last executing test programs:

2.565747997s ago: executing program 2 (id=5294):
r0 = socket(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000017c0)={0x3c, r2, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={<r4=>0x0, 0x1}, &(0x7f0000000140)=0x8) (async)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r6=>0x0}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x5, 0x9, 0x1, 0x0, 0x7}, &(0x7f0000000100)=0x14) (async)
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000180)={r4, 0x4, 0x948c, 0x401, 0x100, 0x4d4, 0x8c9, 0xa65, {r6, @in6={{0xa, 0x4e21, 0xd, @remote, 0xfffffffe}}, 0x10000000, 0x7, 0x8000, 0x0, 0x7}}, &(0x7f0000000240)=0xb0)

2.293979157s ago: executing program 2 (id=5299):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000) (async)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x400002, 0x4)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x30000}, 0x8)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000)

1.853660583s ago: executing program 3 (id=5306):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x1, 0x3ff, 0xf647, 0x6]}, &(0x7f00000000c0)=0xc)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000005c0)={r4, 0x7}, &(0x7f0000000680)=0x8)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4620, @empty}, 0xffffff80)
syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="3f0cb265933b", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x24, 0x66, 0x0, 0x3, 0x11, 0x0, @multicast1=0xac141442, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0)

1.713910152s ago: executing program 3 (id=5309):
unshare(0x38060000)
unshare(0x40020800)

1.6985257s ago: executing program 3 (id=5310):
socket$xdp(0x2c, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020c0000098011e8", 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf15}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="d9856eb9d41cc07e5b05ef9e7563", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x30, 0x0, 0x0, 0xffffffffffffffff}, {0x10000000000000, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0xfffffffe, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r6, &(0x7f00000009c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x4, @empty, 0x43}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000002900000043030000090000000000000018"], 0x30}}], 0x2, 0x2000c0d1)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00')
ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000040)={'bridge_slave_1\x00'})
mkdirat$cgroup(r7, &(0x7f0000000000)='syz0\x00', 0x1ff)
syz_init_net_socket$ax25(0x3, 0x2, 0x6)

1.643261858s ago: executing program 0 (id=5311):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x29, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bda"}}}}}}}, 0x4f)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)={0x4a4, r6, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x101, 0x16}}}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffe}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x0, 0x1b, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd7, 0x1, 0x6, 0x8, 0xd, 0x9, 0x6, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x3, 0x9}, {0x7, 0x7}, {0x0, 0x3}, {0x3, 0x8}, {0x2, 0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x2, 0x8}, {0x7}, {0x0, 0xa}, {0x6, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0xa}, {0x4, 0x9}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x5, 0x7, 0x66, 0x7, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x2}, {0x6, 0x6}, {0x6, 0x7}, {0x2, 0x7}, {0x1, 0x5}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x6}, {0x4}, {0x1, 0x7}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x5, 0x4, 0xd, 0x8001, 0x8000, 0x0, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x0, 0x828, 0x100, 0x0, 0x6, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x69}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4c}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x383f8281000ab338}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x51}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x37}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x1b, 0x6, 0x16, 0x16, 0x30, 0x30, 0x1, 0x1b, 0x12, 0x3, 0xc, 0x16, 0x1, 0xc5, 0x24, 0x6c, 0x2c, 0x9, 0x60, 0x6c, 0x2, 0x16, 0x6, 0x4, 0x36, 0x2, 0x9]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x12, 0x0, 0x6, 0x48, 0x24, 0x2a, 0x5, 0x6c, 0x30, 0x3, 0x4c, 0x1, 0x18, 0x1b, 0x60, 0x1, 0x48, 0x2, 0x3, 0x5, 0x36, 0x5b, 0x6c, 0x6, 0x9, 0x16, 0xf, 0x36, 0xc, 0x6]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x7, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0xa}, {0x7, 0x9}, {0x5, 0x9}, {0x3, 0x1}, {0x4, 0x9}, {0x5, 0xa}, {0x7}, {0x3, 0xa}, {0x0, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x80, 0xef84, 0x7, 0x0, 0x2, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x4}, {0x2, 0xa}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0xa}, {0x0, 0x8}, {0x0, 0x5}, {0x7, 0x9}, {0x4, 0xa}, {0x2}, {0x2, 0x4}, {0x1}, {0x1, 0x9}, {0x3, 0x6}, {0x3}, {0x2}, {0x1, 0x5}, {0x2, 0x1}, {0x6, 0x6}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x6}, {0x3, 0x2}, {0x3, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x6, 0x24, 0x60, 0x60, 0x2, 0x3, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0xc, 0xf, 0x8b6, 0x180, 0xffff, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1}, {0x2, 0x9}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0xd}, {0x1, 0x6}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x2, 0x7}, {0x6, 0x3}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x4, 0xa}, {0x3, 0x6}, {0x3, 0x1}, {0x7, 0x2}, {0x5, 0x7}, {0x7, 0x3}, {0x5, 0x5}, {0x5, 0x5}, {0x7, 0xa}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x7}, {0x2}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x3, 0x5, 0x9, 0x8, 0x9, 0x50]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x3002, 0x8, 0x9, 0x7, 0x9, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x2, 0x6}, {0x1, 0x9}, {0x5, 0x9}, {0x5}, {0x6, 0x9}, {0x0, 0x3}, {0x6, 0x3}, {0x3, 0x8}, {0x1}, {0x1, 0x1}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x134, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x110, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x4, 0xf4de, 0x3, 0x800, 0x0, 0xa, 0x401]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9b4d, 0x7fff, 0x6, 0x3, 0x8, 0x120, 0x3, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x6c, 0x36, 0x36, 0x6c, 0x3, 0x36, 0x4, 0x2, 0x2b, 0x6, 0x4, 0x4, 0x12, 0x12, 0x12, 0x16, 0x16, 0x48, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0xa}, {0x3, 0x2}, {0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x5, 0xa}, {0x0, 0x6}, {0x2, 0x6}, {0x6, 0x7}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x6}, {0x2, 0x7}, {0x4, 0x8}, {0x1, 0x4}, {0x0, 0x9}, {0x1, 0x4}, {0x2, 0x9}, {0x5, 0xa}, {0x6, 0x9}, {0x5, 0x8}, {0x3, 0x5}, {0x6, 0x5}, {0x5, 0x9}, {0x1}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x8}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x7}, {0x4, 0x3}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x1}, {0x4, 0x7}, {0x0, 0x3}, {0x2, 0x4}, {0x4, 0x5}, {0x3}, {0x0, 0xa}, {0x5, 0x7}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x3, 0xa}, {0x2, 0x3}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0x7}, {0x1, 0x3}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x7, 0x9}, {0x7, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {0x1, 0x8}, {0x3}, {0x4, 0x9}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x6, 0x936, 0xfff9, 0x3, 0x999, 0x1600, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff66, 0x4, 0x59, 0x7, 0x3, 0x90e, 0x101, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x45a0, 0x4, 0x1, 0x200, 0xf0a9, 0x8, 0x5, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe9e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xf70e0deb13efdabc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}]}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x200008c0}, 0x80)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050425bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0xad}, 0x1, 0x0, 0x0, 0x4000431}, 0x20000084)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x400, 0x13b81}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_FD={0x8, 0x1, r8}]}]}, 0x3c}}, 0x42001)

1.46932718s ago: executing program 3 (id=5312):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177d", 0x3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40)
close(r2)

1.46467427s ago: executing program 1 (id=5314):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4)
socket$key(0xf, 0x3, 0x2) (async)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000001600), 0x800)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001680)={0xffffffffffffffff, &(0x7f0000000600)="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", &(0x7f0000001640)=@udp=r2, 0x4}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001680)={0xffffffffffffffff, &(0x7f0000000600)="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", &(0x7f0000001640)=@udp=r2, 0x4}, 0x20)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
pipe(&(0x7f0000000100)) (async)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f000000d740), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f000000d840)={0x0, 0x0, &(0x7f000000d800)={&(0x7f000000d780)={0x68, r6, 0x401, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c12d796cf4c42042427b2df3d268173a9b0e70123c1779f9d85c176ca93da1fcf374e004"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc00808a}, 0x80)
sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000001940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f00000016c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x8080}, 0x8004)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=r3, r4, 0x36, 0x8, 0x0, @void, @value=r4}, 0x20)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02130071f7ddceedb17a9ac45600e2b491090000003e5d439ad54eb6e77580f80edc239093c7e496e28d24b7cd0227c897025ffe70e638a076ef64deba03004d725aafe818218efe1ab16443f97d38e72705e7ff0611e66a365ca7e4fe220c0bfb6258b07778f4fc17dcb1f078007b0bb93f4500"/126], 0x10}}, 0x4000050) (async)
sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02130071f7ddceedb17a9ac45600e2b491090000003e5d439ad54eb6e77580f80edc239093c7e496e28d24b7cd0227c897025ffe70e638a076ef64deba03004d725aafe818218efe1ab16443f97d38e72705e7ff0611e66a365ca7e4fe220c0bfb6258b07778f4fc17dcb1f078007b0bb93f4500"/126], 0x10}}, 0x4000050)

1.403611923s ago: executing program 1 (id=5315):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x28081) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) (async)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) (async)
mmap(&(0x7f0000c48000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0xfc076000) (async)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)

1.325891023s ago: executing program 0 (id=5317):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000600)={<r2=>r0, &(0x7f00000004c0)='dctcp-reno', 0x2000, &(0x7f0000000500)={@_ha_fsid={[0x8, 0x34]}, {0x4, 0x56b, 0x845, 0x2}}, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x6})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x80, 0x7d, &(0x7f00000003c0)=""/125, 0x40f00, 0x4, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000640)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xe, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r1], 0x0, 0x10, 0x800}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x11, 0x3, 0x0)
socket(0x10, 0x2, 0x0) (async, rerun: 64)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64)
socket$kcm(0x11, 0x200000000000003, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
listen(r4, 0x4) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d5c00128038000180090001006c61737400000000280002800c000240fffffffffffffffe0800014000800000080001400000000d0800014000010102200001800a00010071756f746100000055fe02800c000140000000000000000408000340000001"], 0xe8}}, 0x20050800)
r6 = socket(0xa, 0x3, 0x3a) (async)
r7 = socket(0xa, 0x3, 0x3)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) (async, rerun: 64)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, 0x0, 0x0) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r9, 0x1, 0x2, 0x0, 0x48) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno', 0xa) (async)
getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0x5d, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (rerun: 64)

1.324438267s ago: executing program 2 (id=5318):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0x8, 0x8, {0x0, 0x5}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x0, 0xfffffffd, {0x1c}, [@NDA_DST_IPV6={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4004840)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x814)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r5, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
listen(r5, 0xd3)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES8=r7], 0x3c}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012a000000fedbdf2517000000080003001753c7d2e79ac9287ed3e0fc23014b7a28ed212274a411f916d3aee8f9c3d40175a9c6415d9ba3bfd0becf621c00cea9fccdad3df3bf8547c2c4f28c0591d5755779a4d4422d2b452a44df621f53e88a98dde24e35b31c66bf0c16e4081386ca84770ee75176ff6b7a55abfd7d2cbf85ea5bbebcf123e54fbac05422f7b24adac1748c015eaaaa04962a298564f21e43c2da45684a6afdc2a05023debe2c8fb67c096b1af87634c479a4eb7117301007000000000000009b3b2d71297365b5b591fe6fdf7d945d497a0041efa137bd0819d1199f7f24971d27e224c992f211c355ec1d25", @ANYRES32=r9, @ANYBLOB="0a00060008021100000000000a00060008021100000000000a001a0008021100000000000a00060008021100000100000a00060008021100000100000a001a000802110000010000"], 0x64}, 0x1, 0x0, 0x0, 0x60880}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100003052abd70000007020000000000", @ANYRES32=0x0, @ANYBLOB="0008000006380000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r7], 0x40}}, 0x440b0)

1.267759041s ago: executing program 1 (id=5319):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={<r2=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r3, 0x7fff}, 0x8) (async, rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'hsr0\x00', 0x7101}) (async, rerun: 64)
r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 64)
write$tun(r4, &(0x7f0000000340)={@val={0x0, 0x806}, @void, @x25={0x1, 0x8, 0xfd, "e1d93796021b98155ae1c754c2e9b6ceb5a47375666c4601fac5f444906bee56e4d0e2143e73c27b4bf784a8f9"}}, 0x34)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 32)
socket$inet6(0xa, 0x805, 0x0) (async, rerun: 32)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) (async)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
close(0x4)
sendmsg$nl_route_sched(r5, 0x0, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000140)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r10, &(0x7f0000000580)=0x80, 0x43) (async)
r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r8)
sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)=ANY=[@ANYRES16=r8, @ANYRES16=r11, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r4], 0x50) (async)
r13 = socket$kcm(0x10, 0x2, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES32=r13, @ANYRES64=r12, @ANYRESOCT=r2, @ANYRES64=r9, @ANYRESDEC=r13, @ANYRESDEC=r13], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r14, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20)

1.246226817s ago: executing program 0 (id=5320):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r0, &(0x7f0000000140)="fc8c10e8ae65a9510282d6962ba59ebed28e0132e206ca5622c049ca230b12a6529caf00250866d7b05199c60c71eee039", 0x31, 0x1, &(0x7f0000001100)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002e00090027bd7000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB="0c00168008004f800400d000f77ef9f352d109c187945308a839764182f1a0ff77b1568be21601e088dc1aa8c620b468b167db3b49faf1b7f77cdb97f9a15ea7d84e0c04e8337d5420e9e85aac93972d804239328945b7ec2a4e645b522014"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1.141192045s ago: executing program 0 (id=5322):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r4, 0x1000)
recvmsg(r3, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4082, 0xff2}], 0x1}, 0x10100)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e0114"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x5d)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
r8 = socket$tipc(0x1e, 0x0, 0x0)
bind$tipc(r8, &(0x7f0000000280)=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}}}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r9, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000000c0)=0x9, 0x8)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x40, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4e11, 0x46}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x40}, 0x1, 0x0, 0x0, 0xe844}, 0x40811)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0)

1.061236048s ago: executing program 4 (id=5323):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000080), 0x8) (async)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) (async)
r1 = socket$packet(0x11, 0x3, 0x300) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be844484"], 0xfdef) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async)
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa660343d76e26b46500000121907800000000e00000014e224e220451907894b8932601d32f2300000000000000000040"], 0x0) (async)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r5, 0x4)
ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000100)={0xffffffff})

1.048193929s ago: executing program 1 (id=5324):
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x0, 0x1, 0x9}, {0x35, 0x0, 0x0, 0xffffffff}, {0x6, 0xff}]}, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf6a, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, 0x0, &(0x7f0000001480))
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c00070000000000000000000800090000000000080008000000000004f7a86526fb15da5f55206087fe109dfeea305159dec9e7b2e70d4853900162ed92010aac67e9dd83a544da69560b94fd0799bcd3a7bec7228ff1464af775a3757498e2c3655b92d3ce718a9d7449ee0413244854461318b9a6b61a7ae71eb21a911aeb3f320ac5be7e33bac6e662986e44ccfa4fc312ca507cc9e5201be5062d495a2df52fbfa81ae675aac4795efc1d9fef3012c35f75c8b698752c896f57"], 0x4c}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$l2tp(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1, 0x3}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e25, @multicast2}}, 0x0, 0x0, 0x26, 0x0, "03aebd5a3e00506997fd6ae5caed34394ae408b2a53e85340b7d628c5a220236ca33f521f582b904f5e4db9a549f6a4e0d1cc549ff1a9e014ce24bb1aa617f5ed75d2a15043a11ae21b34d5cfd62211c"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8)
setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x20008004)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016000103249d7000fcffffff2e000000"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="60eb1302d4d243b65622b72a9abd7538d6ba8b4e681ca08a61bef932a0c7dde83b7e55cdbdf963f4677ee9", @ANYRES16=r10, @ANYBLOB="000426bd7000fcdbdf251000000008000800060000000800080000000000"], 0x24}}, 0x24000800)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'gretap0\x00'})
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffee0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0)

945.219325ms ago: executing program 2 (id=5325):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
shutdown(r0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x46f87000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000)
getsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, &(0x7f0000000000))

941.557664ms ago: executing program 0 (id=5326):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x0, 0x0, 0x1a, 0x0, "bb02a3c364ca41d6357e544508474204000b5aa201ecffffffffffffff0f0000000000000034a632ab7193fcf19b2df3ee050000000000000041d269776df1228328cf0a007bbe6c0000000000b800"}, 0xd8)
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4)
listen(r0, 0x8)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000280)={0xae, 0xc, 0x0, 0x8, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, 0x68)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x78)

898.900968ms ago: executing program 1 (id=5327):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='%#\x00', 0x202, &(0x7f0000000040)={@align=0x656, {0xf001, 0x355, 0x3d55, 0x7}}, 0xf80, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4044018)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4d205008}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10)
sendmmsg(r0, &(0x7f0000002180)=[{{&(0x7f0000000480)=@phonet={0x23, 0x4, 0x6, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000500)="b17f25a9", 0x4}, {&(0x7f0000000540)="955d26968030176a3a7dffa0f5839ceae627140497fa4a542842d47b73e66d9ce16d635463c24a7e89de52e25557a70b6198cd82078e18e55287eec5bf23c50877fb6d7cbda728ca941047ff97410ab5187603298a96489f3f322abc9b1989182a6ef188dfd0db6e5187f8b09e57844936", 0x71}, {&(0x7f00000005c0)="26b2b8bb9ea4ae8cee3514f099c2813b4d698837ccd7c386ef9d64f112a149df7a0b0e185f5501a5668cbf62db09dae47cc47be1c8de0b98a04605dc30", 0x3d}, {&(0x7f0000000600)="7f52a108f2f98c44da4598d370e72c2250e36465d46a99797b4e4a0c5a7ee26fdc9d2506a9be5333263ec84504eb0ecd546178a0a837ff4662468b88c003eba4b88b8bca8d47f7fb05", 0x49}, {&(0x7f0000000680)="4d195456ac352e6479a7381aff4341cc25f17391d45ae75152e1d28d0c1d1fb69afc9ef6daeb7590f9d85e87b36e2e21dd371d6d50fab5181f5c7afefdd8640910f47c2f247d1019cb6cc1d365507ba93df29a7f866373205055a3c9aabe0f07280b4c34ebad1f13173de4ffae0844c70bc1adf1e52c271a08b4df904e62a46238ddaf359b130bbee2dee3b1177fe6160fbf680e511b793577afddbc51f6e4a23045977fad3ffc03d3ce838024b1d8898e7f5c96e56bd31b9eef240165ed09bb3a50942dda4c9eec", 0xc8}, {&(0x7f0000000780)="70303dcf1b85f660d9337508f1256be4d6684a1cc526f14e2a500fa82a665e14096e793ddc02da942d20287241cd7621ebde06fa8eb12d8155539cea4478ac3d485b3da545fcf9f3e881c8951ac104f13f537e56b94e31be81b406a9e0a8f6abf1472e41eb9880fa714475ad7fc9660df900deca7553aa53d6d9ec6deef5fd560ab0df3b581a6d3347c4b27914ca4a926b8fc1c1110663891baf9ecead9d50f6994d47a9f52f3c10e42f36014856ebb858e61ba426356e1611b330abb0f85b9635e8f66d05fb0660b7c4b4f85e46d0a3a3d5dc885e117c3b26b579e60d46bfaf75fe5cabfd18336f2216f6de3c36fd8b1f9aadca03f880", 0xf7}, {&(0x7f0000000880)}], 0x7}}, {{&(0x7f0000000940)=@rc={0x1f, @any, 0x4}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000009c0)="df92073d914dd4e5a6442d69dd0631ae42bbadd5c9e8f1d473cd3b2f6770d1c9365f27078068037b962ddb18e5ddbf11f19c0a3a1fd90fc132e4e22b445a7701a7f5a5dc3d04f0188df411162d291b43cbe62e6a845a7e6c8e9d8ab13830a19b1ed90d539efb2ad2300f7345d7a64e4fd3bc1656b7c9ac6f3f8c678b793e4e0c6164b7fb36edf95c57bfa789716fc4e07cf217f2bc026491afd18de70379f45d7597ef208f6fdd03b66cfd43f1cd32ebcfa4c7fb20b4726bc714", 0xba}, {&(0x7f0000000a80)="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", 0x1000}], 0x2, &(0x7f0000001ac0)=[{0x110, 0x1, 0x7, "ff66c80947ebb03948b279f9b923e9333fa97eec4900d23068e68eca535638fa25d52e4f004cf027c2d82dbc62a44d1a7fcf8316845dd85ba27b42cdbdb3baa9ef95b1bfdbb58285eeebfaf5416c231ca22404325dd40a5b563cee080f3d86b9d7027393328d83be0661f2a3717c30c25c9bc649d9450ac142907dabf8805f3abd8fe483d0fe7bf0b077fa3dc8b15966c1722efedcbb0dcbfca8ac7e0f1bec4d29f906b3d679deeef853353427c36df06020f0566a76eaa6c0dfecad49ba55fb423f6e8a3e50f5a8eb888230bddfafcd17cae95d1ac850e805ad7f431aa1d73c347b93473c3ac84691f50f0a1d947add5f7b1e45de6c9356fc57"}], 0x110}}, {{&(0x7f0000001c00)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x3}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001c80)="c3f2", 0x2}, {&(0x7f0000001cc0)="a81a4f68689d3b87c20cb46acba6ed9d2fba6efe8c3895e59254ef79aae6b25c6355c08303fc706a13a770340457f7c5994e37e0fcf281633f5440ab10fe050fcab7af8a3b0ca1276eaa47abf3e585a587cf55aff91be4a377fd21ca0cb679ae1ca7c355250e107e466e4998cf038d2cd0fbeae1d0d91c662fe2fa43ad1a9d600025490156b55419b65f1b5de0ac199ab172835a97c83c8501aa7bf43f6bf4f4e721dfb337541706b0b139bc43805ac1012ecb17ecd37e2cd57bc37117207b5e6a", 0xc1}, {&(0x7f0000001dc0)="95abefc0e3eaa747a19efaa83d4f3715a5582fa2e26e7ed4e2e1cfb0814a1fc289c1c52ff98fb8e1cd424abb9cde5f2fff6f9379dad54a2c5883fbe02648394a2312d79404b42a05f226ccd61daec3b2996e13db503e33c8bc869abb6af8d894d7abc1005175d4722012f8d72c2fcb368218ff9763b999147227353a90ea483646c5fbc94fef8d895e8af8be33b4ebee33baf8eb2840dab09282afd8fcbfc97a84286be5f06825e3a23973db526ac24324a92494dc1ec9ec1312d14adf8aa5d9778199f71bb267e82ea710decc2442ec255ae8b1eec1bb729aceb529d8372b5a5c0a5c6f1384698155310e657017e33c4ffe9d", 0xf3}, {&(0x7f0000001ec0)="737b4cc02b5242606889a7d0564e2b506c74e8115e430fc3595f66c4a9cc7cf0b5a4f04d1d09c4299c600eac0b051cc05c76271716f773ee3a7fe279172fa6e33578c1b9ef9376f1daa26e6ef9d2cad07e36b4dbb4b8c0d61551140c6ff15d549d30b37169e678f4ebf72e2cb54f161985c4bdcc90b850e4d6370ff5f0a06de5ccd0caf367a4553d25a1b63f2adfaa487d36f199e7ed36bfe540b87973863952b37f9fa24ba0d8821c538c6f41bbf7dcaaa6567f1fde926abe55", 0xba}, {&(0x7f0000001f80)="fd39e0e1cfca5595d73113eec5", 0xd}], 0x5, &(0x7f0000002040)=[{0xe0, 0x10c, 0xf459, "f8e5d84c5c5d78e734b7db967cae7df8c782565b356caf571f743cf82de6257541aed36c344f7538cfdf2b0d346c084a5f7de45e9652427fdaedfb4e2d423962c33785312693198f85725f6959c5b015bade602b974e965009e8ce7b478334294b310db097b49be21c0bfd1952a272d4fa80c7e0dfa079f91b7bf0c24108c775ed9acf4d8e4195562f391fab5ec9abfd03cd53db049c3ecfad1aa636af09914f5dce97be94ed68a68d7c12026fa760f8d525ea3025c7991314ae0383b56c251149b905b4f574d6b9ed790d35"}, {0x50, 0x0, 0x0, "6457a6a56b79684f9c34b6c19f4a92fa2ba4672cf03b89d76bff9501741a5f720e5202e2c22cc206fc4970de3e2c77f2d561c6f579456856e14d"}], 0x130}}], 0x3, 0x4004004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002240)={'wlan0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000002280), r3)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002300), r0)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x20040000)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000002400)=[@in6={0xa, 0x4e24, 0xc00, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @in6={0xa, 0x4e23, 0x8, @mcast1, 0x5}], 0x38)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x68, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3e}}}}, [@NL80211_ATTR_SSID={0x1d, 0x34, @random="cc6cacd6f75179adab8741dc3c7e50e58bdbba185b845bde60"}, @NL80211_ATTR_SSID={0x10, 0x34, @random="458395b726c5a730a657f5c6"}, @NL80211_ATTR_IE={0x17, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_id={0x72, 0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40054)
unshare(0x40000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x2c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000002680)={0x114, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000040c0), r0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000004180)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004140)={&(0x7f0000004100)={0x2c, r6, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40004)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000041c0))
sendto$inet(r0, &(0x7f0000004200)="f906f1dd76d6a90bb41a74198380612436f5e1397df175edb166adac18e9abd89745c500", 0x24, 0x0, &(0x7f0000004240)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000004280)={@private1, 0x1b5, 0x1, 0xff, 0x6, 0x7f, 0x6af8}, 0x20)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x20050, r0, 0xe6cd6000)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000004300), r3)
sendmsg$FOU_CMD_ADD(r3, &(0x7f00000043c0)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x30, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x30}, 0x1, 0x0, 0x0, 0x4885}, 0x0)
r8 = accept(r5, &(0x7f0000004400)=@isdn, &(0x7f0000004480)=0x80)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f00000044c0)={<r9=>0x0, 0xfff9, 0x10, 0x4, 0x9}, &(0x7f0000004500)=0x18)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000004540)={r9, 0x46}, 0x8)

821.257559ms ago: executing program 4 (id=5328):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r5, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r7}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r4, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x4}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x2404c088)

680.017453ms ago: executing program 4 (id=5329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r1, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, 0x0) (async)
shutdown(r1, 0x1) (async)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) (async)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @none, 0x15}, 0xa) (async)
close(0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

678.704466ms ago: executing program 0 (id=5330):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2) (async, rerun: 32)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (rerun: 32)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64)
r4 = socket(0x28, 0x5, 0x0) (rerun: 64)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10)
listen(r4, 0x0) (async)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async)
sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890)
r6 = accept4$unix(r4, 0x0, 0x0, 0x0)
recvfrom$unix(r6, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0}) (rerun: 64)
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r7, 0x3, {0x2, 0x0, 0x4}, 0xff}, 0x18)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c) (async, rerun: 32)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032800008c71ef288563"], 0xffdd) (rerun: 32)
setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) (async)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

604.276003ms ago: executing program 4 (id=5331):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001dc0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040000)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r10=>0x0})
r11 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x380000, @empty}, 0x1c) (async)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x380000, @empty}, 0x1c)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0xa5dfdbfd, {0x0, 0x0, 0x0, r10, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xffe0, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

602.797466ms ago: executing program 3 (id=5332):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) (async)
r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0x200, 0x4) (async)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async)
ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0)

277.82228ms ago: executing program 3 (id=5333):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x3, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0)
pread64(r3, &(0x7f00000008c0)=""/4096, 0x1000, 0x9)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa, 0x3, "91abc12404cf"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x88}}, 0x0)

276.372971ms ago: executing program 4 (id=5334):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (async)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="15e89d54c1a996f81aeb98c3734668cb45f49731e7ec972fd837a6f8746dad5f39593aafa730a4ab7fa5bd9ea73600bf7226ae115d565d8106d9a75ddd116566f6f08e00466426391bc7f08175e5ec3ec56351d861f2f346885401e5de28579d4da6f73147de2c34c09096bff587a6faf5db9d9c7c9f26a303b4b8aa0a66368074cb6af7eab2dfbd7f4fb039b4a6bfbedd283184c395ada100f17042281706c7fad6", 0xa2}, {&(0x7f0000000200)="ad2ae06560a8032241f44c6395e63af2218309b373f7f18a048368ad337272f9633602dca1a853a24fb73cefd474a5c036e5729ad9e1315eec7a548ed43b1f71d6c44f4bf03b477a6e36d78927a7db7f15f77ec1c04f115dc265771c84450d7301dd897b484edf2e220f3637a128990021b877a4a1d61aa2c4a3c5711f6ebdfb750b8448f3f78b76ace1ea13e1f9b17be14aa49a36598c6c09fdc53f1a1d20c114d2089adf789a3b7c06d55a02aa28975cd68d2ebfddf51c04f76c73afafde43987b0524a39c5358b5df08c4d91a40", 0xcf}], 0x2}, 0x40810) (async)
r3 = socket$caif_stream(0x25, 0x1, 0x1) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000003c0)={<r5=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000440)='scalable', 0x8)
syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) (async, rerun: 32)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) (async, rerun: 32)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async)
connect$caif(r3, &(0x7f0000000040)=@util={0x25, "b98d0f20b8751a55eaf47663849703bf"}, 0x15)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r2, @ANYBLOB="0100000004000000000003000000a00001801700010069623a76657468315f766972745f77696669000014000280080003000000000008000100190000002c0004001400010002004e236401010000000000000000001400020002004e20ac1414bb00000000000000003c00028004000100"], 0xb4}}, 0x0)

180.982553ms ago: executing program 1 (id=5335):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x24000880, &(0x7f0000004ff0)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r6 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xc}, {0x1, 0xffe0}, {0xffe0, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd4, 0x3, 0x200, 0xc, 0x1, 0x40000002, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x10, 0x7, 0xd, 0x0, 0x4, 0x9}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000002c0)={<r8=>r1, &(0x7f0000000100)='\x00', 0x8802, &(0x7f0000000180)={@_ha_fsid={[0x6, 0x7f]}, {0x6f, 0x3, 0xf9b6, 0x8000}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x3})
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x85}, 0x1)
listen(r0, 0xda90)
accept4(r0, 0x0, 0x0, 0x80000)

133.757036ms ago: executing program 2 (id=5336):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socketpair(0x29, 0x2, 0xb14, &(0x7f0000000140))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
pwrite64(r1, &(0x7f0000000240)='k\x00\x00\x00\x00\x00\x00', 0x7, 0xc)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={r5}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e20, 0xfffffff2, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x84)

77.943464ms ago: executing program 4 (id=5337):
socket$netlink(0x10, 0x3, 0x10) (async)
r0 = socket$netlink(0x10, 0x3, 0x10)
socket(0x22, 0x800, 0xfff) (async)
socket(0x22, 0x800, 0xfff)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$alg(0x26, 0x5, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(tea)\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c20000080045000014000000020011907800000000000000000000fffc000c9078210d0000"], 0x0) (async)
syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c20000080045000014000000020011907800000000000000000000fffc000c9078210d0000"], 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r3)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000095be8e", @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e6574646576696d30000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000000c0)={0x4, 0x9, 0x3f2, 0x4}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000000c0)={0x4, 0x9, 0x3f2, 0x4}, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x106)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ffffff7, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
unshare(0x20040400) (async)
unshare(0x20040400)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8)
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000740)={<r8=>0x0, 0x5bf, 0x1, [0xc, 0x8, 0x254, 0x3, 0x1], [0xfffffffffffffff9, 0x830, 0x8000000000000000, 0x101, 0x5b46, 0x7fffffff, 0x8, 0x0, 0x0, 0xcc, 0x55752b6f, 0x401, 0x332, 0x2, 0xdf7, 0xf4a, 0x8, 0x7324107f, 0x5, 0x8, 0x7, 0x0, 0x400000000000, 0x9, 0x100, 0x6, 0xfffffffffffffffa, 0xfffffffffffffffc, 0x1, 0x7, 0x2, 0x10000, 0xabc1, 0x80000001, 0x9, 0xa, 0x4, 0x9, 0x8, 0x1c7, 0x6, 0xd, 0x8f20, 0x2, 0x2, 0x1, 0x7, 0xb9, 0x7fffffff, 0x7fff, 0x800, 0x6, 0xfffffffffffffffe, 0x2, 0xa7a, 0x5, 0x6, 0x3, 0x80000001, 0x6, 0x6, 0x7, 0xd, 0xffffffffffffffff, 0xf, 0x46, 0x1, 0x6, 0x2, 0xfffffffffffffff5, 0x2, 0x8000000000000001, 0x0, 0x1, 0x8001, 0x9, 0x0, 0xb179, 0x2, 0x5, 0x4, 0x24, 0x3ff, 0xa9fa, 0x6, 0x6, 0xd048, 0x2, 0xb, 0x100000000, 0xc31, 0xfffffffffffffffe, 0x5, 0x1, 0x5, 0x2, 0xd1, 0x67, 0x3ff9, 0x100, 0x8, 0x2, 0x8, 0xe, 0x42, 0x4, 0x6, 0x8, 0x9, 0x6, 0xc, 0x80000000, 0xe9, 0x1, 0x800, 0x0, 0x25500, 0x0, 0x7, 0x6, 0x90a]})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000d40)={r8, 0xb6, 0x5, 0x1})
shutdown(0xffffffffffffffff, 0x1)

0s ago: executing program 2 (id=5338):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0x4}]}, 0x48}}, 0x0)
readv(r0, &(0x7f0000001300)=[{&(0x7f0000001340)=""/4097, 0x1001}], 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)
r7 = epoll_create(0x3ff)
r8 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000080)={0x62002011})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
writev(r9, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000240)="927d53fb", 0x4}], 0x2)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0xf132, 0xffffffffffffffff, 0xa4fdf000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r3, 0x104, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8, 0x0, 0x0}}, 0x10)
write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef)

kernel console output (not intermixed with test programs):

type 1 family 0 port 8472 - 0
[  466.740747][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  466.782785][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  466.798483][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3675'.
[  466.837905][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3675'.
[  466.907012][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'.
[  466.911105][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3675'.
[  467.000242][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3675'.
[  467.107272][ T8208] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  467.135291][T20293] Bluetooth: MGMT ver 1.23
[  467.392115][T20311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3684'.
[  467.401213][T20311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3684'.
[  467.434654][   T12] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  467.454870][T20309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3682'.
[  467.553203][T20307] syzkaller0: entered promiscuous mode
[  467.560344][T20307] syzkaller0: entered allmulticast mode
[  467.577433][ T8208] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  467.683388][T20322] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3687'.
[  467.717243][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  467.827187][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  467.835325][    C0] lec:lec_tx_timeout: lec0
[  467.840029][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  467.846119][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  467.976683][T20348] openvswitch: netlink: IP tunnel dst address not specified
[  468.064777][T20358] openvswitch: netlink: IPv4 tunnel dst address is zero
[  468.197700][T20322] infiniband syz1: set active
[  468.224895][T20322] infiniband syz1: added bond0
[  468.259529][T20369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3698'.
[  468.346225][T20322] RDS/IB: syz1: added
[  468.359027][T20322] smc: adding ib device syz1 with port count 1
[  468.377290][T20322] smc:    ib device syz1 port 1 has no pnetid
[  468.496053][T20382] nbd: nbd1 already in use
[  468.509038][T20382] block nbd1: NBD_DISCONNECT
[  468.520425][T20382] block nbd1: Send disconnect failed -32
[  468.628018][ T8208] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  468.676520][ T8208] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  468.836332][T20398] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3703'.
[  468.870749][   T12] bond10 (unregistering): (slave ip6gretap0): Releasing active interface
[  469.014286][   T12] bond5 (unregistering): (slave gretap1): Releasing active interface
[  469.033430][   T12] bond3 (unregistering): (slave gre1): Releasing backup interface
[  469.141159][   T12] team0: Port device bridge3 removed
[  469.281760][   T12] bond8 (unregistering): (slave bridge6): Releasing backup interface
[  469.342445][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  469.352840][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  469.364815][   T12] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  469.374014][   T12] bond0 (unregistering): Released all slaves
[  469.384864][   T12] bond1 (unregistering): Released all slaves
[  469.399673][   T12] bond2 (unregistering): (slave lo): Releasing backup interface
[  469.408839][   T12] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  469.421555][   T12] bond2 (unregistering): Released all slaves
[  469.435227][   T12] bond3 (unregistering): Released all slaves
[  469.455775][   T12] bond4 (unregistering): Released all slaves
[  469.469376][   T12] bond5 (unregistering): Released all slaves
[  469.483410][   T12] bond6 (unregistering): (slave batadv1): Releasing active interface
[  469.499733][   T12] bond6 (unregistering): Released all slaves
[  469.513064][   T12] bond7 (unregistering): Released all slaves
[  469.527878][   T12] bond8 (unregistering): Released all slaves
[  469.541724][   T12] bond9 (unregistering): Released all slaves
[  469.562165][   T12] bond10 (unregistering): Released all slaves
[  469.575395][   T12] bond11 (unregistering): Released all slaves
[  469.594439][ T8208] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.653581][T20398] gretap0: entered promiscuous mode
[  469.730095][ T8208] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.756447][   T12] tipc: Left network mode
[  470.218269][T20416] syzkaller1: entered promiscuous mode
[  470.224981][T20416] syzkaller1: entered allmulticast mode
[  470.234705][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3707'.
[  471.107231][ T1035] net_ratelimit: 12 callbacks suppressed
[  471.107253][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  471.227332][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  471.337393][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  471.447309][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  471.557349][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  471.667301][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  471.777420][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  471.892614][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  472.017312][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  472.137645][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  472.419010][T20433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3709'.
[  472.609965][   T12] team0 (unregistering): Port device team_slave_1 removed
[  472.624821][   T12] team0 (unregistering): Port device team_slave_0 removed
[  472.847216][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  472.855398][    C0] lec:lec_tx_timeout: lec0
[  472.860149][T20409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  472.860440][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  472.888393][T20424] netlink: 'syz.2.3708': attribute type 2 has an invalid length.
[  472.940089][T20424] netlink: 'syz.2.3708': attribute type 2 has an invalid length.
[  473.177430][T20453] ip6erspan0: entered promiscuous mode
[  473.210797][   T12] IPVS: stop unused estimator thread 0...
[  473.395446][T20467] netlink: 99 bytes leftover after parsing attributes in process `syz.0.3716'.
[  474.142486][T20504] syzkaller0: entered promiscuous mode
[  474.158525][T20504] syzkaller0: entered allmulticast mode
[  474.232233][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3741'.
[  474.263948][T20508] netlink: 'syz.2.3741': attribute type 2 has an invalid length.
[  475.532549][T20561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3763'.
[  475.556621][T20565] syzkaller0: entered promiscuous mode
[  475.562974][T20565] syzkaller0: entered allmulticast mode
[  475.858672][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3771'.
[  476.092762][T20592] syzkaller0: entered promiscuous mode
[  476.106856][T20592] syzkaller0: entered allmulticast mode
[  476.187266][ T1035] net_ratelimit: 30 callbacks suppressed
[  476.187284][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  476.317395][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  476.325165][   T12] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  476.468238][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  476.588702][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  476.599981][T20610] No such timeout policy "syz0"
[  476.707229][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  476.818809][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  476.927958][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  477.038312][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  477.091504][T20630] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3796'.
[  477.157604][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  477.290925][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  477.608707][T20651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3803'.
[  477.692397][T20653] sctp: [Deprecated]: syz.3.3804 (pid 20653) Use of int in max_burst socket option deprecated.
[  477.692397][T20653] Use struct sctp_assoc_value instead
[  477.877144][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  477.885213][    C0] lec:lec_tx_timeout: lec0
[  477.889849][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  478.131454][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3813'.
[  478.420759][ T5836] Bluetooth: hci2: link tx timeout
[  478.426380][ T5836] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  478.453844][ T5835] Bluetooth: hci2: link tx timeout
[  478.459116][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  478.492372][ T5835] Bluetooth: hci2: link tx timeout
[  478.497701][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  478.506549][ T5835] Bluetooth: hci2: link tx timeout
[  478.511835][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  478.520480][ T5835] Bluetooth: hci2: link tx timeout
[  478.525817][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  478.533700][ T5835] Bluetooth: hci2: link tx timeout
[  478.539157][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  478.745777][T20715] lo: entered allmulticast mode
[  479.361711][T20751] syzkaller0: entered promiscuous mode
[  479.369100][T20751] syzkaller0: entered allmulticast mode
[  479.439264][T20756] ip6erspan0: entered promiscuous mode
[  479.775633][T20779] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3844'.
[  480.488021][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  481.187908][T20786] bridge_slave_0: left allmulticast mode
[  481.197479][T20786] bridge_slave_0: left promiscuous mode
[  481.203281][T20786] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.218769][T20786] bridge_slave_1: left allmulticast mode
[  481.224531][T20786] bridge_slave_1: left promiscuous mode
[  481.233476][T20786] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.246978][T20786] bond0: (slave bond_slave_0): Releasing backup interface
[  481.258812][T20786] bond0: (slave bond_slave_1): Releasing backup interface
[  481.273169][T20786] team0: Port device team_slave_0 removed
[  481.286592][T20786] team0: Port device team_slave_1 removed
[  481.294410][T20786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  481.302033][T20786] batman_adv: batadv0: Removing interface: batadv_slave_0
[  481.311274][T20786] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  481.318977][T20786] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.328537][T20786] net_ratelimit: 17 callbacks suppressed
[  481.328547][T20786] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  481.356012][T20801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3851'.
[  481.403550][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  481.519841][ T8208] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  481.569001][T20808] syzkaller0: entered promiscuous mode
[  481.597614][T20808] syzkaller0: entered allmulticast mode
[  481.606549][T20806] syzkaller0: entered promiscuous mode
[  481.627774][T20806] syzkaller0: entered allmulticast mode
[  481.757572][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  481.871892][T20827] team0: Port device dummy0 removed
[  481.884121][T20827] bridge_slave_0: left allmulticast mode
[  481.897086][T20827] bridge_slave_0: left promiscuous mode
[  481.913844][T20827] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.966540][T20827] bridge_slave_1: left allmulticast mode
[  481.985886][T20827] bridge_slave_1: left promiscuous mode
[  482.008505][T20827] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.034406][T20827] bond0: (slave bond_slave_0): Releasing backup interface
[  482.052004][T20827] bond0: (slave bond_slave_1): Releasing backup interface
[  482.068680][T20827] team0: Port device team_slave_0 removed
[  482.088548][T20827] team0: Port device team_slave_1 removed
[  482.094693][T20827] batman_adv: batadv0: Removing interface: batadv_slave_0
[  482.103496][T20827] batman_adv: batadv0: Removing interface: batadv_slave_1
[  482.112377][T20827] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  482.137283][ T8208] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  482.257273][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  482.367386][ T8208] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  482.459196][T20860] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3873'.
[  482.559835][ T8208] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  482.575909][T20868] netlink: 'syz.3.3878': attribute type 1 has an invalid length.
[  482.655540][T20868] 8021q: adding VLAN 0 to HW filter on device bond2
[  482.673413][T20874] bond2: (slave geneve2): making interface the new active one
[  482.687714][T20874] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  482.697569][   T12] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  482.848885][T20885] syzkaller0: entered promiscuous mode
[  482.854498][T20885] syzkaller0: entered allmulticast mode
[  482.939882][T20891] pim6reg: entered allmulticast mode
[  482.952093][T20889] pim6reg: left allmulticast mode
[  483.677193][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  483.685225][    C0] lec:lec_tx_timeout: lec0
[  483.692028][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  483.947819][T20929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3904'.
[  483.975870][T20929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3904'.
[  486.765573][T20956] syz_tun: entered allmulticast mode
[  486.777577][T20957] syz_tun: left allmulticast mode
[  486.877330][   T12] net_ratelimit: 10 callbacks suppressed
[  486.877348][   T12] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  487.017484][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  487.127660][   T12] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  487.237222][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  487.324742][T21008] sctp: [Deprecated]: syz.0.3937 (pid 21008) Use of int in max_burst socket option deprecated.
[  487.324742][T21008] Use struct sctp_assoc_value instead
[  487.357501][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  487.477418][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  487.588055][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  487.707307][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  487.818997][   T12] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  487.939519][   T12] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  488.158068][T21053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3957'.
[  488.295910][T21061] xt_hashlimit: size too large, truncated to 1048576
[  488.359149][T21064] netlink: 'syz.0.3964': attribute type 32 has an invalid length.
[  488.717217][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  488.725363][    C0] lec:lec_tx_timeout: lec0
[  488.730217][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  488.804713][T21094] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3977'.
[  488.827244][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3977'.
[  488.996424][T21109] tipc: Started in network mode
[  489.003605][T21109] tipc: Node identity fffffff8, cluster identity 4711
[  489.010866][T21109] tipc: Node number set to 4294967288
[  490.216086][T21189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4017'.
[  490.255952][T21194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4018'.
[  490.541326][T21213] netlink: 'syz.2.4026': attribute type 4 has an invalid length.
[  490.666712][T21224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4028'.
[  490.751868][T21224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4028'.
[  490.780664][T21230] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4030'.
[  491.109296][T21232] udevd[21232]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  491.126379][T21231] udevd[21231]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  491.384653][T21266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4037'.
[  491.421685][T21266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4037'.
[  491.530825][T21272] bridge3: entered promiscuous mode
[  491.566527][T21272] bridge3: entered allmulticast mode
[  491.599568][T21272] team0: Failed to send port change of device bridge3 via netlink (err -105)
[  491.628677][T21272] team0: Failed to send options change via netlink (err -105)
[  491.636403][T21272] team0: Port device bridge3 added
[  491.701473][T21279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4041'.
[  492.007630][ T8217] net_ratelimit: 33 callbacks suppressed
[  492.007649][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  492.178116][T21297] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  492.255425][T21297] bond3 (unregistering): Released all slaves
[  492.290586][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  492.407587][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  492.461475][T21305] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4050'.
[  492.500365][T21307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4049'.
[  492.684850][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  492.809546][T21314] ip6gretap1: entered promiscuous mode
[  492.815334][T21314] ip6gretap1: entered allmulticast mode
[  492.879005][T21318] block nbd1: server does not support multiple connections per device.
[  492.888047][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  492.929772][T21318] block nbd1: shutting down sockets
[  493.007279][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  493.237232][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  493.358730][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  493.441861][T21356] bridge_slave_1: left allmulticast mode
[  493.473199][T21356] bridge_slave_1: left promiscuous mode
[  493.507427][T21356] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.546074][T21356] bridge_slave_0: left allmulticast mode
[  493.563604][T21356] bridge_slave_0: left promiscuous mode
[  493.584327][T21356] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.611023][T21367] netlink: 'syz.1.4065': attribute type 1 has an invalid length.
[  493.737186][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  493.737308][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  493.745232][    C0] lec:lec_tx_timeout: lec0
[  493.745725][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  493.897371][   T36] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  493.939658][T21387] syzkaller0: entered promiscuous mode
[  493.945187][T21387] syzkaller0: entered allmulticast mode
[  495.107564][T21418] netlink: 'syz.1.4079': attribute type 10 has an invalid length.
[  495.134074][T21418] team0 (unregistering): Port device team_slave_0 removed
[  495.143555][T21418] team0 (unregistering): Port device team_slave_1 removed
[  495.155872][T21418] team0 (unregistering): Port device bridge3 removed
[  496.113163][T21428] syz.1.4080 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  496.167735][T21428] CPU: 0 UID: 0 PID: 21428 Comm: syz.1.4080 Not tainted syzkaller #0 PREEMPT(full) 
[  496.167760][T21428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  496.167772][T21428] Call Trace:
[  496.167780][T21428]  <TASK>
[  496.167788][T21428]  dump_stack_lvl+0xe8/0x150
[  496.167820][T21428]  dump_header+0xd3/0x4c0
[  496.167846][T21428]  oom_kill_process+0x3ab/0x970
[  496.167872][T21428]  out_of_memory+0x106c/0x1410
[  496.167892][T21428]  ? percpu_ref_put+0x19/0x180
[  496.167918][T21428]  ? __pfx___mutex_lock+0x10/0x10
[  496.167962][T21428]  ? __pfx_out_of_memory+0x10/0x10
[  496.167982][T21428]  ? do_raw_spin_unlock+0xf5/0x210
[  496.168014][T21428]  try_charge_memcg+0xc53/0x1560
[  496.168058][T21428]  ? __pfx_try_charge_memcg+0x10/0x10
[  496.168095][T21428]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  496.168124][T21428]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  496.168153][T21428]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  496.168181][T21428]  __swap_cache_prepare_and_add+0xe8/0x760
[  496.168208][T21428]  ? page_rmappable_folio+0x9a/0x170
[  496.168243][T21428]  swap_cache_alloc_folio+0xf1/0x240
[  496.168285][T21428]  swap_cluster_readahead+0x369/0x690
[  496.168313][T21428]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  496.168347][T21428]  ? get_vma_policy+0x27b/0x3c0
[  496.168376][T21428]  swapin_readahead+0x196/0xc50
[  496.168409][T21428]  ? __pfx_swapin_readahead+0x10/0x10
[  496.168431][T21428]  ? swap_table_get+0x1e/0x260
[  496.168459][T21428]  ? swap_table_get+0x1e/0x260
[  496.168485][T21428]  ? swap_table_get+0x1e/0x260
[  496.168515][T21428]  ? swap_table_get+0x216/0x260
[  496.168547][T21428]  ? swap_cache_get_folio+0x513/0x520
[  496.168584][T21428]  do_swap_page+0x56f/0x5a20
[  496.168637][T21428]  ? do_swap_page+0x127/0x5a20
[  496.168665][T21428]  ? __pfx_do_swap_page+0x10/0x10
[  496.168692][T21428]  ? __pte_offset_map+0x1ae/0x240
[  496.168716][T21428]  ? pte_offset_map_rw_nolock+0xea/0x160
[  496.168740][T21428]  handle_mm_fault+0x12d2/0x3310
[  496.168774][T21428]  ? handle_mm_fault+0xee/0x3310
[  496.168802][T21428]  ? __pfx_handle_mm_fault+0x10/0x10
[  496.168819][T21428]  ? lock_vma_under_rcu+0x45a/0x500
[  496.168870][T21428]  do_user_addr_fault+0xa73/0x1340
[  496.168904][T21428]  ? rcu_is_watching+0x15/0xb0
[  496.168933][T21428]  ? trace_page_fault_user+0x84/0x210
[  496.168963][T21428]  exc_page_fault+0x6a/0xc0
[  496.168983][T21428]  asm_exc_page_fault+0x26/0x30
[  496.169002][T21428] RIP: 0033:0x7f77b6e6a1cc
[  496.169020][T21428] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  496.169037][T21428] RSP: 002b:00007fff09a55f20 EFLAGS: 00010206
[  496.169055][T21428] RAX: 0000000000000000 RBX: 00007f77b7215fa0 RCX: 000055555dd23808
[  496.169069][T21428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  496.169090][T21428] RBP: 00007f77b7217da0 R08: 0000000000000000 R09: 0000000000000000
[  496.169101][T21428] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000791cd
[  496.169130][T21428] R13: 00007f77b7215fac R14: 0000000000078f6f R15: 00007f77b7215fa0
[  496.169162][T21428]  </TASK>
[  496.169170][T21428] memory: usage 307200kB, limit 307200kB, failcnt 1088
[  496.567259][T21428] memory+swap: usage 307596kB, limit 9007199254740988kB, failcnt 0
[  496.585406][T21428] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  496.636947][T21428] Memory cgroup stats for /syz1:
[  496.637082][T21428] cache 0
[  496.645031][T21428] rss 0
[  496.687164][T21428] rss_huge 0
[  496.697284][T21428] shmem 0
[  496.700270][T21428] mapped_file 0
[  496.707463][T21428] dirty 0
[  496.710443][T21428] writeback 0
[  496.713757][T21428] workingset_refault_anon 18
[  496.731610][T21428] workingset_refault_file 0
[  496.736134][T21428] swap 405504
[  496.741692][T21428] swapcached 483328
[  496.745537][T21428] pgpgin 92311
[  496.758273][T21428] pgpgout 92310
[  496.761770][T21428] pgfault 166511
[  496.775585][T21428] pgmajfault 9
[  496.781506][T21428] inactive_anon 0
[  496.785192][T21428] active_anon 4096
[  496.797012][T21428] inactive_file 0
[  496.807269][T21428] active_file 0
[  496.810766][T21428] unevictable 0
[  496.824477][T21428] hierarchical_memory_limit 314572800
[  496.834580][T21428] hierarchical_memsw_limit 9223372036854771712
[  496.847254][T21428] total_cache 0
[  496.851211][T21378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  496.938432][T21428] total_rss 0
[  496.950199][T21428] total_rss_huge 0
[  496.964125][T21428] total_shmem 0
[  496.995807][T21428] total_mapped_file 0
[  497.000573][T21428] total_dirty 0
[  497.031273][T21428] total_writeback 0
[  497.035116][T21428] total_workingset_refault_anon 34
[  497.052156][T21467] syzkaller1: entered promiscuous mode
[  497.071131][T21428] total_workingset_refault_file 108
[  497.076382][T21428] total_swap 405504
[  497.101358][T21467] syzkaller1: entered allmulticast mode
[  497.130005][T21428] total_swapcached 659456
[  497.134379][T21428] total_pgpgin 114193
[  497.147232][   T36] net_ratelimit: 27 callbacks suppressed
[  497.147248][   T36] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  497.187437][T21428] total_pgpgout 114192
[  497.191547][T21428] total_pgfault 219298
[  497.247209][T21428] total_pgmajfault 25
[  497.255767][T21428] total_inactive_anon 0
[  497.267485][T21428] total_active_anon 4096
[  497.279785][T21428] total_inactive_file 0
[  497.298859][T21428] total_active_file 0
[  497.305729][T21428] total_unevictable 0
[  497.347815][T21428] anon_cost 0
[  497.351182][T21428] file_cost 0
[  497.377583][T21428] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4080,pid=21428,uid=0
[  497.495663][T21494] netlink: 'syz.0.4085': attribute type 1 has an invalid length.
[  497.521833][T21428] Memory cgroup out of memory: Killed process 21428 (syz.1.4080) total-vm:102288kB, anon-rss:1244kB, file-rss:22984kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  497.567314][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  497.679051][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  497.787293][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  497.907255][   T36] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  498.017362][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  498.104211][T21512] syzkaller1: entered allmulticast mode
[  498.127493][   T12] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  498.237523][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  498.347236][   T36] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  498.477752][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  498.579918][T21531] __nla_validate_parse: 7 callbacks suppressed
[  498.579938][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4097'.
[  498.777148][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  498.785250][    C0] lec:lec_tx_timeout: lec0
[  498.790194][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  498.982803][T21551] vlan2: entered promiscuous mode
[  498.988185][T21551] geneve1: entered promiscuous mode
[  498.993731][T21551] vlan2: entered allmulticast mode
[  499.018733][T21551] geneve1: entered allmulticast mode
[  499.144633][T21557] syzkaller0: entered promiscuous mode
[  499.150253][T21557] syzkaller0: entered allmulticast mode
[  499.942996][T21592] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  500.076988][T21595] geneve1: left allmulticast mode
[  500.117166][T21595] geneve1: left promiscuous mode
[  500.279845][T21598] netlink: 'syz.3.4109': attribute type 1 has an invalid length.
[  500.335948][T21606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4109'.
[  500.363410][ T1035] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  500.376337][ T1035] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  500.399836][ T1035] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  500.460115][ T1035] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  500.910817][T21644] netlink: 'syz.0.4122': attribute type 39 has an invalid length.
[  500.966402][T21645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4120'.
[  501.021638][T21645] macsec0: entered promiscuous mode
[  501.042975][T21645] macsec0: left promiscuous mode
[  501.177221][T21658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4126'.
[  501.346764][T21672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4131'.
[  501.361335][T21672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4131'.
[  501.465763][T21674] batadv_slave_1: entered promiscuous mode
[  501.472751][T21674] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4132'.
[  501.580267][T21673] batadv_slave_1: left promiscuous mode
[  502.033252][T21722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4144'.
[  502.088818][T21729] netlink: 'syz.1.4145': attribute type 1 has an invalid length.
[  502.096626][T21729] netlink: 'syz.1.4145': attribute type 2 has an invalid length.
[  502.105506][T21731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4144'.
[  502.147361][T21729] netlink: 'syz.1.4145': attribute type 1 has an invalid length.
[  502.155127][T21729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4145'.
[  502.207246][ T8217] net_ratelimit: 24 callbacks suppressed
[  502.207263][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  502.347720][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  502.488347][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  502.608102][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  502.742573][T21749] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  502.761537][T21749] syzkaller0: entered promiscuous mode
[  502.774393][T21749] syzkaller0: entered allmulticast mode
[  502.807382][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  502.860846][T21749] tipc: Resetting bearer <eth:syzkaller0>
[  502.877692][T21749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.886458][T21749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.910476][T21745] tipc: Resetting bearer <eth:syzkaller0>
[  502.957608][T21745] tipc: Disabling bearer <eth:syzkaller0>
[  502.989171][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  503.037612][ T7466] IPVS: starting estimator thread 0...
[  503.097239][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  503.137578][T21762] IPVS: using max 29 ests per chain, 69600 per kthread
[  503.348269][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  503.688255][T21796] __nla_validate_parse: 3 callbacks suppressed
[  503.688271][T21796] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4163'.
[  503.807139][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  503.815200][    C0] lec:lec_tx_timeout: lec0
[  503.820169][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  503.849277][T21808] veth0: entered allmulticast mode
[  504.032282][T21819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4168'.
[  504.070826][T21819] 8021q: adding VLAN 0 to HW filter on device bond3
[  504.090899][T21820] bond3 (unregistering): Released all slaves
[  504.476931][T21827] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4169'.
[  504.639127][T21846] netlink: 'syz.0.4171': attribute type 7 has an invalid length.
[  504.665529][T21846] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4171'.
[  505.084658][T21869] netlink: 'syz.0.4179': attribute type 40 has an invalid length.
[  505.737435][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4188'.
[  506.195338][T21922] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4175'.
[  506.303410][T21931] x_tables: duplicate underflow at hook 4
[  506.332368][T21931] netlink: 'syz.2.4193': attribute type 12 has an invalid length.
[  506.358375][T21931] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4193'.
[  506.401869][T21893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4185'.
[  506.758460][T21945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4196'.
[  507.043858][T21949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4198'.
[  507.247304][ T8211] net_ratelimit: 23 callbacks suppressed
[  507.247329][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  507.379555][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  507.497201][ T8208] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  507.627474][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  507.737900][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  507.867276][ T8208] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  507.910690][T22001] macvtap0: entered promiscuous mode
[  507.916332][T22001] macvtap0: entered allmulticast mode
[  507.923917][T22001] veth1_vlan: entered allmulticast mode
[  507.931007][T21993] bridge0: entered promiscuous mode
[  507.957644][T22004] x_tables: duplicate underflow at hook 4
[  507.977465][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  508.087599][ T8208] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  508.143673][T22012] xt_hashlimit: size too large, truncated to 1048576
[  508.217242][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  508.346344][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  508.466424][T22043] syzkaller1: entered promiscuous mode
[  508.472615][T22043] syzkaller1: entered allmulticast mode
[  508.551551][T22049] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  508.558967][T22049] syzkaller0: entered promiscuous mode
[  508.564476][T22049] syzkaller0: entered allmulticast mode
[  508.573547][T22047] veth0: entered promiscuous mode
[  508.615459][T22045] veth0: left promiscuous mode
[  508.624391][T22049] tipc: Resetting bearer <eth:syzkaller0>
[  508.701743][T22048] tipc: Resetting bearer <eth:syzkaller0>
[  508.728639][T22057] __nla_validate_parse: 8 callbacks suppressed
[  508.728653][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4236'.
[  508.769142][T22048] tipc: Disabling bearer <eth:syzkaller0>
[  508.806741][T22057] macvlan3: entered allmulticast mode
[  508.815264][T22057] hsr0: entered allmulticast mode
[  508.820584][T22057] hsr_slave_0: entered allmulticast mode
[  508.826365][T22057] hsr_slave_1: entered allmulticast mode
[  508.833432][T22065] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4237'.
[  508.837295][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  508.850598][    C0] lec:lec_tx_timeout: lec0
[  508.855385][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  509.066816][T22079] netlink: 51 bytes leftover after parsing attributes in process `syz.2.4242'.
[  509.100765][T22079] 8021q: adding VLAN 0 to HW filter on device bond3
[  509.320347][T22091] bridge0: port 1(syz_tun) entered blocking state
[  509.338806][T22091] bridge0: port 1(syz_tun) entered disabled state
[  509.351123][T22091] syz_tun: entered allmulticast mode
[  509.369478][T22091] syz_tun: entered promiscuous mode
[  509.497697][T22098] sctp: [Deprecated]: syz.4.4249 (pid 22098) Use of int in max_burst socket option deprecated.
[  509.497697][T22098] Use struct sctp_assoc_value instead
[  509.654653][T22100] No such timeout policy "syz0"
[  509.737938][T22102] netlink: 'syz.2.4251': attribute type 1 has an invalid length.
[  510.362657][T22131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'.
[  510.428694][T22131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4258'.
[  510.563676][T22135] bond4 (unregistering): Released all slaves
[  510.646779][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4263'.
[  510.658302][T22138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4262'.
[  511.158401][T22170] netlink: 'syz.4.4271': attribute type 1 has an invalid length.
[  511.166289][T22170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4271'.
[  511.176274][T22170] netlink: 'syz.4.4271': attribute type 1 has an invalid length.
[  511.366032][T22178] syzkaller0: entered promiscuous mode
[  511.371659][T22178] syzkaller0: entered allmulticast mode
[  511.490343][T22182] xt_TCPMSS: Only works on TCP SYN packets
[  511.545859][T22182] syzkaller1: entered promiscuous mode
[  511.552016][T22182] syzkaller1: entered allmulticast mode
[  511.686147][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4279'.
[  511.703931][T22194] veth1_macvtap: left promiscuous mode
[  511.872229][T22202] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4281'.
[  512.092775][T22215] netlink: 'syz.4.4285': attribute type 10 has an invalid length.
[  512.120730][T22215] team0: Port device dummy0 added
[  512.145540][T22215] netlink: 'syz.4.4285': attribute type 10 has an invalid length.
[  512.177322][T22215] team0: Port device dummy0 removed
[  512.192256][T22215] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  512.216551][T22222] syzkaller0: entered promiscuous mode
[  512.236671][T22222] syzkaller0: entered allmulticast mode
[  512.324233][T22230] netlink: 'syz.3.4290': attribute type 8 has an invalid length.
[  512.357349][ T1035] net_ratelimit: 22 callbacks suppressed
[  512.357364][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  512.378773][T22230] �����: renamed from virt_wifi0
[  512.477245][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  512.587198][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  512.697285][ T8208] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  512.808908][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  512.920869][T22228] openvswitch: netlink: Flow actions attr not present in new flow.
[  513.017312][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  513.207880][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  513.242855][T22274] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  513.332118][T22277] xt_connbytes: Forcing CT accounting to be enabled
[  513.339121][ T8208] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  513.351448][T22277] xt_CT: You must specify a L4 protocol and not use inversions on it
[  513.363022][ T5888] IPVS: starting estimator thread 0...
[  513.448558][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  513.458764][T22278] IPVS: using max 27 ests per chain, 64800 per kthread
[  513.545904][T22288] delete_channel: no stack
[  513.867431][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  513.875499][    C0] lec:lec_tx_timeout: lec0
[  513.880528][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  514.114919][T22314] __nla_validate_parse: 3 callbacks suppressed
[  514.114939][T22314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4316'.
[  514.199603][T22315] pim6reg1: entered promiscuous mode
[  514.224098][T22315] pim6reg1: entered allmulticast mode
[  514.296145][T22319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4317'.
[  514.313675][   T61] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  514.313807][T22319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4317'.
[  514.333121][   T61] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  514.374081][   T61] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  514.392786][   T61] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  514.569515][T22336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4322'.
[  514.855320][T22352] syzkaller0: entered promiscuous mode
[  514.860967][T22352] syzkaller0: entered allmulticast mode
[  514.895991][T22361] netlink: 'syz.0.4330': attribute type 9 has an invalid length.
[  514.904052][T22361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4330'.
[  514.956718][T22363] netlink: 'syz.2.4331': attribute type 3 has an invalid length.
[  514.971325][T22361] macvlan2: entered promiscuous mode
[  514.978329][T22363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4331'.
[  514.987601][T22361] erspan0: entered promiscuous mode
[  514.993076][T22361] macvlan2: entered allmulticast mode
[  514.998812][T22361] erspan0: entered allmulticast mode
[  515.165216][T22370] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4335'.
[  515.200228][T22372] vxcan1: entered promiscuous mode
[  515.500654][T22387] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4338'.
[  515.545051][T22390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4341'.
[  515.566271][T22390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4341'.
[  515.715126][T22390] bridge0: port 1(syz_tun) entered blocking state
[  515.721750][T22390] bridge0: port 1(syz_tun) entered forwarding state
[  515.782888][T22390] bridge0: left promiscuous mode
[  515.791558][T22390] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.800328][T22390] 8021q: adding VLAN 0 to HW filter on device team0
[  515.842437][T22406] SET target dimension over the limit!
[  516.136933][T22423] syzkaller1: entered promiscuous mode
[  516.142962][T22423] syzkaller1: entered allmulticast mode
[  516.267662][T22394] netlink: 'syz.3.4342': attribute type 21 has an invalid length.
[  516.275715][T22394] IPv6: NLM_F_CREATE should be specified when creating new route
[  516.297283][T22394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  516.304628][T22394] IPv6: NLM_F_CREATE should be set when creating new route
[  516.311931][T22394] IPv6: NLM_F_CREATE should be set when creating new route
[  516.319185][T22394] IPv6: NLM_F_CREATE should be set when creating new route
[  516.400315][T22394] netlink: 'syz.3.4342': attribute type 21 has an invalid length.
[  516.451079][T22394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  516.853356][T22455] sctp: [Deprecated]: syz.4.4360 (pid 22455) Use of int in maxseg socket option.
[  516.853356][T22455] Use struct sctp_assoc_value instead
[  516.923323][T22457] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  516.967853][T22455] tap0: tun_chr_ioctl cmd 2147767520
[  516.980963][T22457] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  517.364200][T22466] x_tables: duplicate underflow at hook 1
[  517.419061][ T8217] net_ratelimit: 29 callbacks suppressed
[  517.419080][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  517.508684][T22478] netlink: 'syz.2.4366': attribute type 12 has an invalid length.
[  517.537215][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  517.772996][   T36] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  518.047212][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  518.312262][T22514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  518.337266][   T36] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  518.414974][T22514] tipc: Disabling bearer <eth:syzkaller0>
[  518.447248][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  518.564195][T22536] netlink: 'syz.0.4385': attribute type 2 has an invalid length.
[  518.605807][T22536] netlink: 'syz.0.4385': attribute type 2 has an invalid length.
[  518.722496][ T5835] Bluetooth: hci5: command 0x0406 tx timeout
[  518.887156][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  518.895216][    C0] lec:lec_tx_timeout: lec0
[  518.899917][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  520.387243][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  520.499366][T22565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  520.565173][T22565] tipc: Resetting bearer <eth:syzkaller0>
[  520.577298][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  520.642282][T22565] tipc: Resetting bearer <eth:syzkaller0>
[  520.687497][ T8217] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  520.711784][T22579] xt_hashlimit: overflow, rate too high: 0
[  520.732175][T22579] __nla_validate_parse: 13 callbacks suppressed
[  520.732189][T22579] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4396'.
[  520.749247][T22579] pim6reg1: entered promiscuous mode
[  520.754669][T22579] pim6reg1: entered allmulticast mode
[  520.869705][T22596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4400'.
[  520.927864][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  521.045533][T22605] netlink: 'syz.1.4403': attribute type 12 has an invalid length.
[  521.061587][T22605] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4403'.
[  521.137361][T22609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4405'.
[  521.192337][T22609] SET target dimension over the limit!
[  521.233208][T22610] SET target dimension over the limit!
[  521.330734][T22600] netlink: 'syz.4.4402': attribute type 1 has an invalid length.
[  521.347219][T22600] netlink: 'syz.4.4402': attribute type 2 has an invalid length.
[  521.369468][ T8217] tipc: Resetting bearer <eth:syzkaller0>
[  521.381635][T22622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4407'.
[  521.804191][T22650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4419'.
[  521.952014][T22655] nbd: must specify a size in bytes for the device
[  522.437211][   T61] net_ratelimit: 12 callbacks suppressed
[  522.437232][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  522.557481][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  522.673516][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  522.787619][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  522.897469][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  523.007615][   T36] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  523.117674][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  523.227651][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  523.337480][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  523.447373][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  524.957139][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6060 ms
[  524.965270][    C0] lec:lec_tx_timeout: lec0
[  524.970290][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  527.517854][ T8211] net_ratelimit: 36 callbacks suppressed
[  527.517875][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  527.637232][   T36] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  527.747312][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  527.857441][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  527.967215][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  528.077369][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  528.187259][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  528.297333][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  528.407329][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  528.517241][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  530.717208][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[  530.725343][    C0] lec:lec_tx_timeout: lec0
[  530.730082][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  531.997543][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  532.597327][ T8208] net_ratelimit: 36 callbacks suppressed
[  532.597366][ T8208] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  532.717435][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  532.827402][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  532.937447][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  533.047324][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  533.157445][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  533.267399][ T8208] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  533.377526][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  533.487314][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  533.597491][ T8211] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  534.077395][ T5835] Bluetooth: hci4: command 0x0406 tx timeout
[  535.737217][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  535.745382][    C0] lec:lec_tx_timeout: lec0
[  535.750015][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  537.677511][ T1035] net_ratelimit: 36 callbacks suppressed
[  537.677534][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  537.797537][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  537.907302][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  538.017298][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  538.127205][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  538.237316][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  538.347215][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  538.457516][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  538.567254][ T1035] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  538.677248][   T61] bond3: (slave ip6gretap3): failed to get link speed/duplex
[  539.197275][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  540.651366][T22661] syzkaller1: entered promiscuous mode
[  540.656893][T22661] syzkaller1: entered allmulticast mode
[  540.665235][T22661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  540.672515][T22661] IPv6: NLM_F_CREATE should be set when creating new route
[  540.679788][T22661] IPv6: NLM_F_CREATE should be set when creating new route
[  540.686980][T22661] IPv6: NLM_F_CREATE should be set when creating new route
[  540.695310][T22661] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4421'.
[  540.767147][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  540.775224][    C0] lec:lec_tx_timeout: lec0
[  540.779989][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  542.244806][ T8208] vlan2: left promiscuous mode
[  542.250023][ T8208] bridge0: port 6(vlan2) entered disabled state
[  542.258511][ T8208] bond0: left promiscuous mode
[  542.263288][ T8208] bond_slave_0: left promiscuous mode
[  542.269263][ T8208] bond_slave_1: left promiscuous mode
[  542.275051][ T8208] bridge0: port 5(bond0) entered disabled state
[  542.284044][ T8208] bond1: left allmulticast mode
[  542.289169][ T8208] bridge0: port 3(bond1) entered disabled state
[  542.297631][ T8208] bridge_slave_1: left allmulticast mode
[  542.303281][ T8208] bridge_slave_1: left promiscuous mode
[  542.309472][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.318910][ T8208] bridge_slave_0: left promiscuous mode
[  542.324569][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.343796][ T8208] dvmrp0: left allmulticast mode
[  542.394971][ T8208] bond3 (unregistering): (slave ip6gretap3): Removing an active aggregator
[  542.404895][ T8208] bond3 (unregistering): (slave ip6gretap3): Releasing backup interface
[  542.413800][ T8208] bond3 (unregistering): (slave ip6gretap3): the permanent HWaddr of slave - ca:c2:0c:76:b3:27 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  542.513305][ T8208] batman_adv: batadv0: Removing interface: gretap1
[  542.915547][ T8208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  542.924711][ T8208] bond_slave_0: left allmulticast mode
[  542.931572][ T8208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  542.941157][ T8208] bond_slave_1: left allmulticast mode
[  542.948664][ T8208] bond0 (unregistering): (slave team0): Releasing backup interface
[  542.957204][ T8208] team0: left allmulticast mode
[  542.962089][ T8208] team_slave_0: left allmulticast mode
[  542.967948][ T8208] team_slave_1: left allmulticast mode
[  542.973781][ T8208] dummy0: left allmulticast mode
[  542.984094][ T8208] bond0 (unregistering): Released all slaves
[  542.994109][ T8208] bond1 (unregistering): Released all slaves
[  543.007596][ T8208] bond2 (unregistering): Released all slaves
[  543.021677][ T8208] bond3 (unregistering): (slave veth9): Releasing backup interface
[  543.031104][ T8208] bond3 (unregistering): Released all slaves
[  543.054154][ T8208] bond4 (unregistering): Released all slaves
[  543.067928][ T8208] bond5 (unregistering): (slave veth11): Releasing backup interface
[  543.077636][ T8208] bond5 (unregistering): Released all slaves
[  543.091598][ T8208] bond6 (unregistering): (slave lo): Releasing backup interface
[  543.099686][ T8208] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  543.116211][ T8208] bond6 (unregistering): Released all slaves
[  543.222519][ T8208] : left promiscuous mode
[  543.284620][ T8208] tipc: Disabling bearer <udp:syz1>
[  543.290142][ T8208] tipc: Disabling bearer <udp:syz2>
[  543.295517][ T8208] tipc: Left network mode
[  543.948210][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_0
[  543.955965][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_1
[  544.135462][ T8208] team_slave_1 (unregistering): left promiscuous mode
[  544.147830][ T8208] team0 (unregistering): Port device team_slave_1 removed
[  544.161129][ T8208] team_slave_0 (unregistering): left promiscuous mode
[  544.169160][ T8208] team0 (unregistering): Port device team_slave_0 removed
[  544.241627][ T8208] dummy0 (unregistering): left promiscuous mode
[  544.251117][ T8208] team0 (unregistering): Port device dummy0 removed
[  544.485846][ T8208] IPVS: stop unused estimator thread 0...
[  544.832417][T22677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4423'.
[  544.984011][T22699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4430'.
[  545.150427][T22707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4433'.
[  545.240378][T22709] syzkaller0: entered promiscuous mode
[  545.245925][T22709] syzkaller0: entered allmulticast mode
[  545.258983][T22711] netlink: 'syz.3.4435': attribute type 5 has an invalid length.
[  545.787223][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  545.795384][    C0] lec:lec_tx_timeout: lec0
[  545.800023][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  545.890996][T22745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4439'.
[  545.925307][T22745] bond3: entered promiscuous mode
[  545.931072][T22745] 8021q: adding VLAN 0 to HW filter on device bond3
[  545.969750][T22737] 8021q: adding VLAN 0 to HW filter on device bond4
[  545.992316][T22737] bond4: entered promiscuous mode
[  546.000192][T22737] bond3: (slave bond4): Enslaving as an active interface with an up link
[  548.472578][T22725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  548.634996][T22777] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4447'.
[  548.779933][T22789] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4452'.
[  549.033472][T22796] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4456'.
[  549.342048][T22817] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  549.439490][ T5836] Bluetooth: hci3: command 0x0406 tx timeout
[  550.807467][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  550.815636][    C0] lec:lec_tx_timeout: lec0
[  550.820268][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  551.264989][T22881] netlink: 'syz.2.4474': attribute type 1 has an invalid length.
[  551.373309][T22888] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4474'.
[  551.483491][T22881] 8021q: adding VLAN 0 to HW filter on device bond4
[  551.689620][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4475'.
[  551.910553][T22902] sctp: [Deprecated]: syz.2.4479 (pid 22902) Use of int in max_burst socket option deprecated.
[  551.910553][T22902] Use struct sctp_assoc_value instead
[  552.177958][T22915] netlink: 'syz.4.4484': attribute type 61 has an invalid length.
[  552.219820][T22923] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4485'.
[  552.248997][T22924] batadv0: entered allmulticast mode
[  552.562120][T22944] sctp: [Deprecated]: syz.4.4492 (pid 22944) Use of int in max_burst socket option deprecated.
[  552.562120][T22944] Use struct sctp_assoc_value instead
[  552.591129][T22939] syz_tun: entered promiscuous mode
[  552.598701][T22939] macvtap1: entered promiscuous mode
[  552.608520][T22939] syz_tun: left promiscuous mode
[  552.859703][T22964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'.
[  552.918730][T22969] batman_adv: batadv0: Interface activated: batadv_slave_0
[  552.936004][T22970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4498'.
[  553.228250][T22998] sctp: [Deprecated]: syz.2.4507 (pid 22998) Use of int in max_burst socket option deprecated.
[  553.228250][T22998] Use struct sctp_assoc_value instead
[  553.650932][T23013] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4510'.
[  553.688107][T23013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4510'.
[  553.851481][T23017] FAULT_INJECTION: forcing a failure.
[  553.851481][T23017] name failslab, interval 1, probability 0, space 0, times 0
[  553.864484][T23017] CPU: 1 UID: 0 PID: 23017 Comm: syz.1.4512 Not tainted syzkaller #0 PREEMPT(full) 
[  553.864505][T23017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  553.864517][T23017] Call Trace:
[  553.864524][T23017]  <TASK>
[  553.864531][T23017]  dump_stack_lvl+0xe8/0x150
[  553.864560][T23017]  should_fail_ex+0x412/0x560
[  553.864594][T23017]  should_failslab+0xa8/0x100
[  553.864620][T23017]  __kmalloc_cache_node_noprof+0x8a/0x6b0
[  553.864645][T23017]  ? __get_vm_area_node+0x13f/0x300
[  553.864668][T23017]  __get_vm_area_node+0x13f/0x300
[  553.864686][T23017]  ? unwind_next_frame+0xa5/0x23c0
[  553.864718][T23017]  __vmalloc_node_range_noprof+0x372/0x1730
[  553.864757][T23017]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  553.864792][T23017]  ? __lock_acquire+0x6b5/0x2cf0
[  553.864836][T23017]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  553.864857][T23017]  ? aa_file_perm+0x192/0x15e0
[  553.864886][T23017]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  553.864903][T23017]  __vmalloc_noprof+0xd2/0x120
[  553.864922][T23017]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  553.864943][T23017]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  553.864966][T23017]  bpf_prog_alloc+0x3c/0x1a0
[  553.864986][T23017]  bpf_prog_load+0x7ba/0x1ae0
[  553.865017][T23017]  ? __pfx_bpf_prog_load+0x10/0x10
[  553.865053][T23017]  ? bpf_lsm_bpf+0x9/0x20
[  553.865077][T23017]  ? security_bpf+0x7e/0x2d0
[  553.865105][T23017]  __sys_bpf+0x618/0x950
[  553.865124][T23017]  ? __pfx___sys_bpf+0x10/0x10
[  553.865154][T23017]  ? ksys_write+0x242/0x270
[  553.865176][T23017]  ? __pfx_ksys_write+0x10/0x10
[  553.865203][T23017]  __x64_sys_bpf+0x7c/0x90
[  553.865229][T23017]  do_syscall_64+0x14d/0xf80
[  553.865247][T23017]  ? trace_irq_disable+0x3b/0x150
[  553.865262][T23017]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.865280][T23017]  ? clear_bhb_loop+0x40/0x90
[  553.865302][T23017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.865320][T23017] RIP: 0033:0x7f77b6f9c819
[  553.865336][T23017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  553.865353][T23017] RSP: 002b:00007f77b51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  553.865372][T23017] RAX: ffffffffffffffda RBX: 00007f77b7215fa0 RCX: 00007f77b6f9c819
[  553.865385][T23017] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  553.865408][T23017] RBP: 00007f77b51f6090 R08: 0000000000000000 R09: 0000000000000000
[  553.865420][T23017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  553.865431][T23017] R13: 00007f77b7216038 R14: 00007f77b7215fa0 R15: 00007fff09a55db8
[  553.865465][T23017]  </TASK>
[  553.865531][T23017] syz.1.4512: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  553.974708][T23003] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4504'.
[  554.000339][T23017] ,cpuset=/,mems_allowed=0-1
[  554.211503][T23017] CPU: 1 UID: 0 PID: 23017 Comm: syz.1.4512 Not tainted syzkaller #0 PREEMPT(full) 
[  554.211526][T23017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  554.211538][T23017] Call Trace:
[  554.211545][T23017]  <TASK>
[  554.211552][T23017]  dump_stack_lvl+0xe8/0x150
[  554.211584][T23017]  warn_alloc+0x249/0x340
[  554.211611][T23017]  ? __pfx_warn_alloc+0x10/0x10
[  554.211636][T23017]  ? __get_vm_area_node+0x13f/0x300
[  554.211659][T23017]  ? __get_vm_area_node+0x2b5/0x300
[  554.211676][T23017]  ? unwind_next_frame+0xa5/0x23c0
[  554.211710][T23017]  __vmalloc_node_range_noprof+0x397/0x1730
[  554.211744][T23017]  ? __lock_acquire+0x6b5/0x2cf0
[  554.211781][T23017]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  554.211808][T23017]  ? aa_file_perm+0x192/0x15e0
[  554.211839][T23017]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  554.211857][T23017]  __vmalloc_noprof+0xd2/0x120
[  554.211877][T23017]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  554.211898][T23017]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  554.211922][T23017]  bpf_prog_alloc+0x3c/0x1a0
[  554.211943][T23017]  bpf_prog_load+0x7ba/0x1ae0
[  554.211975][T23017]  ? __pfx_bpf_prog_load+0x10/0x10
[  554.212014][T23017]  ? bpf_lsm_bpf+0x9/0x20
[  554.212038][T23017]  ? security_bpf+0x7e/0x2d0
[  554.212067][T23017]  __sys_bpf+0x618/0x950
[  554.212086][T23017]  ? __pfx___sys_bpf+0x10/0x10
[  554.212118][T23017]  ? ksys_write+0x242/0x270
[  554.212142][T23017]  ? __pfx_ksys_write+0x10/0x10
[  554.212169][T23017]  __x64_sys_bpf+0x7c/0x90
[  554.212196][T23017]  do_syscall_64+0x14d/0xf80
[  554.212214][T23017]  ? trace_irq_disable+0x3b/0x150
[  554.212230][T23017]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.212248][T23017]  ? clear_bhb_loop+0x40/0x90
[  554.212270][T23017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.212287][T23017] RIP: 0033:0x7f77b6f9c819
[  554.212304][T23017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.212319][T23017] RSP: 002b:00007f77b51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  554.212338][T23017] RAX: ffffffffffffffda RBX: 00007f77b7215fa0 RCX: 00007f77b6f9c819
[  554.212352][T23017] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  554.212364][T23017] RBP: 00007f77b51f6090 R08: 0000000000000000 R09: 0000000000000000
[  554.212375][T23017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.212386][T23017] R13: 00007f77b7216038 R14: 00007f77b7215fa0 R15: 00007fff09a55db8
[  554.212415][T23017]  </TASK>
[  554.212439][T23017] Mem-Info:
[  554.464702][T23017] active_anon:9462 inactive_anon:0 isolated_anon:0
[  554.464702][T23017]  active_file:3620 inactive_file:40129 isolated_file:0
[  554.464702][T23017]  unevictable:768 dirty:166 writeback:0
[  554.464702][T23017]  slab_reclaimable:13486 slab_unreclaimable:166133
[  554.464702][T23017]  mapped:33394 shmem:5133 pagetables:1450
[  554.464702][T23017]  sec_pagetables:0 bounce:0
[  554.464702][T23017]  kernel_misc_reclaimable:0
[  554.464702][T23017]  free:1232419 free_pcp:28184 free_cma:0
[  554.517142][T23017] Node 0 active_anon:35548kB inactive_anon:0kB active_file:14480kB inactive_file:160312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125384kB dirty:660kB writeback:0kB shmem:16796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13744kB pagetables:5640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  554.600290][T23026] syzkaller1: entered promiscuous mode
[  554.624078][T23017] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  554.627969][T23026] syzkaller1: entered allmulticast mode
[  554.662353][T23028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4513'.
[  554.671920][T23017] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  554.729477][T23017] lowmem_reserve[]: 0 2492 2493 2493 2493
[  554.740299][T23017] Node 0 DMA32 free:1131528kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34400kB inactive_anon:0kB active_file:14480kB inactive_file:160312kB unevictable:1536kB writepending:660kB zspages:0kB present:3129332kB managed:2552184kB mlocked:0kB bounce:0kB free_pcp:46356kB local_pcp:23180kB free_cma:0kB
[  554.775164][T23017] lowmem_reserve[]: 0 0 0 0 0
[  554.781629][T23017] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  554.817427][ T1035] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  554.826394][T23028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4513'.
[  554.835648][T23017] lowmem_reserve[]: 0 0 0 0 0
[  554.841638][ T1035] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  554.850979][ T1035] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  554.860406][ T1035] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  554.887480][T23017] Node 1 Normal free:3796388kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:64596kB local_pcp:34280kB free_cma:0kB
[  554.921476][T23017] lowmem_reserve[]: 0 0 0 0 0
[  554.926227][T23017] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB
[  554.942867][T23017] Node 0 DMA32: 6273*4kB (UME) 4999*8kB (UME) 2066*16kB (U) 451*32kB (UE) 842*64kB (UME) 478*128kB (UME) 491*256kB (UME) 362*512kB (UM) 299*1024kB (UE) 132*2048kB (U) 4*4096kB (U) = 1131580kB
[  554.962440][T23017] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  554.977622][T23017] Node 1 Normal: 3*4kB (U) 5*8kB (UM) 13*16kB (UM) 11*32kB (UM) 5*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 3*2048kB (U) 924*4096kB (UM) = 3796388kB
[  554.995069][T23017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  555.043503][T23017] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  555.067205][T23017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  555.086784][T23035] netlink: 'syz.0.4518': attribute type 1 has an invalid length.
[  555.094869][T23017] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  555.105250][T23017] 47235 total pagecache pages
[  555.112889][T23017] 0 pages in swap cache
[  555.142072][T23017] Free swap  = 124996kB
[  555.146359][T23017] Total swap = 124996kB
[  555.171129][T23017] 2097051 pages RAM
[  555.175005][T23017] 0 pages HighMem/MovableOnly
[  555.223538][T23017] 427172 pages reserved
[  555.233650][T23017] 0 pages cma reserved
[  555.827133][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  555.835278][    C0] lec:lec_tx_timeout: lec0
[  555.840151][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  556.369589][T23106] sctp: [Deprecated]: syz.3.4543 (pid 23106) Use of int in max_burst socket option deprecated.
[  556.369589][T23106] Use struct sctp_assoc_value instead
[  556.458242][T23109] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  556.468818][T23111] sctp: [Deprecated]: syz.1.4545 (pid 23111) Use of int in max_burst socket option deprecated.
[  556.468818][T23111] Use struct sctp_assoc_value instead
[  556.485164][T23104] nbd4: detected capacity change from 0 to 63
[  556.494023][T23109] erspan0: left allmulticast mode
[  556.496666][T23111] FAULT_INJECTION: forcing a failure.
[  556.496666][T23111] name failslab, interval 1, probability 0, space 0, times 0
[  556.499448][T23109] erspan0: left promiscuous mode
[  556.519255][T23111] CPU: 0 UID: 0 PID: 23111 Comm: syz.1.4545 Not tainted syzkaller #0 PREEMPT(full) 
[  556.519276][T23111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  556.519287][T23111] Call Trace:
[  556.519293][T23111]  <TASK>
[  556.519301][T23111]  dump_stack_lvl+0xe8/0x150
[  556.519333][T23111]  should_fail_ex+0x412/0x560
[  556.519367][T23111]  should_failslab+0xa8/0x100
[  556.519394][T23111]  __kmalloc_cache_noprof+0x88/0x660
[  556.519417][T23111]  ? sctp_add_bind_addr+0x8c/0x370
[  556.519441][T23111]  sctp_add_bind_addr+0x8c/0x370
[  556.519464][T23111]  sctp_copy_local_addr_list+0x314/0x4f0
[  556.519486][T23111]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  556.519505][T23111]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  556.519537][T23111]  ? sctp_v6_is_any+0x64/0x80
[  556.519558][T23111]  ? sctp_copy_one_addr+0x93/0x360
[  556.519580][T23111]  sctp_bind_addr_copy+0xb3/0x3c0
[  556.519599][T23111]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  556.519629][T23111]  sctp_connect_new_asoc+0x2ff/0x6b0
[  556.519663][T23111]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  556.519694][T23111]  ? __local_bh_enable_ip+0xd0/0x130
[  556.519716][T23111]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  556.519740][T23111]  ? security_sctp_bind_connect+0x7e/0x2c0
[  556.519768][T23111]  sctp_sendmsg+0x1528/0x2c10
[  556.519805][T23111]  ? __pfx_sctp_sendmsg+0x10/0x10
[  556.519831][T23111]  ? aa_sk_perm+0x6d5/0x900
[  556.519866][T23111]  ? __pfx_aa_sk_perm+0x10/0x10
[  556.519897][T23111]  ? sock_rps_record_flow+0x19/0x350
[  556.519923][T23111]  ? __pfx_inet_sendmsg+0x10/0x10
[  556.519950][T23111]  ? inet_sendmsg+0x2f4/0x370
[  556.519976][T23111]  ? __pfx_inet_sendmsg+0x10/0x10
[  556.520003][T23111]  __sys_sendto+0x5de/0x710
[  556.520031][T23111]  ? __pfx___sys_sendto+0x10/0x10
[  556.520053][T23111]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  556.520084][T23111]  ? __fget_files+0x3a0/0x420
[  556.520110][T23111]  ? ksys_write+0x242/0x270
[  556.520132][T23111]  ? __pfx_ksys_write+0x10/0x10
[  556.520156][T23111]  __x64_sys_sendto+0xde/0x100
[  556.520184][T23111]  do_syscall_64+0x14d/0xf80
[  556.520200][T23111]  ? trace_irq_disable+0x3b/0x150
[  556.520216][T23111]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.520235][T23111]  ? clear_bhb_loop+0x40/0x90
[  556.520257][T23111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.520276][T23111] RIP: 0033:0x7f77b6f9c819
[  556.520294][T23111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  556.520309][T23111] RSP: 002b:00007f77b51f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  556.520328][T23111] RAX: ffffffffffffffda RBX: 00007f77b7215fa0 RCX: 00007f77b6f9c819
[  556.520342][T23111] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003
[  556.520353][T23111] RBP: 00007f77b51f6090 R08: 00002000000000c0 R09: 000000000000001c
[  556.520364][T23111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  556.520374][T23111] R13: 00007f77b7216038 R14: 00007f77b7215fa0 R15: 00007fff09a55db8
[  556.520403][T23111]  </TASK>
[  556.547743][   T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  556.838911][   T36] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  556.860600][ T5835] block nbd4: Receive control failed (result -104)
[  556.870502][   T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  556.884449][   T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  557.013172][T23125] __nla_validate_parse: 8 callbacks suppressed
[  557.013193][T23125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4549'.
[  557.059195][T23123] xt_CT: No such helper "syz0"
[  557.325212][T23147] netlink: 'syz.1.4555': attribute type 16 has an invalid length.
[  557.346423][T23147] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4555'.
[  557.588647][T23161] netlink: 'syz.2.4560': attribute type 3 has an invalid length.
[  557.622092][T23163] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4562'.
[  557.753538][T23168] can: request_module (can-proto-5) failed.
[  557.786185][T23177] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  557.818807][T23182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4566'.
[  557.842482][T23182] ipvlan0: entered allmulticast mode
[  557.848377][T23182] syz_tun: entered allmulticast mode
[  558.129123][T23201] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4571'.
[  558.359700][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4577'.
[  558.440773][T23222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4580'.
[  558.595496][ T8208] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  558.607381][ T8208] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  558.637701][ T8208] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  558.666656][ T8208] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  558.859157][T23241] tipc: Started in network mode
[  558.880791][T23241] tipc: Node identity 2e5bbb5c4b24, cluster identity 4711
[  558.911613][T23241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  558.967050][T23249] tipc: Resetting bearer <eth:syzkaller0>
[  559.276637][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  559.306143][T23267] netlink: 'syz.3.4592': attribute type 1 has an invalid length.
[  559.581311][T23272] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  559.595774][T23274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4594'.
[  559.646156][T23240] tipc: Resetting bearer <eth:syzkaller0>
[  559.693034][T23280] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4595'.
[  560.848687][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  560.856804][    C0] lec:lec_tx_timeout: lec0
[  560.861770][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  561.244602][T23240] tipc: Disabling bearer <eth:syzkaller0>
[  561.254466][ T7457] tipc: Node number set to 1702869852
[  561.267640][T23290] C: renamed from team_slave_0
[  561.274069][T23290] netlink: 'syz.1.4598': attribute type 8 has an invalid length.
[  561.283655][T23290] net_ratelimit: 32 callbacks suppressed
[  561.283669][T23290] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  561.306440][T23312] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  562.281339][T23401] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  562.293800][T23401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4622'.
[  562.585031][T23422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4626'.
[  562.594248][T23422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4626'.
[  562.651081][T23421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4627'.
[  562.787714][T23434] tipc: Can't bind to reserved service type 0
[  563.060840][T23454] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  563.193401][T23465] netlink: 'syz.3.4639': attribute type 3 has an invalid length.
[  563.203027][T23465] sctp: [Deprecated]: syz.3.4639 (pid 23465) Use of int in max_burst socket option deprecated.
[  563.203027][T23465] Use struct sctp_assoc_value instead
[  563.319422][T23471] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4643'.
[  563.611782][T23482] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4647'.
[  563.705970][T23483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  563.714191][T23483] syzkaller0: entered promiscuous mode
[  563.720059][T23483] syzkaller0: entered allmulticast mode
[  563.751257][T23483] tipc: Resetting bearer <eth:syzkaller0>
[  563.801394][T23479] tipc: Resetting bearer <eth:syzkaller0>
[  563.851001][T23479] tipc: Disabling bearer <eth:syzkaller0>
[  563.910577][T23489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4648'.
[  564.266019][T23503] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  564.448640][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4657'.
[  564.854323][T23536] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  564.938684][T23547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4664'.
[  565.112372][T23560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4668'.
[  565.887160][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  565.895267][    C0] lec:lec_tx_timeout: lec0
[  565.900032][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  567.843516][T23538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  568.019568][T23581] __nla_validate_parse: 2 callbacks suppressed
[  568.019589][T23581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4676'.
[  568.164930][T23584] can: request_module (can-proto-0) failed.
[  568.328878][T23607] netlink: 'syz.1.4682': attribute type 4 has an invalid length.
[  568.342085][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4681'.
[  568.365717][T23607] netlink: 'syz.1.4682': attribute type 4 has an invalid length.
[  568.466183][T23615] bridge_slave_0: left allmulticast mode
[  568.487863][T23615] bridge_slave_0: left promiscuous mode
[  568.495938][T23615] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.506470][T23615] bridge_slave_1: left promiscuous mode
[  568.512363][T23615] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.526943][T23615] bond0: (slave bond_slave_0): Releasing backup interface
[  568.536516][T23615] bond0: (slave bond_slave_1): Releasing backup interface
[  568.539699][T23623] netlink: 'syz.3.4687': attribute type 1 has an invalid length.
[  568.554483][T23615] team0: Port device team_slave_1 removed
[  568.561566][T23615] batman_adv: batadv0: Removing interface: batadv_slave_0
[  568.569783][T23615] batman_adv: batadv0: Removing interface: batadv_slave_1
[  568.578135][T23615] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  568.615486][T23613] syzkaller0: entered promiscuous mode
[  568.630429][T23613] syzkaller0: entered allmulticast mode
[  568.718445][T23632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4688'.
[  568.789052][T23637] tipc: Started in network mode
[  568.793965][T23637] tipc: Node identity 9242d094113f, cluster identity 4711
[  568.801432][T23637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  568.820498][T23637] syzkaller0: entered promiscuous mode
[  568.826048][T23637] syzkaller0: entered allmulticast mode
[  568.838405][T23637] tipc: Resetting bearer <eth:syzkaller0>
[  568.853995][T23636] tipc: Resetting bearer <eth:syzkaller0>
[  568.877662][T23636] tipc: Disabling bearer <eth:syzkaller0>
[  568.982321][T23643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4694'.
[  568.992746][T23643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4694'.
[  569.006570][T23643] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4694'.
[  569.016946][T23645] veth0: left allmulticast mode
[  569.025938][T23643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4694'.
[  569.161300][T23654] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4700'.
[  569.183107][T23657] netlink: 'syz.2.4697': attribute type 13 has an invalid length.
[  569.195173][T23657] netlink: 'syz.2.4697': attribute type 17 has an invalid length.
[  569.230048][T23657] gretap0: entered promiscuous mode
[  569.273574][T23660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4697'.
[  569.388897][T23657] 8021q: adding VLAN 0 to HW filter on device bond0
[  569.412007][T23657] 8021q: adding VLAN 0 to HW filter on device team0
[  569.453191][T23657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  569.608506][T23662] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  569.630976][T23662] tipc: Disabling bearer <eth:syzkaller0>
[  569.642046][T23680] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4704'.
[  569.657294][T23682] netlink: 'syz.0.4705': attribute type 3 has an invalid length.
[  569.982088][T23717] bond4: entered promiscuous mode
[  569.987797][T23717] 8021q: adding VLAN 0 to HW filter on device bond4
[  569.997410][ T5835] Bluetooth: hci3: command 0x0406 tx timeout
[  570.166762][T23731] vlan2: entered allmulticast mode
[  570.172476][T23731] bridge_slave_0: entered allmulticast mode
[  570.244298][T23734] syzkaller1: entered promiscuous mode
[  570.250032][T23734] syzkaller1: entered allmulticast mode
[  570.267438][T23734] bridge0: port 1(vlan3) entered blocking state
[  570.273882][T23734] bridge0: port 1(vlan3) entered disabled state
[  570.280384][T23734] vlan3: entered allmulticast mode
[  570.285551][T23734] dummy0: entered allmulticast mode
[  570.292307][T23734] vlan3: entered promiscuous mode
[  570.297476][T23734] dummy0: entered promiscuous mode
[  571.677123][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms
[  571.685294][    C0] lec:lec_tx_timeout: lec0
[  571.690241][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  572.721976][T23686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  572.864408][T23747] netlink: 'syz.0.4722': attribute type 10 has an invalid length.
[  572.904018][T23747] bond0: (slave wlan1): Opening slave failed
[  573.194875][T23772] __nla_validate_parse: 3 callbacks suppressed
[  573.194896][T23772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4730'.
[  573.211515][T23768] block nbd1: server does not support multiple connections per device.
[  573.219951][T23772] hsr_slave_0: left promiscuous mode
[  573.228766][T23768] block nbd1: shutting down sockets
[  573.235140][T23772] hsr_slave_1: left promiscuous mode
[  573.356697][T23782] : option downdelay: invalid value (18446744073709547007)
[  573.364475][T23782] : option downdelay: allowed values 0 - 2147483647
[  573.372795][T23782]  (unregistering): Released all slaves
[  573.376405][T23783] ip6t_srh: unknown srh match flags  4000
[  573.877836][T23819] syzkaller0: entered promiscuous mode
[  573.883432][T23819] syzkaller0: entered allmulticast mode
[  576.194540][T23775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  576.727107][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms
[  576.735178][    C0] lec:lec_tx_timeout: lec0
[  576.739986][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  577.211682][T23876] FAULT_INJECTION: forcing a failure.
[  577.211682][T23876] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  577.225134][T23876] CPU: 1 UID: 0 PID: 23876 Comm: syz.1.4758 Not tainted syzkaller #0 PREEMPT(full) 
[  577.225158][T23876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  577.225169][T23876] Call Trace:
[  577.225175][T23876]  <TASK>
[  577.225182][T23876]  dump_stack_lvl+0xe8/0x150
[  577.225210][T23876]  should_fail_ex+0x412/0x560
[  577.225240][T23876]  _copy_from_iter+0x1d3/0x1670
[  577.225258][T23876]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  577.225284][T23876]  ? __pfx_policy_nodemask+0x10/0x10
[  577.225307][T23876]  ? __pfx__copy_from_iter+0x10/0x10
[  577.225330][T23876]  ? set_page_refcounted+0xa0/0x1e0
[  577.225351][T23876]  ? page_copy_sane+0x4e/0x270
[  577.225370][T23876]  copy_page_from_iter+0xdd/0x170
[  577.225391][T23876]  tun_get_user+0x1db3/0x3ed0
[  577.225410][T23876]  ? tun_get_user+0x6ff/0x3ed0
[  577.225443][T23876]  ? aa_file_perm+0x50e/0x15e0
[  577.225460][T23876]  ? __pfx_tun_get_user+0x10/0x10
[  577.225479][T23876]  ? aa_file_perm+0x192/0x15e0
[  577.225509][T23876]  ? ref_tracker_alloc+0x35c/0x4c0
[  577.225529][T23876]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  577.225550][T23876]  ? tun_get+0x1c/0x2f0
[  577.225573][T23876]  ? tun_get+0x1c/0x2f0
[  577.225591][T23876]  ? tun_get+0x1c/0x2f0
[  577.225614][T23876]  tun_chr_write_iter+0x113/0x200
[  577.225635][T23876]  vfs_write+0x61d/0xb90
[  577.225667][T23876]  ? __pfx_vfs_write+0x10/0x10
[  577.225693][T23876]  ? __fget_files+0x2a/0x420
[  577.225715][T23876]  ksys_write+0x150/0x270
[  577.225735][T23876]  ? __pfx_ksys_write+0x10/0x10
[  577.225762][T23876]  do_syscall_64+0x14d/0xf80
[  577.225778][T23876]  ? trace_irq_disable+0x3b/0x150
[  577.225791][T23876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.225808][T23876]  ? clear_bhb_loop+0x40/0x90
[  577.225837][T23876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.225852][T23876] RIP: 0033:0x7f77b6f5d04e
[  577.225868][T23876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  577.225884][T23876] RSP: 002b:00007f77b51d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  577.225900][T23876] RAX: ffffffffffffffda RBX: 00007f77b51d56c0 RCX: 00007f77b6f5d04e
[  577.225911][T23876] RDX: 000000000000004c RSI: 0000200000000140 RDI: 00000000000000c8
[  577.225921][T23876] RBP: 00007f77b51d5090 R08: 0000000000000000 R09: 0000000000000000
[  577.225950][T23876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  577.225959][T23876] R13: 00007f77b7216128 R14: 00007f77b7216090 R15: 00007fff09a55db8
[  577.225984][T23876]  </TASK>
[  578.439722][T23882] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4762'.
[  578.457389][T23882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4762'.
[  578.474034][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4762'.
[  578.598847][T23890] Bluetooth: MGMT ver 1.23
[  578.605783][T23890] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  578.850294][T23898] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  579.173744][T23921] netlink: 'syz.2.4774': attribute type 1 has an invalid length.
[  579.226250][T23921] 8021q: adding VLAN 0 to HW filter on device bond5
[  579.397860][T23939] openvswitch: netlink: Message has 135 unknown bytes.
[  579.725982][T23965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4784'.
[  579.752775][T23965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4784'.
[  579.844741][T23974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4790'.
[  579.929063][T23981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4790'.
[  579.929063][T23982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4790'.
[  579.939756][T23984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4792'.
[  579.940883][T23984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4792'.
[  581.091427][T24053] tipc: Failed to remove unknown binding: 66,1,1/0:556829151/556829153
[  581.314689][T24068] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  581.449716][T24076] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.551740][T24076] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.695012][T24076] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.740462][T24101] netlink: 'syz.0.4824': attribute type 13 has an invalid length.
[  581.748370][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  581.748394][    C0] lec:lec_tx_timeout: lec0
[  581.756913][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  581.768259][T24101] gretap0: refused to change device tx_queue_len
[  581.774722][T24101] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  581.819500][T24076] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.842035][T24103] x_tables: ip_tables: ah match: only valid for protocol 51
[  581.972280][ T1035] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.009522][ T1035] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.036934][ T1035] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.082619][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.461334][T24148] --map-set only usable from mangle table
[  582.584401][T24152] vxcan3: entered promiscuous mode
[  584.562456][T24196] netlink: 'syz.4.4851': attribute type 6 has an invalid length.
[  584.707015][T24205] nbd: nbd4 already in use
[  584.712115][T24205] block nbd0: NBD_DISCONNECT
[  584.728596][T24205] block nbd0: Send disconnect failed -32
[  584.744962][T24205] block nbd0: Send disconnect failed -32
[  584.769233][T24207] lo: left allmulticast mode
[  584.820903][T24207] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  584.846293][   T12] erspan0: left allmulticast mode
[  584.851798][   T12] erspan0: left promiscuous mode
[  584.856937][   T12] bridge0: port 2(erspan0) entered disabled state
[  584.882308][   T12] vlan3: left allmulticast mode
[  584.889772][   T12] 
��: left allmulticast mode
[  584.894665][   T12] vlan3: left promiscuous mode
[  584.900199][   T12] 
��: left promiscuous mode
[  584.905321][   T12] bridge0: port 1(vlan3) entered disabled state
[  585.014575][T24220] __nla_validate_parse: 14 callbacks suppressed
[  585.014593][T24220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4857'.
[  585.322321][   T12] bond3 (unregistering): (slave geneve2): Releasing active interface
[  585.491599][   T12] bond4 (unregistering): (slave bridge3): Releasing backup interface
[  585.500123][   T12] bond4 (unregistering): (slave bridge3): the permanent HWaddr of slave - 5e:0c:5a:39:16:cb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  585.550114][   T12] bond4 (unregistering): (slave bridge4): Releasing backup interface
[  585.741521][   T12] bond12 (unregistering): (slave bridge8): Releasing backup interface
[  585.800638][   T12] bond1 (unregistering): Released all slaves
[  585.815274][   T12] bond2 (unregistering): (slave wireguard0): Releasing backup interface
[  585.824268][   T12] bond2 (unregistering): Released all slaves
[  585.842879][   T12] bond3 (unregistering): Released all slaves
[  585.863033][   T12] bond4 (unregistering): Released all slaves
[  585.876533][   T12] bond5 (unregistering): Released all slaves
[  585.892178][   T12] bond0 (unregistering): (slave veth11): Releasing backup interface
[  585.900904][   T12] bond0 (unregistering): Released all slaves
[  585.920655][   T12] bond6 (unregistering): Released all slaves
[  585.936014][   T12] bond7 (unregistering): Released all slaves
[  585.949756][   T12] bond8 (unregistering): Released all slaves
[  585.966207][   T12] bond9 (unregistering): Released all slaves
[  585.980439][   T12] bond10 (unregistering): Released all slaves
[  585.994174][   T12] bond11 (unregistering): Released all slaves
[  586.009860][   T12] bond12 (unregistering): Released all slaves
[  586.233301][   T12] ����l24): left promiscuous mode
[  586.268864][T24243] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  586.338556][   T12] : left promiscuous mode
[  586.480697][   T12] !: left promiscuous mode
[  586.654928][T24270] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  586.757092][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  586.765247][    C0] lec:lec_tx_timeout: lec0
[  586.770284][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  586.780540][   T12] tipc: Left network mode
[  586.836437][T24282] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4872'.
[  586.931057][T24293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4874'.
[  586.940936][T24293] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  587.047222][ T5159] block nbd4: Possible stuck request ffff888026f10000: control (read@0,1024B). Runtime 30 seconds
[  587.062013][   T12] IPVS: stopping backup sync thread 6969 ...
[  587.072275][ T5159] block nbd4: Possible stuck request ffff888026f10200: control (read@1024,1024B). Runtime 30 seconds
[  587.083661][ T5159] block nbd4: Possible stuck request ffff888026f10400: control (read@2048,1024B). Runtime 30 seconds
[  587.094850][ T5159] block nbd4: Possible stuck request ffff888026f10600: control (read@3072,1024B). Runtime 30 seconds
[  587.151889][T24323] netlink: 'syz.2.4877': attribute type 2 has an invalid length.
[  587.300023][T24330] FAULT_INJECTION: forcing a failure.
[  587.300023][T24330] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  587.323779][T24330] CPU: 1 UID: 0 PID: 24330 Comm: syz.1.4882 Not tainted syzkaller #0 PREEMPT(full) 
[  587.323804][T24330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  587.323816][T24330] Call Trace:
[  587.323823][T24330]  <TASK>
[  587.323831][T24330]  dump_stack_lvl+0xe8/0x150
[  587.323862][T24330]  should_fail_ex+0x412/0x560
[  587.323897][T24330]  _copy_from_iter+0x1d3/0x1670
[  587.323918][T24330]  ? unwind_next_frame+0xa5/0x23c0
[  587.323953][T24330]  ? __lock_acquire+0x6b5/0x2cf0
[  587.323977][T24330]  ? __pfx__copy_from_iter+0x10/0x10
[  587.324012][T24330]  tun_get_user+0x516/0x3ed0
[  587.324053][T24330]  ? aa_file_perm+0x50e/0x15e0
[  587.324072][T24330]  ? __pfx_tun_get_user+0x10/0x10
[  587.324093][T24330]  ? aa_file_perm+0x192/0x15e0
[  587.324123][T24330]  ? __lock_acquire+0x6b5/0x2cf0
[  587.324156][T24330]  ? ref_tracker_alloc+0x35c/0x4c0
[  587.324178][T24330]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  587.324203][T24330]  ? tun_get+0x1c/0x2f0
[  587.324230][T24330]  ? tun_get+0x1c/0x2f0
[  587.324252][T24330]  ? tun_get+0x1c/0x2f0
[  587.324278][T24330]  tun_chr_write_iter+0x113/0x200
[  587.324303][T24330]  vfs_write+0x61d/0xb90
[  587.324333][T24330]  ? __pfx_vfs_write+0x10/0x10
[  587.324363][T24330]  ? __fget_files+0x2a/0x420
[  587.324389][T24330]  ksys_write+0x150/0x270
[  587.324412][T24330]  ? __pfx_ksys_write+0x10/0x10
[  587.324443][T24330]  do_syscall_64+0x14d/0xf80
[  587.324461][T24330]  ? trace_irq_disable+0x3b/0x150
[  587.324477][T24330]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.324496][T24330]  ? clear_bhb_loop+0x40/0x90
[  587.324519][T24330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.324537][T24330] RIP: 0033:0x7f77b6f9c819
[  587.324553][T24330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  587.324570][T24330] RSP: 002b:00007f77b51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  587.324589][T24330] RAX: ffffffffffffffda RBX: 00007f77b7215fa0 RCX: 00007f77b6f9c819
[  587.324602][T24330] RDX: 0000000000000078 RSI: 0000200000000380 RDI: 0000000000000004
[  587.324614][T24330] RBP: 00007f77b51f6090 R08: 0000000000000000 R09: 0000000000000000
[  587.324625][T24330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.324635][T24330] R13: 00007f77b7216038 R14: 00007f77b7215fa0 R15: 00007fff09a55db8
[  587.324665][T24330]  </TASK>
[  588.164877][T24359] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.4888'.
[  588.269891][T24364] netlink: 'syz.4.4889': attribute type 13 has an invalid length.
[  588.297615][T24364] netlink: 'syz.4.4889': attribute type 17 has an invalid length.
[  588.440136][T24371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4890'.
[  588.483194][T24364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  588.595949][   T12] hsr_slave_0: left promiscuous mode
[  588.636366][T24376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4892'.
[  588.655418][T24376] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  588.677264][   T12] hsr_slave_1: left promiscuous mode
[  588.933312][T24392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4896'.
[  589.082842][T24395] netlink: 'syz.1.4897': attribute type 1 has an invalid length.
[  589.090959][T24395] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4897'.
[  589.100180][T24395] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4897'.
[  589.110100][T24396] netlink: 'syz.1.4897': attribute type 1 has an invalid length.
[  589.118051][T24396] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4897'.
[  589.540087][T24396] tipc: Resetting bearer <eth:syzkaller0>
[  589.947440][T24421] syzkaller0: entered promiscuous mode
[  589.964387][T24421] syzkaller0: entered allmulticast mode
[  589.986262][T24421] tc action pedit offset 14680064 out of bounds
[  590.248441][T24440] __nla_validate_parse: 5 callbacks suppressed
[  590.248477][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4910'.
[  590.449569][T24451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4912'.
[  590.564010][T24434] ip6gretap1: left promiscuous mode
[  590.569609][T24434] ip6gretap1: left allmulticast mode
[  590.576252][T24434] vlan2: left promiscuous mode
[  590.581775][T24434] geneve1: left promiscuous mode
[  590.587598][T24434] vlan2: left allmulticast mode
[  590.592771][T24434] geneve1: left allmulticast mode
[  590.601091][T24434] bond4: left promiscuous mode
[  590.638353][T24274] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  590.654792][   T12] IPVS: stop unused estimator thread 0...
[  590.662958][T24274] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  590.690465][T24274] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  590.732039][T24274] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  590.866975][T24471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4919'.
[  591.260808][T24480] openvswitch: netlink: Flow key attr not present in new flow.
[  591.777105][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  591.785206][    C0] lec:lec_tx_timeout: lec0
[  591.790314][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  591.836413][T24497] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4927'.
[  591.956407][T24509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4930'.
[  592.396192][T24531] netlink: 'syz.2.4935': attribute type 1 has an invalid length.
[  592.404388][T24531] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4935'.
[  592.468520][T24541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4937'.
[  592.482325][T24535] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  596.797199][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  596.805217][    C0] lec:lec_tx_timeout: lec0
[  609.044349][T24551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4941'.
[  609.118159][T24553] netlink: 'syz.3.4942': attribute type 1 has an invalid length.
[  609.137449][T24553] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4942'.
[  609.365888][T24553] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  609.845100][T24588] tipc: Enabled bearer <udp:syz>, priority 10
[  610.017389][T24602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4955'.
[  610.026383][T24602] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4955'.
[  610.105324][T24608] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4959'.
[  610.115593][T24608] openvswitch: netlink: Key type 30 is not supported
[  610.130479][T24610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4958'.
[  610.148360][T24609] syzkaller0: entered promiscuous mode
[  610.157351][T24609] syzkaller0: entered allmulticast mode
[  610.364873][T24623] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4962'.
[  610.479832][T24630] netlink: 'syz.2.4964': attribute type 2 has an invalid length.
[  610.512056][T24631] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4965'.
[  610.546930][T24630] : entered promiscuous mode
[  610.607855][T24630] netlink: 'syz.2.4964': attribute type 2 has an invalid length.
[  610.651249][T24630] : left promiscuous mode
[  610.678704][T24644] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4968'.
[  611.027634][T24665] netlink: 'syz.1.4974': attribute type 2 has an invalid length.
[  611.045950][T24665] netlink: 'syz.1.4974': attribute type 2 has an invalid length.
[  611.118106][T24660] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4973'.
[  611.171226][T24660] netlink: 'syz.0.4973': attribute type 13 has an invalid length.
[  611.180648][T24660] gretap0: refused to change device tx_queue_len
[  611.187034][T24660] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  611.776214][T24719] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  612.118919][T24739] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  612.339687][T24743] netlink: 'syz.4.4995': attribute type 11 has an invalid length.
[  612.613787][T24755] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  612.735648][T24763] macsec2: entered allmulticast mode
[  612.742041][T24763] macsec0: entered allmulticast mode
[  612.756569][T24765] netlink: 'syz.0.5003': attribute type 4 has an invalid length.
[  612.769597][T24765] netlink: 'syz.0.5003': attribute type 4 has an invalid length.
[  612.891345][T24773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  613.058499][T24783] netlink: 'syz.4.5011': attribute type 4 has an invalid length.
[  613.300708][T24800] x_tables: duplicate underflow at hook 3
[  613.308365][T24801] x_tables: duplicate underflow at hook 1
[  613.314733][T24800] x_tables: duplicate underflow at hook 2
[  613.373028][T24795] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.460089][T24813] veth0: entered promiscuous mode
[  613.484416][T24813] macvlan0: entered promiscuous mode
[  613.493224][T24815] netlink: 'syz.3.5020': attribute type 58 has an invalid length.
[  613.595268][T24795] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.705661][T24795] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.871019][T24795] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.903731][T24805] macvlan0: left promiscuous mode
[  613.909664][T24805] veth0: left promiscuous mode
[  613.992265][T24838] : entered promiscuous mode
[  613.999959][T24310] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  614.034733][T24311] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  614.054520][T24838] __nla_validate_parse: 11 callbacks suppressed
[  614.054537][T24838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5026'.
[  614.082914][T24310] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  614.126754][T24838] openvswitch: : Dropping previously announced user features
[  614.141536][T24842] netlink: 'syz.1.5028': attribute type 10 has an invalid length.
[  614.168469][T24842] bond0: (slave wlan1): Opening slave failed
[  614.175003][T24310] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  614.193537][T24842] syzkaller0: left promiscuous mode
[  614.198939][T24842] syzkaller0: left allmulticast mode
[  614.204633][T24842] tipc: Resetting bearer <eth:syzkaller0>
[  614.255758][T24844] syzkaller1: entered promiscuous mode
[  614.285064][T24844] syzkaller1: entered allmulticast mode
[  614.429689][T24850] veth1_vlan: left allmulticast mode
[  614.448210][T24850] hsr0: left allmulticast mode
[  614.453122][T24850] hsr_slave_0: left allmulticast mode
[  614.467338][T24850] hsr_slave_1: left allmulticast mode
[  614.519937][T24850] macsec0: left allmulticast mode
[  614.561458][T24853] vlan2: entered allmulticast mode
[  614.577439][T24853] bridge0: port 1(vlan2) entered blocking state
[  614.594266][T24853] bridge0: port 1(vlan2) entered disabled state
[  614.607505][T24853] vlan2: entered promiscuous mode
[  614.622924][T24853] bridge_slave_0: entered promiscuous mode
[  614.648706][T24311] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.659198][T24311] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.686542][T24860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5035'.
[  614.695648][T24865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5034'.
[  614.720330][T24865] netem: incorrect ge model size
[  614.726225][T24865] netem: change failed
[  614.749702][T24311] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.787452][T24311] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.830404][T24875] sock: sock_timestamping_bind_phc: sock not bind to device
[  614.924283][T24878] tipc: Resetting bearer <eth:syzkaller0>
[  614.951251][T24878] syzkaller0: entered promiscuous mode
[  614.960677][T24878] syzkaller0: entered allmulticast mode
[  615.052110][T24877] tipc: Resetting bearer <eth:syzkaller0>
[  615.195351][T24898] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5045'.
[  615.245559][T24894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5044'.
[  615.377760][T24906] gtp0: entered promiscuous mode
[  615.405552][T24906] gtp0: entered allmulticast mode
[  615.486601][T24906] bond8: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  615.528530][T24906] bond8 (unregistering): Released all slaves
[  615.541306][T24916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5050'.
[  615.649275][T24928] netlink: 'syz.0.5052': attribute type 1 has an invalid length.
[  615.657482][T24928] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5052'.
[  615.691644][T24928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5052'.
[  615.832641][T24310] tipc: Resetting bearer <eth:syzkaller0>
[  616.480991][T24983] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5065'.
[  616.530782][T24986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5066'.
[  616.565379][T24986] macsec0: entered promiscuous mode
[  616.599360][T24986] macsec0: left promiscuous mode
[  616.781574][T25001] netlink: 'syz.0.5070': attribute type 2 has an invalid length.
[  616.963026][T25020] netlink: 'syz.0.5077': attribute type 2 has an invalid length.
[  617.071655][T25020] !��9: entered promiscuous mode
[  617.127234][ T5159] block nbd4: Possible stuck request ffff888026f10000: control (read@0,1024B). Runtime 60 seconds
[  617.138195][ T5159] block nbd4: Possible stuck request ffff888026f10200: control (read@1024,1024B). Runtime 60 seconds
[  617.149385][ T5159] block nbd4: Possible stuck request ffff888026f10400: control (read@2048,1024B). Runtime 60 seconds
[  617.160396][ T5159] block nbd4: Possible stuck request ffff888026f10600: control (read@3072,1024B). Runtime 60 seconds
[  617.406799][T25036] netlink: 'syz.2.5081': attribute type 2 has an invalid length.
[  617.489538][T25038] pim6reg1: entered promiscuous mode
[  617.495107][T25038] pim6reg1: entered allmulticast mode
[  618.141096][T25052] bond5: option lacp_active: invalid value (8)
[  618.175905][T25052] bond5 (unregistering): Released all slaves
[  618.454410][T25059] syzkaller1: entered promiscuous mode
[  618.464423][T25059] syzkaller1: entered allmulticast mode
[  618.582221][T25080] Bluetooth: MGMT ver 1.23
[  618.665653][T25085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  618.769726][T15798] lec:lec_start_xmit: lec0:No lecd attached
[  618.898613][T25096] tipc: Disabling bearer <eth:syzkaller0>
[  619.135223][T25120] batman_adv: batadv0: Adding interface: ipvlan2
[  619.157158][T25120] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  619.227374][T25120] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  619.590224][T25146] __nla_validate_parse: 9 callbacks suppressed
[  619.590258][T25146] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5108'.
[  619.625830][T25144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5107'.
[  619.679563][T25150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5107'.
[  619.697878][T25150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5107'.
[  619.719844][T25150] netlink: 'syz.2.5107': attribute type 1 has an invalid length.
[  619.732407][T25151] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5110'.
[  619.738283][T25150] netlink: 524 bytes leftover after parsing attributes in process `syz.2.5107'.
[  619.789992][T25153] rdma_op ffff8880342da1f0 conn xmit_rdma 0000000000000000
[  619.812564][T25153] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5111'.
[  619.858565][T25156] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  620.014752][T25161] netlink: 'syz.2.5113': attribute type 11 has an invalid length.
[  620.035807][T25161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5113'.
[  620.270380][T25182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5118'.
[  620.302347][T25182] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5118'.
[  620.487953][T25196] openvswitch: netlink: Missing key (keys=40, expected=80)
[  623.345932][T25186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  623.777117][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  623.785195][    C0] lec:lec_tx_timeout: lec0
[  623.884969][T25256] netlink: 'syz.1.5136': attribute type 11 has an invalid length.
[  623.942151][T25256] netlink: 'syz.1.5136': attribute type 11 has an invalid length.
[  623.977323][T24275] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  623.997210][T24275] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  624.026394][T24275] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  624.050217][T24275] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  624.169342][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[  624.383208][T25280] tun0: tun_chr_ioctl cmd 35111
[  624.388433][T25280] tun0: tun_chr_ioctl cmd 1074812117
[  624.445917][T25282] netlink: 'syz.3.5143': attribute type 1 has an invalid length.
[  624.540300][T25282] bond5: entered promiscuous mode
[  624.546158][T25282] 8021q: adding VLAN 0 to HW filter on device bond5
[  624.599681][T25282] __nla_validate_parse: 14 callbacks suppressed
[  624.599696][T25282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5143'.
[  624.621606][T25286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5142'.
[  624.633227][T25293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5144'.
[  625.182605][T25319] netlink: 'syz.1.5150': attribute type 1 has an invalid length.
[  625.226318][T25319] 8021q: adding VLAN 0 to HW filter on device bond2
[  625.338165][T25326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5150'.
[  625.372629][T25329] netlink: 'syz.3.5154': attribute type 2 has an invalid length.
[  625.399216][T25329] netlink: 'syz.3.5154': attribute type 2 has an invalid length.
[  625.583402][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5155'.
[  625.601444][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5158'.
[  625.824050][T25354] dvmrp0: entered allmulticast mode
[  625.845101][T25356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5160'.
[  625.845715][T25354] tipc: Enabled bearer <udp:syz>, priority 10
[  625.889037][T25354] xt_CT: You must specify a L4 protocol and not use inversions on it
[  625.991329][T25363] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5164'.
[  626.003238][T25363] netlink: 212124 bytes leftover after parsing attributes in process `syz.3.5164'.
[  626.033299][T25366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5165'.
[  626.147992][T25370] netlink: 'syz.0.5167': attribute type 13 has an invalid length.
[  626.152086][T25375] FAULT_INJECTION: forcing a failure.
[  626.152086][T25375] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  626.174483][T25375] CPU: 1 UID: 0 PID: 25375 Comm: syz.1.5168 Not tainted syzkaller #0 PREEMPT(full) 
[  626.174508][T25375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  626.174522][T25375] Call Trace:
[  626.174529][T25375]  <TASK>
[  626.174539][T25375]  dump_stack_lvl+0xe8/0x150
[  626.174592][T25375]  should_fail_ex+0x412/0x560
[  626.174631][T25375]  _copy_from_user+0x2d/0xb0
[  626.174658][T25375]  wext_handle_ioctl+0xc7/0x1d0
[  626.174695][T25375]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  626.174725][T25375]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  626.174766][T25375]  sock_ioctl+0x159/0x7f0
[  626.174792][T25375]  ? __pfx_sock_ioctl+0x10/0x10
[  626.174816][T25375]  ? __fget_files+0x2a/0x420
[  626.174835][T25375]  ? __fget_files+0x3a0/0x420
[  626.174853][T25375]  ? __fget_files+0x2a/0x420
[  626.174874][T25375]  ? bpf_lsm_file_ioctl+0x9/0x20
[  626.174901][T25375]  ? __pfx_sock_ioctl+0x10/0x10
[  626.174930][T25375]  __se_sys_ioctl+0xfc/0x170
[  626.174958][T25375]  do_syscall_64+0x14d/0xf80
[  626.174976][T25375]  ? trace_irq_disable+0x3b/0x150
[  626.174994][T25375]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.175014][T25375]  ? clear_bhb_loop+0x40/0x90
[  626.175039][T25375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.175058][T25375] RIP: 0033:0x7f77b6f9c819
[  626.175075][T25375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  626.175093][T25375] RSP: 002b:00007f77b51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  626.175114][T25375] RAX: ffffffffffffffda RBX: 00007f77b7215fa0 RCX: 00007f77b6f9c819
[  626.175129][T25375] RDX: 0000200000000040 RSI: 0000000000008b2c RDI: 0000000000000004
[  626.175142][T25375] RBP: 00007f77b51f6090 R08: 0000000000000000 R09: 0000000000000000
[  626.175153][T25375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  626.175163][T25375] R13: 00007f77b7216038 R14: 00007f77b7215fa0 R15: 00007fff09a55db8
[  626.175195][T25375]  </TASK>
[  626.927642][ T5888] tipc: Node number set to 2206060692
[  627.180000][T25439] FAULT_INJECTION: forcing a failure.
[  627.180000][T25439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  627.217097][T25439] CPU: 0 UID: 0 PID: 25439 Comm: syz.2.5181 Not tainted syzkaller #0 PREEMPT(full) 
[  627.217123][T25439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  627.217136][T25439] Call Trace:
[  627.217144][T25439]  <TASK>
[  627.217151][T25439]  dump_stack_lvl+0xe8/0x150
[  627.217183][T25439]  should_fail_ex+0x412/0x560
[  627.217220][T25439]  _copy_to_user+0x31/0xb0
[  627.217247][T25439]  simple_read_from_buffer+0xe1/0x170
[  627.217282][T25439]  proc_fail_nth_read+0x1bb/0x230
[  627.217315][T25439]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  627.217348][T25439]  ? rw_verify_area+0x2a6/0x4d0
[  627.217370][T25439]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  627.217401][T25439]  vfs_read+0x20c/0xa70
[  627.217421][T25439]  ? fdget_pos+0x246/0x320
[  627.217444][T25439]  ? __pfx___mutex_lock+0x10/0x10
[  627.217466][T25439]  ? __pfx_vfs_read+0x10/0x10
[  627.217489][T25439]  ? __fget_files+0x2a/0x420
[  627.217512][T25439]  ? __fget_files+0x3a0/0x420
[  627.217528][T25439]  ? __fget_files+0x2a/0x420
[  627.217555][T25439]  ksys_read+0x150/0x270
[  627.217579][T25439]  ? __pfx_ksys_read+0x10/0x10
[  627.217609][T25439]  ? __pfx_sock_ioctl+0x10/0x10
[  627.217640][T25439]  do_syscall_64+0x14d/0xf80
[  627.217669][T25439]  ? trace_irq_disable+0x3b/0x150
[  627.217686][T25439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.217705][T25439]  ? clear_bhb_loop+0x40/0x90
[  627.217729][T25439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.217748][T25439] RIP: 0033:0x7f6264f5d04e
[  627.217766][T25439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  627.217783][T25439] RSP: 002b:00007f6265f36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  627.217804][T25439] RAX: ffffffffffffffda RBX: 00007f6265f376c0 RCX: 00007f6264f5d04e
[  627.217818][T25439] RDX: 000000000000000f RSI: 00007f6265f370a0 RDI: 0000000000000003
[  627.217831][T25439] RBP: 00007f6265f37090 R08: 0000000000000000 R09: 0000000000000000
[  627.217843][T25439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  627.217854][T25439] R13: 00007f6265216038 R14: 00007f6265215fa0 R15: 00007ffdfdc01bb8
[  627.217885][T25439]  </TASK>
[  627.910032][T25468] netlink: 'syz.2.5190': attribute type 13 has an invalid length.
[  628.206190][T25485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  628.217559][T25485] syzkaller0: entered promiscuous mode
[  628.223230][T25485] syzkaller0: entered allmulticast mode
[  628.263749][T25485] tipc: Resetting bearer <eth:syzkaller0>
[  628.286552][T25483] tipc: Resetting bearer <eth:syzkaller0>
[  628.336636][T25483] tipc: Disabling bearer <eth:syzkaller0>
[  628.596330][T25503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  629.033469][T25531] netlink: 'syz.1.5205': attribute type 1 has an invalid length.
[  629.108017][T25531] 8021q: adding VLAN 0 to HW filter on device bond3
[  629.159866][T25538] ipvlan0: entered allmulticast mode
[  629.165217][T25538] bond3: entered allmulticast mode
[  629.514835][T25564] bond0: Caught tx_queue_len zero misconfig
[  629.611065][T25572] netlink: 'syz.1.5214': attribute type 39 has an invalid length.
[  629.677400][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms
[  629.685507][    C0] lec:lec_tx_timeout: lec0
[  629.941390][T25590] __nla_validate_parse: 9 callbacks suppressed
[  629.941408][T25590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5219'.
[  630.328105][T25599] openvswitch: netlink: Flow actions attr not present in new flow.
[  630.601359][T25611] batman_adv: batadv0: Adding interface: ipvlan0
[  630.621638][T25611] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  630.686344][T25611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  630.705588][T25615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5227'.
[  630.719515][T25616] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5226'.
[  630.720438][T25611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.758841][T25611] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active
[  631.098355][T25627] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  632.088428][T25679] syzkaller0: entered promiscuous mode
[  632.107573][T25679] syzkaller0: entered allmulticast mode
[  632.359921][T25700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5254'.
[  632.369048][T25700] netlink: 'syz.1.5254': attribute type 2 has an invalid length.
[  632.419720][T25700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5254'.
[  632.436451][T25700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5254'.
[  632.852638][T25725] Cannot find map_set index 2 as target
[  632.895542][T25729] Cannot find map_set index 2 as target
[  634.072219][T25748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5266'.
[  634.244446][T25755] netlink: 'syz.3.5268': attribute type 10 has an invalid length.
[  634.267207][T25756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5269'.
[  634.292142][T25755] netlink: 'syz.3.5268': attribute type 10 has an invalid length.
[  634.321026][T25755] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  634.613681][T25764] netlink: 'syz.0.5270': attribute type 10 has an invalid length.
[  634.665969][T25764] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5270'.
[  634.776978][T25765] 8021q: adding VLAN 0 to HW filter on device bond0
[  634.787743][T25765] 8021q: adding VLAN 0 to HW filter on device team0
[  634.798427][T25765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  635.011474][T25772] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5272'.
[  635.311857][T25776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5275'.
[  635.668118][T25801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5280'.
[  635.793579][T25805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5282'.
[  635.857451][T25805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5282'.
[  635.994661][T25809] netlink: 'syz.1.5283': attribute type 1 has an invalid length.
[  636.022801][T25810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5284'.
[  636.112025][T25809] 8021q: adding VLAN 0 to HW filter on device bond4
[  636.140853][T25811] vlan0: entered promiscuous mode
[  636.177900][T25811] bond4: entered promiscuous mode
[  636.184011][T25811] vlan0: entered allmulticast mode
[  636.189368][T25811] bond4: entered allmulticast mode
[  636.235124][T25823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5286'.
[  636.247495][T25823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5286'.
[  636.568931][T25838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5288'.
[  636.648449][T25841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  636.770773][T25849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  636.780033][T25845] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  636.949747][T25854] block nbd0: server does not support multiple connections per device.
[  636.959571][T25854] block nbd0: shutting down sockets
[  637.062333][T25862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5297'.
[  638.086008][T25918] hm�3)��: entered promiscuous mode
[  638.124361][T25930] netlink: 'syz.2.5318': attribute type 1 has an invalid length.
[  638.363799][T25964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  638.528811][T25973] netlink: 'syz.0.5326': attribute type 4 has an invalid length.
[  638.546782][T25973] netlink: 'syz.0.5326': attribute type 4 has an invalid length.
[  638.950054][T25984] syzkaller0: entered promiscuous mode
[  638.955642][T25984] syzkaller0: entered allmulticast mode
[  639.490386][T26019] 
[  639.492863][T26019] ======================================================
[  639.499909][T26019] WARNING: possible circular locking dependency detected
[  639.506955][T26019] syzkaller #0 Not tainted
[  639.511391][T26019] ------------------------------------------------------
[  639.518426][T26019] syz.1.5335/26019 is trying to acquire lock:
[  639.524506][T26019] ffff888056a2ba18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300
[  639.533422][T26019] 
[  639.533422][T26019] but task is already holding lock:
[  639.540797][T26019] ffff88802a4dd1e0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  639.550233][T26019] 
[  639.550233][T26019] which lock already depends on the new lock.
[  639.550233][T26019] 
[  639.560649][T26019] 
[  639.560649][T26019] the existing dependency chain (in reverse order) is:
[  639.569677][T26019] 
[  639.569677][T26019] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[  639.577541][T26019]        __mutex_lock+0x19f/0x1300
[  639.582674][T26019]        elevator_change+0x1b3/0x450
[  639.587988][T26019]        elevator_set_none+0xb5/0x140
[  639.593391][T26019]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  639.599752][T26019]        nbd_start_device+0x17f/0xb10
[  639.605142][T26019]        nbd_genl_connect+0x165b/0x1cf0
[  639.610705][T26019]        genl_family_rcv_msg_doit+0x22a/0x330
[  639.616784][T26019]        genl_rcv_msg+0x61c/0x7a0
[  639.621834][T26019]        netlink_rcv_skb+0x232/0x4b0
[  639.627144][T26019]        genl_rcv+0x28/0x40
[  639.631662][T26019]        netlink_unicast+0x80f/0x9b0
[  639.636960][T26019]        netlink_sendmsg+0x813/0xb40
[  639.642265][T26019]        ____sys_sendmsg+0x972/0x9f0
[  639.647578][T26019]        ___sys_sendmsg+0x2a5/0x360
[  639.652812][T26019]        __x64_sys_sendmsg+0x1bd/0x2a0
[  639.658305][T26019]        do_syscall_64+0x14d/0xf80
[  639.663434][T26019]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.669865][T26019] 
[  639.669865][T26019] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  639.678494][T26019]        blk_alloc_queue+0x546/0x680
[  639.683809][T26019]        __blk_mq_alloc_disk+0x197/0x390
[  639.689473][T26019]        nbd_dev_add+0x499/0xb50
[  639.694438][T26019]        nbd_init+0x168/0x1f0
[  639.699154][T26019]        do_one_initcall+0x250/0x8d0
[  639.704467][T26019]        do_initcall_level+0x104/0x190
[  639.709951][T26019]        do_initcalls+0x59/0xa0
[  639.714832][T26019]        kernel_init_freeable+0x2a6/0x3e0
[  639.720577][T26019]        kernel_init+0x1d/0x1d0
[  639.725441][T26019]        ret_from_fork+0x51e/0xb90
[  639.730575][T26019]        ret_from_fork_asm+0x1a/0x30
[  639.735896][T26019] 
[  639.735896][T26019] -> #4 (fs_reclaim){+.+.}-{0:0}:
[  639.743123][T26019]        fs_reclaim_acquire+0x71/0x100
[  639.748609][T26019]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  639.754983][T26019]        __alloc_skb+0x1d0/0x7d0
[  639.760041][T26019]        __ip6_append_data+0x2d6d/0x3f70
[  639.765699][T26019]        ip6_append_data+0x10f/0x280
[  639.771005][T26019]        rawv6_sendmsg+0x12d3/0x18e0
[  639.776319][T26019]        ____sys_sendmsg+0x80a/0x9f0
[  639.781627][T26019]        ___sys_sendmsg+0x2a5/0x360
[  639.786847][T26019]        __x64_sys_sendmsg+0x1bd/0x2a0
[  639.792334][T26019]        do_syscall_64+0x14d/0xf80
[  639.797458][T26019]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.803894][T26019] 
[  639.803894][T26019] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  639.811650][T26019]        lock_sock_nested+0x41/0x100
[  639.816966][T26019]        inet_shutdown+0x6a/0x390
[  639.822013][T26019]        nbd_mark_nsock_dead+0x2e9/0x560
[  639.827670][T26019]        sock_shutdown+0x15e/0x260
[  639.832801][T26019]        nbd_clear_sock+0x24/0x170
[  639.837945][T26019]        nbd_config_put+0x2dd/0x580
[  639.843171][T26019]        nbd_genl_connect+0x19d5/0x1cf0
[  639.848742][T26019]        genl_family_rcv_msg_doit+0x22a/0x330
[  639.854843][T26019]        genl_rcv_msg+0x61c/0x7a0
[  639.859911][T26019]        netlink_rcv_skb+0x232/0x4b0
[  639.865212][T26019]        genl_rcv+0x28/0x40
[  639.869744][T26019]        netlink_unicast+0x80f/0x9b0
[  639.875061][T26019]        netlink_sendmsg+0x813/0xb40
[  639.880371][T26019]        ____sys_sendmsg+0x972/0x9f0
[  639.885679][T26019]        ___sys_sendmsg+0x2a5/0x360
[  639.890911][T26019]        __x64_sys_sendmsg+0x1bd/0x2a0
[  639.896401][T26019]        do_syscall_64+0x14d/0xf80
[  639.901539][T26019]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.907982][T26019] 
[  639.907982][T26019] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  639.915649][T26019]        __mutex_lock+0x19f/0x1300
[  639.920780][T26019]        nbd_queue_rq+0x37b/0x1100
[  639.925921][T26019]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  639.932035][T26019]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  639.938905][T26019]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  639.945429][T26019]        blk_mq_run_hw_queue+0x348/0x4f0
[  639.951098][T26019]        blk_mq_dispatch_list+0xd16/0xe10
[  639.956863][T26019]        blk_mq_flush_plug_list+0x48d/0x570
[  639.962781][T26019]        __blk_flush_plug+0x3ed/0x4d0
[  639.968175][T26019]        __submit_bio+0x28d/0x580
[  639.973219][T26019]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  639.979399][T26019]        block_read_full_folio+0x599/0x830
[  639.985227][T26019]        filemap_read_folio+0x137/0x3b0
[  639.990786][T26019]        do_read_cache_folio+0x358/0x590
[  639.996437][T26019]        read_part_sector+0xb6/0x2b0
[  640.001754][T26019]        adfspart_check_ICS+0xa5/0xa40
[  640.007237][T26019]        bdev_disk_changed+0x7ba/0x1550
[  640.012804][T26019]        blkdev_get_whole+0x380/0x510
[  640.018205][T26019]        bdev_open+0x31e/0xd30
[  640.022996][T26019]        blkdev_open+0x470/0x610
[  640.027958][T26019]        do_dentry_open+0x785/0x14e0
[  640.033290][T26019]        vfs_open+0x3b/0x340
[  640.037907][T26019]        path_openat+0x2e08/0x3860
[  640.043053][T26019]        do_file_open+0x23e/0x4a0
[  640.048101][T26019]        do_sys_openat2+0x113/0x200
[  640.053331][T26019]        __x64_sys_openat+0x138/0x170
[  640.058745][T26019]        do_syscall_64+0x14d/0xf80
[  640.063872][T26019]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.070300][T26019] 
[  640.070300][T26019] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  640.077534][T26019]        __mutex_lock+0x19f/0x1300
[  640.082667][T26019]        nbd_queue_rq+0xc6/0x1100
[  640.087734][T26019]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  640.093823][T26019]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  640.100691][T26019]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  640.107259][T26019]        blk_mq_run_hw_queue+0x348/0x4f0
[  640.112917][T26019]        blk_mq_dispatch_list+0xd16/0xe10
[  640.118667][T26019]        blk_mq_flush_plug_list+0x48d/0x570
[  640.124574][T26019]        __blk_flush_plug+0x3ed/0x4d0
[  640.129982][T26019]        __submit_bio+0x28d/0x580
[  640.135025][T26019]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  640.141200][T26019]        block_read_full_folio+0x599/0x830
[  640.147026][T26019]        filemap_read_folio+0x137/0x3b0
[  640.152599][T26019]        do_read_cache_folio+0x358/0x590
[  640.158255][T26019]        read_part_sector+0xb6/0x2b0
[  640.163558][T26019]        adfspart_check_ICS+0xa5/0xa40
[  640.169084][T26019]        bdev_disk_changed+0x7ba/0x1550
[  640.174651][T26019]        blkdev_get_whole+0x380/0x510
[  640.180036][T26019]        bdev_open+0x31e/0xd30
[  640.184822][T26019]        blkdev_open+0x470/0x610
[  640.189779][T26019]        do_dentry_open+0x785/0x14e0
[  640.195106][T26019]        vfs_open+0x3b/0x340
[  640.199714][T26019]        path_openat+0x2e08/0x3860
[  640.204837][T26019]        do_file_open+0x23e/0x4a0
[  640.209876][T26019]        do_sys_openat2+0x113/0x200
[  640.215091][T26019]        __x64_sys_openat+0x138/0x170
[  640.220484][T26019]        do_syscall_64+0x14d/0xf80
[  640.225607][T26019]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.232034][T26019] 
[  640.232034][T26019] -> #0 (set->srcu){.+.+}-{0:0}:
[  640.239180][T26019]        __lock_acquire+0x15a5/0x2cf0
[  640.244571][T26019]        lock_sync+0x9d/0x120
[  640.249273][T26019]        __synchronize_srcu+0xca/0x300
[  640.254758][T26019]        elevator_switch+0x1e8/0x7a0
[  640.260064][T26019]        elevator_change+0x2cc/0x450
[  640.265372][T26019]        elevator_set_default+0x36c/0x430
[  640.271113][T26019]        blk_register_queue+0x366/0x430
[  640.276675][T26019]        __add_disk+0x677/0xd50
[  640.281562][T26019]        add_disk_fwnode+0xfb/0x480
[  640.286780][T26019]        nbd_dev_add+0x72c/0xb50
[  640.291766][T26019]        nbd_genl_connect+0x962/0x1cf0
[  640.297252][T26019]        genl_family_rcv_msg_doit+0x22a/0x330
[  640.303336][T26019]        genl_rcv_msg+0x61c/0x7a0
[  640.308387][T26019]        netlink_rcv_skb+0x232/0x4b0
[  640.313708][T26019]        genl_rcv+0x28/0x40
[  640.318218][T26019]        netlink_unicast+0x80f/0x9b0
[  640.323516][T26019]        netlink_sendmsg+0x813/0xb40
[  640.328840][T26019]        ____sys_sendmsg+0x972/0x9f0
[  640.334151][T26019]        ___sys_sendmsg+0x2a5/0x360
[  640.339367][T26019]        __x64_sys_sendmsg+0x1bd/0x2a0
[  640.344842][T26019]        do_syscall_64+0x14d/0xf80
[  640.349970][T26019]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.356396][T26019] 
[  640.356396][T26019] other info that might help us debug this:
[  640.356396][T26019] 
[  640.366639][T26019] Chain exists of:
[  640.366639][T26019]   set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock
[  640.366639][T26019] 
[  640.380312][T26019]  Possible unsafe locking scenario:
[  640.380312][T26019] 
[  640.387773][T26019]        CPU0                    CPU1
[  640.393183][T26019]        ----                    ----
[  640.398588][T26019]   lock(&q->elevator_lock);
[  640.403214][T26019]                                lock(&q->q_usage_counter(io)#49);
[  640.411126][T26019]                                lock(&q->elevator_lock);
[  640.418247][T26019]   sync(set->srcu);
[  640.422162][T26019] 
[  640.422162][T26019]  *** DEADLOCK ***
[  640.422162][T26019] 
[  640.430312][T26019] 6 locks held by syz.1.5335/26019:
[  640.435520][T26019]  #0: ffffffff8fc3a090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  640.443767][T26019]  #1: ffffffff8fc39ec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  640.452766][T26019]  #2: ffff8880338db1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480
[  640.463172][T26019]  #3: ffff88802a4dd270 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x115/0x430
[  640.473051][T26019]  #4: ffff88802a4dccd8 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  640.483983][T26019]  #5: ffff88802a4dd1e0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  640.493877][T26019] 
[  640.493877][T26019] stack backtrace:
[  640.499786][T26019] CPU: 0 UID: 0 PID: 26019 Comm: syz.1.5335 Not tainted syzkaller #0 PREEMPT(full) 
[  640.499805][T26019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  640.499816][T26019] Call Trace:
[  640.499825][T26019]  <TASK>
[  640.499834][T26019]  dump_stack_lvl+0xe8/0x150
[  640.499859][T26019]  print_circular_bug+0x2e1/0x300
[  640.499886][T26019]  check_noncircular+0x12e/0x150
[  640.499913][T26019]  __lock_acquire+0x15a5/0x2cf0
[  640.499935][T26019]  ? check_path+0x21/0x40
[  640.499961][T26019]  ? lockdep_unlock+0x5d/0xd0
[  640.499978][T26019]  ? __lock_acquire+0x146e/0x2cf0
[  640.500001][T26019]  ? __synchronize_srcu+0xb6/0x300
[  640.500020][T26019]  lock_sync+0x9d/0x120
[  640.500039][T26019]  ? __synchronize_srcu+0xb6/0x300
[  640.500060][T26019]  __synchronize_srcu+0xca/0x300
[  640.500080][T26019]  ? do_raw_spin_lock+0x12b/0x2f0
[  640.500096][T26019]  ? __pfx___synchronize_srcu+0x10/0x10
[  640.500120][T26019]  ? read_tsc+0x9/0x20
[  640.500136][T26019]  ? ktime_get_mono_fast_ns+0x2af/0x2d0
[  640.500171][T26019]  ? synchronize_srcu+0x20d/0x270
[  640.500192][T26019]  elevator_switch+0x1e8/0x7a0
[  640.500213][T26019]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  640.500238][T26019]  elevator_change+0x2cc/0x450
[  640.500259][T26019]  ? do_raw_spin_unlock+0xf5/0x210
[  640.500278][T26019]  elevator_set_default+0x36c/0x430
[  640.500301][T26019]  ? __pfx_elevator_set_default+0x10/0x10
[  640.500326][T26019]  ? disk_register_independent_access_ranges+0x2db/0x380
[  640.500346][T26019]  ? blk_crypto_sysfs_register+0x11c/0x170
[  640.500366][T26019]  blk_register_queue+0x366/0x430
[  640.500393][T26019]  __add_disk+0x677/0xd50
[  640.500421][T26019]  ? down_read+0x272/0x2e0
[  640.500440][T26019]  add_disk_fwnode+0xfb/0x480
[  640.500468][T26019]  nbd_dev_add+0x72c/0xb50
[  640.500491][T26019]  ? __pfx_nbd_dev_add+0x10/0x10
[  640.500526][T26019]  ? bpf_lsm_capable+0x9/0x20
[  640.500551][T26019]  ? security_capable+0x7e/0x2c0
[  640.500576][T26019]  ? radix_tree_lookup+0x25c/0x290
[  640.500600][T26019]  nbd_genl_connect+0x962/0x1cf0
[  640.500620][T26019]  ? __pfx___nla_validate_parse+0x10/0x10
[  640.500643][T26019]  ? __pfx_nbd_genl_connect+0x10/0x10
[  640.500665][T26019]  ? rcu_is_watching+0x15/0xb0
[  640.500689][T26019]  ? trace_kmalloc+0x2a/0x110
[  640.500710][T26019]  ? __nla_parse+0x40/0x60
[  640.500729][T26019]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  640.500747][T26019]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  640.500769][T26019]  genl_family_rcv_msg_doit+0x22a/0x330
[  640.500789][T26019]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  640.500813][T26019]  ? __lock_acquire+0x6b5/0x2cf0
[  640.500836][T26019]  genl_rcv_msg+0x61c/0x7a0
[  640.500855][T26019]  ? __pfx_genl_rcv_msg+0x10/0x10
[  640.500870][T26019]  ? __pfx_nbd_genl_connect+0x10/0x10
[  640.500890][T26019]  ? __lock_acquire+0x6b5/0x2cf0
[  640.500916][T26019]  netlink_rcv_skb+0x232/0x4b0
[  640.500938][T26019]  ? __pfx_genl_rcv_msg+0x10/0x10
[  640.500954][T26019]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  640.500983][T26019]  ? down_read+0x272/0x2e0
[  640.501000][T26019]  ? genl_rcv+0xd/0x40
[  640.501015][T26019]  genl_rcv+0x28/0x40
[  640.501029][T26019]  netlink_unicast+0x80f/0x9b0
[  640.501052][T26019]  ? __pfx_netlink_unicast+0x10/0x10
[  640.501072][T26019]  ? netlink_sendmsg+0x650/0xb40
[  640.501094][T26019]  ? skb_put+0x11b/0x210
[  640.501118][T26019]  netlink_sendmsg+0x813/0xb40
[  640.501144][T26019]  ? __pfx_netlink_sendmsg+0x10/0x10
[  640.501168][T26019]  ? aa_sock_msg_perm+0xf1/0x1b0
[  640.501184][T26019]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  640.501206][T26019]  ____sys_sendmsg+0x972/0x9f0
[  640.501230][T26019]  ? futex_unqueue+0x211/0x240
[  640.501252][T26019]  ? __pfx_____sys_sendmsg+0x10/0x10
[  640.501281][T26019]  ? import_iovec+0x73/0xa0
[  640.501302][T26019]  ___sys_sendmsg+0x2a5/0x360
[  640.501329][T26019]  ? __pfx____sys_sendmsg+0x10/0x10
[  640.501356][T26019]  ? futex_wait+0x29a/0x380
[  640.501392][T26019]  ? __fget_files+0x2a/0x420
[  640.501407][T26019]  ? __fget_files+0x3a0/0x420
[  640.501425][T26019]  __x64_sys_sendmsg+0x1bd/0x2a0
[  640.501451][T26019]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  640.501487][T26019]  do_syscall_64+0x14d/0xf80
[  640.501503][T26019]  ? trace_irq_disable+0x3b/0x150
[  640.501521][T26019]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.501538][T26019]  ? clear_bhb_loop+0x40/0x90
[  640.501557][T26019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.501574][T26019] RIP: 0033:0x7f77b6f9c819
[  640.501590][T26019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  640.501604][T26019] RSP: 002b:00007f77b51b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  640.501622][T26019] RAX: ffffffffffffffda RBX: 00007f77b7216180 RCX: 00007f77b6f9c819
[  640.501634][T26019] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008
[  640.501645][T26019] RBP: 00007f77b7032c91 R08: 0000000000000000 R09: 0000000000000000
[  640.501656][T26019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  640.501666][T26019] R13: 00007f77b7216218 R14: 00007f77b7216180 R15: 00007fff09a55db8
[  640.501686][T26019]  </TASK>
[  640.993793][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  641.007636][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  641.215319][T23133] udevd[23133]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  642.465086][T26000] __nla_validate_parse: 8 callbacks suppressed
[  642.465118][T26000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5333'.
[  645.721989][ T5194] udevd[5194]: worker [22664] /devices/virtual/block/nbd4 is taking a long time
[  647.197469][ T5159] block nbd4: Possible stuck request ffff888026f10000: control (read@0,1024B). Runtime 90 seconds
[  647.208242][ T5159] block nbd4: Possible stuck request ffff888026f10200: control (read@1024,1024B). Runtime 90 seconds
[  647.219179][ T5159] block nbd4: Possible stuck request ffff888026f10400: control (read@2048,1024B). Runtime 90 seconds
[  647.230184][ T5159] block nbd4: Possible stuck request ffff888026f10600: control (read@3072,1024B). Runtime 90 seconds