last executing test programs:

5.017495925s ago: executing program 3 (id=5718):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYBLOB="02fb51998e2a875fb2c0c3a5ba6f3b0781fe75ae6451712e1ca8bee3b6bded5c0622dc7b78212093964b3f79037c782320c9e30be6f6a6d47a411ad264c680a4afd697b0119e702218c296a62b42532d97c6d4d541c74d257bdeb90141efbe41fa4a8f5c93549fa20d9465c94b16daa58390d3e903a699b902bb1b7b4a2d284d22e105156cfc6efa61fb", @ANYRESOCT=r0], 0x34}], 0x1, 0x0, 0x0, 0x8081}, 0x0)
unshare(0x2c020400)
clock_gettime(0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010800000000084)
sendmmsg$inet6(r4, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x80e, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socket$inet(0x2, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x8000000004)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
socket(0x10, 0x803, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

4.919836595s ago: executing program 4 (id=5720):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="044a8707dbd2973969c9a12e34fc2f3a1a8255d99b00e1e360ed92eb72f1c6047413b4e2f0962a14b0152485b186fbe4048e92b90a94ac8d2c993c387d5a856f3a386db4e57a625bf445584c1a2d5590a04ac23a40be29ee38ac900319c2f40724b8f75126174817f4e7932277fd3dbe8d2c22caf290e6dfee5d1ad7ad040acc4613600465660867376c2811b5", 0x8d}], 0x1) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x0, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000880)={@ipv4, <r3=>0x0}, &(0x7f00000008c0)=0x14)
sendmsg$inet(r2, &(0x7f0000000a80)={&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000200)="34db3b0739342c21d702753f3442ab4337ee7884264be79e877a6faaaa69bff1037aeabe60b72a5cec601ccab7fbe4b15d4987a9bb7ab6dc3d1a5fe993f7e66651459720649275dcc32e8e6775326ea81f60c6eebee96673afb41703819bf06c2bc9a15d9ee2a87bbc47616b4763feb9e8bafbe3f7a65d35a7178a0be182cc7d5817988946ceeee114345341abd6aa45cd6c61e93a0381451ec0a64315f5115e7dfcb286ed33d411840fe7bf5f99524971f099ecc5f5f042f45352", 0xbb}, {&(0x7f00000002c0)="45284ee415edb66177ecf4a5cf14350fc9f56d51a6298b3a3b1ef422f3f138179e5076b93c9bf8fd8597565bdf02994c9141e779851ab40022de9c27b99636fac4cf86534749d31dc1d881fd4fe298988fd24a073450fae6617a788e79c58a8d3ae6cb53a0eb8f8cac3a9b1dfc6f791265157d98fafda336fd2e94af0a65410fd65f395a753de1751e064aded0e0f469322cde2a489a41c3da63c42e23121ebed0f0c165de0541e4d4efc533d2059b52171937f87480f10e8da91feff0fd96ad2da5841d9d98a7a2", 0xc8}, {&(0x7f00000003c0)="31965e46328c962bdf1023cb717f6fb63e6a551ff85bf02b5b71ab7042df54dc572a70e544290d8eb71634dbc7cfd4f36770d5514a0b430f7664ada1a8e6866d0903680bab79cc2332e9a37f706b0b9882d169506d8d237adc8cde973f1fb5814f1638498532cca50659875e333d43c045938b929d665336ee9e3e1106263a27b31ca0295972c10c", 0x88}, {&(0x7f0000000480)="6b9e0f52bf60ebadfd6f4594dc164d48b1ff4bc882dfc6e6ed9c43afdbab7c6f6af7b79fd12f77b1ab54c4b8a8227505159f6469c0b66405c533486706b9137a1b04e66c50a88ef2ce02256608193281ce6ee4b1653a6e5854c90108df39ea045028835c6934de7c6e5a431b9421b6d5371c6b", 0x73}, {&(0x7f0000000500)="baa7f97a5e8aef0cc658135d7f140fe81a29552d99dedcc2ff74b6414e439e44a6e0888ea07b51f1493094d6b58f09f45bab0bd6b155d72f15b517", 0x3b}, {&(0x7f0000000540)="1c55d2b7384f03f4fd0b595c53fede8e9ef815e5ebd728d1e3bbbb2f726e518040ecc37d3ffab35a90dbc6c6e219843e7628932c2d5ae3afc8588c47ba3245c253a804f224e5e6d744d0db643401481b8d7a9a42686f81c0a6223197d5e38a04f78e7421bcc664b3e68340d882ec1d40ea76d0fffd8cecb9681847756def8e0dfab03110fe3c95ab322e3c", 0x8b}, {&(0x7f0000000600)="7e0190794d9a008902ceba4d02e798dddc6769a08b268a5ed46f6d3c6a2d6730e85c40dffff8e58fb0cd5c7f257991fd631f7966a4578ed4", 0x38}, {&(0x7f0000000640)="8f1f5a0b354b002915a0fbb7d0da97e56449a8ce3163c9f2e0c90f93885a7708245c413891a51272c257c49e597e62e030f68a1569c67ac2dcf9f6fd22efe84d4baf07c4a52d617b0c53696566f588119aa400fe29f367bf35565b18776e54b0f4df87a1f2de07beab41e3759bebdeb501873609c16d6196a098797157687167de8d680e8a07382ac37d553d3028f54ea87d7c0d1a88b62491e2a5eee13ba4f290c6b10740ef2387c9f8c58f4aeadf8f7262d7", 0xb3}, {&(0x7f0000000700)="9f8f01ae19842f5892c0c29fa5a8ab324e538d3cc3ad6490cc9ad06c4d2f2c72a5b4ac1a77f4724a0f129bc16e85a7309cc7554d8896d0f3b186ba841b2cb3f96b3c06c5ed95293f8b78d9ef8f71489d344ef1184fab538c18e3289434fa6f9e0bb78e1a662eff38e051f9df65adb49db47281d29811b8ee62913aa52baf1d420b4de01aac8d9f625e9cca3447b398c630afa0586850413d84090420e7233020389d", 0xa2}], 0x9, &(0x7f0000000900)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x51, 0x3, 0x0, [{@multicast2, 0xe711}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x6c, 0x0, 0x2, [0x25, 0x400, 0xfffff48d, 0x101, 0xb2, 0x1, 0x141, 0x33b252f1, 0xfffffff7]}, @timestamp_addr={0x44, 0x54, 0x98, 0x1, 0x4, [{@empty, 0x81}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6bb3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x9}, {@loopback, 0xb}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x7}, {@remote, 0xfffffc13}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffa}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010100}}}], 0x150}, 0x1) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x4, 0x19, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x87}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='GPL\x00', 0xfff, 0xfe, &(0x7f0000000c00)=""/254, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x4, 0x0, 0x4, 0xb}, 0x10, 0x0, r2, 0x9, &(0x7f0000000d80)=[r2, r2, r2], &(0x7f0000000dc0)=[{0x3, 0x3, 0x9, 0x9}, {0x0, 0x1, 0xd, 0x1}, {0x0, 0x2, 0x10, 0x5}, {0x2, 0x3, 0x6}, {0x1, 0x1, 0x6, 0x6}, {0x4, 0x1, 0x8, 0x3}, {0x3, 0x5, 0x2, 0x2}, {0x3, 0x2, 0x8, 0x13}, {0x5, 0x5, 0x1, 0x5}], 0x10, 0x4}, 0x94) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r4)
sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x24, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8810) (async)
setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000001080)=0x6, 0x4)
sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x90)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xfffffffb, '\x00', 0x0, r7, 0x5, 0x2, 0x3}, 0x50) (async)
splice(r2, &(0x7f0000001280)=0xe586, r0, &(0x7f00000012c0)=0x5f, 0x300000000000, 0x1)
sendmsg$inet(r2, &(0x7f0000001440)={&(0x7f0000001300)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001380)=[{&(0x7f0000001340)="2073e91a688605ae8faf0adc3181040da052c8e33f4cf3d217d274ef09aaee31c59e681e11cfd219d5bdc215c1f8dd77ea6c3e973e9477", 0x37}], 0x1, &(0x7f00000013c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x60}, 0x800)
connect$netrom(r2, &(0x7f0000001480)={{0x3, @bcast, 0x1}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001540), r5) (rerun: 64)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x34, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x48054}, 0x20000000) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001740)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0xe, &(0x7f0000001640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000016c0)='syzkaller\x00', 0x10, 0x0, 0x0, 0x40f00, 0x2a, '\x00', r3, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x4, 0xc, 0xfffffffc, 0x42eb2dad}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001780)=[r10, r2], &(0x7f00000017c0)=[{0x5, 0x4, 0xd, 0x1}, {0x0, 0x1, 0xd, 0xb}, {0x3, 0x5, 0xb, 0x2}, {0x3, 0x5, 0x6, 0x6}, {0x4, 0x1, 0x4, 0x8}, {0x0, 0x5, 0xf, 0xb}, {0x3, 0x3, 0x0, 0xa}], 0x10, 0x5}, 0x94) (async)
writev(r8, &(0x7f0000001b40)=[{&(0x7f0000001900)="ca1077b0be30f6ab9c98bc11bf336e7855fe4ffa4375790c57ac80ad2036a624bfe61908cb6219c2f0337cace3065e68d84e17077b55411739114de4d143b9efa1669ccf10b230a529b1f8f5e92ae443d69de553a3a94d651889a5613af16f40d6f462f0555d91d39eb1c2", 0x6b}, {&(0x7f0000001980)="d6b3a54a7026bbc39f3ab3a845233794181ae7ca0b7e5d6d17e53a7f5d59b3df152b7bb89bd84eff84b8e8d2cadeb0f574d187b5d22308c62f817e17ade5ffcfb4b323545382c3959a4b5f02932334f21087864b85885784ebbd13b5294da899175119a9561fb37976e9d4e9178974984a862095f3230fe271a2bb17e589dffae2ac33654bb1ade471202e2c8acbdbc027125efc33c2f699fb9efb4499c7bc3ae92456e19ba2564f", 0xa8}, {&(0x7f0000001a40)="6e93014f56774505e3917d93028f8ddc4604c4a4606b9595577438bbd1eba4837f5fa86da52a56dbb3ffea286c64514c42583d624d032078205f2d5d9d3dfa90209b6ea14cbeeab559f5ed8e18c2666d4414d33acbcd031ff048af3247cb", 0x5e}, {&(0x7f0000001ac0)="b9cfaa4a09ee2910077d86832df2b7206a094170c26f24164fb67aa9d9273584b694be3bc7e7d34b413cb88bc00315", 0x2f}, {&(0x7f0000001b00)="b74a", 0x2}], 0x5) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001bc0)={'wlan1\x00'}) (async)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000001c00), 0x4) (async)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000001c40)={<r11=>0x0, 0x3764, 0x1, [0xe]}, &(0x7f0000001c80)=0xa)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001cc0)={r11, 0x1}, 0x8)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001d00)=@req={0x8e0, 0xfffffe00, 0x7, 0x7f}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001d40)={r11, 0x1}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x9, '\x00', r3, r7, 0x0, 0x2, 0x4}, 0x50)

4.744613007s ago: executing program 4 (id=5723):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000040000000000000002000000"], 0x10}, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x2c)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x3a0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x0, [], 0x0, 0x7, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000780)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000017c0)={'wlan1\x00'})
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x800)
splice(r7, 0x0, r5, 0x0, 0x9, 0x1200000000000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000780)=r4}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1c, 0x134, 0xfffffff9, 0xcdf4, 0x59401, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, r0, 0x0, 0x4, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@generic={0xc5, 0x2, 0x5, 0x9950, 0x5}, @exit, @alu={0x4, 0x1, 0x1, 0x0, 0xa, 0x40, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xddce}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401e, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x1f, &(0x7f0000000900)=""/31, 0x40f00, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0x1, 0x1, r9, r10], &(0x7f0000000ac0)=[{0x0, 0x1, 0x9, 0xe}, {0x4, 0x2, 0x2, 0x7}], 0x10, 0x5}, 0x94)
r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xd0}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r14}, 0xc)
ioctl$FIBMAP(r11, 0x1, 0x0)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x2000000000000020, &(0x7f0000000300)=ANY=[@ANYBLOB="f78937ae2b56", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES32=r4, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYBLOB="008f93ccb6f4a96dccaee13d023af7e1b54bb580d47a23efb31c661cea2b51b3448e0d457fa65e97ddd6b75f18166c1f6b63766a1909e813bc26d818428e55ea64de1c25e9b8b9b546e348a8d33cd04dcb504e3aaeef84cff0edf33be02d6244e68bbbdb82e112ffa8c1329eb16034aa4a5c7a9ef5e3ce0bd950b3b9412af7285c8ee2d3eca54691461774fdb128eae6ffbbb0d4be8fb441ee39d779115d2c2900d70bdfabb1968982ea86cf4e7fc75d07b8", @ANYRES16=r0, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r15, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.021375288s ago: executing program 4 (id=5727):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x68, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008911}, 0x40408d4)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x2, 0x30000000, 0xc, 0x8, 0x1f, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}]}}]}, 0x154}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x2, 0x30000000, 0xc, 0x8, 0x1f, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x11, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "6784"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x30, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x80}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x11, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "6784"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x30, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x80}}, 0x0)

3.672907212s ago: executing program 3 (id=5732):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000091000000000008000100010000"], 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd38, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000010305000000000000000000000000000c000200ffffffff0000000077ffae88dfe633b06f8a7c712bcbcff852e5578d87554c803256957c1cd3f5e72357fd53718bee88f34d740d5754a5c744aef09dc6062a3da51d2bf72171e8b8e82b327146449de3dc15abe958bf40dafd01259d280b81b5cb9bbfe8ed77b780f17de234a1b7d1887f730447a34b732daaa1e5a79299d95911d535995fc6642620d116f4d2a1ade50d0a1f6b4f10799b59dad876882424dff07ed1d48494ec49960e139ba59349524b045bd162382ca951d4e2d753cc738e3f5e26f0eca406cb400cdb1abdb36a"], 0x20}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xffffff10, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)

3.672560924s ago: executing program 4 (id=5733):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x56)
listen(r0, 0x3)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x1c, &(0x7f0000000280)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$SIOCRSACCEPT(r1, 0x89e3)
accept4(r0, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4)

3.263507786s ago: executing program 1 (id=5734):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4044081)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x260, 0x98, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$caif_seqpacket(0x25, 0x5, 0x0)
recvmmsg(r4, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x42, 0x0)
socket$unix(0x1, 0x2, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0xffffffffffffff0a, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40084}, 0x2004c8d8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44011}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

3.258270618s ago: executing program 4 (id=5738):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f}, 0x48)

3.256161135s ago: executing program 3 (id=5740):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fadbdf25140000000800010003"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x8, 0x8}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="bd09", 0x2}], 0x1}}, {{0x0, 0x46, 0x0, 0x0, &(0x7f0000004f80)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x40000040)

3.231668528s ago: executing program 4 (id=5741):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x70bd25, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x8840)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f00000003c0), 0x0)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req={0x7fffffff, 0x1, 0x4, 0x26}, 0x10)
writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)

3.231527536s ago: executing program 3 (id=5742):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_netdev_private(r4, 0x8971, &(0x7f0000000180)="4e86449e78b23a")
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

1.295286565s ago: executing program 1 (id=5746):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x2, 0x4000000)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0)

1.20350144s ago: executing program 3 (id=5747):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
sendmsg$nl_generic(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="680000002c00010027bd7000fedbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="4c69b669590669040063805ceb202cb664cd809e056f6ace18322513e110a83d5ed517125e1fa6a3c8ada27d933fd0e909044a92bd22ef87ab190e834bff4a0f402ee0d631a1490a8a082700"], 0x68}, 0x1, 0x0, 0x0, 0x4000014}, 0x2000a000)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r5, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000801)
socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x54, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@deltclass={0x98, 0x29, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0x1}, {0xa, 0x3}, {0xa, 0xfff3}}, [@tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0xd3, 0x9}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x29}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xda6d}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8ae8}, @TCA_QFQ_LMAX={0x8}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x4000001)
recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

1.203245934s ago: executing program 1 (id=5748):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@local, 0x7fe, 0x0, 0x2, 0x1, 0x3}, 0x20)
r2 = socket$inet(0x2, 0x2, 0x0)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0)

1.101107424s ago: executing program 0 (id=5750):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0xa, 0x3, 0x3a)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={<r3=>r0})
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000040)) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r4=>0x0}) (async, rerun: 32)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) (async)
sendto$inet6(r5, 0x0, 0x0, 0x40045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x800}, 0x1c) (async)
vmsplice(r2, &(0x7f0000001a80)=[{&(0x7f00000006c0)="542e70e878171ef727110a49b0369a3302dc086d390cb1edcd58e52f0f078418dc842fd7f979726e71de95aeba67574fe7fc79f67bc3602de433e9cb59db6c487a6bedade28d2791882f8006a053c472499218f1c92208c3a486e5c729e5b6db4880da7cbe6080453776f217950526e38a98d5daa5a44094d38a9de7ebe88dfd90cde208127e5f2444b39f983d17a0c7be99d4d803af87757e7e9143444ad9a8e0220814ad88bb371104be5a02d26271f57257dd49cd7b67ea13482b507dd3dc152c8b9a38f24a4682b942ea58c85520404ef1d23c0820c61c080d5133ba66bf446f414b3b2f0a0cf8", 0xe9}, {&(0x7f0000000400)="2d3aee6e8d49df98582868c0b3d7ed6c727967a07cd3429b995f66ad4c402f20986241809fc98fac9f153952d5f9b510768f5396b38756457dd92baed9069deffd430775b5667f0f94dab54bd9520cfa4dbd07701c5248e95c922839f4cce85e101f579ecb09b7c4316c7bcfca230093f291e2319da15ca817847c2a570b97d588defa8f08f72b0509ce34053d3e1a4b715e3242e713aef76d67fa8412", 0x9d}, {&(0x7f0000000100)="acea533f4906c27704c1eb7ab22b2a59158728fde5f1cf5b11e12c", 0x1b}, {&(0x7f0000000500)="d6b163adf7556983340d466f8ed225fd48cf45b4a1a5996b8b0c5e07aa2c8f746d9dfde035ab85dcb54499ea7f29d7649ee32ed55959938a13a498612b4b6f37cfd473f3b4fae7b45dc15f773fc5d6e69c363ca41a63a976701ac93a9b164edf6fc26579223898abe0f30c35a785d545c6e0c70366fb981d060d2dab90f457e1cae3043c7b3f0d5664837008c7950326a3c9bc6545e1d09d0473d4ac3a648fdf2fc0d6", 0xa3}, {&(0x7f00000007c0)="0c4f86b93a4090f9a8e53de45c8708accd3cf230db5063a2e0d56cb0c98cc4e50da60e95b5c87149823d3ba6dd0cf6d61338", 0x32}, {&(0x7f0000000800)="7b3ca6e3d3ecd5b3c9ad1a3f600a29bacd95deb7fbec6ef71833cdab37b3a5042b5274a93232caacd9fa7190fee3997d1aa4d1162b6b009619883fd543fff26ec7b5c5481814ded56c982c3d6e4631b19f9b7eb72c5c58868addc67967e4c8c2f90ec3dc77fddbfacf9d17f3686217531fd6a9ca007a141f4d9c941cefc9", 0x7e}, {&(0x7f0000000880)="af50c994409e089f1510d60153b9e745a2852a960bbf40385538", 0x1a}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="221434c8c7af00d8f56e7ed9c398c9cacd85212366fd3df7071dd423b78d36013e006d16d17864935a7c194b85bda8a541b93bde4404c87b8636d3c40ca019926c1e4d677de26a564a483d1c1aeed82efcef3c19c06854e119ba6dde5680abc753beff832f56c9aaf21d6a44d80455de09feeb9cf768c0d3241b70ce0e69784d07b0b7b7029f9e19523ad7be61c52f8e2b2ea6ae74a9faf95cd02aab5c0a3a9a97650bec3e287fabf046a29e8fa329e81f267039d1", 0xb5}, {&(0x7f0000001980)="b8285b12b2092d284af3a197e34dcc2d967222877fbb8939d913e453d7bac9cf9982e21f5d9e8fec9c95613c94702ce6310f6bdea31af5b491f7d9dfacf640c7f2c63d7a8de12c6c069584bebdea96b275cb744f9911877265755fcae2b3082d52fe32da45144d0e931fd537183838538592ea0b55b0a7c770b140d3610ae053dc70ff95ffb729805daa76742684b2bce21dcadfb0272d227836fd283545d1eb8e043541abb511188acc9eaff29e710f629fc4ae136ddf438a1c7bc165589e3af8a4aa2394e08d0cdd2dd957ec8bb6e5e107937d91b7", 0xd6}], 0xa, 0x4) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='illinois', 0x8)
shutdown(r5, 0x1) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', <r6=>0x0, 0x1, 0x7800, 0xf5df, 0x101, {{0x16, 0x4, 0x2, 0x8, 0x58, 0x68, 0x0, 0x7, 0x29, 0x0, @remote, @remote, {[@ssrr={0x89, 0x23, 0xaa, [@dev={0xac, 0x14, 0x14, 0x26}, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x25}, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x6, [{@private=0xa010100, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x44}, {@empty, 0x6}]}]}}}}})
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000200)=0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, 0x4e24, 0x7, 0x4e22, 0x7fff, 0xa, 0x80, 0x60, 0x0, r6, r8}, {0x6, 0xfffffffffffffff9, 0x4, 0x6404, 0x9, 0x3, 0x5, 0xffffffffffffffff}, {0xf, 0x1, 0xc789, 0x401}, 0x8, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, {{@in=@empty, 0x4d2, 0xff}, 0x2, @in=@multicast2, 0x3506, 0x2, 0x3, 0x8, 0x5, 0x62f, 0x4}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4e21, 0x0, 0x4e23, 0x6, 0xa, 0x0, 0x80, 0x87, r4, r8}, {0x6, 0xfffffffffffff03c, 0x4, 0x54, 0x1000, 0x6, 0x8, 0x4}, {0xfffffffffffffffc, 0x8, 0x2, 0x2}, 0x15754734, 0x0, 0x0, 0x1, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4d4, 0x3c}, 0x2, @in=@rand_addr=0x64010102, 0x3506, 0x1, 0x1, 0x2a, 0x859, 0x8, 0x5f}}, 0xe8) (async)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0xffff, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x200000}, {0xa, 0x0, 0x0, @local}, 0x0, {[0x1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1]}}, 0x5c)
r9 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000001c40)={0x2, "c27b"}, 0x3) (async, rerun: 64)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1cfdffffffffffffff000000010000000000000a0800034000001006"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) (rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100767469004d00028008000400ac1e000108000400e0000002080005007f00000108000500ac1e000108000500", @ANYRES32=0x0, @ANYBLOB="524b75cdbd62cf3efefb82c8769984731df794a44cc8d140e2f30219c02c095a377b68c9122915bb58607d6047aa303cc24c6559ca23d459bcae941d8efbbdf1e6ce3b2ce19a38ad68b619e1db3cc2166a9a4df8e523664dae49ac94cb0455be05d4b323f5d89c1684c9e061869cbf9b05e36f588dee1a19634ffe9be04141c0aac197b4367a0cf57e3805c2b7a5201d20916e3f0712"], 0x58}}, 0x0)

943.713989ms ago: executing program 1 (id=5751):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x41}, 0x48)

942.803198ms ago: executing program 0 (id=5753):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80, 0x80000)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x6, 0x4)
bind$tipc(r0, &(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000180)=0x800, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x5d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x1a, &(0x7f0000000280)=""/26, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x8, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xa}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x9a, 0x60, &(0x7f0000000440)="e07f3e5a427ef5cec4b1b22ac929f17cda115ecd2416920b4d85162f34569d8f93dfbb7111453c24dca9c25dd7a0275d75213145fe7537d4fbc9b4a6162999300c6f309289ce7a50a83d222026f48f7e84710f7ed1cd6377a5124263f7a5164568841f8f7caad8b80ddc65886fab20d64fa45f7c93ff16a9feb5cf3ac417c4545e0bd1b88c5765d6f6f02dfb52ad8d7df6e024cdaccd5562b8fe", &(0x7f0000000500)=""/96, 0x1ff, 0x0, 0xff, 0x48, &(0x7f0000000580)="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", &(0x7f0000000680)="4b84ce68be1f869c9af424dfd17595d5aae99eb591e254b56c8316346800d8e777dcb5792fa665e3b5150abdda313677c829f363ba11cca5bb13dbdcbdc620b78d8d7829acd095f4", 0x0, 0x0, 0x8}, 0x50)
sendto$inet6(r0, &(0x7f0000000780)="0cce4c16c4a3c7c1001d4e8139f25ac86274bf638db8f62cc79b78d082b8d0a7ae72bf919c6ce1d8950c65ecfd1463c8b52d22d4148ae83f1a3b65af837e490a3152e8648a74f8da0b9f7d5b27d1d73152f4fe13975457c82fb3980d689fbaef1d513b14ce59f5d7", 0x68, 0x44040880, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x64, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x70}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0xc0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000ac0))
recvmsg$can_bcm(r0, &(0x7f0000002300)={&(0x7f0000000b00), 0x80, &(0x7f00000021c0)=[{&(0x7f0000000b80)=""/177, 0xb1}, {&(0x7f0000000c40)=""/148, 0x94}, {&(0x7f0000000d00)=""/95, 0x5f}, {&(0x7f0000000d80)=""/82, 0x52}, {&(0x7f0000000e00)=""/217, 0xd9}, {&(0x7f0000000f00)=""/170, 0xaa}, {&(0x7f0000000fc0)=""/202, 0xca}, {&(0x7f00000010c0)=""/226, 0xe2}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x9, &(0x7f0000002280)=""/96, 0x60}, 0x12020)
r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000002380)={{r5}, "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"})
sendmsg$nl_route(r2, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)=@newlink={0x30, 0x10, 0x20, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10021, 0x10c00}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd139}, @IFLA_EVENT={0x8, 0x2c, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x4994)
socketpair(0x5, 0x4, 0x5, &(0x7f0000003480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
writev(r7, &(0x7f00000046c0)=[{&(0x7f00000034c0)="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", 0x1000}, {&(0x7f00000044c0)="c5042d484160cadcded4ce4c7c8a975c1b06ffc09ea0a0b8767e170c76a96d6d1c", 0x21}, {&(0x7f0000004500)="cc9c3959b6ebefb298ce0028452573d241c6aaabafb7dbc8dd8558a4f460968755f8defe0c73a195504f8d440620b1824865e74954f44091355fbb9df4c234b6ce13ae4e8e9873064a518f81ce06945b42666c0c49fd50f575125b94985844d093fbc0a207b9a76e", 0x68}, {&(0x7f0000004580)="4ee052fc0924fb001de168d79812175d924ce46da9bd69a6a2f3ed3f65e6d0a5c0790023b0c9a119a40f411fc823d15985ae9922c5ae7311c2cd437878587290152b6b20df394fa556aef1fcc6dcb5cc476ec59de63b5afd715327b520a545582c8db4508619dc9d55d07d3bafe1ef67cc22ecf620a9ec167c38c0c09624779e5bd8d8e1089b4451842ea5a46e20aeaa7414b58b944222429beab94dd00e", 0x9e}, {&(0x7f0000004640)="93bdc8c2f9a1dccb0c565eb5554c9cfbfdad2928f78b193197f3782aefbcbe703480d87d98f68cf61a91801a46436cb3a9890dbf52ab2f1de73cac5b25942a627b69ea64e7e3afd4fe7a", 0x4a}], 0x5)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004780), r6)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f00000048c0)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004880)={&(0x7f00000047c0)={0xa0, r8, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8080}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004940), 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(r9, &(0x7f0000004a00)={&(0x7f0000004900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x2c, r10, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x6}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x91}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000081)
r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000004a40)={0x7dd6}, 0x8)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r11, 0x40189429, &(0x7f0000004a80)={0x1, 0x2, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000004ac0)=@netrom={'nr', 0x0}, 0x10)

874.763705ms ago: executing program 1 (id=5754):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d0001"], 0x38}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000002d000100000000000000000008000c00", @ANYRES32=0x0, @ANYBLOB="0b000080976b640868603000180001802d00f6801000468008004a00b300040004004d80"], 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r4 = getgid()
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c40)={<r5=>0x0}, &(0x7f0000000c80)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xffffffffffffff98)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e00)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000e40)=0xc)
r8 = accept4$tipc(r3, 0x0, &(0x7f0000000e80), 0x800)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"/640], 0x280}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000e2ff1b000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r8], 0xd0}, 0x4004001)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffff8}, 0x38)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0})
ioctl$SIOCGETNODEID(r10, 0x89e1, &(0x7f0000000080)={0x1})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
socket$packet(0x11, 0x3, 0x300)
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2)

801.702374ms ago: executing program 0 (id=5755):
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@enum64={0x2, 0x1, 0x0, 0x13, 0x1, 0x4, [{0xfffffff8, 0x2, 0x9}]}]}, {0x0, [0x0, 0x71]}}, &(0x7f0000000400)=""/116, 0x34, 0x74, 0x1, 0xfffffa15}, 0x28)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)

703.338039ms ago: executing program 3 (id=5756):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x44, 0x0, 0x22, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x212}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x97f}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x29}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000844}, 0xc001)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x401, 0x70bd26, 0x25dfdbf8, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x8d0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=<r9=>0x0)
sendmsg$NFC_CMD_VENDOR(r3, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x220, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0xd3, 0x1f, "c15a5c2c09ef2c15da8ffbb23b2c51508a8c847e34a9e50daef515d597b43b713e37e49be4364d7fe0f7794aaa8fa22bfb40707e2573de89bde09fcf94f4204dd5f1dfeedccfb8518617cbb82205c7d420234ad59430f513307e274f754e78c912baed3cf6833e2c3a89cdfb714fe5c9bc6df88ea1f5dea3abf73b2329a129cc0e1a8111e9a1ca9a4d53803b5e25e265a672966abcd4cf64ee5272f55865dcb77cb9ccb68d69b1dfdd531d42a31b7fc028687191e64c8e9837dfd6826cd9c130cac570ce147a4460532f263b9250f5"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xcd}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}, @NFC_ATTR_VENDOR_DATA={0x61, 0x1f, "2379d3a543fd7d5aff3387389b723c0b514d6d1a42e7d6da80b932919f698ee9ae1b9e9d943ae403133b6b240970431cdc25643ff268b7a45963b495383016862f3192d646487949ba7098d891dba0b79188eacf8ca7ea4c0c94cc2706"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x200}, @NFC_ATTR_VENDOR_DATA={0xab, 0x1f, "83dee08ed74be7d50ef02da79fe33d2fcf3c840f60ce3497bb23d167ffbdf5f9e6dadd1d9cff8884a20f9646dbc716f6221dce08d667a9b769ec28a4b2a3bd5334b7e57061f3d6244ee5fb53e95ce839d8c659920ef74e56be4f4984ed749453e1a2253651f6c1d3dc5becfbfd8555b3bbe28efed5af5dafb3d8c069eb4b6e44e2dff39034d208b1f2862cb43c3e757617dfdb49ee7058f9b9ae7335f54a43d3df5f83f1ed2c24"}]}, 0x220}, 0x1, 0x0, 0x0, 0x804}, 0x4004000)

640.443384ms ago: executing program 0 (id=5757):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0xffff0000}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

568.735142ms ago: executing program 0 (id=5758):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xe3, &(0x7f0000000840)=""/227, 0x41000, 0x8}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r3=>0x0, 0x4, 0x7, 0xdf, 0x3b, 0x74, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x7, 0x7, 0x2}})
sendto$packet(r0, &(0x7f0000000040), 0x0, 0xc0, &(0x7f0000000140)={0x11, 0x10, r3, 0x1, 0x46, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, 0x0, 0x20004000)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf251a0000000c002e80080006000000000008000300", @ANYRES32=r8, @ANYBLOB="3d9d54288534d8a3a71b7eec2726dab48343cf53e9f2a1e06c91c0f7b21106f524cb25f38ad419ef4443eac327514b22bfbe53ed644e182c105e4a8211c624990f1a45a4a71e", @ANYRES32=r8, @ANYBLOB="0c002e80060001000400000008000300", @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000844)
sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="121ad91fafad95456621aa000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
close(r4)
openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
close(r9)
recvfrom$packet(r1, &(0x7f0000000740)=""/243, 0xf3, 0x40010042, 0x0, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r12)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

472.324579ms ago: executing program 2 (id=5759):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x400}, 0x94)

436.230282ms ago: executing program 2 (id=5760):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000800)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000", @ANYRES16=r1, @ANYRESHEX=r0], 0x290) (async)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000", @ANYRES16=r1, @ANYRESHEX=r0], 0x290)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)={0x9, {{0x2, 0xfffe, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @empty}}]}, 0x190) (async)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)={0x9, {{0x2, 0xfffe, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @empty}}]}, 0x190)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x1120, 0x4)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'wg1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'wg1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}}, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000))
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x48080, 0x0)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @loopback}, {0x20000010304}, 0x4, {0x2, 0x4e22, @rand_addr=0x64010102}})

362.799098ms ago: executing program 1 (id=5761):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48803, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0xfff3, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x6a}]}}]}, 0x3c}}, 0x20000000)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000400)="b19ccccf84f531d9ec214627c11430c1", 0x10)
r8 = accept$alg(r7, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040)
recvmmsg(r8, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000340)=""/60, &(0x7f0000000380)=0x3c)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r10 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10)
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r11, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdb6, 0x3, [@default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x78, 0x30, 0x300, 0x7ffffff, 0xfffffffd, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x12, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x14, 0x6, "156c58e6140000000000000047d3289b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}}, 0x240400c0)
ioctl$sock_netrom_SIOCADDRT(r11, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]})
connect$inet(r10, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

188.403348ms ago: executing program 2 (id=5762):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x1200}, 0x20)

187.916502ms ago: executing program 0 (id=5763):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x110, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0xf8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x1000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7bd}, {0x8, 0x15, 0x3}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xf}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4090)

150.991007ms ago: executing program 2 (id=5764):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x9, 0x2, 0x80000001}, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r7, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x9, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x9, 0x2, 0x80000001}, 0x0) (async)
socket$inet6(0xa, 0x3, 0x5) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async)
sendmmsg(r7, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x9, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async)

33.447907ms ago: executing program 2 (id=5765):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x50}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50)
socket$can_bcm(0x1d, 0x2, 0x2)
close(0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
sendmmsg(r4, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800)
recvfrom(r0, &(0x7f0000000040)=""/178, 0xb2, 0x0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x64010100}}, 0x80)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, r5, 0x8, &(0x7f0000000000), 0x8}, 0x94)

0s ago: executing program 2 (id=5766):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c)
sendmsg$inet_sctp(r1, &(0x7f0000000600)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@authinfo={0x18, 0x84, 0x6, {0x3}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
unshare(0x400)
connect$l2tp6(r2, &(0x7f0000001080)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0xfffffffe}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000000a080001400000000108000340030000000900010073797a300000"], 0xc8}}, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2b, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r8, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r8)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000001900)={0x88, r9, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x258c9e4f}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff2066}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1a9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x2080020}, 0x44)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @rand_addr=0x64010101}, 0xc)
recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000008c0)=""/4119, 0x1017}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x9, 0x4022, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001dc0)={<r11=>0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f00000001c0)={0x30bd, 0x6, 0x0, 0x7, 0x1, 0xc, 0x9, 0xfffffffb, r11}, 0x20)

kernel console output (not intermixed with test programs):

mes 0
[  512.636732][T22072] CPU: 0 UID: 0 PID: 22072 Comm: syz.4.4391 Not tainted syzkaller #0 PREEMPT(full) 
[  512.636758][T22072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  512.636770][T22072] Call Trace:
[  512.636774][T22072]  <TASK>
[  512.636780][T22072]  dump_stack_lvl+0xe8/0x150
[  512.636799][T22072]  should_fail_ex+0x412/0x560
[  512.636815][T22072]  should_failslab+0xa8/0x100
[  512.636827][T22072]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  512.636843][T22072]  ? __alloc_skb+0x186/0x7d0
[  512.636855][T22072]  ? __alloc_skb+0x1d0/0x7d0
[  512.636865][T22072]  ? __local_bh_enable_ip+0xd0/0x130
[  512.636877][T22072]  __alloc_skb+0x1d0/0x7d0
[  512.636892][T22072]  netlink_sendmsg+0x5d4/0xb40
[  512.636909][T22072]  ? __pfx_netlink_sendmsg+0x10/0x10
[  512.636922][T22072]  ? aa_sock_msg_perm+0xf1/0x1b0
[  512.636935][T22072]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  512.636947][T22072]  __sys_sendto+0x709/0x7a0
[  512.636961][T22072]  ? __pfx___sys_sendto+0x10/0x10
[  512.636987][T22072]  ? rcu_is_watching+0x15/0xb0
[  512.637001][T22072]  __x64_sys_sendto+0xde/0x100
[  512.637014][T22072]  do_syscall_64+0xe2/0xf80
[  512.637027][T22072]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.637036][T22072]  ? trace_irq_disable+0x37/0x100
[  512.637046][T22072]  ? clear_bhb_loop+0x60/0xb0
[  512.637057][T22072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.637067][T22072] RIP: 0033:0x7f151655b78e
[  512.637078][T22072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  512.637094][T22072] RSP: 002b:00007f1517396e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  512.637105][T22072] RAX: ffffffffffffffda RBX: 00007f15173986c0 RCX: 00007f151655b78e
[  512.637113][T22072] RDX: 0000000000000020 RSI: 00007f1517397000 RDI: 0000000000000007
[  512.637119][T22072] RBP: 0000000000000000 R08: 00007f1517396f04 R09: 000000000000000c
[  512.637124][T22072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  512.637130][T22072] R13: 00007f1517396f58 R14: 00007f1517397000 R15: 0000000000000000
[  512.637145][T22072]  </TASK>
[  512.909947][T22076] netlink: 'syz.4.4393': attribute type 1 has an invalid length.
[  512.918898][T22076] netlink: 'syz.4.4393': attribute type 2 has an invalid length.
[  512.970963][T22078] syzkaller0: entered promiscuous mode
[  512.976966][T22078] syzkaller0: entered allmulticast mode
[  512.992124][T22062] dvmrp12: left allmulticast mode
[  513.028582][T22078] netlink: 'syz.4.4394': attribute type 1 has an invalid length.
[  513.038506][T22078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  513.053222][T22077] tipc: Resetting bearer <eth:syzkaller0>
[  513.104333][T22077] tipc: Disabling bearer <eth:syzkaller0>
[  513.413963][T22099] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  513.437626][T22101] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  513.495724][T22097] netlink: 'syz.3.4401': attribute type 3 has an invalid length.
[  513.588732][T22105] FAULT_INJECTION: forcing a failure.
[  513.588732][T22105] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  513.623415][T22105] CPU: 1 UID: 0 PID: 22105 Comm: syz.4.4403 Not tainted syzkaller #0 PREEMPT(full) 
[  513.623441][T22105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  513.623452][T22105] Call Trace:
[  513.623459][T22105]  <TASK>
[  513.623467][T22105]  dump_stack_lvl+0xe8/0x150
[  513.623493][T22105]  should_fail_ex+0x412/0x560
[  513.623518][T22105]  _copy_from_iter+0x1d3/0x1670
[  513.623547][T22105]  ? rcu_is_watching+0x15/0xb0
[  513.623566][T22105]  ? __pfx__copy_from_iter+0x10/0x10
[  513.623583][T22105]  ? kmem_cache_alloc_node_noprof+0x473/0x6f0
[  513.623611][T22105]  ? netlink_sendmsg+0x650/0xb40
[  513.623629][T22105]  ? skb_put+0x11b/0x210
[  513.623652][T22105]  netlink_sendmsg+0x6c0/0xb40
[  513.623679][T22105]  ? __pfx_netlink_sendmsg+0x10/0x10
[  513.623701][T22105]  ? aa_sock_msg_perm+0xf1/0x1b0
[  513.623722][T22105]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  513.623749][T22105]  __sys_sendto+0x709/0x7a0
[  513.623772][T22105]  ? __pfx___sys_sendto+0x10/0x10
[  513.623813][T22105]  ? exc_page_fault+0x6a/0xc0
[  513.623837][T22105]  ? do_user_addr_fault+0xc7c/0x1360
[  513.623863][T22105]  __x64_sys_sendto+0xde/0x100
[  513.623885][T22105]  do_syscall_64+0xe2/0xf80
[  513.623903][T22105]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.623917][T22105]  ? trace_irq_disable+0x37/0x100
[  513.623934][T22105]  ? clear_bhb_loop+0x60/0xb0
[  513.623954][T22105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.623970][T22105] RIP: 0033:0x7f151655b78e
[  513.623986][T22105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  513.624001][T22105] RSP: 002b:00007f1517396e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  513.624020][T22105] RAX: ffffffffffffffda RBX: 00007f15173986c0 RCX: 00007f151655b78e
[  513.624033][T22105] RDX: 0000000000000020 RSI: 00007f1517397000 RDI: 0000000000000007
[  513.624051][T22105] RBP: 0000000000000000 R08: 00007f1517396f04 R09: 000000000000000c
[  513.624063][T22105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  513.624073][T22105] R13: 00007f1517396f58 R14: 00007f1517397000 R15: 0000000000000000
[  513.624102][T22105]  </TASK>
[  514.209496][T22122] bond0: Caught tx_queue_len zero misconfig
[  514.697772][T22145] syzkaller0: entered promiscuous mode
[  514.703453][T22145] syzkaller0: entered allmulticast mode
[  515.955010][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  515.963082][    C0] lec:lec_tx_timeout: lec0
[  515.967988][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  516.893886][T22165] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  516.912471][T22180] netlink: 'syz.0.4424': attribute type 1 has an invalid length.
[  517.063812][T22191] __nla_validate_parse: 6 callbacks suppressed
[  517.063833][T22191] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4429'.
[  517.269209][T22207] netlink: 'syz.4.4435': attribute type 9 has an invalid length.
[  517.289777][T22207] netlink: 'syz.4.4435': attribute type 6 has an invalid length.
[  517.465065][T22223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4442'.
[  517.551704][T22226] syzkaller0: entered promiscuous mode
[  517.558936][T22226] syzkaller0: entered allmulticast mode
[  517.875944][T22247] netlink: 'syz.3.4454': attribute type 1 has an invalid length.
[  517.913977][T22248] syzkaller0: entered promiscuous mode
[  517.920261][T22248] syzkaller0: entered allmulticast mode
[  518.003403][T22254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4457'.
[  518.115984][T22259] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  518.320627][T22274] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  518.393788][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030179400: rx timeout, send abort
[  518.420623][T22276] netlink: 'syz.1.4468': attribute type 1 has an invalid length.
[  518.497872][T22286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4473'.
[  518.519459][T22286] geneve3: entered promiscuous mode
[  518.526920][T19563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  518.537329][T19563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.549114][T19563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.565930][T19563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  518.826887][T22309] bridge0: port 4(team0) entered disabled state
[  518.833605][T22309] bridge0: port 3(veth1_to_hsr) entered disabled state
[  518.840860][T22309] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.848495][T22309] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.858923][T22309] bridge0: entered allmulticast mode
[  518.875391][ T5821] Bluetooth: hci2: command 0x0406 tx timeout
[  518.898758][T22309] team0: left promiscuous mode
[  518.903766][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030179400: abort rx timeout. Force session deactivation
[  518.920761][T22309] team_slave_0: left promiscuous mode
[  518.929393][T22309] team_slave_1: left promiscuous mode
[  518.945584][T22309] batadv1: left promiscuous mode
[  518.947816][T22315] netlink: 'syz.0.4480': attribute type 39 has an invalid length.
[  518.974629][T22309] bridge0: port 4(team0) entered disabled state
[  519.033513][T22309] veth1_to_hsr: left allmulticast mode
[  519.044064][T22309] veth1_to_hsr: left promiscuous mode
[  519.050318][T22309] bridge0: port 3(veth1_to_hsr) entered disabled state
[  519.064056][T22325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4487'.
[  519.073402][T22309] bridge_slave_1: left allmulticast mode
[  519.079154][T22325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4487'.
[  519.085864][T22309] bridge_slave_1: left promiscuous mode
[  519.095768][T22309] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.105604][T22309] bridge_slave_0: left allmulticast mode
[  519.111271][T22309] bridge_slave_0: left promiscuous mode
[  519.121927][T22309] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.251534][T22327] bridge_slave_1: left allmulticast mode
[  519.257756][T22327] bridge_slave_1: left promiscuous mode
[  519.263668][T22327] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.325367][T22320] syzkaller0: entered promiscuous mode
[  519.331092][T22320] syzkaller0: entered allmulticast mode
[  519.340551][T22333] veth1_to_team: Caught tx_queue_len zero misconfig
[  519.441273][T22337] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4488'.
[  519.453755][T22337] nbd: couldn't find a device at index 0
[  519.479634][T22337] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4488'.
[  519.525122][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.698133][T22345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4492'.
[  519.762615][T22345] bond5: Invalid ad_actor_system MAC address.
[  519.769120][T22345] bond5: option ad_actor_system: invalid value (7)
[  519.781678][T22345] bond5 (unregistering): Released all slaves
[  519.836728][T18849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.096692][T22369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4499'.
[  520.561130][ T7723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.639285][   T56] block nbd1: Possible stuck request ffff888025a18000: control (read@0,1024B). Runtime 150 seconds
[  520.650175][   T56] block nbd1: Possible stuck request ffff888025a18200: control (read@1024,1024B). Runtime 150 seconds
[  520.661266][   T56] block nbd1: Possible stuck request ffff888025a18400: control (read@2048,1024B). Runtime 150 seconds
[  520.672344][   T56] block nbd1: Possible stuck request ffff888025a18600: control (read@3072,1024B). Runtime 150 seconds
[  520.977131][T22389] netlink: 'syz.0.4503': attribute type 10 has an invalid length.
[  520.985086][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  520.985117][    C0] lec:lec_tx_timeout: lec0
[  520.993475][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  521.028955][T22390] netlink: 'syz.0.4503': attribute type 10 has an invalid length.
[  521.599385][ T7723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.350107][T22334] wg1 speed is unknown, defaulting to 1000
[  522.389604][T22389] bond0: (slave dummy0): Releasing backup interface
[  522.400083][T22389] dummy0: entered allmulticast mode
[  522.416831][T22389] team0: Port device dummy0 added
[  522.425247][T22390] dummy0: left allmulticast mode
[  522.433992][T22390] team0: Port device dummy0 removed
[  522.444509][T22390] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  522.582984][T22393] syzkaller0: entered promiscuous mode
[  522.588743][T22393] syzkaller0: entered allmulticast mode
[  522.652772][ T7723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.799698][T22334] lo speed is unknown, defaulting to 1000
[  522.878685][T18849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.941802][T22420] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4513'.
[  522.951706][T22421] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4513'.
[  523.597011][T22444] netlink: 'syz.2.4523': attribute type 25 has an invalid length.
[  523.610782][T22444] netlink: 'syz.2.4523': attribute type 12 has an invalid length.
[  523.620468][T22444] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4523'.
[  523.677637][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.812857][T22457] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4527'.
[  524.162198][T22482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.185442][T22482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.281912][T22487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.360601][T22489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4537'.
[  524.658393][T22509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4541'.
[  524.717210][ T5820] net_ratelimit: 1 callbacks suppressed
[  524.717228][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.013489][T22521] Bluetooth: MGMT ver 1.23
[  525.063631][T22526] netlink: 'syz.0.4549': attribute type 8 has an invalid length.
[  525.091565][T22526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4549'.
[  525.123328][T22526] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4549'.
[  525.157682][T22526] netlink: 'syz.0.4549': attribute type 21 has an invalid length.
[  525.178652][T22526] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4549'.
[  525.320824][T22541] vcan0: tx address claim with dlc 0
[  525.373814][T22545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4557'.
[  525.689787][T22571] netlink: 'syz.0.4564': attribute type 1 has an invalid length.
[  525.735760][T22575] openvswitch: netlink: Duplicate or invalid key (type 0).
[  525.755515][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.775910][T22575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  525.877892][T22581] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  525.925425][T18849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.989529][T22581] syzkaller0: entered promiscuous mode
[  525.996105][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  525.996141][    C0] lec:lec_tx_timeout: lec0
[  526.008857][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  526.016610][T22581] syzkaller0: entered allmulticast mode
[  526.023105][T22581] tipc: Resetting bearer <eth:syzkaller0>
[  526.056271][T22580] tipc: Resetting bearer <eth:syzkaller0>
[  526.180842][T22598] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  526.800635][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.040368][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.840184][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.024323][T22580] tipc: Disabling bearer <eth:syzkaller0>
[  528.281802][T22635] __nla_validate_parse: 6 callbacks suppressed
[  528.281825][T22635] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4586'.
[  528.307578][T22635] netlink: 'syz.3.4586': attribute type 10 has an invalid length.
[  528.397017][T22641] syzkaller0: entered promiscuous mode
[  528.406110][T22641] syzkaller0: entered allmulticast mode
[  528.588071][T22654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4592'.
[  528.598766][T22654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4592'.
[  528.608434][T22654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4592'.
[  528.721126][T22658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4595'.
[  528.833543][T22646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4586'.
[  528.875355][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.079201][T22676] bond0: (slave dummy0): Releasing backup interface
[  529.082719][T22677] siw: device registration error -23
[  529.140477][T22676] bond0: (slave bond_slave_0): Releasing backup interface
[  529.195002][T22676] bond0: (slave bond_slave_1): Releasing backup interface
[  529.220341][T22676] team_slave_0: left allmulticast mode
[  529.248941][T22676] team0: Port device team_slave_0 removed
[  529.258945][T22676] team_slave_1: left allmulticast mode
[  529.261064][T22694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.289055][T22676] team0: Port device team_slave_1 removed
[  529.298502][T22676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  529.306783][T22676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  529.326469][T22676] batadv1: left allmulticast mode
[  529.338761][T22676] team0: Port device batadv1 removed
[  529.359616][T22676] team0: Port device bridge1 removed
[  529.367177][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4604'.
[  529.379922][T22676] bond1: (slave gretap2): Releasing active interface
[  529.397629][T22676] bond2: (slave bond3): Releasing backup interface
[  529.414658][T22676] bond4: left allmulticast mode
[  529.420848][T22676] bond4: left promiscuous mode
[  529.430461][T22676] team0: Port device macvlan2 removed
[  529.919070][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4616'.
[  529.935556][T22728] IPVS: persistence engine module ip_vs_pe_ not found
[  530.017743][T22728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4617'.
[  530.172283][T22751] FAULT_INJECTION: forcing a failure.
[  530.172283][T22751] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  530.189683][T22751] CPU: 0 UID: 0 PID: 22751 Comm: syz.0.4620 Not tainted syzkaller #0 PREEMPT(full) 
[  530.189706][T22751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  530.189714][T22751] Call Trace:
[  530.189720][T22751]  <TASK>
[  530.189726][T22751]  dump_stack_lvl+0xe8/0x150
[  530.189749][T22751]  should_fail_ex+0x412/0x560
[  530.189768][T22751]  _copy_from_user+0x2d/0xb0
[  530.189787][T22751]  tls_setsockopt+0x77f/0x15c0
[  530.189803][T22751]  ? aa_sk_perm+0x15a/0x960
[  530.189819][T22751]  ? aa_sk_perm+0x82d/0x960
[  530.189833][T22751]  ? __pfx_tls_setsockopt+0x10/0x10
[  530.189851][T22751]  ? __pfx_aa_sk_perm+0x10/0x10
[  530.189866][T22751]  ? __fget_files+0x2a/0x420
[  530.189879][T22751]  ? aa_sock_opt_perm+0xff/0x1a0
[  530.189896][T22751]  ? sock_common_setsockopt+0x36/0xc0
[  530.189911][T22751]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  530.189925][T22751]  do_sock_setsockopt+0x17c/0x1b0
[  530.189947][T22751]  __x64_sys_setsockopt+0x13d/0x1b0
[  530.189968][T22751]  do_syscall_64+0xe2/0xf80
[  530.189985][T22751]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.189998][T22751]  ? trace_irq_disable+0x37/0x100
[  530.190011][T22751]  ? clear_bhb_loop+0x60/0xb0
[  530.190027][T22751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.190038][T22751] RIP: 0033:0x7f599659aeb9
[  530.190052][T22751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  530.190062][T22751] RSP: 002b:00007f59974f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  530.190077][T22751] RAX: ffffffffffffffda RBX: 00007f5996815fa0 RCX: 00007f599659aeb9
[  530.190087][T22751] RDX: 0000000000000004 RSI: 000000000000011a RDI: 0000000000000003
[  530.190094][T22751] RBP: 00007f59974f2090 R08: 0000000000000044 R09: 0000000000000000
[  530.190102][T22751] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  530.190110][T22751] R13: 00007f5996816038 R14: 00007f5996815fa0 R15: 00007fffae658bc8
[  530.190143][T22751]  </TASK>
[  530.647526][T22716] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.655423][T22716] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.791801][T22772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  530.799138][T22772] IPv6: NLM_F_CREATE should be set when creating new route
[  530.806450][T22772] IPv6: NLM_F_CREATE should be set when creating new route
[  530.865562][T22772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4629'.
[  530.969945][T22716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  531.000496][T22716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  531.014940][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  531.023590][    C0] lec:lec_tx_timeout: lec0
[  531.028349][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  531.462103][T19950] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  531.485277][T19950] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  531.494202][T19950] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  531.538714][T19950] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  531.581717][T22784] FAULT_INJECTION: forcing a failure.
[  531.581717][T22784] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  531.618363][T22784] CPU: 1 UID: 0 PID: 22784 Comm: syz.2.4633 Not tainted syzkaller #0 PREEMPT(full) 
[  531.618387][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  531.618398][T22784] Call Trace:
[  531.618405][T22784]  <TASK>
[  531.618413][T22784]  dump_stack_lvl+0xe8/0x150
[  531.618440][T22784]  should_fail_ex+0x412/0x560
[  531.618465][T22784]  _copy_to_user+0x31/0xb0
[  531.618491][T22784]  simple_read_from_buffer+0xe1/0x170
[  531.618514][T22784]  proc_fail_nth_read+0x1bb/0x230
[  531.618540][T22784]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  531.618564][T22784]  ? rw_verify_area+0x2a6/0x4d0
[  531.618585][T22784]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  531.618607][T22784]  vfs_read+0x20c/0xa70
[  531.618624][T22784]  ? fdget_pos+0x246/0x320
[  531.618647][T22784]  ? __pfx___mutex_lock+0x10/0x10
[  531.618669][T22784]  ? __pfx_vfs_read+0x10/0x10
[  531.618691][T22784]  ? __fget_files+0x2a/0x420
[  531.618713][T22784]  ? __fget_files+0x3a0/0x420
[  531.618730][T22784]  ? __fget_files+0x2a/0x420
[  531.618766][T22784]  ksys_read+0x150/0x270
[  531.618790][T22784]  ? __pfx_ksys_read+0x10/0x10
[  531.618824][T22784]  do_syscall_64+0xe2/0xf80
[  531.618846][T22784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.618862][T22784]  ? trace_irq_disable+0x37/0x100
[  531.618878][T22784]  ? clear_bhb_loop+0x60/0xb0
[  531.618899][T22784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.618916][T22784] RIP: 0033:0x7f115735b78e
[  531.618932][T22784] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  531.618946][T22784] RSP: 002b:00007f115816efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  531.618964][T22784] RAX: ffffffffffffffda RBX: 00007f115816f6c0 RCX: 00007f115735b78e
[  531.618976][T22784] RDX: 000000000000000f RSI: 00007f115816f0a0 RDI: 0000000000000004
[  531.618987][T22784] RBP: 00007f115816f090 R08: 0000000000000000 R09: 0000000000000000
[  531.618997][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  531.619008][T22784] R13: 00007f1157616038 R14: 00007f1157615fa0 R15: 00007fffce552908
[  531.619039][T22784]  </TASK>
[  531.843619][T22787] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  532.661386][T22813] bridge_slave_0: left allmulticast mode
[  532.683472][T22813] bridge_slave_0: left promiscuous mode
[  532.697677][T22813] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.726765][T22813] bridge_slave_1: left allmulticast mode
[  532.735306][T22813] bridge_slave_1: left promiscuous mode
[  532.741237][T22813] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.759320][T22813] bond0: (slave bond_slave_0): Releasing backup interface
[  532.784303][T22813] bond0: (slave bond_slave_1): Releasing backup interface
[  532.799571][T22813] batman_adv: batadv0: Removing interface: batadv_slave_0
[  532.807436][T22824] netlink: 'syz.2.4644': attribute type 3 has an invalid length.
[  532.826229][T22813] batman_adv: batadv0: Removing interface: batadv_slave_1
[  532.838741][T22813] net_ratelimit: 3 callbacks suppressed
[  532.838759][T22813] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  532.954289][T22814] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.967401][T22814] 8021q: adding VLAN 0 to HW filter on device team0
[  532.979919][T22831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  532.993294][T22814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  533.016238][T22833] xt_hashlimit: max too large, truncated to 1048576
[  533.033044][T22833] xt_bpf: check failed: parse error
[  533.063534][T22836] xt_hashlimit: max too large, truncated to 1048576
[  533.115542][T22836] xt_bpf: check failed: parse error
[  533.122738][T22831] bond4: option arp_all_targets: invalid value (129)
[  533.141571][T22831] bond4 (unregistering): Released all slaves
[  533.163084][T22841] vcan0: tx address claim with dlc 0
[  533.274091][T18850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.346399][T22846] __nla_validate_parse: 4 callbacks suppressed
[  533.346419][T22846] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4652'.
[  533.366116][T22846] nbd: couldn't find a device at index 0
[  533.545217][ T7724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.626364][T22870] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4661'.
[  533.965495][T22890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4667'.
[  534.011970][T22890] 8021q: adding VLAN 0 to HW filter on device bond2
[  534.029945][T22890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4667'.
[  534.100557][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.135497][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.188231][T22899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.197081][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.207572][T22899] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4669'.
[  534.344284][T22905] veth0: entered promiscuous mode
[  534.352935][T22905] veth0: entered allmulticast mode
[  534.464742][T22920] netlink: 'syz.0.4675': attribute type 1 has an invalid length.
[  534.486120][T22919] netlink: 'syz.3.4678': attribute type 11 has an invalid length.
[  534.527012][T22920] bond5: entered promiscuous mode
[  534.554399][T22920] 8021q: adding VLAN 0 to HW filter on device bond5
[  534.661086][T22909] 8021q: adding VLAN 0 to HW filter on device bond6
[  534.670408][T22909] bond5: (slave bond6): making interface the new active one
[  534.687499][T22909] bond6: entered promiscuous mode
[  534.693682][T22909] bond5: (slave bond6): Enslaving as an active interface with an up link
[  534.884547][T22940] lo: entered allmulticast mode
[  534.891293][T22940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  534.946707][T22937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4681'.
[  534.998008][T22937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4681'.
[  535.024958][T22937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4681'.
[  535.308874][T22940] wg1 speed is unknown, defaulting to 1000
[  535.476517][T22960] netlink: 9420 bytes leftover after parsing attributes in process `syz.0.4689'.
[  535.764368][T22973] team0: Port device dummy0 removed
[  535.776280][T22973] bridge_slave_0: left allmulticast mode
[  535.782067][T22973] bridge_slave_0: left promiscuous mode
[  535.810095][T22973] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.833551][T22978] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4692'.
[  535.853329][T22973] bridge_slave_1: left allmulticast mode
[  535.861658][T22973] bridge_slave_1: left promiscuous mode
[  535.875600][T22973] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.905045][T22973] bond0: (slave bond_slave_0): Releasing backup interface
[  535.924482][T22973] bond0: (slave bond_slave_1): Releasing backup interface
[  535.940851][T22973] team0: Port device team_slave_0 removed
[  535.950196][T22973] team0: Port device team_slave_1 removed
[  535.957341][T22973] batman_adv: batadv0: Removing interface: batadv_slave_0
[  535.967222][T22940] lo speed is unknown, defaulting to 1000
[  536.025742][T22945] wg1 speed is unknown, defaulting to 1000
[  536.027828][T22982] bridge0: entered allmulticast mode
[  536.036950][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  536.036982][    C0] lec:lec_tx_timeout: lec0
[  536.045825][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  536.138564][T22956] netlink: 'syz.2.4683': attribute type 6 has an invalid length.
[  536.158300][T22988] tipc: Enabled bearer <eth:gre0>, priority 10
[  536.357787][T22993] bridge0: entered promiscuous mode
[  536.365158][T22993] macsec2: entered promiscuous mode
[  536.462242][T23001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  536.469601][T23001] IPv6: NLM_F_CREATE should be set when creating new route
[  536.646153][T23005] netlink: 'syz.1.4700': attribute type 6 has an invalid length.
[  536.691105][T22945] lo speed is unknown, defaulting to 1000
[  536.928159][T23012] bond7: entered promiscuous mode
[  536.952448][T23024] netlink: 'syz.1.4704': attribute type 2 has an invalid length.
[  536.960694][T23024] netlink: 'syz.1.4704': attribute type 1 has an invalid length.
[  536.968872][T23024] netlink: 'syz.1.4704': attribute type 1 has an invalid length.
[  537.033078][T23020] vcan1: entered promiscuous mode
[  537.088992][T23020] vcan1: entered allmulticast mode
[  537.118994][T23020] bond7: (slave vcan1): The slave device specified does not support setting the MAC address
[  537.140321][T23020] bond7: (slave vcan1): Error -95 calling set_mac_address
[  537.163964][ T6107] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  537.301181][ T6107] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  537.319924][ T6107] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  537.350394][ T6107] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  537.772512][T23061] lo: entered allmulticast mode
[  537.807052][T23061] 8021q: adding VLAN 0 to HW filter on device bond8
[  537.822269][T23061] bond0: (slave bond8): Enslaving as an active interface with an up link
[  537.989035][T23060] lo: left allmulticast mode
[  538.555175][    C1] net_ratelimit: 12 callbacks suppressed
[  538.555196][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.820508][T23112] FAULT_INJECTION: forcing a failure.
[  538.820508][T23112] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  538.874904][T23112] CPU: 1 UID: 0 PID: 23112 Comm: syz.4.4732 Not tainted syzkaller #0 PREEMPT(full) 
[  538.874927][T23112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  538.874937][T23112] Call Trace:
[  538.874945][T23112]  <TASK>
[  538.874951][T23112]  dump_stack_lvl+0xe8/0x150
[  538.874976][T23112]  should_fail_ex+0x412/0x560
[  538.874999][T23112]  _copy_from_user+0x2d/0xb0
[  538.875022][T23112]  sk_setsockopt+0x2b3/0x2e80
[  538.875051][T23112]  ? __pfx_sk_setsockopt+0x10/0x10
[  538.875068][T23112]  ? aa_sk_perm+0x15a/0x960
[  538.875086][T23112]  ? aa_sk_perm+0x82d/0x960
[  538.875104][T23112]  ? __fget_files+0x2a/0x420
[  538.875125][T23112]  ? __pfx_aa_sk_perm+0x10/0x10
[  538.875142][T23112]  ? __fget_files+0x2a/0x420
[  538.875156][T23112]  ? aa_sock_opt_perm+0xff/0x1a0
[  538.875178][T23112]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  538.875200][T23112]  do_sock_setsockopt+0x11b/0x1b0
[  538.875225][T23112]  __x64_sys_setsockopt+0x13d/0x1b0
[  538.875250][T23112]  do_syscall_64+0xe2/0xf80
[  538.875269][T23112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.875285][T23112]  ? trace_irq_disable+0x37/0x100
[  538.875298][T23112]  ? clear_bhb_loop+0x60/0xb0
[  538.875319][T23112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.875335][T23112] RIP: 0033:0x7f151659aeb9
[  538.875351][T23112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  538.875365][T23112] RSP: 002b:00007f1517377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  538.875383][T23112] RAX: ffffffffffffffda RBX: 00007f1516816090 RCX: 00007f151659aeb9
[  538.875395][T23112] RDX: 000000000000002d RSI: 0000000000000001 RDI: 0000000000000003
[  538.875405][T23112] RBP: 00007f1517377090 R08: 0000000000000004 R09: 0000000000000000
[  538.875416][T23112] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  538.875427][T23112] R13: 00007f1516816128 R14: 00007f1516816090 R15: 00007fffd034f538
[  538.875456][T23112]  </TASK>
[  539.113643][T23108] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode
[  539.123577][T23108] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode
[  539.132792][T23114] syzkaller0: entered promiscuous mode
[  539.144960][T23114] syzkaller0: entered allmulticast mode
[  539.573833][T23133] __nla_validate_parse: 12 callbacks suppressed
[  539.573851][T23133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4737'.
[  539.842535][T23140] syzkaller0: entered promiscuous mode
[  539.854892][T23140] syzkaller0: entered allmulticast mode
[  540.026339][T23145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4742'.
[  540.557220][T23154] wg1 speed is unknown, defaulting to 1000
[  540.953606][T23154] lo speed is unknown, defaulting to 1000
[  541.090828][T23190] netlink: 360 bytes leftover after parsing attributes in process `syz.4.4754'.
[  541.225492][T23187] netlink: 'syz.0.4753': attribute type 41 has an invalid length.
[  541.782122][T23228] netlink: 'syz.0.4764': attribute type 1 has an invalid length.
[  541.844804][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms
[  541.852875][    C0] lec:lec_tx_timeout: lec0
[  541.858715][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  542.144449][T23247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4772'.
[  542.242934][T23252] openvswitch: netlink: Key type 195 is out of range max 32
[  542.285042][T23255] xt_bpf: check failed: parse error
[  542.414135][T23199] wg1 speed is unknown, defaulting to 1000
[  542.465173][T23262] netlink: 'syz.2.4774': attribute type 10 has an invalid length.
[  542.474602][T23262] syz_tun: entered promiscuous mode
[  542.519333][T23261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4775'.
[  542.914600][T23272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4778'.
[  542.993627][T23256] wg1 speed is unknown, defaulting to 1000
[  543.340851][T23199] lo speed is unknown, defaulting to 1000
[  543.394264][T23284] "syz.4.4782" (23284) uses obsolete ecb(arc4) skcipher
[  543.759571][T23306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  543.769798][T23306] syzkaller0: entered promiscuous mode
[  543.815231][T23306] syzkaller0: entered allmulticast mode
[  544.010841][T23279] nr1: entered promiscuous mode
[  544.040769][T23279] nr1: entered allmulticast mode
[  544.112762][T23275] wg1 speed is unknown, defaulting to 1000
[  544.126646][T23317] tipc: Resetting bearer <eth:syzkaller0>
[  544.134471][T23256] lo speed is unknown, defaulting to 1000
[  544.168184][T23305] tipc: Resetting bearer <eth:syzkaller0>
[  544.217681][T23305] tipc: Disabling bearer <eth:syzkaller0>
[  544.358942][T23327] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4791'.
[  544.440534][T23332] FAULT_INJECTION: forcing a failure.
[  544.440534][T23332] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  544.462093][T23332] CPU: 0 UID: 0 PID: 23332 Comm: syz.3.4793 Not tainted syzkaller #0 PREEMPT(full) 
[  544.462118][T23332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  544.462128][T23332] Call Trace:
[  544.462136][T23332]  <TASK>
[  544.462143][T23332]  dump_stack_lvl+0xe8/0x150
[  544.462171][T23332]  should_fail_ex+0x412/0x560
[  544.462204][T23332]  _copy_to_user+0x31/0xb0
[  544.462231][T23332]  simple_read_from_buffer+0xe1/0x170
[  544.462256][T23332]  proc_fail_nth_read+0x1bb/0x230
[  544.462283][T23332]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  544.462308][T23332]  ? rw_verify_area+0x2a6/0x4d0
[  544.462329][T23332]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  544.462353][T23332]  vfs_read+0x20c/0xa70
[  544.462373][T23332]  ? fdget_pos+0x246/0x320
[  544.462395][T23332]  ? __pfx___mutex_lock+0x10/0x10
[  544.462417][T23332]  ? __pfx_vfs_read+0x10/0x10
[  544.462441][T23332]  ? __fget_files+0x2a/0x420
[  544.462462][T23332]  ? __fget_files+0x3a0/0x420
[  544.462479][T23332]  ? __fget_files+0x2a/0x420
[  544.462505][T23332]  ksys_read+0x150/0x270
[  544.462529][T23332]  ? __pfx_ksys_read+0x10/0x10
[  544.462562][T23332]  do_syscall_64+0xe2/0xf80
[  544.462582][T23332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.462597][T23332]  ? trace_irq_disable+0x37/0x100
[  544.462614][T23332]  ? clear_bhb_loop+0x60/0xb0
[  544.462634][T23332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.462650][T23332] RIP: 0033:0x7fdfbf95b78e
[  544.462666][T23332] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  544.462680][T23332] RSP: 002b:00007fdfc08d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  544.462698][T23332] RAX: ffffffffffffffda RBX: 00007fdfc08d46c0 RCX: 00007fdfbf95b78e
[  544.462711][T23332] RDX: 000000000000000f RSI: 00007fdfc08d40a0 RDI: 0000000000000004
[  544.462721][T23332] RBP: 00007fdfc08d4090 R08: 0000000000000000 R09: 0000000000000000
[  544.462732][T23332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  544.462742][T23332] R13: 00007fdfbfc16038 R14: 00007fdfbfc15fa0 R15: 00007ffcb997ab98
[  544.462772][T23332]  </TASK>
[  544.751370][T23337] xt_policy: output policy not valid in PREROUTING and INPUT
[  544.817809][T23275] lo speed is unknown, defaulting to 1000
[  544.961121][T23343] netlink: 'syz.4.4798': attribute type 11 has an invalid length.
[  545.026570][T23349] sctp: [Deprecated]: syz.3.4797 (pid 23349) Use of int in max_burst socket option deprecated.
[  545.026570][T23349] Use struct sctp_assoc_value instead
[  545.082802][T23352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4799'.
[  545.159939][T23355] FAULT_INJECTION: forcing a failure.
[  545.159939][T23355] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  545.180368][T23355] CPU: 1 UID: 0 PID: 23355 Comm: syz.0.4800 Not tainted syzkaller #0 PREEMPT(full) 
[  545.180392][T23355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  545.180402][T23355] Call Trace:
[  545.180409][T23355]  <TASK>
[  545.180417][T23355]  dump_stack_lvl+0xe8/0x150
[  545.180443][T23355]  should_fail_ex+0x412/0x560
[  545.180467][T23355]  _copy_to_user+0x31/0xb0
[  545.180491][T23355]  simple_read_from_buffer+0xe1/0x170
[  545.180511][T23355]  proc_fail_nth_read+0x1bb/0x230
[  545.180537][T23355]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  545.180562][T23355]  ? rw_verify_area+0x2a6/0x4d0
[  545.180582][T23355]  ? tun_chr_write_iter+0xe0/0x200
[  545.180599][T23355]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  545.180621][T23355]  vfs_read+0x20c/0xa70
[  545.180640][T23355]  ? fdget_pos+0x246/0x320
[  545.180663][T23355]  ? __pfx___mutex_lock+0x10/0x10
[  545.180685][T23355]  ? __pfx_vfs_read+0x10/0x10
[  545.180708][T23355]  ? __fget_files+0x2a/0x420
[  545.180730][T23355]  ? __fget_files+0x3a0/0x420
[  545.180747][T23355]  ? __fget_files+0x2a/0x420
[  545.180772][T23355]  ksys_read+0x150/0x270
[  545.180796][T23355]  ? __pfx_ksys_read+0x10/0x10
[  545.180829][T23355]  do_syscall_64+0xe2/0xf80
[  545.180848][T23355]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.180864][T23355]  ? trace_irq_disable+0x37/0x100
[  545.180880][T23355]  ? clear_bhb_loop+0x60/0xb0
[  545.180908][T23355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.180924][T23355] RIP: 0033:0x7f599655b78e
[  545.180941][T23355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  545.180955][T23355] RSP: 002b:00007f59974f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  545.180973][T23355] RAX: ffffffffffffffda RBX: 00007f59974f26c0 RCX: 00007f599655b78e
[  545.180986][T23355] RDX: 000000000000000f RSI: 00007f59974f20a0 RDI: 0000000000000005
[  545.180996][T23355] RBP: 00007f59974f2090 R08: 0000000000000000 R09: 0000000000000000
[  545.181007][T23355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  545.181017][T23355] R13: 00007f5996816038 R14: 00007f5996815fa0 R15: 00007fffae658bc8
[  545.181048][T23355]  </TASK>
[  545.480178][T23359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4802'.
[  545.553004][T23362] netlink: 'syz.0.4803': attribute type 4 has an invalid length.
[  545.593365][T23361] netlink: 'syz.0.4803': attribute type 4 has an invalid length.
[  545.632188][T23364] netlink: 'syz.4.4804': attribute type 1 has an invalid length.
[  545.640721][T23362] netlink: 'syz.0.4803': attribute type 4 has an invalid length.
[  545.709368][T23368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4804'.
[  545.724632][T23364] bond4: entered promiscuous mode
[  545.731725][T23364] 8021q: adding VLAN 0 to HW filter on device bond4
[  545.764127][T23368] bond4: entered allmulticast mode
[  545.797469][T23364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4804'.
[  545.847594][T23364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4804'.
[  546.005013][T23376] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  546.124667][T23382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4810'.
[  546.552738][T23398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4815'.
[  546.885226][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  546.893415][    C0] lec:lec_tx_timeout: lec0
[  546.898358][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  547.390049][T23417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4822'.
[  547.517510][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.587817][T23419] xt_ecn: cannot match TCP bits for non-tcp packets
[  547.897545][T23435] netlink: 'syz.2.4826': attribute type 21 has an invalid length.
[  547.924372][T23435] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4826'.
[  547.971296][T23440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4829'.
[  548.186484][T23447] bridge_slave_0: left allmulticast mode
[  548.192179][T23447] bridge_slave_0: left promiscuous mode
[  548.205255][T23447] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.239491][T23447] team0: Port device team_slave_0 removed
[  548.272278][T23447] team0: Port device team_slave_1 removed
[  548.296020][T23447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  548.303870][T23447] batman_adv: batadv0: Removing interface: batadv_slave_0
[  548.326106][T23447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  548.344409][T23447] batman_adv: batadv0: Removing interface: batadv_slave_1
[  548.359594][T23447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  548.519269][T23463] openvswitch: netlink: IP tunnel dst address not specified
[  548.534245][T23465] Cannot find del_set index 1 as target
[  548.633700][T23469] netlink: 'syz.3.4839': attribute type 2 has an invalid length.
[  548.658215][T23470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.667289][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.001480][T23492] syz.2.4847: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  549.021074][T23492] CPU: 1 UID: 0 PID: 23492 Comm: syz.2.4847 Not tainted syzkaller #0 PREEMPT(full) 
[  549.021102][T23492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  549.021114][T23492] Call Trace:
[  549.021122][T23492]  <TASK>
[  549.021130][T23492]  dump_stack_lvl+0xe8/0x150
[  549.021161][T23492]  warn_alloc+0x249/0x340
[  549.021183][T23492]  ? stack_trace_save+0xa9/0x100
[  549.021209][T23492]  ? __pfx_warn_alloc+0x10/0x10
[  549.021236][T23492]  ? kasan_save_track+0x4f/0x80
[  549.021252][T23492]  ? kasan_save_track+0x3e/0x80
[  549.021267][T23492]  ? __kasan_kmalloc+0x93/0xb0
[  549.021283][T23492]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  549.021301][T23492]  ? xskq_create+0x56/0x170
[  549.021320][T23492]  ? xsk_setsockopt+0x54c/0x990
[  549.021337][T23492]  ? do_sock_setsockopt+0x17c/0x1b0
[  549.021359][T23492]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  549.021377][T23492]  ? do_syscall_64+0xe2/0xf80
[  549.021403][T23492]  __vmalloc_node_range_noprof+0x132/0x1730
[  549.021450][T23492]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  549.021474][T23492]  ? __kasan_kmalloc+0x93/0xb0
[  549.021499][T23492]  vmalloc_user_noprof+0xad/0xe0
[  549.021517][T23492]  ? xskq_create+0xbf/0x170
[  549.021537][T23492]  xskq_create+0xbf/0x170
[  549.021560][T23492]  xsk_init_queue+0xad/0x110
[  549.021583][T23492]  xsk_setsockopt+0x54c/0x990
[  549.021606][T23492]  ? __pfx_xsk_setsockopt+0x10/0x10
[  549.021627][T23492]  ? __pfx_aa_sk_perm+0x10/0x10
[  549.021651][T23492]  ? aa_sock_opt_perm+0xff/0x1a0
[  549.021676][T23492]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  549.021693][T23492]  ? __pfx_xsk_setsockopt+0x10/0x10
[  549.021713][T23492]  do_sock_setsockopt+0x17c/0x1b0
[  549.021742][T23492]  __x64_sys_setsockopt+0x13d/0x1b0
[  549.021772][T23492]  do_syscall_64+0xe2/0xf80
[  549.021808][T23492]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.021827][T23492]  ? trace_irq_disable+0x37/0x100
[  549.021844][T23492]  ? clear_bhb_loop+0x60/0xb0
[  549.021865][T23492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.021884][T23492] RIP: 0033:0x7f115739aeb9
[  549.021901][T23492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  549.021917][T23492] RSP: 002b:00007f115816f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  549.021936][T23492] RAX: ffffffffffffffda RBX: 00007f1157615fa0 RCX: 00007f115739aeb9
[  549.021950][T23492] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  549.021960][T23492] RBP: 00007f1157408c1f R08: 0000000000000004 R09: 0000000000000000
[  549.021972][T23492] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  549.021984][T23492] R13: 00007f1157616038 R14: 00007f1157615fa0 R15: 00007fffce552908
[  549.022015][T23492]  </TASK>
[  549.022839][T23492] Mem-Info:
[  549.339124][T23492] active_anon:6421 inactive_anon:0 isolated_anon:0
[  549.339124][T23492]  active_file:3159 inactive_file:40437 isolated_file:0
[  549.339124][T23492]  unevictable:768 dirty:299 writeback:0
[  549.339124][T23492]  slab_reclaimable:13305 slab_unreclaimable:187038
[  549.339124][T23492]  mapped:31373 shmem:1357 pagetables:1486
[  549.339124][T23492]  sec_pagetables:0 bounce:0
[  549.339124][T23492]  kernel_misc_reclaimable:0
[  549.339124][T23492]  free:1219971 free_pcp:20987 free_cma:0
[  549.421628][T23492] Node 0 active_anon:25584kB inactive_anon:0kB active_file:12636kB inactive_file:161552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126792kB dirty:1192kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15984kB pagetables:5696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  549.484942][T23492] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  549.525048][T23492] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  549.555524][T23492] lowmem_reserve[]: 0 2494 2495 2495 2495
[  549.561721][T23492] Node 0 DMA32 free:966396kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25484kB inactive_anon:0kB active_file:12636kB inactive_file:161552kB unevictable:1536kB writepending:1192kB zspages:0kB present:3129332kB managed:2553976kB mlocked:0kB bounce:0kB free_pcp:77376kB local_pcp:58448kB free_cma:0kB
[  549.628051][T23492] lowmem_reserve[]: 0 0 1 1 1
[  549.633143][T23492] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  549.664125][T23492] lowmem_reserve[]: 0 0 0 0 0
[  549.669404][T23492] Node 1 Normal free:3898664kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7096kB local_pcp:768kB free_cma:0kB
[  549.703658][T23492] lowmem_reserve[]: 0 0 0 0 0
[  549.708590][T23492] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  549.722101][T23492] Node 0 DMA32: 4887*4kB (UME) 5135*8kB (UM) 3051*16kB (UM) 905*32kB (UM) 272*64kB (UME) 261*128kB (UM) 256*256kB (UME) 189*512kB (UME) 181*1024kB (UM) 88*2048kB (UME) 61*4096kB (UM) = 966948kB
[  549.789118][T23492] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  549.806738][T23492] Node 1 Normal: 180*4kB (UME) 51*8kB (UME) 42*16kB (UME) 209*32kB (UME) 80*64kB (UME) 8*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3898664kB
[  549.825866][T23492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  549.837380][T23492] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  549.847194][T23492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  549.847335][T23526] netlink: 'syz.0.4854': attribute type 1 has an invalid length.
[  549.857473][T23492] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  549.875826][T23492] 44949 total pagecache pages
[  549.880862][T23492] 0 pages in swap cache
[  549.915155][T23492] Free swap  = 124996kB
[  549.919376][T23492] Total swap = 124996kB
[  549.923539][T23492] 2097051 pages RAM
[  549.938298][T23492] 0 pages HighMem/MovableOnly
[  549.943107][T23492] 426659 pages reserved
[  549.947420][T23492] 0 pages cma reserved
[  550.152960][T23542] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  550.341373][T23547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  550.376362][T23537] netlink: 'syz.0.4858': attribute type 1 has an invalid length.
[  550.519162][T23537] 8021q: adding VLAN 0 to HW filter on device bond10
[  550.533917][T23546] tipc: Disabling bearer <eth:syzkaller0>
[  550.659961][T23562] __nla_validate_parse: 5 callbacks suppressed
[  550.659982][T23562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4867'.
[  550.715928][T23566] lo: left allmulticast mode
[  550.726155][T23566] veth0_to_hsr: left allmulticast mode
[  550.734987][   T56] block nbd1: Possible stuck request ffff888025a18000: control (read@0,1024B). Runtime 180 seconds
[  550.746023][T23566] macvtap1: left promiscuous mode
[  550.746755][T23566] bond2: left promiscuous mode
[  550.753208][   T56] block nbd1: Possible stuck request ffff888025a18200: control (read@1024,1024B). Runtime 180 seconds
[  550.767312][   T56] block nbd1: Possible stuck request ffff888025a18400: control (read@2048,1024B). Runtime 180 seconds
[  550.778494][   T56] block nbd1: Possible stuck request ffff888025a18600: control (read@3072,1024B). Runtime 180 seconds
[  550.779290][T23568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4869'.
[  550.805945][T23566] macsec1: left promiscuous mode
[  550.815016][T23566] macsec1: left allmulticast mode
[  550.826205][T23566] geneve2: left promiscuous mode
[  550.831399][T23566] geneve2: left allmulticast mode
[  550.840103][T23566] gretap1: left promiscuous mode
[  550.857527][T23566] bond4: left promiscuous mode
[  550.869050][T23566] bond4: left allmulticast mode
[  550.948984][T23573] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4869'.
[  550.958365][T23573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4869'.
[  551.071095][T23575] `: Port device bond0 removed
[  551.087236][T23575] bond0: (slave dummy0): Releasing backup interface
[  551.117791][T23575] dummy0: left promiscuous mode
[  551.124058][T23575] �x9�: left allmulticast mode
[  551.136136][T23575] �x9�: left promiscuous mode
[  551.147850][T23575] bridge0: port 1(
1�x9�) entered disabled state
[  551.162481][T23584] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4873'.
[  551.189367][T23575] bridge_slave_1: left allmulticast mode
[  551.206778][T23575] bridge_slave_1: left promiscuous mode
[  551.212858][T23575] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.236437][T23575] bond0: (slave 
3
0
): Releasing backup interface
[  551.244155][T23575] 
: left promiscuous mode
[  551.253118][T23575] bond0: (slave bond_slave_1): Releasing backup interface
[  551.263547][T23575] bond_slave_1: left promiscuous mode
[  551.270314][T23587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4875'.
[  551.282406][T23575] `: Port device team_slave_0 removed
[  551.290698][T23575] `: Port device team_slave_1 removed
[  551.296853][T23575] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.315255][T23575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  551.332666][T23579] netlink: 23 bytes leftover after parsing attributes in process `syz.1.4873'.
[  551.360793][T23579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'.
[  551.381878][T23579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'.
[  551.421565][T23586] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  551.435506][T23586] bond5 (unregistering): Released all slaves
[  551.464165][T23587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4875'.
[  551.474069][T23587] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  551.798860][T23622] netlink: 'syz.1.4885': attribute type 29 has an invalid length.
[  551.846937][T23625] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  551.883925][T23619] netlink: 'syz.1.4885': attribute type 29 has an invalid length.
[  551.904952][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  551.913028][    C0] lec:lec_tx_timeout: lec0
[  551.914461][T23572] wg1 speed is unknown, defaulting to 1000
[  551.917950][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  552.155586][T23638] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  552.257595][T23572] lo speed is unknown, defaulting to 1000
[  552.264214][T23635] siw: device registration error -23
[  552.432999][T23657] Cannot find del_set index 1 as target
[  552.514090][T23660] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  552.633193][T23663] bond3: option miimon: invalid value (18446744073709551607)
[  552.647778][T23663] bond3: option miimon: allowed values 0 - 2147483647
[  552.651836][T23669] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  552.672281][T23663] bond3 (unregistering): Released all slaves
[  552.708555][T23671] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  552.717714][   T52] Bluetooth: hci4: command 0x0405 tx timeout
[  552.745756][T23676] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  553.014579][T23686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  553.283798][T23695] bond5: (slave bond6): Releasing backup interface
[  553.295421][T23695] bond6: left promiscuous mode
[  553.315585][T23695] bond0: (slave bond8): Releasing backup interface
[  553.601917][T23716] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  553.928452][T23744] netlink: 'syz.1.4925': attribute type 23 has an invalid length.
[  553.963404][T23743] bridge4: entered allmulticast mode
[  553.972565][T23743] team0: Port device bridge4 added
[  554.135038][T23756] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  554.345197][T23775] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  554.363198][T23762] syzkaller0: entered promiscuous mode
[  554.384029][T23762] syzkaller0: entered allmulticast mode
[  556.656984][T23765] wg1 speed is unknown, defaulting to 1000
[  556.663169][T23759] tipc: Resetting bearer <eth:syzkaller0>
[  556.733556][T23759] tipc: Disabling bearer <eth:syzkaller0>
[  556.800018][T23812] __nla_validate_parse: 13 callbacks suppressed
[  556.800042][T23812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4941'.
[  556.857608][T23812] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  556.934809][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  556.942894][    C0] lec:lec_tx_timeout: lec0
[  556.948155][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  557.506418][T23774] wg1 speed is unknown, defaulting to 1000
[  557.886926][T23765] lo speed is unknown, defaulting to 1000
[  558.061624][T23842] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  558.117632][T23842] tipc: Resetting bearer <eth:gre0>
[  558.239552][T23762] wg1 speed is unknown, defaulting to 1000
[  558.497521][T23762] lo speed is unknown, defaulting to 1000
[  558.532446][T23774] lo speed is unknown, defaulting to 1000
[  558.984024][T23865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4957'.
[  559.942963][T23897] FAULT_INJECTION: forcing a failure.
[  559.942963][T23897] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  559.963567][T23897] CPU: 0 UID: 0 PID: 23897 Comm: syz.4.4968 Not tainted syzkaller #0 PREEMPT(full) 
[  559.963593][T23897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  559.963604][T23897] Call Trace:
[  559.963611][T23897]  <TASK>
[  559.963619][T23897]  dump_stack_lvl+0xe8/0x150
[  559.963646][T23897]  should_fail_ex+0x412/0x560
[  559.963672][T23897]  _copy_from_user+0x2d/0xb0
[  559.963696][T23897]  ___sys_sendmsg+0x1c6/0x360
[  559.963717][T23897]  ? __lock_acquire+0x6b5/0x2cf0
[  559.963744][T23897]  ? __pfx____sys_sendmsg+0x10/0x10
[  559.963813][T23897]  ? __fget_files+0x2a/0x420
[  559.963831][T23897]  ? __fget_files+0x3a0/0x420
[  559.963859][T23897]  __x64_sys_sendmsg+0x1bd/0x2a0
[  559.963883][T23897]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  559.963915][T23897]  ? __pfx_ksys_write+0x10/0x10
[  559.963950][T23897]  do_syscall_64+0xe2/0xf80
[  559.963971][T23897]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.963988][T23897]  ? trace_irq_disable+0x37/0x100
[  559.964005][T23897]  ? clear_bhb_loop+0x60/0xb0
[  559.964025][T23897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.964042][T23897] RIP: 0033:0x7f151659aeb9
[  559.964059][T23897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  559.964074][T23897] RSP: 002b:00007f1517398028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  559.964094][T23897] RAX: ffffffffffffffda RBX: 00007f1516815fa0 RCX: 00007f151659aeb9
[  559.964107][T23897] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  559.964119][T23897] RBP: 00007f1517398090 R08: 0000000000000000 R09: 0000000000000000
[  559.964131][T23897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  559.964142][T23897] R13: 00007f1516816038 R14: 00007f1516815fa0 R15: 00007fffd034f538
[  559.964172][T23897]  </TASK>
[  560.033730][T23877] wg1 speed is unknown, defaulting to 1000
[  560.176966][T23901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4970'.
[  560.395633][T23906] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4972'.
[  560.424121][T23907] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4972'.
[  560.559166][T23913] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4974'.
[  560.663615][T23877] lo speed is unknown, defaulting to 1000
[  560.988178][T23940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4981'.
[  561.384298][T23927] wg1 speed is unknown, defaulting to 1000
[  561.665948][T23964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  561.673263][T23964] IPv6: NLM_F_CREATE should be set when creating new route
[  561.680674][T23964] IPv6: NLM_F_CREATE should be set when creating new route
[  561.811030][T23969] syzkaller0: entered promiscuous mode
[  561.824168][T23971] x_tables: duplicate underflow at hook 2
[  561.830241][T23969] syzkaller0: entered allmulticast mode
[  561.879245][T23969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  561.889028][T23965] tipc: Resetting bearer <eth:syzkaller0>
[  561.912817][T23965] tipc: Disabling bearer <eth:syzkaller0>
[  561.926743][T23974] netlink: 'syz.2.4991': attribute type 13 has an invalid length.
[  561.935275][T23974] netlink: 'syz.2.4991': attribute type 17 has an invalid length.
[  561.954842][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  561.963162][    C0] lec:lec_tx_timeout: lec0
[  561.968209][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  561.994175][T23974] syz_tun: left promiscuous mode
[  562.043231][T23977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4993'.
[  562.092651][T23974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  562.110763][T23927] lo speed is unknown, defaulting to 1000
[  562.529704][T23991] delete_channel: no stack
[  562.624391][T23998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5000'.
[  562.819758][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5004'.
[  562.830697][T24005] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  562.844093][T24005] syzkaller0: entered promiscuous mode
[  562.854260][T24005] syzkaller0: entered allmulticast mode
[  562.918434][T24005] tipc: Resetting bearer <eth:syzkaller0>
[  562.942534][T24005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5003'.
[  562.979683][T24005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5003'.
[  563.005464][T24005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5003'.
[  563.017836][T24004] tipc: Resetting bearer <eth:syzkaller0>
[  563.067190][T24004] tipc: Disabling bearer <eth:syzkaller0>
[  563.096542][T24015] ip6gre2: entered allmulticast mode
[  563.350419][T24027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  563.382320][T24031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5012'.
[  563.402230][T24031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5012'.
[  563.414423][T24027] syzkaller0: entered promiscuous mode
[  563.426265][T24027] syzkaller0: entered allmulticast mode
[  563.488190][T24026] tipc: Resetting bearer <eth:syzkaller0>
[  563.516545][T24031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5012'.
[  563.554983][T24031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5012'.
[  563.568977][T24026] tipc: Disabling bearer <eth:syzkaller0>
[  564.646757][T24102] netlink: 'syz.3.5029': attribute type 6 has an invalid length.
[  564.681327][T24102] netlink: 'syz.3.5029': attribute type 6 has an invalid length.
[  564.705199][T24102] netlink: 'syz.3.5029': attribute type 6 has an invalid length.
[  564.733600][T24102] netlink: 'syz.3.5029': attribute type 6 has an invalid length.
[  564.753909][T24102] netlink: 'syz.3.5029': attribute type 6 has an invalid length.
[  564.766352][T24102] netlink: 'syz.3.5029': attribute type 6 has an invalid length.
[  564.801452][T24105] gretap2: entered allmulticast mode
[  564.847030][T24106] gretap2: entered allmulticast mode
[  564.862278][T24102] netlink: 'syz.3.5029': attribute type 6 has an invalid length.
[  564.872638][T24120] tipc: Resetting bearer <eth:gre0>
[  564.885217][T24102] netlink: 'syz.3.5029': attribute type 6 has an invalid length.
[  565.082698][T24128] xt_TCPMSS: Only works on TCP SYN packets
[  565.573643][T24139] wg1 speed is unknown, defaulting to 1000
[  565.723180][T24169] can: request_module (can-proto-3) failed.
[  565.840989][T24179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  565.848474][T24179] IPv6: NLM_F_CREATE should be set when creating new route
[  566.117504][T24195] vlan2: entered promiscuous mode
[  566.143093][T24195] veth1: entered promiscuous mode
[  566.250521][T24196] vlan2: entered promiscuous mode
[  566.303121][T24139] lo speed is unknown, defaulting to 1000
[  566.329315][T24198] 8021q: adding VLAN 0 to HW filter on device bond0
[  566.341105][T24198] bond0: (slave rose0): Enslaving as an active interface with an up link
[  566.350068][T24174] wg1 speed is unknown, defaulting to 1000
[  566.698318][T24217] syzkaller0: entered promiscuous mode
[  566.703848][T24217] syzkaller0: entered allmulticast mode
[  566.888628][T24174] lo speed is unknown, defaulting to 1000
[  566.974839][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  566.982950][    C0] lec:lec_tx_timeout: lec0
[  566.987673][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  567.057863][T24228] IPVS: Scheduler module ip_vs_ not found
[  567.344461][T24242] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.571126][T24242] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.687806][T24242] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.782358][T24248] wg1 speed is unknown, defaulting to 1000
[  567.911063][T24242] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.955773][T24266] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  568.116069][T19563] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  568.144741][T19563] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  568.178909][T24274] validate_nla: 58 callbacks suppressed
[  568.178928][T24274] netlink: 'syz.2.5079': attribute type 13 has an invalid length.
[  569.003813][T24278] __nla_validate_parse: 25 callbacks suppressed
[  569.003835][T24278] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5080'.
[  569.060153][   T52] Bluetooth: hci4: link tx timeout
[  569.066516][   T52] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  569.078387][   T52] Bluetooth: hci4: link tx timeout
[  569.083569][   T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  569.359107][ T6107] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  569.367818][ T6107] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  569.376889][ T6107] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  569.391938][T24248] lo speed is unknown, defaulting to 1000
[  569.405286][ T6107] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  569.444879][ T6107] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  569.463592][ T6107] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  569.484284][ T6107] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  569.528176][ T6107] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  569.537207][ T6107] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  569.547119][ T6107] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.028087][T24310] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5088'.
[  570.116246][T24309] IPVS: length: 132 != 8
[  570.140853][T24309] pimreg: entered allmulticast mode
[  570.169268][T24309] pimreg: left allmulticast mode
[  570.244954][T24318] netlink: 'syz.4.5090': attribute type 1 has an invalid length.
[  570.269481][T24288] syzkaller0: entered promiscuous mode
[  570.281943][T24288] syzkaller0: entered allmulticast mode
[  570.356595][T24284] wg1 speed is unknown, defaulting to 1000
[  570.896759][T24326] geneve0: entered promiscuous mode
[  571.069190][T24284] lo speed is unknown, defaulting to 1000
[  571.115705][   T52] Bluetooth: hci4: command 0x0405 tx timeout
[  571.165339][T24335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5093'.
[  571.594400][T24349] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  571.608365][T24354] netlink: 'syz.4.5100': attribute type 13 has an invalid length.
[  571.618588][T24349] bond3 (unregistering): Released all slaves
[  571.994889][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  572.003058][    C0] lec:lec_tx_timeout: lec0
[  572.008504][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  572.458055][T24377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  572.469398][T24377] syzkaller0: entered promiscuous mode
[  572.485087][T24377] syzkaller0: entered allmulticast mode
[  572.586708][T24376] tipc: Resetting bearer <eth:syzkaller0>
[  572.611121][T24386] netlink: 'syz.3.5110': attribute type 32 has an invalid length.
[  572.625116][T24386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5110'.
[  572.686419][T24376] tipc: Disabling bearer <eth:syzkaller0>
[  572.769187][T24386] bond3: option coupled_control: invalid value (12)
[  572.792933][T24391] x_tables: ip6_tables: mh match: only valid for protocol 135
[  572.802508][T24386] bond3 (unregistering): Released all slaves
[  572.829908][T24384] netlink: 'syz.1.5111': attribute type 1 has an invalid length.
[  572.872611][T24384] 8021q: adding VLAN 0 to HW filter on device bond5
[  572.881114][T24391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5112'.
[  572.893659][T24396] pim6reg1: entered promiscuous mode
[  572.901205][T24396] pim6reg1: entered allmulticast mode
[  572.913027][T24391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5112'.
[  572.935516][T24393] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5113'.
[  572.945225][T24391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5112'.
[  572.945325][T24391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5112'.
[  572.952434][T24394] bond5: (slave geneve4): making interface the new active one
[  572.973838][T24394] bond5: (slave geneve4): Enslaving as an active interface with an up link
[  572.986645][T24393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5113'.
[  572.987340][T24398] IPv6: Can't replace route, no match found
[  573.274934][   T52] Bluetooth: hci4: command 0x0405 tx timeout
[  573.360207][T24417] syzkaller0: entered promiscuous mode
[  573.368690][T24417] syzkaller0: entered allmulticast mode
[  573.397821][T24420] netlink: 'syz.4.5120': attribute type 15 has an invalid length.
[  573.432287][T24405] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  573.461972][T24403] tipc: Resetting bearer <eth:syzkaller0>
[  573.568701][T24403] tipc: Disabling bearer <eth:syzkaller0>
[  573.900856][T24444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  573.910835][T24444] syzkaller0: entered promiscuous mode
[  573.917205][T24444] syzkaller0: entered allmulticast mode
[  573.924515][T24446] netlink: 'syz.0.5130': attribute type 14 has an invalid length.
[  573.975899][T24448] netlink: 'syz.3.5131': attribute type 1 has an invalid length.
[  573.995680][T24444] tipc: Resetting bearer <eth:syzkaller0>
[  574.017255][T24443] tipc: Resetting bearer <eth:syzkaller0>
[  574.040674][T24453] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5133'.
[  574.051885][T24453] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5133'.
[  574.062848][T24453] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5133'.
[  574.085893][T24453] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5133'.
[  574.097576][T24443] tipc: Disabling bearer <eth:syzkaller0>
[  574.105339][T24453] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5133'.
[  574.120938][T24453] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5133'.
[  574.131934][T24453] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5133'.
[  574.175964][T24453] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5133'.
[  574.198229][T24453] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5133'.
[  574.226727][T24453] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5133'.
[  574.525746][T24480] netlink: 'syz.4.5142': attribute type 13 has an invalid length.
[  575.469083][T24497] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  575.485931][T24501] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode
[  575.495278][T24501] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode
[  575.668566][T24521] netlink: 'syz.3.5151': attribute type 1 has an invalid length.
[  576.303923][ T5191] udevd[5191]: worker [16226] /devices/virtual/block/nbd1 timeout; kill it
[  576.314255][ T5191] udevd[5191]: seq 24259 '/devices/virtual/block/nbd1' killed
[  577.014811][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  577.022946][    C0] lec:lec_tx_timeout: lec0
[  578.255648][T24573] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  578.273940][T24573] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  578.291599][T24573] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  579.856546][T24662] __nla_validate_parse: 33 callbacks suppressed
[  579.856566][T24662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5185'.
[  579.925772][T24664] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5186'.
[  580.249097][T24678] netlink: 'syz.1.5191': attribute type 1 has an invalid length.
[  580.322473][T24678] bond6: entered promiscuous mode
[  580.340241][T24678] 8021q: adding VLAN 0 to HW filter on device bond6
[  580.438065][T24678] netlink: 'syz.1.5191': attribute type 2 has an invalid length.
[  580.617467][T24692] syzkaller0: entered promiscuous mode
[  580.623003][T24692] syzkaller0: entered allmulticast mode
[  580.642577][T24692] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5195'.
[  580.652155][T24696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5197'.
[  580.795062][   T56] block nbd1: Possible stuck request ffff888025a18000: control (read@0,1024B). Runtime 210 seconds
[  580.806447][   T56] block nbd1: Possible stuck request ffff888025a18200: control (read@1024,1024B). Runtime 210 seconds
[  580.820318][   T56] block nbd1: Possible stuck request ffff888025a18400: control (read@2048,1024B). Runtime 210 seconds
[  580.831636][   T56] block nbd1: Possible stuck request ffff888025a18600: control (read@3072,1024B). Runtime 210 seconds
[  581.172479][T24724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5206'.
[  581.279134][T24722] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5202'.
[  581.305306][T24722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5202'.
[  581.317728][T24722] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5202'.
[  581.407120][T24736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5209'.
[  581.621008][T24748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5213'.
[  581.722847][T24708] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  581.733250][T15249] lec:lec_start_xmit: lec0:No lecd attached
[  581.840302][T24753] netlink: 'syz.3.5215': attribute type 9 has an invalid length.
[  581.851344][T24753] netlink: 'syz.3.5215': attribute type 11 has an invalid length.
[  581.872021][T24760] unsupported nla_type 142
[  581.885359][T24753] netlink: 'syz.3.5215': attribute type 12 has an invalid length.
[  581.937788][T24738] wg1 speed is unknown, defaulting to 1000
[  582.462201][T24738] lo speed is unknown, defaulting to 1000
[  582.663284][T24802] netlink: 'syz.3.5228': attribute type 12 has an invalid length.
[  582.793734][T24763] wg1 speed is unknown, defaulting to 1000
[  582.873449][T24807] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  582.907815][T24807] bond7 (unregistering): Released all slaves
[  583.282059][T24763] lo speed is unknown, defaulting to 1000
[  583.289884][T24809] wg1 speed is unknown, defaulting to 1000
[  583.956303][T24855] ip6erspan0: entered promiscuous mode
[  584.055709][T24809] lo speed is unknown, defaulting to 1000
[  584.652010][T24870] ip6tnl2: entered promiscuous mode
[  584.695196][T24870] ip6tnl2: entered allmulticast mode
[  585.071264][T24874] __nla_validate_parse: 5 callbacks suppressed
[  585.071284][T24874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5251'.
[  585.160840][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5251'.
[  585.181944][T24881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5251'.
[  585.227049][T23391] block nbd8: Receive control failed (result -32)
[  585.397981][T24889] netlink: 'syz.0.5254': attribute type 1 has an invalid length.
[  585.616201][T24889] macvlan0: entered promiscuous mode
[  585.625035][T24889] macvlan0: entered allmulticast mode
[  585.635587][T24889] bond11: entered promiscuous mode
[  585.641478][T24889] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  585.667053][T24889] bond11: left promiscuous mode
[  585.804477][T24900] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5255'.
[  585.836521][T24902] IPv6: Can't replace route, no match found
[  586.030353][T24910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5260'.
[  586.072455][T24919] Cannot find del_set index 2 as target
[  586.093178][T24919] Cannot find del_set index 2 as target
[  586.388479][T24944] FAULT_INJECTION: forcing a failure.
[  586.388479][T24944] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  586.402765][T24944] CPU: 1 UID: 0 PID: 24944 Comm: syz.2.5269 Not tainted syzkaller #0 PREEMPT(full) 
[  586.402792][T24944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  586.402802][T24944] Call Trace:
[  586.402810][T24944]  <TASK>
[  586.402819][T24944]  dump_stack_lvl+0xe8/0x150
[  586.402845][T24944]  should_fail_ex+0x412/0x560
[  586.402870][T24944]  _copy_from_iter+0x1d3/0x1670
[  586.402900][T24944]  ? rcu_is_watching+0x15/0xb0
[  586.402929][T24944]  ? __pfx__copy_from_iter+0x10/0x10
[  586.402947][T24944]  ? kmem_cache_alloc_node_noprof+0x473/0x6f0
[  586.402979][T24944]  ? netlink_sendmsg+0x650/0xb40
[  586.402997][T24944]  ? skb_put+0x11b/0x210
[  586.403021][T24944]  netlink_sendmsg+0x6c0/0xb40
[  586.403049][T24944]  ? __pfx_netlink_sendmsg+0x10/0x10
[  586.403072][T24944]  ? aa_sock_msg_perm+0xf1/0x1b0
[  586.403097][T24944]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  586.403117][T24944]  ? __pfx_netlink_sendmsg+0x10/0x10
[  586.403135][T24944]  ____sys_sendmsg+0xa68/0xad0
[  586.403157][T24944]  ? __might_fault+0xaf/0x130
[  586.403186][T24944]  ? __pfx_____sys_sendmsg+0x10/0x10
[  586.403216][T24944]  ? import_iovec+0x73/0xa0
[  586.403241][T24944]  ___sys_sendmsg+0x2a5/0x360
[  586.403261][T24944]  ? __lock_acquire+0x6b5/0x2cf0
[  586.403286][T24944]  ? __pfx____sys_sendmsg+0x10/0x10
[  586.403341][T24944]  ? __fget_files+0x2a/0x420
[  586.403359][T24944]  ? __fget_files+0x3a0/0x420
[  586.403386][T24944]  __x64_sys_sendmsg+0x1bd/0x2a0
[  586.403410][T24944]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  586.403441][T24944]  ? __pfx_ksys_write+0x10/0x10
[  586.403475][T24944]  do_syscall_64+0xe2/0xf80
[  586.403496][T24944]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.403512][T24944]  ? trace_irq_disable+0x37/0x100
[  586.403529][T24944]  ? clear_bhb_loop+0x60/0xb0
[  586.403547][T24944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.403561][T24944] RIP: 0033:0x7f115739aeb9
[  586.403577][T24944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.403591][T24944] RSP: 002b:00007f115816f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  586.403609][T24944] RAX: ffffffffffffffda RBX: 00007f1157615fa0 RCX: 00007f115739aeb9
[  586.403622][T24944] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  586.403633][T24944] RBP: 00007f115816f090 R08: 0000000000000000 R09: 0000000000000000
[  586.403644][T24944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  586.403655][T24944] R13: 00007f1157616038 R14: 00007f1157615fa0 R15: 00007fffce552908
[  586.403684][T24944]  </TASK>
[  586.827016][T24959] bond0: (slave sit0): Error: Device type is different from other slaves
[  586.875163][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5140 ms
[  586.883256][    C0] lec:lec_tx_timeout: lec0
[  586.892496][T24962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5274'.
[  586.904386][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5273'.
[  586.942716][T24962] : renamed from erspan0
[  586.962646][T24962] : entered promiscuous mode
[  586.972463][T24962] : entered allmulticast mode
[  587.250734][T24978] bridge_slave_0: entered promiscuous mode
[  587.479105][T24996] FAULT_INJECTION: forcing a failure.
[  587.479105][T24996] name failslab, interval 1, probability 0, space 0, times 0
[  587.504962][T24996] CPU: 1 UID: 0 PID: 24996 Comm: syz.1.5285 Not tainted syzkaller #0 PREEMPT(full) 
[  587.504989][T24996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  587.505000][T24996] Call Trace:
[  587.505007][T24996]  <TASK>
[  587.505016][T24996]  dump_stack_lvl+0xe8/0x150
[  587.505043][T24996]  should_fail_ex+0x412/0x560
[  587.505078][T24996]  should_failslab+0xa8/0x100
[  587.505099][T24996]  kmem_cache_alloc_noprof+0x87/0x6e0
[  587.505121][T24996]  ? __netlink_lookup+0xc6/0x8b0
[  587.505141][T24996]  ? skb_clone+0x212/0x3a0
[  587.505168][T24996]  skb_clone+0x212/0x3a0
[  587.505194][T24996]  __netlink_deliver_tap+0x404/0x850
[  587.505225][T24996]  ? netlink_deliver_tap+0x2e/0x1b0
[  587.505246][T24996]  netlink_deliver_tap+0x19c/0x1b0
[  587.505266][T24996]  netlink_unicast+0x7e3/0x9b0
[  587.505293][T24996]  ? __pfx_netlink_unicast+0x10/0x10
[  587.505313][T24996]  ? netlink_sendmsg+0x650/0xb40
[  587.505329][T24996]  ? skb_put+0x11b/0x210
[  587.505353][T24996]  netlink_sendmsg+0x813/0xb40
[  587.505381][T24996]  ? __pfx_netlink_sendmsg+0x10/0x10
[  587.505404][T24996]  ? aa_sock_msg_perm+0xf1/0x1b0
[  587.505426][T24996]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  587.505446][T24996]  ? __pfx_netlink_sendmsg+0x10/0x10
[  587.505464][T24996]  ____sys_sendmsg+0xa68/0xad0
[  587.505486][T24996]  ? __might_fault+0xaf/0x130
[  587.505514][T24996]  ? __pfx_____sys_sendmsg+0x10/0x10
[  587.505545][T24996]  ? import_iovec+0x73/0xa0
[  587.505572][T24996]  ___sys_sendmsg+0x2a5/0x360
[  587.505592][T24996]  ? __lock_acquire+0x6b5/0x2cf0
[  587.505618][T24996]  ? __pfx____sys_sendmsg+0x10/0x10
[  587.505675][T24996]  ? __fget_files+0x2a/0x420
[  587.505693][T24996]  ? __fget_files+0x3a0/0x420
[  587.505721][T24996]  __x64_sys_sendmsg+0x1bd/0x2a0
[  587.505745][T24996]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  587.505776][T24996]  ? __pfx_ksys_write+0x10/0x10
[  587.505810][T24996]  do_syscall_64+0xe2/0xf80
[  587.505831][T24996]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.505847][T24996]  ? trace_irq_disable+0x37/0x100
[  587.505863][T24996]  ? clear_bhb_loop+0x60/0xb0
[  587.505883][T24996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.505907][T24996] RIP: 0033:0x7f8f6f79aeb9
[  587.505924][T24996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  587.505938][T24996] RSP: 002b:00007f8f706bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  587.505957][T24996] RAX: ffffffffffffffda RBX: 00007f8f6fa15fa0 RCX: 00007f8f6f79aeb9
[  587.505970][T24996] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  587.505981][T24996] RBP: 00007f8f706bd090 R08: 0000000000000000 R09: 0000000000000000
[  587.505992][T24996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.506003][T24996] R13: 00007f8f6fa16038 R14: 00007f8f6fa15fa0 R15: 00007ffcad3081f8
[  587.506034][T24996]  </TASK>
[  587.858482][T25003] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5288'.
[  587.929477][T25003] syzkaller0: entered promiscuous mode
[  587.947959][T25003] syzkaller0: entered allmulticast mode
[  587.974387][T25002] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5289'.
[  587.984531][T25010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5292'.
[  588.060029][T25006] netlink: 'syz.4.5289': attribute type 2 has an invalid length.
[  588.639852][   T30] audit: type=1800 audit(1770297725.730:11): pid=25026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5296" name="memory.events" dev="tmpfs" ino=2319 res=0 errno=0
[  589.987652][T25040] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  590.005840][T25041] syzkaller0: entered promiscuous mode
[  590.028451][T25041] syzkaller0: entered allmulticast mode
[  590.078664][T25041] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  590.225027][T25067] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  590.342502][T25075] netlink: 'syz.1.5309': attribute type 4 has an invalid length.
[  590.353801][T25076] netlink: 'syz.3.5305': attribute type 4 has an invalid length.
[  590.428210][T25081] netlink: 'syz.0.5311': attribute type 29 has an invalid length.
[  590.626066][T25089] __nla_validate_parse: 2 callbacks suppressed
[  590.626086][T25089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5313'.
[  590.661836][T25089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5313'.
[  590.693108][T25091] netlink: 504 bytes leftover after parsing attributes in process `syz.4.5313'.
[  590.716060][T25093] netlink: 'syz.0.5314': attribute type 1 has an invalid length.
[  590.742583][T25093] netlink: 'syz.0.5314': attribute type 3 has an invalid length.
[  590.768535][T25093] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5314'.
[  590.809514][T25075] batman_adv: batadv0: Removing interface: macsec1
[  590.878913][T25098] Unsupported ieee802154 address type: 0
[  590.906814][T25097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  590.970180][T25097] syzkaller0: entered promiscuous mode
[  590.975940][T25097] syzkaller0: entered allmulticast mode
[  590.982224][T25097] tipc: Resetting bearer <eth:syzkaller0>
[  591.027949][T25095] tipc: Resetting bearer <eth:syzkaller0>
[  591.271745][T25112] netlink: 'syz.1.5320': attribute type 10 has an invalid length.
[  591.339361][T25114] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5320'.
[  592.938246][T25095] tipc: Disabling bearer <eth:syzkaller0>
[  592.946664][T25064] wg1 speed is unknown, defaulting to 1000
[  592.977583][T25112] bond0: (slave wlan1): Opening slave failed
[  593.005933][T25119] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode
[  593.033985][T25119] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode
[  593.509996][T25064] lo speed is unknown, defaulting to 1000
[  593.639746][T25069] wg1 speed is unknown, defaulting to 1000
[  593.691183][T25171] sctp: [Deprecated]: syz.2.5333 (pid 25171) Use of struct sctp_assoc_value in delayed_ack socket option.
[  593.691183][T25171] Use struct sctp_sack_info instead
[  593.857174][T25173] netlink: 320 bytes leftover after parsing attributes in process `syz.2.5334'.
[  594.067706][T25158] wg1 speed is unknown, defaulting to 1000
[  594.077177][T25069] lo speed is unknown, defaulting to 1000
[  594.083566][T25128] wg1 speed is unknown, defaulting to 1000
[  594.585966][T25128] lo speed is unknown, defaulting to 1000
[  594.666626][T25158] lo speed is unknown, defaulting to 1000
[  594.908476][T25189] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5338'.
[  595.399763][T25197] syzkaller0: entered promiscuous mode
[  595.408526][T25197] syzkaller0: entered allmulticast mode
[  595.438731][T25197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  595.453779][T25196] tipc: Resetting bearer <eth:syzkaller0>
[  595.492088][T25196] tipc: Disabling bearer <eth:syzkaller0>
[  595.691118][T25200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5343'.
[  595.750565][T25200] geneve2: entered promiscuous mode
[  595.751452][T25202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5344'.
[  595.765543][T25202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5344'.
[  595.783461][T19563] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.798181][T19563] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.838001][T19563] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.854386][T19563] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  596.245651][T25228] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5352'.
[  596.276858][T25228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5352'.
[  596.483214][T25243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5356'.
[  596.664341][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5355'.
[  596.673849][T25249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5355'.
[  596.904930][T25263] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5361'.
[  596.914219][T25263] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5361'.
[  597.285519][T25283] tipc: Enabled bearer <eth:ipvlan1>, priority 10
[  597.345761][T25286] FAULT_INJECTION: forcing a failure.
[  597.345761][T25286] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  597.391605][T25286] CPU: 1 UID: 0 PID: 25286 Comm: syz.1.5367 Not tainted syzkaller #0 PREEMPT(full) 
[  597.391631][T25286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  597.391641][T25286] Call Trace:
[  597.391649][T25286]  <TASK>
[  597.391657][T25286]  dump_stack_lvl+0xe8/0x150
[  597.391684][T25286]  should_fail_ex+0x412/0x560
[  597.391709][T25286]  _copy_to_user+0x31/0xb0
[  597.391734][T25286]  simple_read_from_buffer+0xe1/0x170
[  597.391757][T25286]  proc_fail_nth_read+0x1bb/0x230
[  597.391782][T25286]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  597.391807][T25286]  ? rw_verify_area+0x2a6/0x4d0
[  597.391828][T25286]  ? __lock_acquire+0x6b5/0x2cf0
[  597.391849][T25286]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  597.391872][T25286]  vfs_read+0x20c/0xa70
[  597.391892][T25286]  ? fdget_pos+0x246/0x320
[  597.391915][T25286]  ? __pfx___mutex_lock+0x10/0x10
[  597.391938][T25286]  ? __pfx_vfs_read+0x10/0x10
[  597.391962][T25286]  ? __fget_files+0x2a/0x420
[  597.391984][T25286]  ? __fget_files+0x3a0/0x420
[  597.392001][T25286]  ? __fget_files+0x2a/0x420
[  597.392027][T25286]  ksys_read+0x150/0x270
[  597.392053][T25286]  ? __pfx_ksys_read+0x10/0x10
[  597.392087][T25286]  do_syscall_64+0xe2/0xf80
[  597.392108][T25286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.392124][T25286]  ? trace_irq_disable+0x37/0x100
[  597.392141][T25286]  ? clear_bhb_loop+0x60/0xb0
[  597.392162][T25286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.392179][T25286] RIP: 0033:0x7f8f6f75b78e
[  597.392197][T25286] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  597.392210][T25286] RSP: 002b:00007f8f7069bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  597.392229][T25286] RAX: ffffffffffffffda RBX: 00007f8f7069c6c0 RCX: 00007f8f6f75b78e
[  597.392242][T25286] RDX: 000000000000000f RSI: 00007f8f7069c0a0 RDI: 0000000000000007
[  597.392253][T25286] RBP: 00007f8f7069c090 R08: 0000000000000000 R09: 0000000000000000
[  597.392264][T25286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  597.392275][T25286] R13: 00007f8f6fa16128 R14: 00007f8f6fa16090 R15: 00007ffcad3081f8
[  597.392305][T25286]  </TASK>
[  597.619602][T25288] netlink: 'syz.2.5370': attribute type 1 has an invalid length.
[  597.710803][T25288] bond6: entered promiscuous mode
[  597.736735][T25288] bond6: entered allmulticast mode
[  597.744254][T25305] netlink: 'syz.1.5372': attribute type 1 has an invalid length.
[  597.758391][T25288] 8021q: adding VLAN 0 to HW filter on device bond6
[  597.800161][T25291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  597.808235][T25291] syzkaller0: entered promiscuous mode
[  597.814471][T25291] syzkaller0: entered allmulticast mode
[  597.850502][T25291] tipc: Resetting bearer <eth:syzkaller0>
[  597.862332][T25290] tipc: Resetting bearer <eth:syzkaller0>
[  597.886204][T25290] tipc: Disabling bearer <eth:syzkaller0>
[  597.890373][T25315] sctp: [Deprecated]: syz.4.5374 (pid 25315) Use of int in max_burst socket option.
[  597.890373][T25315] Use struct sctp_assoc_value instead
[  597.919762][T25288] erspan0: entered allmulticast mode
[  597.932076][T25288] bond6: (slave erspan0): making interface the new active one
[  597.940378][T25288] erspan0: entered promiscuous mode
[  597.948827][T25288] bond6: (slave erspan0): Enslaving as an active interface with an up link
[  598.735442][T25340] wg1 speed is unknown, defaulting to 1000
[  598.910013][T25353] wg1 speed is unknown, defaulting to 1000
[  598.996810][T25340] lo speed is unknown, defaulting to 1000
[  600.073807][T25384] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:21
[  600.208935][T25353] lo speed is unknown, defaulting to 1000
[  600.214879][T25369] wg1 speed is unknown, defaulting to 1000
[  600.222179][ T6107] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  600.247055][ T6107] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  600.286848][ T6107] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  600.300216][ T6107] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  600.630992][T25369] lo speed is unknown, defaulting to 1000
[  600.771190][T25396] syzkaller1: entered promiscuous mode
[  600.787000][T25396] syzkaller1: entered allmulticast mode
[  600.912272][T25384] wg1 speed is unknown, defaulting to 1000
[  601.055290][T25404] netlink: 'syz.4.5398': attribute type 10 has an invalid length.
[  601.072403][T25409] SET target dimension over the limit!
[  601.110666][T25409] __nla_validate_parse: 5 callbacks suppressed
[  601.110688][T25409] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5399'.
[  601.140829][T25409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5399'.
[  601.262482][T25384] lo speed is unknown, defaulting to 1000
[  601.524576][T25416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5401'.
[  601.891943][T25425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5403'.
[  602.022056][T25430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5405'.
[  602.180839][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5407'.
[  602.709336][T25457] pim6reg0: tun_chr_ioctl cmd 1074025673
[  602.736126][T25462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5416'.
[  602.760428][T25457] pim6reg0: tun_chr_ioctl cmd 1074025677
[  602.769604][T25470] netlink: 'syz.4.5418': attribute type 2 has an invalid length.
[  602.777753][T25457] pim6reg0: linktype set to 804
[  602.808527][T25470] �9: entered promiscuous mode
[  602.870113][T25474] netlink: 'syz.2.5422': attribute type 22 has an invalid length.
[  602.902817][T25476] netlink: 'syz.0.5421': attribute type 1 has an invalid length.
[  602.935233][T25476] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5421'.
[  603.090713][T25484] netlink: 'syz.2.5425': attribute type 1 has an invalid length.
[  603.145532][T25478] xt_CT: No such helper "snmp_trap"
[  603.410973][T25502] syzkaller0: entered promiscuous mode
[  603.421244][T25504] nbd: must specify a device to reconfigure
[  603.428296][T25502] syzkaller0: entered allmulticast mode
[  603.527518][T25508] netlink: 708 bytes leftover after parsing attributes in process `syz.3.5432'.
[  603.546141][T25508] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  603.566728][T25510] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5433'.
[  603.615335][T25510] vlan2: entered promiscuous mode
[  603.624973][T25510] bridge0: entered promiscuous mode
[  603.751818][T25522] netlink: 'syz.3.5436': attribute type 4 has an invalid length.
[  604.371641][T25559] netlink: 'syz.1.5448': attribute type 2 has an invalid length.
[  604.456447][T25560] IPv6: sit2: Disabled Multicast RS
[  604.735727][T25573] syzkaller0: entered promiscuous mode
[  604.741352][T25573] syzkaller0: entered allmulticast mode
[  604.836843][T25566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  604.860063][T25565] tipc: Resetting bearer <eth:syzkaller0>
[  605.055521][T25565] tipc: Disabling bearer <eth:syzkaller0>
[  605.452822][T25599] netlink: 'syz.1.5459': attribute type 1 has an invalid length.
[  605.460727][T25599] netlink: 'syz.1.5459': attribute type 2 has an invalid length.
[  605.561125][T25618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  605.689827][T25621] : entered promiscuous mode
[  605.739344][T25625] syzkaller1: entered allmulticast mode
[  605.848908][T25634] syzkaller0: entered promiscuous mode
[  605.863298][T25634] syzkaller0: entered allmulticast mode
[  605.933638][T25634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  605.945419][T25632] tipc: Resetting bearer <eth:syzkaller0>
[  606.007461][T25632] tipc: Disabling bearer <eth:syzkaller0>
[  606.293344][T25671] __nla_validate_parse: 11 callbacks suppressed
[  606.293362][T25671] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5480'.
[  606.310424][T25671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5480'.
[  606.321644][T25669] netlink: 'syz.2.5481': attribute type 10 has an invalid length.
[  606.488890][   T30] audit: type=1800 audit(1770297743.580:12): pid=25683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5485" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2580 res=0 errno=0
[  606.490963][T25683] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  606.549622][T25687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5487'.
[  606.733745][T25704] netlink: 'syz.2.5491': attribute type 6 has an invalid length.
[  606.951067][T25715] openvswitch: netlink: Flow key attr not present in new flow.
[  607.061083][T19563] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  607.079876][T19563] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  607.105257][T19563] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  607.112243][T25720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5494'.
[  607.128827][T19563] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  607.315156][T25712] wg1 speed is unknown, defaulting to 1000
[  607.438978][T25732] netlink: 'syz.1.5500': attribute type 11 has an invalid length.
[  607.464546][T25732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5500'.
[  607.577491][T25739] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5502'.
[  607.621644][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5503'.
[  607.715794][T25712] lo speed is unknown, defaulting to 1000
[  608.151558][T25773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5510'.
[  610.133529][T25824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5524'.
[  610.194576][T25824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5524'.
[  610.275020][T25826] syzkaller1: entered promiscuous mode
[  610.290874][T25826] syzkaller1: entered allmulticast mode
[  610.880084][   T56] block nbd1: Possible stuck request ffff888025a18000: control (read@0,1024B). Runtime 240 seconds
[  610.891190][   T56] block nbd1: Possible stuck request ffff888025a18200: control (read@1024,1024B). Runtime 240 seconds
[  610.902791][   T56] block nbd1: Possible stuck request ffff888025a18400: control (read@2048,1024B). Runtime 240 seconds
[  610.913860][   T56] block nbd1: Possible stuck request ffff888025a18600: control (read@3072,1024B). Runtime 240 seconds
[  611.078345][T25860] xt_ecn: cannot match TCP bits for non-tcp packets
[  611.091584][T25856] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  611.124365][T25860] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  611.200133][T25860] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.271869][T25860] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  611.331151][T25860] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.498674][T25860] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  611.530732][T25860] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.543260][T25886] __nla_validate_parse: 6 callbacks suppressed
[  611.543278][T25886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5537'.
[  611.585892][T25887] FAULT_INJECTION: forcing a failure.
[  611.585892][T25887] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  611.599177][T25887] CPU: 1 UID: 0 PID: 25887 Comm: syz.0.5538 Not tainted syzkaller #0 PREEMPT(full) 
[  611.599201][T25887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  611.599212][T25887] Call Trace:
[  611.599219][T25887]  <TASK>
[  611.599226][T25887]  dump_stack_lvl+0xe8/0x150
[  611.599251][T25887]  should_fail_ex+0x412/0x560
[  611.599274][T25887]  _copy_from_user+0x2d/0xb0
[  611.599297][T25887]  ___sys_sendmsg+0x1c6/0x360
[  611.599318][T25887]  ? __lock_acquire+0x6b5/0x2cf0
[  611.599342][T25887]  ? __pfx____sys_sendmsg+0x10/0x10
[  611.599393][T25887]  ? __fget_files+0x2a/0x420
[  611.599409][T25887]  ? __fget_files+0x3a0/0x420
[  611.599433][T25887]  __x64_sys_sendmsg+0x1bd/0x2a0
[  611.599454][T25887]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  611.599482][T25887]  ? __pfx_ksys_write+0x10/0x10
[  611.599513][T25887]  do_syscall_64+0xe2/0xf80
[  611.599533][T25887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.599548][T25887]  ? trace_irq_disable+0x37/0x100
[  611.599563][T25887]  ? clear_bhb_loop+0x60/0xb0
[  611.599582][T25887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.599598][T25887] RIP: 0033:0x7f599659aeb9
[  611.599614][T25887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  611.599628][T25887] RSP: 002b:00007f59974f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  611.599647][T25887] RAX: ffffffffffffffda RBX: 00007f5996815fa0 RCX: 00007f599659aeb9
[  611.599657][T25887] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  611.599667][T25887] RBP: 00007f59974f2090 R08: 0000000000000000 R09: 0000000000000000
[  611.599675][T25887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  611.599684][T25887] R13: 00007f5996816038 R14: 00007f5996815fa0 R15: 00007fffae658bc8
[  611.599708][T25887]  </TASK>
[  611.850503][T25883] syzkaller1: entered promiscuous mode
[  611.856351][T25883] syzkaller1: entered allmulticast mode
[  611.866303][T25860] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  611.878601][T25860] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.970288][T25898] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5542'.
[  612.108742][T19950] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  612.120447][T19950] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  612.147845][T19950] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  612.161169][T19950] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  612.181298][T19950] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  612.197089][T19950] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  612.219526][T19950] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  612.249250][T19950] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  612.339457][T25915] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20001
[  612.481934][T25922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5552'.
[  612.509921][T25926] validate_nla: 2 callbacks suppressed
[  612.509938][T25926] netlink: 'syz.0.5551': attribute type 1 has an invalid length.
[  612.529312][T25926] netlink: 'syz.0.5551': attribute type 1 has an invalid length.
[  612.538054][T25926] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.5551'.
[  612.566998][T25931] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.5551'.
[  612.680381][T25934] syzkaller1: entered promiscuous mode
[  612.696328][T25934] syzkaller1: entered allmulticast mode
[  612.797558][T25941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5556'.
[  612.797590][T25945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5556'.
[  612.858916][T25948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5561'.
[  613.006852][T25958] netlink: 'syz.4.5564': attribute type 1 has an invalid length.
[  613.027556][T25956] netlink: 'syz.0.5566': attribute type 12 has an invalid length.
[  613.027965][T25958] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5564'.
[  613.046284][T25958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5564'.
[  613.350291][T25978] xt_TCPMSS: Only works on TCP SYN packets
[  615.078076][T25992] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  615.086499][T25994] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode
[  615.094184][T25994] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode
[  615.196789][T26011] openvswitch: netlink: IP tunnel TTL not specified.
[  615.435361][T26030] IPVS: set_ctl: invalid protocol: 58 172.30.1.3:20004
[  615.564614][T26037] netlink: 'syz.0.5588': attribute type 1 has an invalid length.
[  615.580877][T26037] netlink: 'syz.0.5588': attribute type 2 has an invalid length.
[  615.736717][T26041] netlink: 'syz.3.5587': attribute type 13 has an invalid length.
[  615.758410][T26041] macvtap0: entered promiscuous mode
[  615.805050][T26041] macvtap0: refused to change device tx_queue_len
[  616.345868][T26101] xt_l2tp: v2 tid > 0xffff: 37482740
[  616.582985][T26118] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  616.594166][T26118] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  616.614986][T26118] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  616.649102][   T30] audit: type=1804 audit(1770297753.740:13): pid=26119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5604" name="x000000000000000900000000000000000000011" dev="tmpfs" ino=2719 res=1 errno=0
[  616.758303][T26127] __nla_validate_parse: 7 callbacks suppressed
[  616.758323][T26127] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5606'.
[  616.758664][   T30] audit: type=1800 audit(1770297753.740:14): pid=26119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5604" name="x000000000000000900000000000000000000011" dev="tmpfs" ino=2719 res=0 errno=0
[  616.770874][T26102] wg1 speed is unknown, defaulting to 1000
[  616.806748][T26127] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5606'.
[  617.222664][T26102] lo speed is unknown, defaulting to 1000
[  617.582667][T26173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5616'.
[  617.776655][T26181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5620'.
[  617.864377][T26185] Bluetooth: MGMT ver 1.23
[  617.869138][T26185] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  617.931106][T26192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5623'.
[  617.977756][T26194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5625'.
[  618.002088][T26188] syzkaller0: entered promiscuous mode
[  618.008121][T26188] syzkaller0: entered allmulticast mode
[  618.030124][T26193] 8021q: VLANs not supported on lo
[  618.243123][T26195] 8021q: adding VLAN 0 to HW filter on device bond6
[  618.260008][T26195] bond0: (slave bond6): Enslaving as an active interface with an up link
[  618.461324][T26216] can: request_module (can-proto-5) failed.
[  618.657477][T26234] netlink: 'syz.1.5630': attribute type 13 has an invalid length.
[  618.742009][T26234] macvtap0: entered promiscuous mode
[  618.779172][T26234] macvtap0: refused to change device tx_queue_len
[  618.788427][T26238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5630'.
[  618.856161][T26215] wg1 speed is unknown, defaulting to 1000
[  618.957117][T26245] netlink: 'syz.0.5632': attribute type 1 has an invalid length.
[  619.050097][T26215] lo speed is unknown, defaulting to 1000
[  619.105267][T26248] x_tables: ip6_tables: mh match: only valid for protocol 135
[  619.251383][T26260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  619.261628][T26260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  619.271039][T26260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  619.283397][T26260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  619.302291][T26260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  619.693241][T26265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5636'.
[  619.912654][T26258] wg1 speed is unknown, defaulting to 1000
[  620.124362][T26278] openvswitch: netlink: EtherType 50a is less than min 600
[  620.193915][T26258] lo speed is unknown, defaulting to 1000
[  620.203777][T26268] rdma_rxe: rxe_newlink: failed to add bond0
[  620.231450][T26282] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5641'.
[  620.359306][T26291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5639'.
[  620.784353][T26258] chnl_net:caif_netlink_parms(): no params data found
[  620.911909][T26313] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  621.072311][T26258] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.099960][T26258] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.120283][T26258] bridge_slave_0: entered allmulticast mode
[  621.137255][T26258] bridge_slave_0: entered promiscuous mode
[  621.151561][T26258] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.169541][T26258] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.177236][T26258] bridge_slave_1: entered allmulticast mode
[  621.185858][T26258] bridge_slave_1: entered promiscuous mode
[  621.237079][T26330] netlink: 'syz.0.5651': attribute type 12 has an invalid length.
[  621.298010][T26330] netlink: 'syz.0.5651': attribute type 12 has an invalid length.
[  621.318075][T26258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  621.345665][T26258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  621.374939][T23391] Bluetooth: hci3: command tx timeout
[  621.388595][T26330] netlink: 'syz.0.5651': attribute type 12 has an invalid length.
[  621.481323][T26330] netlink: 'syz.0.5651': attribute type 12 has an invalid length.
[  621.496702][T26337] syzkaller1: entered promiscuous mode
[  621.502297][T26337] syzkaller1: entered allmulticast mode
[  621.514250][T26258] team0: Port device team_slave_0 added
[  621.539209][T26258] team0: Port device team_slave_1 added
[  621.547372][T26330] netlink: 'syz.0.5651': attribute type 12 has an invalid length.
[  621.639481][T26330] netlink: 'syz.0.5651': attribute type 12 has an invalid length.
[  621.655517][T26330] netlink: 'syz.0.5651': attribute type 12 has an invalid length.
[  621.701607][T26258] batman_adv: batadv0: Adding interface: batadv_slave_0
[  621.709058][T26258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  621.735810][T26258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  621.750919][T26330] netlink: 'syz.0.5651': attribute type 12 has an invalid length.
[  621.769772][T26258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  621.782463][T26258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  621.811372][T26258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  621.823544][T26330] __nla_validate_parse: 10 callbacks suppressed
[  621.823562][T26330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5651'.
[  621.871904][T26330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5651'.
[  621.895899][T26330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5651'.
[  621.928997][T26330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5651'.
[  621.949670][T26330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5651'.
[  621.963402][T26330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5651'.
[  621.976884][T26330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5651'.
[  621.986954][T26330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5651'.
[  622.033756][T26330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5651'.
[  622.054321][T26258] hsr_slave_0: entered promiscuous mode
[  622.076647][T26258] hsr_slave_1: entered promiscuous mode
[  622.085931][T26258] debugfs: 'hsr0' already exists in 'hsr'
[  622.092056][T26258] Cannot create hsr debugfs directory
[  622.338303][T26258] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  622.346568][T26385] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5667'.
[  622.428903][T26258] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  622.563525][T26258] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  622.768111][T26258] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  622.808832][T26407] syzkaller1: entered promiscuous mode
[  622.819056][T26407] syzkaller1: entered allmulticast mode
[  622.846900][ T6107] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  622.866501][ T6107] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  622.938462][ T6107] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  622.954893][ T6107] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  623.051471][T26429] bond7: entered promiscuous mode
[  623.070465][T26429] 8021q: adding VLAN 0 to HW filter on device bond7
[  623.088062][T26433] erspan1: entered allmulticast mode
[  623.140869][T26432] bond7: (slave bridge9): making interface the new active one
[  623.171866][T26432] bridge9: entered promiscuous mode
[  623.216570][T26432] bond7: (slave bridge9): Enslaving as an active interface with an up link
[  623.445082][T23391] Bluetooth: hci3: command tx timeout
[  623.467411][T26258] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  623.491145][T26258] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  623.570834][T26453] bond8: entered promiscuous mode
[  623.584115][T26453] 8021q: adding VLAN 0 to HW filter on device bond8
[  623.634282][T26258] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  623.656997][T26258] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  623.946503][T26258] 8021q: adding VLAN 0 to HW filter on device bond0
[  623.980487][T26258] 8021q: adding VLAN 0 to HW filter on device team0
[  624.010349][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  624.017558][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  624.051361][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  624.058581][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  624.156994][T26499] 8021q: adding VLAN 0 to HW filter on device bond12
[  624.219450][T26511] 8021q: adding VLAN 0 to HW filter on device bond0
[  624.247675][T26511] bond12: (slave bond0): Enslaving as an active interface with an up link
[  624.321004][ T1298] lec:lec_start_xmit: lec0:No lecd attached
[  624.763199][T26258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  624.872872][T26258] veth0_vlan: entered promiscuous mode
[  624.886419][T26258] veth1_vlan: entered promiscuous mode
[  624.994100][T26258] veth0_macvtap: entered promiscuous mode
[  625.014554][T26258] veth1_macvtap: entered promiscuous mode
[  625.058613][T26258] batman_adv: batadv0: Interface activated: batadv_slave_0
[  625.094674][T26258] batman_adv: batadv0: Interface activated: batadv_slave_1
[  625.106917][T26542] FAULT_INJECTION: forcing a failure.
[  625.106917][T26542] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  625.151696][T19949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  625.160567][T26542] CPU: 1 UID: 0 PID: 26542 Comm: syz.2.5708 Not tainted syzkaller #0 PREEMPT(full) 
[  625.160594][T26542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  625.160605][T26542] Call Trace:
[  625.160612][T26542]  <TASK>
[  625.160621][T26542]  dump_stack_lvl+0xe8/0x150
[  625.160649][T26542]  should_fail_ex+0x412/0x560
[  625.160675][T26542]  _copy_to_user+0x31/0xb0
[  625.160700][T26542]  simple_read_from_buffer+0xe1/0x170
[  625.160725][T26542]  proc_fail_nth_read+0x1bb/0x230
[  625.160751][T26542]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  625.160777][T26542]  ? rw_verify_area+0x2a6/0x4d0
[  625.160797][T26542]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  625.160819][T26542]  vfs_read+0x20c/0xa70
[  625.160840][T26542]  ? fdget_pos+0x246/0x320
[  625.160862][T26542]  ? __pfx___mutex_lock+0x10/0x10
[  625.160886][T26542]  ? __pfx_vfs_read+0x10/0x10
[  625.160908][T26542]  ? __fget_files+0x2a/0x420
[  625.160930][T26542]  ? __fget_files+0x3a0/0x420
[  625.160946][T26542]  ? __fget_files+0x2a/0x420
[  625.160972][T26542]  ksys_read+0x150/0x270
[  625.160995][T26542]  ? __pfx_ksys_read+0x10/0x10
[  625.161029][T26542]  do_syscall_64+0xe2/0xf80
[  625.161050][T26542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.161066][T26542]  ? trace_irq_disable+0x37/0x100
[  625.161083][T26542]  ? clear_bhb_loop+0x60/0xb0
[  625.161102][T26542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.161119][T26542] RIP: 0033:0x7f115735b78e
[  625.161136][T26542] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  625.161150][T26542] RSP: 002b:00007f115816efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  625.161169][T26542] RAX: ffffffffffffffda RBX: 00007f115816f6c0 RCX: 00007f115735b78e
[  625.161182][T26542] RDX: 000000000000000f RSI: 00007f115816f0a0 RDI: 0000000000000004
[  625.161192][T26542] RBP: 00007f115816f090 R08: 0000000000000000 R09: 0000000000000000
[  625.161203][T26542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  625.161214][T26542] R13: 00007f1157616038 R14: 00007f1157615fa0 R15: 00007fffce552908
[  625.161243][T26542]  </TASK>
[  625.416410][T19949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  625.453452][T19949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  625.469392][T19949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  625.516083][T23391] Bluetooth: hci3: command tx timeout
[  625.639801][T26567] validate_nla: 13 callbacks suppressed
[  625.639822][T26567] netlink: 'syz.0.5713': attribute type 15 has an invalid length.
[  625.708406][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.729098][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.781230][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.799024][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.907021][T26574] netlink: 'syz.0.5716': attribute type 1 has an invalid length.
[  627.031830][T26606] __nla_validate_parse: 16 callbacks suppressed
[  627.031850][T26606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5725'.
[  627.445835][T26624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5732'.
[  627.484653][T26624] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5732'.
[  627.494232][T26624] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5732'.
[  627.505202][T26624] rdma_rxe: rxe_newlink: failed to add xfrm0
[  627.583227][T26634] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  627.603684][T23391] Bluetooth: hci3: command tx timeout
[  627.624332][T26634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5734'.
[  627.654161][T26634] netlink: 'syz.1.5734': attribute type 12 has an invalid length.
[  627.840365][T26639] syzkaller0: entered promiscuous mode
[  627.849794][T26639] syzkaller0: entered allmulticast mode
[  627.858868][T26634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5734'.
[  627.895213][T26634] netlink: 'syz.1.5734': attribute type 12 has an invalid length.
[  628.409629][T26678] netlink: 'syz.4.5741': attribute type 6 has an invalid length.
[  629.835577][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms
[  629.843654][    C0] lec:lec_tx_timeout: lec0
[  629.899460][T26695] openvswitch: netlink: IPv6 tunnel dst address is zero
[  629.996223][T26697] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5750'.
[  630.200728][T26709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5752'.
[  630.210108][T26709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5752'.
[  630.247667][T26714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5754'.
[  630.281995][T26716] xt_TCPMSS: Only works on TCP SYN packets
[  630.514298][T26656] wg1 speed is unknown, defaulting to 1000
[  630.937223][T26656] lo speed is unknown, defaulting to 1000
[  631.146654][T26763] netlink: 'syz.2.5766': attribute type 6 has an invalid length.
[  631.155990][T26763] netlink: 'syz.2.5766': attribute type 5 has an invalid length.
[  631.168204][T26763] netlink: 'syz.2.5766': attribute type 1 has an invalid length.
[  631.194116][T26763] bond7: entered promiscuous mode
[  631.229967][T26763] 8021q: adding VLAN 0 to HW filter on device bond7
[  631.237017][T26765] netlink: 'syz.2.5766': attribute type 4 has an invalid length.
[  631.405656][T19949] 
[  631.408026][T19949] ============================================
[  631.414156][T19949] WARNING: possible recursive locking detected
[  631.420300][T19949] syzkaller #0 Not tainted
[  631.424698][T19949] --------------------------------------------
[  631.430829][T19949] kworker/u8:25/19949 is trying to acquire lock:
[  631.437133][T19949] ffff88807f452d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  631.446952][T19949] 
[  631.446952][T19949] but task is already holding lock:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  631.454298][T19949] ffff88805c5fe558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  631.464122][T19949] 
[  631.464122][T19949] other info that might help us debug this:
[  631.472173][T19949]  Possible unsafe locking scenario:
[  631.472173][T19949] 
[  631.479610][T19949]        CPU0
[  631.482882][T19949]        ----
[  631.486155][T19949]   lock(&qdisc_xmit_lock_key#4);
[  631.491173][T19949]   lock(&qdisc_xmit_lock_key#4);
[  631.496223][T19949] 
[  631.496223][T19949]  *** DEADLOCK ***
[  631.496223][T19949] 
[  631.504351][T19949]  May be due to missing lock nesting notation
[  631.504351][T19949] 
[  631.512654][T19949] 10 locks held by kworker/u8:25/19949:
[  631.518189][T19949]  #0: ffff88805bd36148 ((wq_completion)bond6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  631.529250][T19949]  #1: ffffc90010bcfbc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  631.542113][T19949]  #2: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0
[  631.551682][T19949]  #3: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850
[  631.561589][T19949]  #4: ffff88805711d228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850
[  631.574202][T19949]  #5: ffff88805c5fe558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  631.584454][T19949]  #6: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450
[  631.593321][T19949]  #7: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070
[  631.603056][T19949]  #8: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850
[  631.612962][T19949]  #9: ffff88805875a228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850
[  631.625563][T19949] 
[  631.625563][T19949] stack backtrace:
[  631.631471][T19949] CPU: 0 UID: 0 PID: 19949 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) 
[  631.631500][T19949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  631.631518][T19949] Workqueue: bond6 bond_alb_monitor
[  631.631549][T19949] Call Trace:
[  631.631559][T19949]  <TASK>
[  631.631570][T19949]  dump_stack_lvl+0xe8/0x150
[  631.631600][T19949]  print_deadlock_bug+0x279/0x290
[  631.631627][T19949]  __lock_acquire+0x253f/0x2cf0
[  631.631664][T19949]  ? __pfx_netif_skb_features+0x10/0x10
[  631.631706][T19949]  ? sch_direct_xmit+0x15f/0x4c0
[  631.631729][T19949]  lock_acquire+0x106/0x330
[  631.631761][T19949]  ? sch_direct_xmit+0x15f/0x4c0
[  631.631793][T19949]  _raw_spin_lock+0x2e/0x40
[  631.631819][T19949]  ? sch_direct_xmit+0x15f/0x4c0
[  631.631843][T19949]  sch_direct_xmit+0x15f/0x4c0
[  631.631870][T19949]  ? __pfx_sch_direct_xmit+0x10/0x10
[  631.631892][T19949]  __dev_queue_xmit+0x1538/0x3850
[  631.631914][T19949]  ? __dev_queue_xmit+0x274/0x3850
[  631.631934][T19949]  ? neigh_resolve_output+0x438/0x750
[  631.631948][T19949]  ? __pfx___dev_queue_xmit+0x10/0x10
[  631.631965][T19949]  ? neigh_resolve_output+0x438/0x750
[  631.631980][T19949]  ? eth_header+0x11b/0x200
[  631.631996][T19949]  ? __asan_memcpy+0x40/0x70
[  631.632021][T19949]  ? ip_finish_output2+0x3c2/0x1070
[  631.632038][T19949]  ip_finish_output2+0xca9/0x1070
[  631.632056][T19949]  ? ip_skb_dst_mtu+0x109/0xa50
[  631.632072][T19949]  ? ip_finish_output+0x33a/0x3f0
[  631.632089][T19949]  ip_output+0x29f/0x450
[  631.632105][T19949]  ? ip_output+0x5b/0x450
[  631.632121][T19949]  iptunnel_xmit+0x59f/0xa00
[  631.632140][T19949]  ip_tunnel_xmit+0x1f74/0x2730
[  631.632158][T19949]  ? __lock_acquire+0x6b5/0x2cf0
[  631.632180][T19949]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  631.632196][T19949]  ? gre_build_header+0x31f/0xa40
[  631.632215][T19949]  ? __pfx_gre_build_header+0x10/0x10
[  631.632232][T19949]  ? skb_network_protocol+0x528/0x790
[  631.632250][T19949]  __gre_xmit+0x19e/0x240
[  631.632266][T19949]  ? __pfx___gre_xmit+0x10/0x10
[  631.632280][T19949]  ? unwind_next_frame+0xa5/0x23c0
[  631.632294][T19949]  ? iptunnel_handle_offloads+0x2fd/0x630
[  631.632310][T19949]  erspan_xmit+0xa81/0x1670
[  631.632326][T19949]  ? __lock_acquire+0x6b5/0x2cf0
[  631.632346][T19949]  ? __pfx_erspan_xmit+0x10/0x10
[  631.632365][T19949]  dev_hard_start_xmit+0x2cd/0x7f0
[  631.632387][T19949]  sch_direct_xmit+0x251/0x4c0
[  631.632401][T19949]  ? __pfx_sch_direct_xmit+0x10/0x10
[  631.632413][T19949]  ? alb_send_lp_vid+0x122/0x550
[  631.632429][T19949]  ? process_scheduled_works+0x9f0/0x17a0
[  631.632446][T19949]  ? worker_thread+0xda6/0x1360
[  631.632465][T19949]  __dev_queue_xmit+0x1538/0x3850
[  631.632486][T19949]  ? __dev_queue_xmit+0x274/0x3850
[  631.632507][T19949]  ? __pfx___dev_queue_xmit+0x10/0x10
[  631.632527][T19949]  ? rcu_is_watching+0x15/0xb0
[  631.632540][T19949]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  631.632557][T19949]  ? kmem_cache_alloc_node_noprof+0x473/0x6f0
[  631.632580][T19949]  ? alb_send_lp_vid+0x14e/0x550
[  631.632597][T19949]  alb_send_lp_vid+0x348/0x550
[  631.632615][T19949]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  631.632632][T19949]  ? migrate_task_rq_fair+0x2c4/0x830
[  631.632646][T19949]  ? lock_acquire+0x106/0x330
[  631.632664][T19949]  alb_send_learning_packets+0x12c/0x300
[  631.632681][T19949]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  631.632741][T19949]  ? bond_alb_monitor+0xf8/0x17e0
[  631.632773][T19949]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  631.632790][T19949]  bond_alb_monitor+0x3d5/0x17e0
[  631.632807][T19949]  ? bond_alb_monitor+0xf8/0x17e0
[  631.632822][T19949]  ? __pfx_bond_alb_monitor+0x10/0x10
[  631.632839][T19949]  ? process_scheduled_works+0xa0f/0x17a0
[  631.632855][T19949]  ? process_scheduled_works+0xa0f/0x17a0
[  631.632872][T19949]  process_scheduled_works+0xaec/0x17a0
[  631.632902][T19949]  ? __pfx_process_scheduled_works+0x10/0x10
[  631.632919][T19949]  ? do_raw_spin_lock+0x12b/0x2f0
[  631.632933][T19949]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  631.632946][T19949]  ? schedule+0x90/0x360
[  631.632964][T19949]  worker_thread+0xda6/0x1360
[  631.632986][T19949]  ? __kthread_parkme+0x19c/0x1f0
[  631.633001][T19949]  kthread+0x726/0x8b0
[  631.633016][T19949]  ? __pfx_worker_thread+0x10/0x10
[  631.633032][T19949]  ? __pfx_kthread+0x10/0x10
[  631.633046][T19949]  ? _raw_spin_unlock_irq+0x23/0x50
[  631.633060][T19949]  ? __pfx_kthread+0x10/0x10
[  631.633074][T19949]  ret_from_fork+0x51b/0xa40
[  631.633093][T19949]  ? __pfx_ret_from_fork+0x10/0x10
[  631.633110][T19949]  ? __switch_to+0xc82/0x1410
[  631.633129][T19949]  ? __pfx_kthread+0x10/0x10
[  631.633142][T19949]  ret_from_fork_asm+0x1a/0x30
[  631.633164][T19949]  </TASK>
[  632.143599][T26722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  632.731649][T19575] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.770590][T19575] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.818964][T19575] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.869097][T19575] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.944408][T19575] bridge_slave_1: left allmulticast mode
[  632.952911][T19575] bridge_slave_1: left promiscuous mode
[  632.959955][T19575] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.968362][T19575] bridge_slave_0: left allmulticast mode
[  632.973991][T19575] bridge_slave_0: left promiscuous mode
[  632.980115][T19575] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.060478][T19575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  633.070554][T19575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  633.080296][T19575] bond0 (unregistering): Released all slaves
[  633.457917][T19575] hsr_slave_0: left promiscuous mode
[  633.463974][T19575] hsr_slave_1: left promiscuous mode
[  633.469965][T19575] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  633.478170][T19575] batman_adv: batadv0: Removing interface: batadv_slave_0
[  633.491401][T19575] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  633.499350][T19575] batman_adv: batadv0: Removing interface: batadv_slave_1
[  633.519491][T19575] veth1_macvtap: left promiscuous mode
[  633.526583][T19575] veth0_macvtap: left promiscuous mode
[  633.532178][T19575] veth1_vlan: left promiscuous mode
[  633.539847][T19575] veth0_vlan: left promiscuous mode
[  633.708831][T19575] team0 (unregistering): Port device team_slave_1 removed
[  633.733018][T19575] team0 (unregistering): Port device team_slave_0 removed
[  640.955365][   T56] block nbd1: Possible stuck request ffff888025a18000: control (read@0,1024B). Runtime 270 seconds
[  640.966323][   T56] block nbd1: Possible stuck request ffff888025a18200: control (read@1024,1024B). Runtime 270 seconds
[  640.977532][   T56] block nbd1: Possible stuck request ffff888025a18400: control (read@2048,1024B). Runtime 270 seconds
[  640.988779][   T56] block nbd1: Possible stuck request ffff888025a18600: control (read@3072,1024B). Runtime 270 seconds