[  888.033607][ T3579]  ? __pfx_gup_fast_fallback+0x10/0x10
[  888.033634][ T3579]  ? is_valid_gup_args+0x11f/0x200
[  888.033662][ T3579]  ? pin_user_pages_fast+0x4d/0xb0
[  888.033690][ T3579]  rds_info_getsockopt+0x20e/0x4a0
[  888.033723][ T3579]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  888.033750][ T3579]  ? __might_fault+0xaf/0x130
[  888.033773][ T3579]  ? rds_getsockopt+0x31d/0x500
[  888.033794][ T3579]  ? __pfx_rds_getsockopt+0x10/0x10
[  888.033817][ T3579]  do_sock_getsockopt+0x2d3/0x3f0
[  888.033852][ T3579]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  888.033884][ T3579]  ? __fget_files+0x3a0/0x420
[  888.033900][ T3579]  ? __fget_files+0x2a/0x420
[  888.033924][ T3579]  __x64_sys_getsockopt+0x1a4/0x240
[  888.033959][ T3579]  do_syscall_64+0x14d/0xf80
[  888.033976][ T3579]  ? trace_irq_disable+0x3b/0x150
[  888.033993][ T3579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  888.034012][ T3579]  ? clear_bhb_loop+0x40/0x90
[  888.034034][ T3579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  888.034052][ T3579] RIP: 0033:0x7f277cd9c819
[  888.034070][ T3579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  888.034086][ T3579] RSP: 002b:00007f277aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  888.034106][ T3579] RAX: ffffffffffffffda RBX: 00007f277d016090 RCX: 00007f277cd9c819
[  888.034120][ T3579] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 000000000000000c
[  888.034132][ T3579] RBP: 00007f277aff6090 R08: 0000200000000000 R09: 0000000000000000
[  888.034144][ T3579] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002
[  888.034156][ T3579] R13: 00007f277d016128 R14: 00007f277d016090 R15: 00007ffe1807a688
[  888.034187][ T3579]  </TASK>
[  888.419826][ T3581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  888.699938][ T3591] xt_TCPMSS: Only works on TCP SYN packets
[  888.717080][ T3591] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  889.199077][ T3631] FAULT_INJECTION: forcing a failure.
[  889.199077][ T3631] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  889.253722][ T3631] CPU: 0 UID: 0 PID: 3631 Comm: syz.3.7838 Not tainted syzkaller #0 PREEMPT(full) 
[  889.253748][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  889.253759][ T3631] Call Trace:
[  889.253766][ T3631]  <TASK>
[  889.253774][ T3631]  dump_stack_lvl+0xe8/0x150
[  889.253808][ T3631]  should_fail_ex+0x412/0x560
[  889.253839][ T3631]  _copy_from_user+0x2d/0xb0
[  889.253861][ T3631]  __copy_msghdr+0x3c5/0x5b0
[  889.253889][ T3631]  ___sys_sendmsg+0x213/0x360
[  889.253918][ T3631]  ? __pfx____sys_sendmsg+0x10/0x10
[  889.253968][ T3631]  ? __fget_files+0x2a/0x420
[  889.253983][ T3631]  ? __fget_files+0x3a0/0x420
[  889.254007][ T3631]  __x64_sys_sendmsg+0x1bd/0x2a0
[  889.254034][ T3631]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  889.254068][ T3631]  ? __pfx_ksys_write+0x10/0x10
[  889.254101][ T3631]  do_syscall_64+0x14d/0xf80
[  889.254118][ T3631]  ? trace_irq_disable+0x3b/0x150
[  889.254135][ T3631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.254153][ T3631]  ? clear_bhb_loop+0x40/0x90
[  889.254176][ T3631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.254194][ T3631] RIP: 0033:0x7fbdae59c819
[  889.254211][ T3631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  889.254226][ T3631] RSP: 002b:00007fbdaf3a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  889.254244][ T3631] RAX: ffffffffffffffda RBX: 00007fbdae815fa0 RCX: 00007fbdae59c819
[  889.254257][ T3631] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000009
[  889.254269][ T3631] RBP: 00007fbdaf3a9090 R08: 0000000000000000 R09: 0000000000000000
[  889.254280][ T3631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  889.254290][ T3631] R13: 00007fbdae816038 R14: 00007fbdae815fa0 R15: 00007ffc5007fbf8
[  889.254320][ T3631]  </TASK>
[  889.489339][ T3637] netlink: 'syz.0.7839': attribute type 1 has an invalid length.
[  889.685745][ T3649] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  889.770827][ T3649] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  889.844627][ T3647] wg1 speed is unknown, defaulting to 1000
[  889.920805][ T3637] bond6: (slave bridge3): Enslaving as an active interface with a down link
[  890.796626][ T3713] FAULT_INJECTION: forcing a failure.
[  890.796626][ T3713] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  890.818654][ T3713] CPU: 0 UID: 0 PID: 3713 Comm: syz.4.7850 Not tainted syzkaller #0 PREEMPT(full) 
[  890.818679][ T3713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  890.818690][ T3713] Call Trace:
[  890.818698][ T3713]  <TASK>
[  890.818707][ T3713]  dump_stack_lvl+0xe8/0x150
[  890.818735][ T3713]  should_fail_ex+0x412/0x560
[  890.818765][ T3713]  _copy_from_user+0x2d/0xb0
[  890.818788][ T3713]  ____sys_sendmsg+0x308/0x9f0
[  890.818822][ T3713]  ? __pfx_____sys_sendmsg+0x10/0x10
[  890.818856][ T3713]  ? import_iovec+0x73/0xa0
[  890.818881][ T3713]  ___sys_sendmsg+0x2a5/0x360
[  890.818912][ T3713]  ? __pfx____sys_sendmsg+0x10/0x10
[  890.818970][ T3713]  ? __fget_files+0x2a/0x420
[  890.818987][ T3713]  ? __fget_files+0x3a0/0x420
[  890.819013][ T3713]  __x64_sys_sendmsg+0x1bd/0x2a0
[  890.819041][ T3713]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  890.819075][ T3713]  ? __pfx_ksys_write+0x10/0x10
[  890.819107][ T3713]  do_syscall_64+0x14d/0xf80
[  890.819124][ T3713]  ? trace_irq_disable+0x3b/0x150
[  890.819141][ T3713]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  890.819159][ T3713]  ? clear_bhb_loop+0x40/0x90
[  890.819181][ T3713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  890.819199][ T3713] RIP: 0033:0x7f195399c819
[  890.819216][ T3713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  890.819232][ T3713] RSP: 002b:00007f19547da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  890.819251][ T3713] RAX: ffffffffffffffda RBX: 00007f1953c15fa0 RCX: 00007f195399c819
[  890.819265][ T3713] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000009
[  890.819276][ T3713] RBP: 00007f19547da090 R08: 0000000000000000 R09: 0000000000000000
[  890.819288][ T3713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  890.819299][ T3713] R13: 00007f1953c16038 R14: 00007f1953c15fa0 R15: 00007ffe3e76c538
[  890.819329][ T3713]  </TASK>
[  891.064743][ T3715] mac80211_hwsim hwsim92 syzkaller0: entered promiscuous mode
[  891.212471][ T3722] syzkaller0: entered promiscuous mode
[  891.218138][ T3722] syzkaller0: entered allmulticast mode
[  891.265412][ T3724] mac80211_hwsim hwsim92 syzkaller0: Caught tx_queue_len zero misconfig
[  892.570196][ T3646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  892.579867][ T3663] __nla_validate_parse: 75 callbacks suppressed
[  892.579884][ T3663] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7842'.
[  892.595899][ T3663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7842'.
[  892.705967][ T3734] netlink: 'syz.2.7860': attribute type 10 has an invalid length.
[  892.713993][ T3734] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7860'.
[  892.906291][ T3750] syzkaller0: entered promiscuous mode
[  892.920878][ T3750] syzkaller0: entered allmulticast mode
[  892.936537][ T3752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7868'.
[  892.959488][ T3755] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  893.171430][ T3763] syzkaller1: entered promiscuous mode
[  893.182935][ T3763] syzkaller1: entered allmulticast mode
[  893.243480][ T3770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  893.265410][ T3770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7874'.
[  893.294734][ T3770] netlink: 356 bytes leftover after parsing attributes in process `syz.1.7874'.
[  893.465217][ T3785] dummy0: mtu less than device minimum
[  893.494232][ T3789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7879'.
[  893.787511][ T3801] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7882'.
[  893.790807][ T3802] openvswitch: netlink: Duplicate key (type 21).
[  893.806924][ T3801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7882'.
[  894.817075][ T3818] wg1 speed is unknown, defaulting to 1000
[  895.020917][ T3835] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7892'.
[  895.805921][ T3837] .70·: left allmulticast mode
[  895.813511][ T3837] hsr_slave_0: left allmulticast mode
[  895.819623][ T3837] hsr_slave_1: left allmulticast mode
[  895.832064][ T3837] mac80211_hwsim hwsim102 wlan1: left allmulticast mode
[  895.845451][ T3837] macvtap1: left promiscuous mode
[  895.850595][ T3837] macvtap1: left allmulticast mode
[  895.856120][ T3837] geneve2: left promiscuous mode
[  895.861493][ T3837] vlan3: left promiscuous mode
[  895.866272][ T3837] bridge0: left promiscuous mode
[  895.873984][ T3837] bond2: left promiscuous mode
[  895.901504][ T3837] ip6gre1: left promiscuous mode
[  895.906627][ T3837] ip6gre1: left allmulticast mode
[  896.086929][T18919] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  896.095946][T18919] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  896.150073][T18919] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  896.201314][T18919] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  896.303193][ T3863] syzkaller1: entered promiscuous mode
[  896.308903][ T3863] syzkaller1: entered allmulticast mode
[  896.314583][ T3861] xt_CT: No such helper "snmp_trap"
[  896.530879][ T3885] netlink: 'syz.2.7905': attribute type 1 has an invalid length.
[  896.900557][ T3890] netlink: 'syz.2.7907': attribute type 2 has an invalid length.
[  896.910527][ T3889] netlink: 'syz.0.7906': attribute type 8 has an invalid length.
[  896.937002][ T3889] netlink: 'syz.0.7906': attribute type 4 has an invalid length.
[  896.969577][ T3894] netlink: 'syz.2.7907': attribute type 2 has an invalid length.
[  897.028931][ T3897] netlink: 'syz.2.7907': attribute type 2 has an invalid length.
[  897.048014][ T3890] !©�9: entered promiscuous mode
[  897.057170][ T3897] !©�9: left promiscuous mode
[  897.189325][ T3894] !©�9: entered promiscuous mode
[  897.211634][ T3900] netlink: 'syz.0.7909': attribute type 1 has an invalid length.
[  897.268569][ T3906] netlink: 'syz.2.7911': attribute type 2 has an invalid length.
[  897.335450][ T3900] bond7: (slave geneve2): making interface the new active one
[  897.354643][ T3900] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  897.391923][ T3910] 8021q: adding VLAN 0 to HW filter on device bond7
[  897.409576][T19092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  897.420355][T19092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  897.469360][T19092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  897.479273][   T29] audit: type=1107 audit(1776027364.866:85): pid=3908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  897.508612][T19092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  897.548802][ T3909] syzkaller0: entered promiscuous mode
[  897.579829][ T3909] syzkaller0: entered allmulticast mode
[  897.624464][ T3921] mac80211_hwsim hwsim99 syzkaller0: left promiscuous mode
[  897.633002][ T3921] mac80211_hwsim hwsim99 syzkaller0: left allmulticast mode
[  897.648618][ T3924] __nla_validate_parse: 8 callbacks suppressed
[  897.648635][ T3924] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7915'.
[  897.781269][ T3930] FAULT_INJECTION: forcing a failure.
[  897.781269][ T3930] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  897.834110][ T3930] CPU: 1 UID: 0 PID: 3930 Comm: syz.3.7916 Not tainted syzkaller #0 PREEMPT(full) 
[  897.834135][ T3930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  897.834146][ T3930] Call Trace:
[  897.834152][ T3930]  <TASK>
[  897.834161][ T3930]  dump_stack_lvl+0xe8/0x150
[  897.834190][ T3930]  should_fail_ex+0x412/0x560
[  897.834222][ T3930]  _copy_to_user+0x31/0xb0
[  897.834245][ T3930]  simple_read_from_buffer+0xe1/0x170
[  897.834275][ T3930]  proc_fail_nth_read+0x1bb/0x230
[  897.834304][ T3930]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  897.834332][ T3930]  ? rw_verify_area+0x2a6/0x4d0
[  897.834351][ T3930]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  897.834378][ T3930]  vfs_read+0x20c/0xa70
[  897.834397][ T3930]  ? fdget_pos+0x246/0x320
[  897.834419][ T3930]  ? __pfx___mutex_lock+0x10/0x10
[  897.834439][ T3930]  ? __pfx_vfs_read+0x10/0x10
[  897.834459][ T3930]  ? __fget_files+0x2a/0x420
[  897.834479][ T3930]  ? __fget_files+0x3a0/0x420
[  897.834494][ T3930]  ? __fget_files+0x2a/0x420
[  897.834519][ T3930]  ksys_read+0x150/0x270
[  897.834541][ T3930]  ? __pfx_ksys_read+0x10/0x10
[  897.834574][ T3930]  do_syscall_64+0x14d/0xf80
[  897.834592][ T3930]  ? trace_irq_disable+0x3b/0x150
[  897.834608][ T3930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.834626][ T3930]  ? clear_bhb_loop+0x40/0x90
[  897.834647][ T3930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.834665][ T3930] RIP: 0033:0x7fbdae55d04e
[  897.834682][ T3930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  897.834698][ T3930] RSP: 002b:00007fbdaf3a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  897.834716][ T3930] RAX: ffffffffffffffda RBX: 00007fbdaf3a96c0 RCX: 00007fbdae55d04e
[  897.834727][ T3930] RDX: 000000000000000f RSI: 00007fbdaf3a90a0 RDI: 0000000000000004
[  897.834736][ T3930] RBP: 00007fbdaf3a9090 R08: 0000000000000000 R09: 0000000000000000
[  897.834745][ T3930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  897.834757][ T3930] R13: 00007fbdae816038 R14: 00007fbdae815fa0 R15: 00007ffc5007fbf8
[  897.834783][ T3930]  </TASK>
[  898.448031][ T3957] netlink: 'syz.0.7926': attribute type 2 has an invalid length.
[  898.455787][ T3957] tipc: Cannot configure node identity twice
[  898.484813][ T3960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7927'.
[  898.508265][ T3960] batman_adv: batadv0: Removing interface: batadv_slave_0
[  898.526595][ T3960] batman_adv: batadv0: Removing interface: batadv_slave_1
[  898.567560][ T3960] batman_adv: batadv0: Removing interface: ipvlan2
[  899.016506][ T3985] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  899.049281][ T3986] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7932'.
[  899.092086][ T3986] pim6reg: entered allmulticast mode
[  899.239494][ T3995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7936'.
[  899.248662][ T3995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7936'.
[  899.260228][ T3995] lo: entered allmulticast mode
[  899.265262][ T3995] tunl0: entered allmulticast mode
[  899.270736][ T3995] gre0: entered allmulticast mode
[  899.276048][ T3995] gretap0: entered allmulticast mode
[  899.282443][ T3995] erspan0: entered allmulticast mode
[  899.288867][ T3995] ip_vti0: entered allmulticast mode
[  899.294409][ T3995] ip6_vti0: entered allmulticast mode
[  899.300101][ T3995] sit0: entered allmulticast mode
[  899.305334][ T3995] ip6tnl0: entered allmulticast mode
[  899.315551][ T3995] ip6gre0: entered allmulticast mode
[  899.335725][ T3995] syz_tun: entered allmulticast mode
[  899.345838][ T3995] ip6gretap0: entered allmulticast mode
[  899.366034][ T3995] bridge0: entered allmulticast mode
[  899.371670][ T3995] vcan0: entered allmulticast mode
[  899.387412][ T3995] bond0: entered allmulticast mode
[  899.398621][ T3995] bond_slave_0: entered allmulticast mode
[  899.417005][ T3995] bond_slave_1: entered allmulticast mode
[  899.423017][ T3995] dummy0: entered allmulticast mode
[  899.429343][ T3995] nlmon0: entered allmulticast mode
[  899.444947][ T3995] caif0: entered allmulticast mode
[  899.455413][ T3995] vxcan0: entered allmulticast mode
[  899.466971][ T3995] vxcan1: entered allmulticast mode
[  899.485375][ T3995] veth0: entered allmulticast mode
[  899.492785][ T3995] veth1: entered allmulticast mode
[  899.507165][ T3995] wg0: entered allmulticast mode
[  899.517302][ T3995] wg1: entered allmulticast mode
[  899.527155][ T3995] wg2: entered allmulticast mode
[  899.547016][ T3995] veth0_to_bridge: entered allmulticast mode
[  899.553409][ T3995] veth1_to_bridge: entered allmulticast mode
[  899.567062][ T3995] veth0_to_bond: entered allmulticast mode
[  899.573227][ T3995] veth1_to_bond: entered allmulticast mode
[  899.587664][ T3995] veth0_to_team: entered allmulticast mode
[  899.594398][ T3995] team_slave_0: entered allmulticast mode
[  899.606960][ T3995] veth1_to_team: entered allmulticast mode
[  899.619935][ T3995] team_slave_1: entered allmulticast mode
[  899.628100][ T3995] veth1_to_batadv: entered allmulticast mode
[  899.641111][ T3995] batadv_slave_1: entered allmulticast mode
[  899.653025][ T3995] xfrm0: entered allmulticast mode
[  899.664255][ T3995] veth0_to_hsr: entered allmulticast mode
[  899.674741][ T3995] hsr_slave_0: entered allmulticast mode
[  899.685118][ T3995] veth1_to_hsr: entered allmulticast mode
[  899.695638][ T3995] hsr_slave_1: entered allmulticast mode
[  899.707009][ T3995] .70·: entered allmulticast mode
[  899.715628][ T3995] veth1_virt_wifi: entered allmulticast mode
[  899.726978][ T3995] veth0_virt_wifi: entered allmulticast mode
[  899.738657][ T3995] virt_wifi0: entered allmulticast mode
[  899.749895][ T3995] veth1_macvtap: entered allmulticast mode
[  899.762794][ T3995] veth0_macvtap: entered allmulticast mode
[  899.774541][ T3995] macsec0: entered allmulticast mode
[  899.784645][ T3995] geneve0: entered allmulticast mode
[  899.794957][ T3995] geneve1: entered allmulticast mode
[  899.804919][ T3995] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  899.819262][ T3995] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[  899.827175][ T3995] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[  899.834788][ T3995] netdevsim netdevsim4 netdevsim3: entered allmulticast mode
[  899.842910][ T3995] mac80211_hwsim hwsim101 wlan0: entered allmulticast mode
[  899.850667][ T3995] mac80211_hwsim hwsim102 wlan1: entered allmulticast mode
[  899.873528][ T3995] vlan2: entered allmulticast mode
[  899.883332][ T3995] ip6gretap1: entered allmulticast mode
[  899.893268][ T3995] gtp0: entered allmulticast mode
[  899.903115][ T3995] macvtap1: entered allmulticast mode
[  899.913290][ T3995] veth2: entered allmulticast mode
[  899.922066][ T3995] veth3: entered allmulticast mode
[  899.932055][ T3995] geneve2: entered allmulticast mode
[  899.942248][ T3995] vlan3: entered allmulticast mode
[  899.948007][ T3995] bridge1: entered allmulticast mode
[  899.953518][ T3995] geneve3: entered allmulticast mode
[  899.959410][ T3995] bond1: entered allmulticast mode
[  899.964626][ T3995] bridge2: entered allmulticast mode
[  899.970585][ T3995] ip6tnl1: entered allmulticast mode
[  899.976075][ T3995] sit1: entered allmulticast mode
[  899.981903][ T3995] macvlan2: entered allmulticast mode
[  899.987831][ T3995] bond2: entered allmulticast mode
[  899.993181][ T3995] syztnl1: entered allmulticast mode
[  899.999097][ T3995] vxlan0: entered allmulticast mode
[  900.004533][ T3995] vxcan2: entered allmulticast mode
[  900.010372][ T3995] vxcan3: entered allmulticast mode
[  900.015834][ T3995] ip6gre1: entered allmulticast mode
[  900.123098][ T4006] lo speed is unknown, defaulting to 1000
[  900.132696][ T4006] lo speed is unknown, defaulting to 1000
[  900.149928][ T4006] lo speed is unknown, defaulting to 1000
[  900.187251][ T4015] netlink: 'syz.3.7942': attribute type 1 has an invalid length.
[  900.393703][ T4015] bond7: entered promiscuous mode
[  900.436852][ T4015] bond7: entered allmulticast mode
[  900.472192][ T4015] 8021q: adding VLAN 0 to HW filter on device bond7
[  900.510316][ T4006] infiniband sqz0: set down
[  900.518350][ T4022] erspan1: entered allmulticast mode
[  900.532750][ T4006] infiniband sqz0: added lo
[  900.546213][ T4022] bond7: (slave erspan1): making interface the new active one
[  900.556582][ T4006] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  900.560746][ T4006] infiniband sqz0: Couldn't open port 1
[  900.576932][ T4022] erspan1: entered promiscuous mode
[  900.584000][ T4022] bond7: (slave erspan1): Enslaving as an active interface with an up link
[  900.628359][T18332] lo speed is unknown, defaulting to 1000
[  900.677420][ T4006] RDS/IB: sqz0: added
[  900.681504][ T4006] smc: adding ib device sqz0 with port count 1
[  900.694570][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7947'.
[  900.719930][ T4006] smc:    ib device sqz0 port 1 has no pnetid
[  900.726097][T18332] lo speed is unknown, defaulting to 1000
[  900.774994][ T4006] lo speed is unknown, defaulting to 1000
[  900.859710][ T4039] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  900.958118][ T4039] 8021q: adding VLAN 0 to HW filter on device bond3
[  901.032100][ T4052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7951'.
[  901.121596][ T4042] bond3: (slave veth5): Enslaving as an active interface with a down link
[  901.176972][ T4039] dummy0: left allmulticast mode
[  901.219113][ T4039] bond3: (slave dummy0): making interface the new active one
[  901.258147][ T4039] dummy0: entered promiscuous mode
[  901.263877][ T4039] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  901.287228][ T4057] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  901.296783][ T4057] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  901.411327][ T4006] lo speed is unknown, defaulting to 1000
[  901.641867][ T4066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  901.867987][ T4068] bond8: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  901.924191][ T4068] bond8: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  902.045321][ T4006] lo speed is unknown, defaulting to 1000
[  902.374359][ T4098] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7964'.
[  902.531869][ T4104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7965'.
[  902.554098][ T4105] ip6_vti0: entered promiscuous mode
[  902.577278][ T4105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7966'.
[  902.658012][ T4006] lo speed is unknown, defaulting to 1000
[  902.827823][ T4118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7969'.
[  902.973306][ T4123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7971'.
[  903.143124][ T4006] lo speed is unknown, defaulting to 1000
[  903.257418][ T4133] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7975'.
[  903.583617][ T4006] lo speed is unknown, defaulting to 1000
[  903.692763][ T4143] netlink: 19 bytes leftover after parsing attributes in process `syz.4.7978'.
[  904.066868][ T4162] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  904.131168][ T4006] lo speed is unknown, defaulting to 1000
[  904.257353][ T4166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7986'.
[  904.678837][ T4180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7991'.
[  904.689278][ T4180] lo: Caught tx_queue_len zero misconfig
[  905.009167][ T4195] validate_nla: 1 callbacks suppressed
[  905.009184][ T4195] netlink: 'syz.2.7997': attribute type 2 has an invalid length.
[  905.014044][ T4196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7997'.
[  905.016991][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7996'.
[  905.134784][ T4200] netlink: 'syz.3.7999': attribute type 11 has an invalid length.
[  905.153591][ T4200] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.7999'.
[  905.188835][ T4202] netlink: 'syz.0.7996': attribute type 1 has an invalid length.
[  905.196609][ T4202] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7996'.
[  905.298650][ T4205] xt_CT: No such helper "syz0"
[  905.712114][ T4227] 8021q: adding VLAN 0 to HW filter on device bond0
[  905.817003][ T4227] syz_tun: left allmulticast mode
[  905.863314][ T4227] vcan0: left allmulticast mode
[  905.897220][ T4227] 8021q: adding VLAN 0 to HW filter on device team0
[  905.917317][ T4227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  905.986744][T19443] lo speed is unknown, defaulting to 1000
[  905.994929][ T4240] bridge_slave_1: left allmulticast mode
[  905.996843][T19443] sqz0: Port: 1 Link ACTIVE
[  906.015828][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.061875][T19443] lo speed is unknown, defaulting to 1000
[  906.275569][ T4250] veth1: entered promiscuous mode
[  906.305325][ T4250] veth1: entered allmulticast mode
[  906.333051][   T29] audit: type=1107 audit(1776027373.716:86): pid=4248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  906.761440][ T4274] pim6reg1: entered promiscuous mode
[  906.766839][ T4274] pim6reg1: entered allmulticast mode
[  906.904726][ T4292] netlink: 'syz.1.8024': attribute type 4 has an invalid length.
[  906.913188][ T4292] netlink: 'syz.1.8024': attribute type 4 has an invalid length.
[  907.321949][ T4313] netlink: 'syz.2.8031': attribute type 17 has an invalid length.
[  907.375040][ T4313] bridge3: port 1(erspan0) entered blocking state
[  907.381634][ T4313] bridge3: port 1(erspan0) entered forwarding state
[  907.515883][ T4313] ip6_vti0: left promiscuous mode
[  907.582011][ T4313] 8021q: adding VLAN 0 to HW filter on device bond0
[  907.610523][ T4313] 8021q: adding VLAN 0 to HW filter on device team0
[  907.636917][ T4313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  907.861196][ T4349] netlink: 'syz.4.8040': attribute type 4 has an invalid length.
[  907.875165][T18919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  907.883485][T18919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  908.453024][ T4376] __nla_validate_parse: 4 callbacks suppressed
[  908.453044][ T4376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8047'.
[  908.533494][ T4376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8047'.
[  908.577208][ T4376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8047'.
[  908.598398][ T4378] wg1 speed is unknown, defaulting to 1000
[  908.658097][ T4385] wg1 speed is unknown, defaulting to 1000
[  909.222123][ T4385] lo speed is unknown, defaulting to 1000
[  909.390619][ T4408] syzkaller1: entered promiscuous mode
[  909.438084][ T4408] syzkaller1: entered allmulticast mode
[  909.913660][ T4378] lo speed is unknown, defaulting to 1000
[  910.547716][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8057'.
[  910.615657][ T4420] bond15 (unregistering): Released all slaves
[  910.686557][ T4423] macvlan3: entered allmulticast mode
[  910.696252][ T4423] hsr0: entered allmulticast mode
[  910.702327][ T4423] hsr_slave_0: entered allmulticast mode
[  910.710070][ T4423] hsr_slave_1: entered allmulticast mode
[  910.742599][ T4418] wg1 speed is unknown, defaulting to 1000
[  911.990098][ T4418] lo speed is unknown, defaulting to 1000
[  912.277406][T19092] dummy0: left promiscuous mode
[  912.439809][ T4447] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8064'.
[  912.487957][ T4450] syzkaller0: entered promiscuous mode
[  912.493543][ T4450] syzkaller0: entered allmulticast mode
[  912.499411][ T4447] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8064'.
[  912.538000][ T4450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  912.607100][ T4448] tipc: Resetting bearer <eth:syzkaller0>
[  912.698038][ T4448] tipc: Disabling bearer <eth:syzkaller0>
[  912.987127][ T4459] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8068'.
[  913.181204][ T4462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8069'.
[  913.680967][ T4459] wg1 speed is unknown, defaulting to 1000
[  913.688862][ T4470] 8021q: VLANs not supported on caif0
[  913.890752][ T4481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8075'.
[  914.029730][ T4485] netlink: 'syz.2.8078': attribute type 2 has an invalid length.
[  914.038602][ T4487] delete_channel: no stack
[  914.060752][ T4488] netlink: 'syz.2.8078': attribute type 2 has an invalid length.
[  914.290751][ T4501] netlink: 'syz.4.8082': attribute type 4 has an invalid length.
[  914.326712][ T4501] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8082'.
[  914.363070][ T4502] netlink: 'syz.4.8082': attribute type 1 has an invalid length.
[  914.487809][ T4459] lo speed is unknown, defaulting to 1000
[  914.497688][ T4509] dummy0: mtu less than device minimum
[  914.788107][ T4514] syzkaller0: entered promiscuous mode
[  914.793621][ T4514] syzkaller0: entered allmulticast mode
[  915.301492][ T4543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8090'.
[  915.478963][ T4553] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8093'.
[  915.497234][ T4553] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8093'.
[  915.526859][ T4553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8093'.
[  915.813187][ T4559] FAULT_INJECTION: forcing a failure.
[  915.813187][ T4559] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  915.852375][ T4559] CPU: 1 UID: 0 PID: 4559 Comm: syz.4.8095 Not tainted syzkaller #0 PREEMPT(full) 
[  915.852401][ T4559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  915.852412][ T4559] Call Trace:
[  915.852420][ T4559]  <TASK>
[  915.852429][ T4559]  dump_stack_lvl+0xe8/0x150
[  915.852459][ T4559]  should_fail_ex+0x412/0x560
[  915.852491][ T4559]  _copy_from_user+0x2d/0xb0
[  915.852513][ T4559]  ___sys_recvmsg+0x175/0x590
[  915.852538][ T4559]  ? __lock_acquire+0x6b5/0x2cf0
[  915.852566][ T4559]  ? __pfx____sys_recvmsg+0x10/0x10
[  915.852627][ T4559]  do_recvmmsg+0x334/0x800
[  915.852653][ T4559]  ? __pfx_do_recvmmsg+0x10/0x10
[  915.852691][ T4559]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  915.852727][ T4559]  __x64_sys_recvmmsg+0x198/0x250
[  915.852748][ T4559]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  915.852777][ T4559]  do_syscall_64+0x14d/0xf80
[  915.852795][ T4559]  ? trace_irq_disable+0x3b/0x150
[  915.852811][ T4559]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  915.852829][ T4559]  ? clear_bhb_loop+0x40/0x90
[  915.852851][ T4559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  915.852869][ T4559] RIP: 0033:0x7f195399c819
[  915.852886][ T4559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  915.852902][ T4559] RSP: 002b:00007f19547da028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  915.852922][ T4559] RAX: ffffffffffffffda RBX: 00007f1953c15fa0 RCX: 00007f195399c819
[  915.852935][ T4559] RDX: 0000000000000004 RSI: 0000200000005c40 RDI: 0000000000000003
[  915.852947][ T4559] RBP: 00007f19547da090 R08: 0000000000000000 R09: 0000000000000000
[  915.852958][ T4559] R10: 0000000000002120 R11: 0000000000000246 R12: 0000000000000001
[  915.852970][ T4559] R13: 00007f1953c16038 R14: 00007f1953c15fa0 R15: 00007ffe3e76c538
[  915.853000][ T4559]  </TASK>
[  916.126298][ T4569] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  916.227701][ T4564] netlink: 'syz.1.8098': attribute type 1 has an invalid length.
[  916.533011][ T4564] 8021q: adding VLAN 0 to HW filter on device bond15
[  916.660179][ T4570] : entered promiscuous mode
[  916.665302][ T4586] tipc: Started in network mode
[  916.676513][ T4586] tipc: Node identity 6e7bdf863472, cluster identity 4711
[  916.708286][ T4586] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  916.726591][ T4588] syzkaller0: entered promiscuous mode
[  916.735412][ T4588] syzkaller0: entered allmulticast mode
[  916.767340][ T4582] tipc: Resetting bearer <eth:syzkaller0>
[  916.831361][ T4577] tipc: Resetting bearer <eth:syzkaller0>
[  916.898936][ T4577] tipc: Disabling bearer <eth:syzkaller0>
[  916.917178][ T4605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8105'.
[  916.969696][ T4606] sit0: entered promiscuous mode
[  916.974682][ T4606] sit0: left allmulticast mode
[  917.026923][ T4606] netlink: 'syz.4.8104': attribute type 1 has an invalid length.
[  917.056769][ T4606] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8104'.
[  917.085613][ T4601] delete_channel: no stack
[  917.289452][ T4623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8112'.
[  917.488860][ T4630] syzkaller0: entered promiscuous mode
[  917.511484][ T4630] syzkaller0: entered allmulticast mode
[  917.539386][ T4630] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.8114'.
[  917.585673][ T4640] netlink: 'syz.3.8119': attribute type 9 has an invalid length.
[  917.640075][ T4635] wg1 speed is unknown, defaulting to 1000
[  917.941526][ T4635] lo speed is unknown, defaulting to 1000
[  918.091933][ T4659] FAULT_INJECTION: forcing a failure.
[  918.091933][ T4659] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  918.105290][ T4659] CPU: 0 UID: 0 PID: 4659 Comm: syz.3.8123 Not tainted syzkaller #0 PREEMPT(full) 
[  918.105315][ T4659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  918.105326][ T4659] Call Trace:
[  918.105334][ T4659]  <TASK>
[  918.105342][ T4659]  dump_stack_lvl+0xe8/0x150
[  918.105372][ T4659]  should_fail_ex+0x412/0x560
[  918.105403][ T4659]  _copy_to_iter+0x404/0x17d0
[  918.105427][ T4659]  ? do_raw_spin_lock+0x12b/0x2f0
[  918.105455][ T4659]  ? __pfx__copy_to_iter+0x10/0x10
[  918.105474][ T4659]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  918.105501][ T4659]  ? lockdep_hardirqs_on+0x7a/0x110
[  918.105519][ T4659]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  918.105543][ T4659]  ? __skb_try_recv_datagram+0x3d4/0x4d0
[  918.105577][ T4659]  __skb_datagram_iter+0xf8/0x980
[  918.105596][ T4659]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  918.105623][ T4659]  skb_copy_datagram_iter+0xb5/0x270
[  918.105645][ T4659]  netlink_recvmsg+0x2c3/0xa50
[  918.105669][ T4659]  ? __lock_acquire+0x6b5/0x2cf0
[  918.105699][ T4659]  ? __pfx_netlink_recvmsg+0x10/0x10
[  918.105736][ T4659]  ? __pfx_netlink_recvmsg+0x10/0x10
[  918.105760][ T4659]  sock_recvmsg_nosec+0x10c/0x140
[  918.105784][ T4659]  ____sys_recvmsg+0x3e3/0x4a0
[  918.105818][ T4659]  ? __pfx_____sys_recvmsg+0x10/0x10
[  918.105859][ T4659]  ? import_iovec+0x73/0xa0
[  918.105883][ T4659]  ___sys_recvmsg+0x215/0x590
[  918.105906][ T4659]  ? __lock_acquire+0x6b5/0x2cf0
[  918.105934][ T4659]  ? __pfx____sys_recvmsg+0x10/0x10
[  918.105994][ T4659]  do_recvmmsg+0x334/0x800
[  918.106019][ T4659]  ? __pfx_do_recvmmsg+0x10/0x10
[  918.106056][ T4659]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  918.106097][ T4659]  __x64_sys_recvmmsg+0x198/0x250
[  918.106118][ T4659]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  918.106148][ T4659]  do_syscall_64+0x14d/0xf80
[  918.106165][ T4659]  ? trace_irq_disable+0x3b/0x150
[  918.106181][ T4659]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.106199][ T4659]  ? clear_bhb_loop+0x40/0x90
[  918.106222][ T4659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.106240][ T4659] RIP: 0033:0x7fbdae59c819
[  918.106256][ T4659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  918.106272][ T4659] RSP: 002b:00007fbdaf3a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  918.106291][ T4659] RAX: ffffffffffffffda RBX: 00007fbdae815fa0 RCX: 00007fbdae59c819
[  918.106305][ T4659] RDX: 0000000000000004 RSI: 0000200000005c40 RDI: 0000000000000003
[  918.106321][ T4659] RBP: 00007fbdaf3a9090 R08: 0000000000000000 R09: 0000000000000000
[  918.106332][ T4659] R10: 0000000000002120 R11: 0000000000000246 R12: 0000000000000001
[  918.106344][ T4659] R13: 00007fbdae816038 R14: 00007fbdae815fa0 R15: 00007ffc5007fbf8
[  918.106375][ T4659]  </TASK>
[  918.602748][ T4642] bond0: Caught tx_queue_len zero misconfig
[  919.821038][ T4718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8139'.
[  919.855478][ T4718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8139'.
[  919.886880][ T4718] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8139'.
[  919.938444][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8140'.
[  920.296961][ T4732] netlink: 45 bytes leftover after parsing attributes in process `syz.4.8144'.
[  920.376505][ T4735] netlink: 'syz.3.8145': attribute type 10 has an invalid length.
[  920.514508][ T4742] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  920.587446][ T4746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8146'.
[  920.806488][ T4753] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8149'.
[  920.866360][ T4754] netem: incorrect ge model size
[  920.887163][ T4754] netem: change failed
[  920.969707][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8150'.
[  921.021374][ T4762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8152'.
[  921.373746][ T4785] xt_CT: You must specify a L4 protocol and not use inversions on it
[  921.487494][ T4787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8159'.
[  921.790327][ T4815] netlink: 'syz.3.8167': attribute type 3 has an invalid length.
[  921.824207][ T4817] syzkaller0: entered promiscuous mode
[  921.857594][ T4817] syzkaller0: entered allmulticast mode
[  922.853099][ T4864] bond3: (slave dummy0): Releasing active interface
[  922.882132][ T4864] bridge_slave_0: left promiscuous mode
[  922.897062][ T4864] bridge0: port 1(bridge_slave_0) entered disabled state
[  922.915830][ T4864] bridge_slave_1: left promiscuous mode
[  922.936928][ T4864] bridge0: port 2(bridge_slave_1) entered disabled state
[  922.991229][ T4864] bond0: (slave bond_slave_0): Releasing backup interface
[  923.056073][ T4864] bond0: (slave bond_slave_1): Releasing backup interface
[  923.096074][ T4864] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  923.777017][ T4918] bond0: Caught tx_queue_len zero misconfig
[  923.818629][ T4919] ip6tnl0: Caught tx_queue_len zero misconfig
[  923.871850][ T4922] wg1 speed is unknown, defaulting to 1000
[  924.116956][ T4922] lo speed is unknown, defaulting to 1000
[  924.164539][ T4937] netlink: 'syz.2.8202': attribute type 10 has an invalid length.
[  924.198768][ T4937] 8021q: adding VLAN 0 to HW filter on device team0
[  924.221490][ T4937] team0: entered allmulticast mode
[  924.234841][ T4937] team_slave_1: entered allmulticast mode
[  924.250658][ T4937] bond0: (slave team0): Enslaving as an active interface with an up link
[  924.916353][ T4960] __nla_validate_parse: 6 callbacks suppressed
[  924.916371][ T4960] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8207'.
[  924.977713][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8207'.
[  925.128666][ T4976] wg1 speed is unknown, defaulting to 1000
[  925.723594][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8220'.
[  925.742799][ T4976] lo speed is unknown, defaulting to 1000
[  925.749665][ T5008] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8220'.
[  925.780507][ T5008] netlink: 348 bytes leftover after parsing attributes in process `syz.4.8220'.
[  925.807885][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8220'.
[  925.817439][ T5008] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8220'.
[  925.826384][ T5008] netlink: 348 bytes leftover after parsing attributes in process `syz.4.8220'.
[  925.857072][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8220'.
[  925.983461][ T5020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8224'.
[  926.019416][ T5022] xt_hashlimit: size too large, truncated to 1048576
[  926.537356][ T5050] netlink: 'syz.0.8230': attribute type 15 has an invalid length.
[  926.549067][ T5052] netlink: 'syz.2.8231': attribute type 32 has an invalid length.
[  926.889148][ T5070] netlink: 'syz.4.8234': attribute type 21 has an invalid length.
[  926.923947][ T5068] vxcan4: entered allmulticast mode
[  926.952682][ T5070] netlink: 'syz.4.8234': attribute type 5 has an invalid length.
[  927.176803][ T5078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  927.210569][ T5080] netlink: 'syz.2.8239': attribute type 3 has an invalid length.
[  927.289690][ T5087] ip6tnl0: Caught tx_queue_len zero misconfig
[  927.489667][ T5097] wg1 speed is unknown, defaulting to 1000
[  927.658836][ T5111] wg1 speed is unknown, defaulting to 1000
[  927.784587][ T5122] wg1 speed is unknown, defaulting to 1000
[  927.916249][ T5097] lo speed is unknown, defaulting to 1000
[  928.319067][ T5145] wg1 speed is unknown, defaulting to 1000
[  928.447842][ T5111] lo speed is unknown, defaulting to 1000
[  929.125928][ T5168] bridge3: port 1(erspan0) entered disabled state
[  929.138506][ T5145] lo speed is unknown, defaulting to 1000
[  929.248796][ T5179] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  929.289278][  T958] block nbd1: Receive control failed (result -1)
[  929.690511][ T5122] lo speed is unknown, defaulting to 1000
[  929.964388][ T5193] dummy0: mtu less than device minimum
[  930.320147][ T5199] mac80211_hwsim hwsim92 syzkaller0: left promiscuous mode
[  931.313451][ T5242] dummy0: mtu less than device minimum
[  932.168837][ T5280] __nla_validate_parse: 13 callbacks suppressed
[  932.168855][ T5280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8286'.
[  932.205290][ T5273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8283'.
[  932.439391][ T5292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  932.984038][ T5320] dummy0: mtu less than device minimum
[  933.121948][ T5331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  933.148742][ T5331] syzkaller0: entered promiscuous mode
[  933.174415][ T5331] syzkaller0: entered allmulticast mode
[  933.314898][ T5323] tipc: Resetting bearer <eth:syzkaller0>
[  933.360702][ T5323] tipc: Disabling bearer <eth:syzkaller0>
[  933.435303][ T5346] netlink: 'syz.4.8305': attribute type 1 has an invalid length.
[  933.520450][ T5346] 8021q: adding VLAN 0 to HW filter on device bond4
[  933.610423][ T5352] wg1 speed is unknown, defaulting to 1000
[  933.632508][ T5346] vlan0: entered promiscuous mode
[  933.654625][ T5346] bridge0: entered promiscuous mode
[  933.794592][ T5348] bond4: (slave veth7): Enslaving as an active interface with a down link
[  933.820531][ T5354] 8021q: adding VLAN 0 to HW filter on device batadv0
[  933.833322][ T5354] bond4: (slave batadv0): making interface the new active one
[  933.843228][ T5354] batadv0: entered promiscuous mode
[  933.849835][ T5354] bond4: (slave batadv0): Enslaving as an active interface with an up link
[  933.897741][ T5365] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8309'.
[  933.966080][ T5368] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  934.047224][ T5376] dummy0: mtu less than device minimum
[  934.154328][ T5378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8314'.
[  934.157356][ T5352] lo speed is unknown, defaulting to 1000
[  934.222050][ T5378] bridge0: port 3(syz_tun) entered blocking state
[  934.239955][ T5378] bridge0: port 3(syz_tun) entered disabled state
[  934.253955][ T5378] syz_tun: entered allmulticast mode
[  934.396463][ T5388] netlink: 'syz.3.8317': attribute type 6 has an invalid length.
[  934.521926][ T5392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8319'.
[  934.574115][ T5396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8321'.
[  934.625867][ T5397] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8321'.
[  934.641157][ T5392] bridge3: entered promiscuous mode
[  934.658416][ T5392] bridge3: port 1(macvtap2) entered blocking state
[  934.667482][ T5392] bridge3: port 1(macvtap2) entered disabled state
[  934.687367][ T5392] macvtap2: entered allmulticast mode
[  934.692763][ T5392] bridge3: entered allmulticast mode
[  934.719364][ T5392] macvtap2: left allmulticast mode
[  934.724642][ T5392] bridge3: left allmulticast mode
[  934.733171][ T5392] bridge3: left promiscuous mode
[  934.779159][ T5398] mac80211_hwsim hwsim92 syzkaller0: entered promiscuous mode
[  934.786901][ T5398] mac80211_hwsim hwsim92 syzkaller0: entered allmulticast mode
[  934.802457][ T5400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8320'.
[  934.815415][ T5400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8320'.
[  934.832684][ T5400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8320'.
[  934.873211][ T5400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  935.557631][ T5433] dummy0: mtu less than device minimum
[  935.985235][ T5451] netlink: 'syz.3.8338': attribute type 19 has an invalid length.
[  936.014920][ T5451] netlink: 'syz.3.8338': attribute type 20 has an invalid length.
[  936.391604][ T5470] wg1 speed is unknown, defaulting to 1000
[  936.785863][ T5470] lo speed is unknown, defaulting to 1000
[  936.927962][ T5513] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001
[  937.091838][ T5525] syzkaller0: entered promiscuous mode
[  937.104096][ T5525] syzkaller0: entered allmulticast mode
[  937.290116][ T5530] bridge8: entered promiscuous mode
[  937.295559][ T5530] bridge8: entered allmulticast mode
[  937.449589][ T5546] netlink: 'syz.2.8366': attribute type 39 has an invalid length.
[  939.039769][ T5554] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  939.193515][ T5566] __nla_validate_parse: 19 callbacks suppressed
[  939.193533][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8367'.
[  939.219599][ T5566] nbd: must specify a size in bytes for the device
[  939.279574][ T5570] syzkaller0: entered promiscuous mode
[  939.285075][ T5570] syzkaller0: entered allmulticast mode
[  939.601032][ T5583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8375'.
[  940.040016][ T5616] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8383'.
[  940.074727][ T5618] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.8386'.
[  940.342382][ T5633] bond0: (slave macvlan0): Error -98 calling set_mac_address
[  940.715714][ T5664] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  941.315499][ T5685] netlink: 'syz.2.8404': attribute type 51 has an invalid length.
[  941.331024][ T5685] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  941.772725][ T5700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8407'.
[  942.100313][ T5707] mac80211_hwsim hwsim92 syzkaller0: left promiscuous mode
[  942.116830][ T5707] mac80211_hwsim hwsim92 syzkaller0: left allmulticast mode
[  942.213400][ T5713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8411'.
[  942.248198][ T5710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8411'.
[  942.258091][ T5715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8412'.
[  942.401446][ T5726] netlink: 'syz.0.8413': attribute type 3 has an invalid length.
[  942.570533][ T5724] gre2: entered promiscuous mode
[  942.580503][ T5730] delete_channel: no stack
[  942.893194][ T5756] 0: reclassify loop, rule prio 0, protocol 700
[  942.933252][ T5758] FAULT_INJECTION: forcing a failure.
[  942.933252][ T5758] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  942.948370][ T5758] CPU: 1 UID: 0 PID: 5758 Comm: syz.3.8423 Not tainted syzkaller #0 PREEMPT(full) 
[  942.948385][ T5758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  942.948392][ T5758] Call Trace:
[  942.948397][ T5758]  <TASK>
[  942.948402][ T5758]  dump_stack_lvl+0xe8/0x150
[  942.948422][ T5758]  should_fail_ex+0x412/0x560
[  942.948442][ T5758]  _copy_from_user+0x2d/0xb0
[  942.948455][ T5758]  ___sys_sendmsg+0x1c6/0x360
[  942.948475][ T5758]  ? __pfx____sys_sendmsg+0x10/0x10
[  942.948526][ T5758]  ? __fget_files+0x2a/0x420
[  942.948544][ T5758]  ? __fget_files+0x3a0/0x420
[  942.948566][ T5758]  __x64_sys_sendmsg+0x1bd/0x2a0
[  942.948583][ T5758]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  942.948602][ T5758]  ? __pfx_ksys_write+0x10/0x10
[  942.948619][ T5758]  do_syscall_64+0x14d/0xf80
[  942.948629][ T5758]  ? trace_irq_disable+0x3b/0x150
[  942.948639][ T5758]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.948649][ T5758]  ? clear_bhb_loop+0x40/0x90
[  942.948661][ T5758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.948671][ T5758] RIP: 0033:0x7fbdae59c819
[  942.948682][ T5758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  942.948691][ T5758] RSP: 002b:00007fbdaf3a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  942.948702][ T5758] RAX: ffffffffffffffda RBX: 00007fbdae815fa0 RCX: 00007fbdae59c819
[  942.948709][ T5758] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 000000000000000a
[  942.948716][ T5758] RBP: 00007fbdaf3a9090 R08: 0000000000000000 R09: 0000000000000000
[  942.948722][ T5758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  942.948728][ T5758] R13: 00007fbdae816038 R14: 00007fbdae815fa0 R15: 00007ffc5007fbf8
[  942.948744][ T5758]  </TASK>
[  943.264115][ T5764] veth9: entered allmulticast mode
[  943.299665][ T5769] netlink: 200 bytes leftover after parsing attributes in process `syz.4.8427'.
[  943.413035][ T5781] bond9: option lacp_active: invalid value (8)
[  943.416614][ T5784] netlink: 'syz.4.8429': attribute type 4 has an invalid length.
[  943.459250][ T5781] bond9 (unregistering): Released all slaves
[  943.495221][ T5791] netlink: 'syz.4.8429': attribute type 4 has an invalid length.
[  943.512541][ T5790] bridge_slave_0 (unregistering): left allmulticast mode
[  943.520436][ T5790] bridge_slave_0 (unregistering): left promiscuous mode
[  943.530041][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.640669][ T5796] netlink: 'syz.2.8432': attribute type 13 has an invalid length.
[  943.649611][ T5796] netlink: 'syz.2.8432': attribute type 17 has an invalid length.
[  943.702956][ T5796] bridge0: left promiscuous mode
[  943.713387][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0
[  943.725511][ T5796] 8021q: adding VLAN 0 to HW filter on device team0
[  943.735953][ T5796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  943.853140][ T5806] 0: reclassify loop, rule prio 0, protocol 700
[  943.912047][ T5812] syzkaller0: entered promiscuous mode
[  943.920274][ T5812] syzkaller0: entered allmulticast mode
[  944.897566][ T3514] batadv0: left promiscuous mode
[  946.308503][ T5771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  946.458122][ T5828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8441'.
[  946.463370][ T5832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8441'.
[  946.479432][ T5834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8440'.
[  946.492137][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8441'.
[  946.502183][ T5832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8441'.
[  946.528533][ T5826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8442'.
[  946.558651][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8444'.
[  946.576228][ T5826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8442'.
[  946.627699][ T5844] netlink: 'syz.1.8445': attribute type 62 has an invalid length.
[  946.695152][ T5848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8447'.
[  946.867841][ T5864] netlink: 'syz.0.8452': attribute type 39 has an invalid length.
[  946.921253][ T5872] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  946.981193][ T5876] netlink: 'syz.2.8453': attribute type 3 has an invalid length.
[  947.022178][ T5868] netlink: 'syz.2.8453': attribute type 1 has an invalid length.
[  947.110756][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8454'.
[  947.200491][ T5889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  947.273080][ T5896] netlink: 'syz.0.8459': attribute type 13 has an invalid length.
[  947.344770][ T5899] mac80211_hwsim hwsim92 syzkaller0: entered promiscuous mode
[  947.355858][ T5899] mac80211_hwsim hwsim92 syzkaller0: entered allmulticast mode
[  947.481595][ T5911] mac80211_hwsim hwsim99 syzkaller0: entered promiscuous mode
[  947.530352][ T5911] mac80211_hwsim hwsim99 syzkaller0: entered allmulticast mode
[  947.579500][ T5908] mac80211_hwsim hwsim99 syzkaller0: Caught tx_queue_len zero misconfig
[  947.606253][ T5917] netlink: 'syz.1.8465': attribute type 2 has an invalid length.
[  947.763299][ T5928] mac80211_hwsim hwsim99 syzkaller0: left promiscuous mode
[  947.775090][ T5928] mac80211_hwsim hwsim99 syzkaller0: left allmulticast mode
[  947.832331][ T5935] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  947.849590][ T5937] netlink: 'syz.0.8472': attribute type 3 has an invalid length.
[  947.934400][ T5946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  947.941696][ T5946] IPv6: NLM_F_CREATE should be set when creating new route
[  948.024900][ T5951] netlink: 'syz.3.8477': attribute type 9 has an invalid length.
[  948.596346][ T5979] 0: reclassify loop, rule prio 0, protocol 700
[  949.009235][ T6003] pimreg: entered allmulticast mode
[  949.015215][ T6006] mac80211_hwsim hwsim99 syzkaller0: entered promiscuous mode
[  949.024100][ T6006] mac80211_hwsim hwsim99 syzkaller0: entered allmulticast mode
[  949.058802][ T5999] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  949.070203][ T5999] bond9 (unregistering): Released all slaves
[  949.087666][ T6003] pimreg: left allmulticast mode
[  949.470586][ T6031] openvswitch: netlink: IP tunnel dst address not specified
[  949.499661][ T6033] mac80211_hwsim hwsim92 syzkaller0: left promiscuous mode
[  949.520006][ T6033] mac80211_hwsim hwsim92 syzkaller0: left allmulticast mode
[  949.641658][ T6044] FAULT_INJECTION: forcing a failure.
[  949.641658][ T6044] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  949.701797][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.3.8503 Not tainted syzkaller #0 PREEMPT(full) 
[  949.701823][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  949.701834][ T6044] Call Trace:
[  949.701841][ T6044]  <TASK>
[  949.701849][ T6044]  dump_stack_lvl+0xe8/0x150
[  949.701879][ T6044]  should_fail_ex+0x412/0x560
[  949.701909][ T6044]  _copy_to_user+0x31/0xb0
[  949.701933][ T6044]  simple_read_from_buffer+0xe1/0x170
[  949.701962][ T6044]  proc_fail_nth_read+0x1bb/0x230
[  949.701989][ T6044]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  949.702017][ T6044]  ? rw_verify_area+0x2a6/0x4d0
[  949.702037][ T6044]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  949.702063][ T6044]  vfs_read+0x20c/0xa70
[  949.702082][ T6044]  ? fdget_pos+0x246/0x320
[  949.702103][ T6044]  ? __pfx___mutex_lock+0x10/0x10
[  949.702123][ T6044]  ? __pfx_vfs_read+0x10/0x10
[  949.702144][ T6044]  ? __fget_files+0x2a/0x420
[  949.702170][ T6044]  ? __fget_files+0x3a0/0x420
[  949.702186][ T6044]  ? __fget_files+0x2a/0x420
[  949.702210][ T6044]  ksys_read+0x150/0x270
[  949.702233][ T6044]  ? __pfx_ksys_read+0x10/0x10
[  949.702265][ T6044]  do_syscall_64+0x14d/0xf80
[  949.702282][ T6044]  ? trace_irq_disable+0x3b/0x150
[  949.702297][ T6044]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  949.702315][ T6044]  ? clear_bhb_loop+0x40/0x90
[  949.702336][ T6044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  949.702353][ T6044] RIP: 0033:0x7fbdae55d04e
[  949.702369][ T6044] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  949.702385][ T6044] RSP: 002b:00007fbdaf3a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  949.702403][ T6044] RAX: ffffffffffffffda RBX: 00007fbdaf3a96c0 RCX: 00007fbdae55d04e
[  949.702415][ T6044] RDX: 000000000000000f RSI: 00007fbdaf3a90a0 RDI: 000000000000000b
[  949.702426][ T6044] RBP: 00007fbdaf3a9090 R08: 0000000000000000 R09: 0000000000000000
[  949.702437][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  949.702447][ T6044] R13: 00007fbdae816038 R14: 00007fbdae815fa0 R15: 00007ffc5007fbf8
[  949.702478][ T6044]  </TASK>
[  950.182983][ T6058] hsr0: left allmulticast mode
[  950.187913][ T6058] hsr_slave_0: left allmulticast mode
[  950.201561][ T6058] hsr_slave_1: left allmulticast mode
[  950.365625][ T6092] lo: left allmulticast mode
[  950.377614][ T6092] tunl0: left allmulticast mode
[  950.382629][ T6092] gre0: left allmulticast mode
[  950.388952][ T6092] gretap0: left allmulticast mode
[  950.395412][ T6092] erspan0: left allmulticast mode
[  950.401924][ T6092] ip_vti0: left allmulticast mode
[  950.408237][ T6092] ip6_vti0: left allmulticast mode
[  950.413903][ T6092] sit0: left promiscuous mode
[  950.473949][ T6092] ip6tnl0: left allmulticast mode
[  950.480902][ T6092] ip6gre0: left allmulticast mode
[  950.488670][ T6092] syz_tun: left allmulticast mode
[  950.493868][ T6092] ip6gretap0: left allmulticast mode
[  950.499570][ T6092] vcan0: left allmulticast mode
[  950.504665][ T6092] bond0: left allmulticast mode
[  950.510185][ T6092] nlmon0: left allmulticast mode
[  950.515338][ T6092] caif0: left allmulticast mode
[  950.520579][ T6092] vxcan0: left allmulticast mode
[  950.526382][ T6092] vxcan1: left allmulticast mode
[  950.532392][ T6092] veth0: left allmulticast mode
[  950.538180][ T6092] veth1: left allmulticast mode
[  950.543340][ T6092] wg0: left allmulticast mode
[  950.548519][ T6092] wg1: left allmulticast mode
[  950.553465][ T6092] wg2: left allmulticast mode
[  950.558444][ T6092] veth0_to_bridge: left allmulticast mode
[  950.564569][ T6092] veth1_to_bridge: left allmulticast mode
[  950.571195][ T6092] bridge_slave_1: left allmulticast mode
[  950.577309][ T6092] veth0_to_bond: left allmulticast mode
[  950.583082][ T6092] bond_slave_0: left allmulticast mode
[  950.589697][ T6092] veth1_to_bond: left allmulticast mode
[  950.597691][ T6092] bond_slave_1: left allmulticast mode
[  950.603314][ T6092] veth0_to_team: left allmulticast mode
[  950.609262][ T6092] team_slave_0: left allmulticast mode
[  950.614840][ T6092] veth1_to_team: left allmulticast mode
[  950.620612][ T6092] team_slave_1: left allmulticast mode
[  950.626205][ T6092] veth1_to_batadv: left allmulticast mode
[  950.632363][ T6092] batadv_slave_1: left allmulticast mode
[  950.638467][ T6092] xfrm0: left allmulticast mode
[  950.643463][ T6092] veth0_to_hsr: left allmulticast mode
[  950.649803][ T6092] veth1_to_hsr: left allmulticast mode
[  950.655425][ T6092] .70·: left allmulticast mode
[  950.660282][ T6092] hsr_slave_0: left allmulticast mode
[  950.665662][ T6092] hsr_slave_1: left allmulticast mode
[  950.671739][ T6092] veth1_virt_wifi: left allmulticast mode
[  950.678171][ T6092] veth0_virt_wifi: left allmulticast mode
[  950.683992][ T6092] virt_wifi0: left allmulticast mode
[  950.689878][ T6092] veth1_macvtap: left allmulticast mode
[  950.696495][ T6092] veth0_macvtap: left allmulticast mode
[  950.702449][ T6092] macsec0: left allmulticast mode
[  950.707901][ T6092] geneve0: left allmulticast mode
[  950.713281][ T6092] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  950.722411][ T6092] netdevsim netdevsim4 netdevsim1: left allmulticast mode
[  950.730606][ T6092] netdevsim netdevsim4 netdevsim2: left allmulticast mode
[  950.738095][ T6092] netdevsim netdevsim4 netdevsim3: left allmulticast mode
[  950.745862][ T6092] mac80211_hwsim hwsim101 wlan0: left allmulticast mode
[  950.753347][ T6092] mac80211_hwsim hwsim102 wlan1: left allmulticast mode
[  950.760601][ T6092] vlan2: left allmulticast mode
[  950.765753][ T6092] geneve1: left allmulticast mode
[  950.772043][ T6092] ip6gretap1: left allmulticast mode
[  950.777725][ T6092] gtp0: left allmulticast mode
[  950.782941][ T6092] macvtap1: left allmulticast mode
[  950.788696][ T6092] veth2: left allmulticast mode
[  950.793681][ T6092] veth3: left allmulticast mode
[  950.798776][ T6092] geneve2: left allmulticast mode
[  950.803937][ T6092] vlan3: left allmulticast mode
[  950.809436][ T6092] bridge0: left allmulticast mode
[  950.814565][ T6092] bridge1: left allmulticast mode
[  950.819937][ T6092] geneve3: left allmulticast mode
[  950.825117][ T6092] bond1: left allmulticast mode
[  950.830354][ T6092] bridge2: left allmulticast mode
[  950.835456][ T6092] ip6tnl1: left allmulticast mode
[  950.840695][ T6092] sit1: left allmulticast mode
[  950.845539][ T6092] macvlan2: left allmulticast mode
[  950.851155][ T6092] bond2: left allmulticast mode
[  950.856101][ T6092] syztnl1: left allmulticast mode
[  950.861362][ T6092] vxlan0: left allmulticast mode
[  950.866430][ T6092] vxcan2: left allmulticast mode
[  950.871725][ T6092] vxcan3: left allmulticast mode
[  950.876867][ T6092] ip6gre1: left allmulticast mode
[  950.897956][ T6096] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  951.125603][ T6109] sctp: [Deprecated]: syz.3.8521 (pid 6109) Use of int in maxseg socket option.
[  951.125603][ T6109] Use struct sctp_assoc_value instead
[  951.521503][ T6152] wg1 speed is unknown, defaulting to 1000
[  951.607733][ T6160] __nla_validate_parse: 15 callbacks suppressed
[  951.607752][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8535'.
[  951.712066][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8532'.
[  951.720393][ T6171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8535'.
[  951.728924][  T958] block nbd2: Receive control failed (result -1)
[  951.760367][ T6173] netlink: 'syz.4.8538': attribute type 29 has an invalid length.
[  951.852491][ T6181] netlink: 580 bytes leftover after parsing attributes in process `syz.4.8538'.
[  951.876579][ T6176] 0: reclassify loop, rule prio 0, protocol 700
[  951.891384][ T6173] netlink: 'syz.4.8538': attribute type 29 has an invalid length.
[  951.922684][ T6181] bridge4: the hash_elasticity option has been deprecated and is always 16
[  951.943586][ T6181] bridge4: entered allmulticast mode
[  952.096567][ T6152] lo speed is unknown, defaulting to 1000
[  952.163506][ T6188] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  952.188274][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8543'.
[  952.266865][ T6191] sctp: [Deprecated]: syz.1.8544 (pid 6191) Use of int in maxseg socket option.
[  952.266865][ T6191] Use struct sctp_assoc_value instead
[  952.344504][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8545'.
[  952.360210][ T6195] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  952.694736][ T6211] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8548'.
[  952.954662][ T6221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  952.988090][ T6221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.060234][ T6221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.089982][ T6221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.117206][ T6221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.131377][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.193435][T18901] 0: reclassify loop, rule prio 0, protocol 700
[  953.432474][ T6240] netlink: 'syz.2.8556': attribute type 1 has an invalid length.
[  953.739081][ T6257] netlink: 'syz.2.8559': attribute type 25 has an invalid length.
[  953.755182][ T6257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8559'.
[  953.791430][ T6257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8559'.
[  953.800807][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8559'.
[  953.823189][ T6257] netlink: 'syz.2.8559': attribute type 25 has an invalid length.
[  954.314785][ T6297] Cannot find set identified by id 3 to match
[  954.635975][ T6311] xt_hashlimit: size too large, truncated to 1048576
[  954.952897][ T6325] tunl0: Caught tx_queue_len zero misconfig
[  954.965058][ T6325] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  954.986218][ T6325] mac80211_hwsim hwsim99 syzkaller0: left promiscuous mode
[  954.993688][ T6325] mac80211_hwsim hwsim99 syzkaller0: left allmulticast mode
[  955.260052][ T6336] netlink: 'syz.0.8581': attribute type 21 has an invalid length.
[  955.270014][ T6336] xt_CONNSECMARK: invalid mode: 254
[  955.441636][ T6339] mac80211_hwsim hwsim99 syzkaller0: entered promiscuous mode
[  955.454641][ T6339] mac80211_hwsim hwsim99 syzkaller0: entered allmulticast mode
[  955.523938][ T6346] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  955.655990][ T6355] veth0_to_batadv: entered promiscuous mode
[  955.662653][ T6355] veth0_to_batadv: entered allmulticast mode
[  955.978127][ T6366] netlink: 'syz.0.8591': attribute type 1 has an invalid length.
[  956.076510][ T6370] 
[  956.078866][ T6370] ======================================================
[  956.085884][ T6370] WARNING: possible circular locking dependency detected
[  956.092919][ T6370] syzkaller #0 Not tainted
[  956.097331][ T6370] ------------------------------------------------------
[  956.104339][ T6370] syz.1.8593/6370 is trying to acquire lock:
[  956.110326][ T6370] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650
[  956.119493][ T6370] 
[  956.119493][ T6370] but task is already holding lock:
[  956.126861][ T6370] ffff888024228f80 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  956.136377][ T6370] 
[  956.136377][ T6370] which lock already depends on the new lock.
[  956.136377][ T6370] 
[  956.146789][ T6370] 
[  956.146789][ T6370] the existing dependency chain (in reverse order) is:
[  956.155808][ T6370] 
[  956.155808][ T6370] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[  956.163393][ T6370]        __might_fault+0xcb/0x130
[  956.168433][ T6370]        _copy_from_user+0x28/0xb0
[  956.173543][ T6370]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[  956.180041][ T6370]        ip_generic_getfrag+0x149/0x2d0
[  956.185588][ T6370]        __ip6_append_data+0x39e4/0x3f70
[  956.191217][ T6370]        ip6_append_data+0x10f/0x280
[  956.196503][ T6370]        rawv6_sendmsg+0x12d3/0x18e0
[  956.201784][ T6370]        ____sys_sendmsg+0x80a/0x9f0
[  956.207075][ T6370]        ___sys_sendmsg+0x2a5/0x360
[  956.212275][ T6370]        __x64_sys_sendmsg+0x1bd/0x2a0
[  956.217729][ T6370]        do_syscall_64+0x14d/0xf80
[  956.222832][ T6370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.229236][ T6370] 
[  956.229236][ T6370] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  956.236963][ T6370]        lock_sock_nested+0x41/0x100
[  956.242240][ T6370]        inet_shutdown+0x6a/0x390
[  956.247279][ T6370]        nbd_mark_nsock_dead+0x2e9/0x560
[  956.252916][ T6370]        recv_work+0x1c7f/0x1d90
[  956.257861][ T6370]        process_scheduled_works+0xb6e/0x18c0
[  956.263936][ T6370]        worker_thread+0xa53/0xfc0
[  956.269046][ T6370]        kthread+0x388/0x470
[  956.273634][ T6370]        ret_from_fork+0x51e/0xb90
[  956.278745][ T6370]        ret_from_fork_asm+0x1a/0x30
[  956.284065][ T6370] 
[  956.284065][ T6370] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  956.291710][ T6370]        __mutex_lock+0x19f/0x1300
[  956.296827][ T6370]        nbd_queue_rq+0x37b/0x1100
[  956.301947][ T6370]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  956.308025][ T6370]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  956.314874][ T6370]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  956.321379][ T6370]        blk_mq_run_hw_queue+0x348/0x4f0
[  956.327013][ T6370]        blk_mq_dispatch_list+0xd16/0xe10
[  956.332730][ T6370]        blk_mq_flush_plug_list+0x48d/0x570
[  956.338614][ T6370]        __blk_flush_plug+0x3ed/0x4d0
[  956.343982][ T6370]        __submit_bio+0x28d/0x580
[  956.349002][ T6370]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  956.355152][ T6370]        block_read_full_folio+0x599/0x830
[  956.360953][ T6370]        filemap_read_folio+0x137/0x3b0
[  956.366492][ T6370]        do_read_cache_folio+0x358/0x590
[  956.372122][ T6370]        read_part_sector+0xb6/0x2b0
[  956.377400][ T6370]        adfspart_check_ICS+0xa5/0xa40
[  956.382851][ T6370]        bdev_disk_changed+0x7ba/0x1550
[  956.388399][ T6370]        blkdev_get_whole+0x380/0x510
[  956.393764][ T6370]        bdev_open+0x31e/0xd30
[  956.398535][ T6370]        blkdev_open+0x470/0x610
[  956.403473][ T6370]        do_dentry_open+0x785/0x14e0
[  956.408757][ T6370]        vfs_open+0x3b/0x340
[  956.413344][ T6370]        path_openat+0x2e08/0x3860
[  956.418445][ T6370]        do_file_open+0x23e/0x4a0
[  956.423458][ T6370]        do_sys_openat2+0x113/0x200
[  956.428647][ T6370]        __x64_sys_openat+0x138/0x170
[  956.434012][ T6370]        do_syscall_64+0x14d/0xf80
[  956.439110][ T6370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.445514][ T6370] 
[  956.445514][ T6370] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  956.452710][ T6370]        __mutex_lock+0x19f/0x1300
[  956.457810][ T6370]        nbd_queue_rq+0xc6/0x1100
[  956.462822][ T6370]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  956.468886][ T6370]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  956.475727][ T6370]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  956.482215][ T6370]        blk_mq_run_hw_queue+0x348/0x4f0
[  956.487834][ T6370]        blk_mq_dispatch_list+0xd16/0xe10
[  956.493544][ T6370]        blk_mq_flush_plug_list+0x48d/0x570
[  956.499428][ T6370]        __blk_flush_plug+0x3ed/0x4d0
[  956.504787][ T6370]        __submit_bio+0x28d/0x580
[  956.509804][ T6370]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  956.515945][ T6370]        block_read_full_folio+0x599/0x830
[  956.521750][ T6370]        filemap_read_folio+0x137/0x3b0
[  956.527286][ T6370]        do_read_cache_folio+0x358/0x590
[  956.532922][ T6370]        read_part_sector+0xb6/0x2b0
[  956.538205][ T6370]        adfspart_check_ICS+0xa5/0xa40
[  956.543657][ T6370]        bdev_disk_changed+0x7ba/0x1550
[  956.549193][ T6370]        blkdev_get_whole+0x380/0x510
[  956.554553][ T6370]        bdev_open+0x31e/0xd30
[  956.559306][ T6370]        blkdev_open+0x470/0x610
[  956.564235][ T6370]        do_dentry_open+0x785/0x14e0
[  956.569515][ T6370]        vfs_open+0x3b/0x340
[  956.574098][ T6370]        path_openat+0x2e08/0x3860
[  956.579199][ T6370]        do_file_open+0x23e/0x4a0
[  956.584210][ T6370]        do_sys_openat2+0x113/0x200
[  956.589403][ T6370]        __x64_sys_openat+0x138/0x170
[  956.594766][ T6370]        do_syscall_64+0x14d/0xf80
[  956.599860][ T6370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.606264][ T6370] 
[  956.606264][ T6370] -> #3 (set->srcu){.+.+}-{0:0}:
[  956.613375][ T6370]        __synchronize_srcu+0xca/0x300
[  956.618825][ T6370]        elevator_switch+0x1e8/0x7a0
[  956.624097][ T6370]        elevator_change+0x2cc/0x450
[  956.629373][ T6370]        elevator_set_default+0x36c/0x430
[  956.635080][ T6370]        blk_register_queue+0x366/0x430
[  956.640613][ T6370]        __add_disk+0x677/0xd50
[  956.645454][ T6370]        add_disk_fwnode+0xfb/0x480
[  956.650645][ T6370]        nbd_dev_add+0x72c/0xb50
[  956.655569][ T6370]        nbd_init+0x168/0x1f0
[  956.660229][ T6370]        do_one_initcall+0x250/0x8d0
[  956.665509][ T6370]        do_initcall_level+0x104/0x190
[  956.670963][ T6370]        do_initcalls+0x59/0xa0
[  956.675807][ T6370]        kernel_init_freeable+0x2a6/0x3e0
[  956.681515][ T6370]        kernel_init+0x1d/0x1d0
[  956.686353][ T6370]        ret_from_fork+0x51e/0xb90
[  956.691455][ T6370]        ret_from_fork_asm+0x1a/0x30
[  956.696739][ T6370] 
[  956.696739][ T6370] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  956.704544][ T6370]        __mutex_lock+0x19f/0x1300
[  956.709639][ T6370]        elevator_change+0x1b3/0x450
[  956.714912][ T6370]        elevator_set_none+0xb5/0x140
[  956.720268][ T6370]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  956.726592][ T6370]        nbd_start_device+0x17f/0xb10
[  956.731955][ T6370]        nbd_genl_connect+0x165b/0x1cf0
[  956.737494][ T6370]        genl_family_rcv_msg_doit+0x22a/0x330
[  956.743546][ T6370]        genl_rcv_msg+0x61c/0x7a0
[  956.748591][ T6370]        netlink_rcv_skb+0x232/0x4b0
[  956.753878][ T6370]        genl_rcv+0x28/0x40
[  956.758367][ T6370]        netlink_unicast+0x80f/0x9b0
[  956.763649][ T6370]        netlink_sendmsg+0x813/0xb40
[  956.768928][ T6370]        ____sys_sendmsg+0x972/0x9f0
[  956.774214][ T6370]        ___sys_sendmsg+0x2a5/0x360
[  956.779411][ T6370]        __x64_sys_sendmsg+0x1bd/0x2a0
[  956.784869][ T6370]        do_syscall_64+0x14d/0xf80
[  956.789968][ T6370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.796371][ T6370] 
[  956.796371][ T6370] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  956.804968][ T6370]        blk_alloc_queue+0x546/0x680
[  956.810246][ T6370]        __blk_mq_alloc_disk+0x197/0x390
[  956.815881][ T6370]        nbd_dev_add+0x499/0xb50
[  956.820809][ T6370]        nbd_init+0x168/0x1f0
[  956.825471][ T6370]        do_one_initcall+0x250/0x8d0
[  956.830922][ T6370]        do_initcall_level+0x104/0x190
[  956.836373][ T6370]        do_initcalls+0x59/0xa0
[  956.841210][ T6370]        kernel_init_freeable+0x2a6/0x3e0
[  956.846923][ T6370]        kernel_init+0x1d/0x1d0
[  956.851767][ T6370]        ret_from_fork+0x51e/0xb90
[  956.856869][ T6370]        ret_from_fork_asm+0x1a/0x30
[  956.862147][ T6370] 
[  956.862147][ T6370] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  956.869353][ T6370]        __lock_acquire+0x15a5/0x2cf0
[  956.874726][ T6370]        lock_acquire+0xf0/0x2e0
[  956.879673][ T6370]        fs_reclaim_acquire+0x71/0x100
[  956.885130][ T6370]        prepare_alloc_pages+0x152/0x650
[  956.890771][ T6370]        __alloc_frozen_pages_noprof+0x12f/0x380
[  956.897098][ T6370]        alloc_pages_mpol+0x232/0x4a0
[  956.902468][ T6370]        vma_alloc_folio_noprof+0xea/0x210
[  956.908273][ T6370]        do_pte_missing+0x1656/0x3490
[  956.913644][ T6370]        handle_mm_fault+0x1bec/0x3310
[  956.919088][ T6370]        do_user_addr_fault+0x75b/0x1340
[  956.924711][ T6370]        exc_page_fault+0x6a/0xc0
[  956.929729][ T6370]        asm_exc_page_fault+0x26/0x30
[  956.935089][ T6370]        rep_movs_alternative+0x33/0x90
[  956.940626][ T6370]        _copy_to_iter+0x255/0x17d0
[  956.945819][ T6370]        seq_read_iter+0xbf5/0xe10
[  956.950921][ T6370]        do_iter_readv_writev+0x619/0x8c0
[  956.956633][ T6370]        vfs_readv+0x288/0x840
[  956.961392][ T6370]        do_readv+0x154/0x2e0
[  956.966061][ T6370]        do_syscall_64+0x14d/0xf80
[  956.971159][ T6370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.977557][ T6370] 
[  956.977557][ T6370] other info that might help us debug this:
[  956.977557][ T6370] 
[  956.987765][ T6370] Chain exists of:
[  956.987765][ T6370]   fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock
[  956.987765][ T6370] 
[  957.000356][ T6370]  Possible unsafe locking scenario:
[  957.000356][ T6370] 
[  957.007787][ T6370]        CPU0                    CPU1
[  957.013133][ T6370]        ----                    ----
[  957.018489][ T6370]   rlock(&mm->mmap_lock);
[  957.022892][ T6370]                                lock(sk_lock-AF_INET6);
[  957.029902][ T6370]                                lock(&mm->mmap_lock);
[  957.036739][ T6370]   lock(fs_reclaim);
[  957.040717][ T6370] 
[  957.040717][ T6370]  *** DEADLOCK ***
[  957.040717][ T6370] 
[  957.048847][ T6370] 3 locks held by syz.1.8593/6370:
[  957.053947][ T6370]  #0: ffff8880420100f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  957.062991][ T6370]  #1: ffff888046a39e80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[  957.071774][ T6370]  #2: ffff888024228f80 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  957.081684][ T6370] 
[  957.081684][ T6370] stack backtrace:
[  957.087562][ T6370] CPU: 0 UID: 0 PID: 6370 Comm: syz.1.8593 Not tainted syzkaller #0 PREEMPT(full) 
[  957.087592][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  957.087609][ T6370] Call Trace:
[  957.087618][ T6370]  <TASK>
[  957.087626][ T6370]  dump_stack_lvl+0xe8/0x150
[  957.087648][ T6370]  print_circular_bug+0x2e1/0x300
[  957.087673][ T6370]  check_noncircular+0x12e/0x150
[  957.087703][ T6370]  __lock_acquire+0x15a5/0x2cf0
[  957.087726][ T6370]  ? __lock_acquire+0x6b5/0x2cf0
[  957.087747][ T6370]  ? __lock_acquire+0x6b5/0x2cf0
[  957.087767][ T6370]  lock_acquire+0xf0/0x2e0
[  957.087786][ T6370]  ? prepare_alloc_pages+0x152/0x650
[  957.087809][ T6370]  fs_reclaim_acquire+0x71/0x100
[  957.087826][ T6370]  ? prepare_alloc_pages+0x152/0x650
[  957.087845][ T6370]  prepare_alloc_pages+0x152/0x650
[  957.087865][ T6370]  __alloc_frozen_pages_noprof+0x12f/0x380
[  957.087886][ T6370]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  957.087908][ T6370]  ? __pfx_policy_nodemask+0x10/0x10
[  957.087929][ T6370]  ? __lock_acquire+0x6b5/0x2cf0
[  957.087949][ T6370]  alloc_pages_mpol+0x232/0x4a0
[  957.087971][ T6370]  vma_alloc_folio_noprof+0xea/0x210
[  957.087992][ T6370]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  957.088015][ T6370]  do_pte_missing+0x1656/0x3490
[  957.088039][ T6370]  handle_mm_fault+0x1bec/0x3310
[  957.088058][ T6370]  ? handle_mm_fault+0xee/0x3310
[  957.088075][ T6370]  ? __pfx_handle_mm_fault+0x10/0x10
[  957.088095][ T6370]  ? lock_mm_and_find_vma+0xa7/0x340
[  957.088113][ T6370]  do_user_addr_fault+0x75b/0x1340
[  957.088139][ T6370]  exc_page_fault+0x6a/0xc0
[  957.088154][ T6370]  asm_exc_page_fault+0x26/0x30
[  957.088169][ T6370] RIP: 0010:rep_movs_alternative+0x33/0x90
[  957.088190][ T6370] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[  957.088204][ T6370] RSP: 0018:ffffc9000cbe78b8 EFLAGS: 00050202
[  957.088218][ T6370] RAX: 7772202a3a2a2061 RBX: ffff888041d5e000 RCX: 000000000000000a
[  957.088230][ T6370] RDX: 0000000000000000 RSI: ffff888041d5e000 RDI: 0000200000001640
[  957.088241][ T6370] RBP: ffffc9000cbe7a30 R08: ffff888041d5e009 R09: 1ffff110083abc01
[  957.088252][ T6370] R10: dffffc0000000000 R11: ffffed10083abc02 R12: 1ffff9200197cfad
[  957.088264][ T6370] R13: 0000200000001640 R14: ffffc9000cbe7d78 R15: 000000000000000a
[  957.088282][ T6370]  _copy_to_iter+0x255/0x17d0
[  957.088298][ T6370]  ? seq_read_iter+0xb84/0xe10
[  957.088318][ T6370]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  957.088337][ T6370]  ? __pfx__copy_to_iter+0x10/0x10
[  957.088352][ T6370]  ? kernfs_seq_stop+0x17e/0x200
[  957.088372][ T6370]  ? kernfs_put_active+0xa0/0x100
[  957.088395][ T6370]  ? kernfs_seq_stop+0x17e/0x200
[  957.088414][ T6370]  seq_read_iter+0xbf5/0xe10
[  957.088439][ T6370]  do_iter_readv_writev+0x619/0x8c0
[  957.088459][ T6370]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  957.088485][ T6370]  ? rw_verify_area+0x2a6/0x4d0
[  957.088503][ T6370]  vfs_readv+0x288/0x840
[  957.088526][ T6370]  ? __pfx_vfs_readv+0x10/0x10
[  957.088551][ T6370]  ? __fget_files+0x2a/0x420
[  957.088566][ T6370]  ? __fget_files+0x3a0/0x420
[  957.088579][ T6370]  ? __fget_files+0x2a/0x420
[  957.088595][ T6370]  do_readv+0x154/0x2e0
[  957.088616][ T6370]  ? __pfx_do_readv+0x10/0x10
[  957.088639][ T6370]  do_syscall_64+0x14d/0xf80
[  957.088654][ T6370]  ? trace_irq_disable+0x3b/0x150
[  957.088668][ T6370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.088683][ T6370]  ? clear_bhb_loop+0x40/0x90
[  957.088700][ T6370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.088715][ T6370] RIP: 0033:0x7f277cd9c819
[  957.088729][ T6370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  957.088742][ T6370] RSP: 002b:00007f277db82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  957.088757][ T6370] RAX: ffffffffffffffda RBX: 00007f277d015fa0 RCX: 00007f277cd9c819
[  957.088769][ T6370] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004
[  957.088779][ T6370] RBP: 00007f277ce32c91 R08: 0000000000000000 R09: 0000000000000000
[  957.088789][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  957.088799][ T6370] R13: 00007f277d016038 R14: 00007f277d015fa0 R15: 00007ffe1807a688
[  957.088816][ T6370]  </TASK>
[  957.530410][ T6366] bridge7: entered allmulticast mode
[  957.538421][ T6366] bond8: (slave bridge7): Enslaving as a backup interface with an up link
[  957.565813][ T6366] macvlan0: entered promiscuous mode
[  957.571409][ T6366] macvlan0: entered allmulticast mode
[  957.577390][ T6366] bond8: entered promiscuous mode
[  957.582452][ T6366] bridge7: entered promiscuous mode
[  957.588192][ T6366] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  957.596199][ T6366] bond8: left promiscuous mode
[  957.601123][ T6366] bridge7: left promiscuous mode