last executing test programs:

4.861062953s ago: executing program 2 (id=4512):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_IIF={0x8, 0x1b}, @RTA_UID={0x8}]}, 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000010000000000000000000000711824000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x1000, @none, 0x0, 0x2}, 0xe)

4.233874359s ago: executing program 2 (id=4515):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0x0, &(0x7f0000000540)="259a53f271a76d2608004c6588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async)
r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x30, &(0x7f0000000580)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000005c0)=0x10) (async)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8) (async)
socketpair(0x10, 0x3, 0x6, &(0x7f0000000600)) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) (async)
r10 = getpid()
write$cgroup_pid(r9, &(0x7f0000000240)=r10, 0x12) (async)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000380)={r5}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r5, 0x200}, &(0x7f0000000340)=0x8)
write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffd0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x600}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x8000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000140)=""/234, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff1c}, 0x78)

4.093360393s ago: executing program 3 (id=4516):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x9, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r14=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r14, @ANYBLOB="00000000000000009500007b00000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)

4.057794865s ago: executing program 0 (id=4517):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000040000001200", @ANYRES32=0x0], 0x50)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
writev(r3, &(0x7f0000000580)=[{&(0x7f00000006c0)="581a17919cc7749e9438c65fb6", 0xd}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c7576f78f3260c7c00", "e9be1eae", "bb10000000000001"}, 0x28)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000340)={@mcast2, 0x5c})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
shutdown(r6, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800)
ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000d00)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})

3.323039107s ago: executing program 1 (id=4522):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$kcm(0x11, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e10500070088a800008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac3788481e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
socket$kcm(0x11, 0x3, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e10500070088a800008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac3788481e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x6) (async)

3.295658319s ago: executing program 3 (id=4523):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
writev(r3, &(0x7f0000000240)=[{&(0x7f0000000100)="b9a8", 0x2}], 0x1)
splice(r2, 0x0, r4, 0x0, 0x39000, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r1, 0x0, 0x0, 0x80800)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000002c0)={0xd000001a})
syz_genetlink_get_family_id$fou(&(0x7f0000000340), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800)
close(0x3)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='veth1_virt_wifi\x00', 0x10)
write(r7, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'dummy0\x00', <r10=>0x0})
r11 = socket$kcm(0x21, 0x0, 0x2)
ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f00000001c0)=@generic={0x1, 0x5, 0xbc})
sendmsg$inet(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x30}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000400000000", @ANYRES32=0x0, @ANYBLOB="937b010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r10, @ANYBLOB="08000a005c26d3de4f"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

3.148529735s ago: executing program 0 (id=4524):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x20000000)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'hsr0\x00'})

3.011592669s ago: executing program 4 (id=4525):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) (async)
recvmmsg$unix(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000001c0)=""/57, 0x39}], 0x1}}], 0x1, 0x400000a0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0xd0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0xd0}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8080ffd0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffff}, @initr0, @exit, @ldst={0x3, 0x3, 0x6, 0x7, 0x2, 0x30}]}, &(0x7f0000000540)='GPL\x00', 0x2, 0xde, &(0x7f0000000940)=""/222, 0x41100, 0x8}, 0x94) (async)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000400)=0x4, 0x4)

2.97898104s ago: executing program 3 (id=4526):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async)
socketpair(0x1f, 0x1, 0x3, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000140)) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', <r2=>0x0, 0x29, 0x3, 0x5, 0x6, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x40, 0x7800, 0x9ab, 0xfffffffb}})
sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delneigh={0x60, 0x1d, 0x2, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x0, r2, 0x10, 0x1, 0xb}, [@NDA_SRC_VNI={0x8, 0xb, 0x9}, @NDA_PROBES={0x8, 0x4, 0x8}, @NDA_FDB_EXT_ATTRS={0x24, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4e}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NDA_NH_ID={0x8, 0xd, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c015}, 0x40) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xfee, &(0x7f00000003c0)=""/4078, 0x41000}, 0x94)

2.967452761s ago: executing program 0 (id=4527):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x400, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40841}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\t\x00\x00\x00\f\x00\x00\x00B\x00\x00\x00@'], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r2}, 0x38) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, r2}, 0x38)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0x40)

2.851447335s ago: executing program 1 (id=4528):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
poll(0x0, 0x0, 0xfffffffc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011002ff0004"], 0x28}, 0x4004004)

2.81269426s ago: executing program 2 (id=4529):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0x1, 0xe766}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000700)=[{r3, 0x12}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20044080}, 0x0)
recvfrom$inet(r2, 0x0, 0x0, 0x10020, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r4, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) (fail_nth: 1)

2.672963737s ago: executing program 3 (id=4530):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xff, 0x0, 0xff, 0x100fffe00], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1e8, 0x208, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffffff, 0xff000000, 0xff000000], 0x4e20, 0x2b, 0x4, 0x4e24, 0x2, 0x20}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
socket(0x3, 0x800, 0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff3e}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xa, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xb2}]}, 0x2c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.579501133s ago: executing program 4 (id=4531):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}, @IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x5, 0x9)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'})
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)={0x40, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x800}, [@IFLA_GROUP={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048054}, 0x4008000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r8, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x48080)
recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {0x0}, {0x0}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0xfffffffe}], 0x1, 0x20, 0x0)
syz_emit_ethernet(0x24b, &(0x7f00000007c0)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090386dd6000195802153afffe800000000000000000000000000018ff02000000000000000000000000000186009078000a06000000000000000000030aa78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af18020001000000000000000026000400061806aa85616177c61bc943afcb84619755403946b0730a18d0487520dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc312cfd667e483de3f808895c5f4a1a232b5e42b4e67c85e0de9cbadfbe180da167bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4d004a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f6180517dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb22103fcd1876deaf8e9264e6fa3ce2dff9281c9fe68a3000000006f050e5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d90005090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"], 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1300}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x6}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.919752841s ago: executing program 1 (id=4532):
r0 = socket$unix(0x1, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000300)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/188, 0xbc}, {&(0x7f0000000180)=""/179, 0xb3}], 0x3, &(0x7f0000000280)=[@rights={{0x30, 0x1, 0x1, [<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x12002)
r6 = epoll_create(0x8001)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r2, &(0x7f0000000340)={0x2000})
r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$6lowpan_enable(r7, &(0x7f00000003c0)='1', 0x1)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendfile(r1, r8, &(0x7f0000000400)=0x2, 0x8)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r4)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x40401)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$packet(0x11, 0x3, 0x300)
getpeername$packet(r11, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
writev(r3, &(0x7f0000000c40)=[{&(0x7f00000006c0)="44fa9a95b908b32cb059d3a791c7e65d5b7c0aed824b5ae3b943b005dd422ffa55700b7b", 0x24}, {&(0x7f0000000700)="df639a67dbd42b5abc4293f3296b3c5c7151fe634c0d894962d5ce37d09d5c51bb6627ec49279825573787cf52fa0566111accb3100c681b49bd78797a6865e05e7fcac2323a9a0279807ae27badfb810d6f99de73d9e38f869c100162b348be1096ec581a1bab2f29f3a3d06d203b012545afc03898843314080412e9cb1cc3dfdb1b42b1bc62df4706497e9574bf37b18b5b7d9787e64973773a629cc31c95ee273dd519f4dbd6dbc854c7dcb1077f01", 0xb1}, {&(0x7f00000007c0)="c592d4f0bfca4524ba2eb4cf36818c", 0xf}, {&(0x7f0000000800)="2ac4bcb17dae01b75b095abefcdb6d34f921a795e3f4d63420c6bf797ff1f757907278e218762e62d87e8f687a3f4ac33bc0f7ec30f1670867eb57d7d030b79a8adf5294a7f8ad1850e381874495652a629976b7c8a4ede7ccfb97a7fa8e30649b3bd4a0640e700a0ed9f31d260bf0c0bd8b092eb0c3eb46c862098b62023e646c3fb5cb38011b5573f31e395b1e135bd9a65167443acd0be61a72af767e38714a7674b24f62b46e04f764222b5b2f47ccd8b7a4fdac0b420d1790119fd69f471f7b4dd5ab962a124964401b76dd58311c1756fff5d0065bfaaab644b80697", 0xdf}, {&(0x7f0000000900)="b40f08cfeabe9064c1fb0cdb34f65450a79181adb6198502208b14db38217319dcaa2908ec2e1c8ad80884e35848e5a798ed6d47b585c4a21ebbac15dc80baa753925467142a88e1029f5066a30b6b785a9b079774ea15d0ab9096e8d181df7e5c57acc38b5cc69cf059ef35", 0x6c}, {&(0x7f0000000980)="fbd63198f0df804b30ca194233681fc7f9d66a41a0c932e1669050afadbae1bd6fe365674a6ccb8618c7756881efa9046d91e671dfbe41b7d3de6f261fe2a1fed41b8af692bd5de8671c8a75b78f64593df25ef08d9ca3da1dea0f0cc7399f9936c09c4a75b9ebf6d44a5f27916d4a1380e9c30d18f5c8ba8691f87680341e12e2ae876fae0fab8c2cdfee17f8ebc7cbfb8b30e38557a36cfb0c698d76162e227a87cfba38f9de6260d2", 0xaa}, {&(0x7f0000000a80)="143db6cb990d094ff2779b204cc8bc94e4a4623f20d4b7ba2dbf263ee2d8420404bd8fc1476e2b42dd7f50beb3a6d068e7c98ebd9e5c414fa179c2f7009f5b7ba5729e48a27c66f1402bfc1e7d7bd5145f0866ad53df99a73a8aa6efc6f5b06762406f8fba5e18d4eaf8a1e01041a7054a543651fbdb96ac444a158141b4b2452a6afb5ac1d7d8e8262c0fabaf9fddba6d815168c282a4aa0e406aef611fdbe1f1fdd0f4ba03dd75689f71c5e59e3c2bd5da6dd724aabb7fc8c5ea", 0xbb}, {&(0x7f0000000b40)="18522bd51daf9987f85fbe2bc312f3fbb4e4a15ec8ade6898b04839eab663b0c2a53c46d1d62d06ab0913ebddeaa82e7c5e861a4972dd7316ea7fdd6c783fe3e6655cd525cb986ec21f7d0d6ada98bc246", 0x51}, {&(0x7f0000000bc0)="f7e870792670729ec91759e9d341404bcb8edbc6bc3871203e4c135bd4a49a4d0bdcd77cefbf4e4972aa68950eca0405a360d31ef9", 0x35}], 0x9)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r2, <r12=>0xffffffffffffffff}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$IP_VS_SO_GET_TIMEOUT(r13, 0x0, 0x486, &(0x7f0000000d40), 0x0)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000dc0)={'bond_slave_1\x00', 0x1})
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xd0, r9, 0x0, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x33}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x91}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbb21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x40040)
recvfrom$unix(r0, &(0x7f0000000fc0)=""/21, 0x15, 0x2, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x4000010, r5, 0xbd760000)
setsockopt$sock_int(r10, 0x1, 0x26, &(0x7f0000001000), 0x4)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_SCRUB(r12, 0xc400941b, &(0x7f0000001180)={<r15=>0x0, 0x6, 0x7})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r14, 0xc400941d, &(0x7f0000001580)={r15, 0xfffffffffffffffa, 0x6, 0x1})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)

1.919338402s ago: executing program 3 (id=4533):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r2, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
sendto(0xffffffffffffffff, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0x24, 0x0, &(0x7f0000000040)="95ef339f1f8ebcb55b3d610e7cbf7f76a13c68b04ce22c97bdae9bcdbd696a53490d80ae", &(0x7f0000000180), 0xfffff158, 0x0, 0x3b, 0x87, &(0x7f0000000200)="d0d5beef3b4e4ec881c2e6a6586c287bb8e9c9a92181756441c1b14a8d693eb2b54118fd4b428e355a69aaf79de0d1e8d06f31949e874540d1be32", &(0x7f0000000300)="95ad71bf7e676f720d5a65759d42bae60d61db4c372e4d881405555d3aa5e0bcdb0e7101af0d9820e0251996cc0517e2676a93e498f6a515752985dbe37642b06597fc45372082c2733668f94a13da6ae914a8a79ab9fa27a24962959fffc83bc77e0dca2598b91e5229728219628f72c8c67dd1b8c4db12af5cd097f02a783e43c296720b3a38", 0x1, 0x0, 0x5202}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x5}, 0x8)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, 0x0, 0x1, {0x2, 0x0, 0x4}}, 0x18)
bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000005b40)={0x0, 0x0, 0x0}, 0x40000100)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180), 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r7}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010003b0c00000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0002000000000000200012800b00bdeec60dd3ef7e4797061cf9ccc321001200080015004b5a002000000000000000000000000000e8c15a257f779689c13fe971e94efc0afc65c1d400910bbfc936d4cd67599aecfa4511559a0d83c06fb9ad61"], 0x40}}, 0x0)

1.885753953s ago: executing program 0 (id=4534):
r0 = socket(0x15, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
splice(r3, &(0x7f0000000040)=0x1, r4, &(0x7f00000000c0)=0x2, 0x9, 0x0)
unshare(0x20000400)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'geneve0\x00', {0x2, 0x4e22, @multicast1}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r2, r1, &(0x7f0000000140)=0x33, 0x1000)
openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001b00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, 0x0, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r8, 0x0, 0x300080c1)
setsockopt$sock_attach_bpf(r9, 0x1, 0x9, &(0x7f0000000080), 0x4)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800)

1.739891544s ago: executing program 2 (id=4535):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xe}, @empty}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x1e)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x2, &(0x7f0000000380)=@raw=[@jmp={0x5, 0x0, 0x8, 0x9, 0x5, 0x100}, @generic={0xff, 0x0, 0x0, 0x5, 0xe7}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r2, r2, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=<r3=>r2, 0xc, 0x1, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], <r4=>0x0}, 0x40)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x2}, 0x8)
unshare(0x2c020400)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r3, r2, 0x34, 0x0, 0x0, @void, @value=r2, @void, @void, r4}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1802000008000000000000000d0000008500000020000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.723014086s ago: executing program 1 (id=4536):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x41000000, @void}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
unshare(0x22020600)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)

1.595119633s ago: executing program 4 (id=4537):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x20000000)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'hsr0\x00'})

1.275152754s ago: executing program 4 (id=4538):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000160000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
getsockname$qrtr(r3, 0x0, &(0x7f0000000140))
writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r5, @ANYBLOB="a428040000000000140035007665746e6400000008000a000000000000000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="201a8aa0d3bb05002cbd70000000000000000100", @ANYRES32=r2, @ANYBLOB="1203000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

950.948652ms ago: executing program 0 (id=4539):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x23, 0x7, 0x0, 0x2e, @empty, @local, 0x40, 0x20, 0x5, 0x1000}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r4, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c002e008c7e8484d819480ff0630865ab4eb86780550021001808a850d0931f85e55f1f1267bae554080200d745df68ab51b641fe85119512e98360c90b5017a1cae584876f25077082373cdf55fcdb25d6246d5c315907156001ccc1794bd751fe27592b662f96fabf2aa62e223e303e2c76dc45812103f5ac6e0338d87fe1d8be53956b7ee0a8ceeb2215656f4c31665b4222278f77987e26f7e61c73ea267ed37c2babe9f2e5d9776fa63fb2c3dff8fb8661614099f4af6f9928bce0a5a28f75569e10eab8613dc5169d4c923ecb1f850fc0529549f5277ef4383d11157e079b3b2b8d12f24bbbeece4a966d17082fe972bed034e9072c69976167ce3c556989bd6d6d2230454ef0dc05bf68b025054ab455c7ab66c513ec388855e6d8311d92cc2a8d3e8f15f283feb2e1095a6619ed5cb4e217541646ba09a49988737715727305edf34450c0f1ba74fbe2d37145cb3df7d3ad4fd879b87b8ea34f5e87d6460000000000", @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x840)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x1, 0x4, 0x6, 0x0, 0x5, 0xb, 0x6b, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0xffffffff, 0x1, 0x1, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0x0, 0x8, 0xfffffff4, 0x3b98, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x7, 0xaa92, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cce, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0xfffffffe, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0xfff, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x100, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x9, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x10000004, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0xc, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x8df3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x8000, 0x2, 0x17, 0x88, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x9, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x8000, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x6, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x7, 0xb, 0x0, 0x8, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x7, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x2, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x2, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x3, 0x800, 0x101, 0x800, 0x6, 0x9, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0xfff, 0x80000001, 0x8, 0x5, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1"], 0x254}}, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x21}, 0x3, r5})

950.386211ms ago: executing program 3 (id=4540):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000800630500000000000081000000b7080000000000e505aaf8ff00000000b5080000020000047b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600ebfb}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000002"], 0x1c)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080000004"], 0x26}}, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff00000000850000001b3bdf0095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$MRT6(r3, 0x29, 0xd0, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x6, @private2, 0x2}]}, &(0x7f0000000180)=0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="4001000100000000eb0000000000000000000000000020000100100000"], 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000008000000000000000a00000018460000f8efffff00000000000000008500000007000000182000002c80bf6732f054e98c53cb44862077810dda229d6df008a0000a947f96010aa154f5dfca43b450ef6fbf20e3bad07652fdfa11b214129dde4672ba9dcf409dc6a9eba630aff4e2f9f0d1fa8c2ede638638e12b4580ef2a04fbc30a3102266b731bd0e357770a6790aaeff0318a9dd4a8aaf618cba7adc92c55f77f4cb3b1d31ee8288d2d8ff589", @ANYRES32, @ANYBLOB="00000000800000004c9408000400000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006a0000008500000006000000186300000100000000000000000000007fa60800ff7f00009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xdc, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r5}, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000003140)={&(0x7f0000000580)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000029c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/102, 0x66}, {&(0x7f0000002640)=""/156, 0x9c}, {&(0x7f0000002700)=""/212, 0xd4}, {&(0x7f0000002800)=""/77, 0x4d}, {&(0x7f0000002880)=""/198, 0xc6}, {&(0x7f0000002980)}], 0x7, &(0x7f0000002fc0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3ff, 0xffffffff}, {&(0x7f0000002a40)}, &(0x7f0000002c40)=[{&(0x7f0000002a80)=""/122, 0x7a}, {&(0x7f0000002b00)=""/161, 0xa1}, {&(0x7f0000002bc0)=""/73, 0x49}], 0x3, 0x10, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002c80)=""/207, 0xcf}, &(0x7f0000002d80), 0x2}}, @fadd={0x58, 0x114, 0x6, {{0x0, 0x200}, &(0x7f0000002dc0)=0x6c, &(0x7f0000002e00)=0x5, 0x6, 0x1, 0x5c, 0x7, 0x8, 0x6}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002e40)=""/169, 0xa9}, &(0x7f0000002f00), 0x72}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x9}, &(0x7f0000002f40)=0x2024fc8c, &(0x7f0000002f80)=0xa000000000000000, 0x2, 0x0, 0x3, 0x7, 0x1, 0xa}}, @rdma_dest={0x18, 0x114, 0x2, {0x9, 0x7f}}], 0x170, 0x4}, 0x80)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706010300000000170000000115ef63c8fd380000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040)

845.758251ms ago: executing program 2 (id=4541):
r0 = socket$inet6(0xa, 0x3, 0x1)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x0, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}], 0x1, 0x48804)
shutdown(r2, 0x1)
setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="000000020980ffff", 0x8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x4, 0x0}, @in6=@local, 0x4e20, 0x0, 0x4e22, 0x400, 0x2, 0x0, 0x0, 0x1, 0x0, r3}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffb}, {0x7fffffff, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c)

695.878162ms ago: executing program 2 (id=4542):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000280)=0x8)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c)
r6 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYBLOB="02"], 0x9)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)='`', 0x1}], 0x1}, 0x20000000)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r4, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r4, 0x2, 0xb}, 0x8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000300), &(0x7f00000003c0)=0x4)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x64, r10, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, 'list:set\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x64}}, 0x400400c)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e26, @empty}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x878ca35beb5d0945, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0xffff0000, 0x10, 0x0, &(0x7f0000000400)="aa000000000001000061127e9740aa75", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)="28160e21ebb5e658912a71ee4aeaf0c27ee2b46f18d4624c2f09399f26277ae389c3811aab4fa8a8d4fd08ffb05ac94a93c1c0001bcc1b79d3bc758f1fd6845b8fd70b3a24d8bb0b5a9546ac51e70fe44717f06d54d6c1", 0x57}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000000))
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r12)

695.293759ms ago: executing program 1 (id=4543):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20)
r2 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c)
sendmmsg$inet6(r2, &(0x7f00000019c0)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x8, @remote, 0x2}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000000100)="0773db1dc60f85061457", 0xa}, {&(0x7f0000000140)="9a08ee36b0596bb69f0054b58194b9154423849e4840d23b85c8d1db0d131b823429068bc7f672848e3e0f19bd0fe600f8f3d6161dffd2fa32fcdc43c4fe2be0cc03136eb52b126cf28c5f3a3d4f6b5b30fe6ee564", 0x55}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="29f2b79434da3a8dda4fec90b55321bd35983346de4fc8acd0d83a6832edd93999ca043e4453d6cdb5f12e3d4b2f86596370b7dd64f634fdbed089eff5a7b411d1eefa9cd5e5877ff2d012e92e55c8a0e4c7087ad83d770524a6be2ee80bf5c1f161f150acd98e82b9ef7e5232f59817b2dfac1a8539f6e27972b3d63b2009137e81a451f4de9a02e9a2fbbd6f5b93b93b02bd065a4ed6fe71b56b8ee83e6d94e222825ffcd73b75c627767589e66d4848f9fe1123027bca6da7ba8aed658d1fe7f38d17ef1237daf695", 0xca}, {&(0x7f00000016c0)="2640f5216661d81239f15385a9a46ca09a3c2c087f2877a2cebada5d119163435006f8387f20703033e1236a35492d84bc37f190effc4b8b3419a384c6f490ddbe5211499701e993aaf5ed727576e28e544c1dcc8810d5247ab56862cd0170d556ef2d", 0x63}, {&(0x7f0000001740)="66e0341b1e70b3976220372f48f869bc047178c6b79ee4d056f0588e13b033ea4e83f2fe756a092479eda795c121a7f54317808b841de0e19c1562f466ebcf243848d3fb841f2dc1e1e982164b35afa944fa79f0d0075f70c7e899df6189feecc1c48b2c2883695943d2b7443b1e73354bfd9ac7e209a31b782e2409e20c9bdb107858bd0ac71ed23282247c3ae3a66fa83ad29b36e706cc3ae178079ccb4537a42de540064bf6fcdb6660cbe5986e1c8d709b1f321c323b1d6f02a940e6d344a786fd7c4521c1bf5c564651639909c12a2ba4ec07cdbfe57b5ee4ef4b7234a6701f8bd7290d295a", 0xe8}], 0x6, &(0x7f00000018c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x4, 0x5, '\x00', [@pad1, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @local}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @rthdr={{0x38, 0x29, 0x39, {0x88, 0x4, 0x1, 0xff, 0x0, [@private0, @private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0xc8}}], 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'pimreg\x00', <r3=>0x0})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x6, 0x8, 0x2, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map=r5, 0xffffffffffffffff, 0xa, 0x2006, 0xffffffffffffffff, @value=r4}, 0x20)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket(0x2a, 0x2, 0x0)
unshare(0x2c020400)
connect$inet(r9, &(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x8d, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
syz_emit_ethernet(0x2a, &(0x7f0000000940)={@local, @empty, @void, {@ipv4={0x8902, @igmp={{0x5, 0x4, 0x1, 0x19, 0x1c, 0x68, 0x0, 0xf, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x13, 0x1c, 0x0, @empty}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f000000180100002020752500000000002020207b1af8ff00000000bfa101000000000007010000f8ff1cffb702000008000000b70300006813000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x12, &(0x7f0000001a00)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', r3}, 0x94)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000200)=0x7e241e13)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f00000002c0)}, 0x20)

507.94049ms ago: executing program 0 (id=4544):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xfffffffffffffe53, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x20, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x4}, 0x8)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x6)

501.056713ms ago: executing program 4 (id=4545):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0x1, 0xe766}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000700)=[{r3, 0x12}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20044080}, 0x0)
recvfrom$inet(r2, 0x0, 0x0, 0x10020, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r4, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) (fail_nth: 2)

331.063371ms ago: executing program 1 (id=4546):
r0 = socket$unix(0x1, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000300)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/188, 0xbc}, {&(0x7f0000000180)=""/179, 0xb3}], 0x3, &(0x7f0000000280)=[@rights={{0x30, 0x1, 0x1, [<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x12002)
r6 = epoll_create(0x8001)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r2, &(0x7f0000000340)={0x2000})
r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$6lowpan_enable(r7, &(0x7f00000003c0)='1', 0x1)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendfile(r1, r8, &(0x7f0000000400)=0x2, 0x8)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r4)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x40401)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$packet(0x11, 0x3, 0x300)
getpeername$packet(r11, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
writev(r3, &(0x7f0000000c40)=[{&(0x7f00000006c0)="44fa9a95b908b32cb059d3a791c7e65d5b7c0aed824b5ae3b943b005dd422ffa55700b7b", 0x24}, {&(0x7f0000000700)="df639a67dbd42b5abc4293f3296b3c5c7151fe634c0d894962d5ce37d09d5c51bb6627ec49279825573787cf52fa0566111accb3100c681b49bd78797a6865e05e7fcac2323a9a0279807ae27badfb810d6f99de73d9e38f869c100162b348be1096ec581a1bab2f29f3a3d06d203b012545afc03898843314080412e9cb1cc3dfdb1b42b1bc62df4706497e9574bf37b18b5b7d9787e64973773a629cc31c95ee273dd519f4dbd6dbc854c7dcb1077f01", 0xb1}, {&(0x7f00000007c0)="c592d4f0bfca4524ba2eb4cf36818c", 0xf}, {&(0x7f0000000800)="2ac4bcb17dae01b75b095abefcdb6d34f921a795e3f4d63420c6bf797ff1f757907278e218762e62d87e8f687a3f4ac33bc0f7ec30f1670867eb57d7d030b79a8adf5294a7f8ad1850e381874495652a629976b7c8a4ede7ccfb97a7fa8e30649b3bd4a0640e700a0ed9f31d260bf0c0bd8b092eb0c3eb46c862098b62023e646c3fb5cb38011b5573f31e395b1e135bd9a65167443acd0be61a72af767e38714a7674b24f62b46e04f764222b5b2f47ccd8b7a4fdac0b420d1790119fd69f471f7b4dd5ab962a124964401b76dd58311c1756fff5d0065bfaaab644b80697", 0xdf}, {&(0x7f0000000900)="b40f08cfeabe9064c1fb0cdb34f65450a79181adb6198502208b14db38217319dcaa2908ec2e1c8ad80884e35848e5a798ed6d47b585c4a21ebbac15dc80baa753925467142a88e1029f5066a30b6b785a9b079774ea15d0ab9096e8d181df7e5c57acc38b5cc69cf059ef35", 0x6c}, {&(0x7f0000000980)="fbd63198f0df804b30ca194233681fc7f9d66a41a0c932e1669050afadbae1bd6fe365674a6ccb8618c7756881efa9046d91e671dfbe41b7d3de6f261fe2a1fed41b8af692bd5de8671c8a75b78f64593df25ef08d9ca3da1dea0f0cc7399f9936c09c4a75b9ebf6d44a5f27916d4a1380e9c30d18f5c8ba8691f87680341e12e2ae876fae0fab8c2cdfee17f8ebc7cbfb8b30e38557a36cfb0c698d76162e227a87cfba38f9de6260d2", 0xaa}, {&(0x7f0000000a80)="143db6cb990d094ff2779b204cc8bc94e4a4623f20d4b7ba2dbf263ee2d8420404bd8fc1476e2b42dd7f50beb3a6d068e7c98ebd9e5c414fa179c2f7009f5b7ba5729e48a27c66f1402bfc1e7d7bd5145f0866ad53df99a73a8aa6efc6f5b06762406f8fba5e18d4eaf8a1e01041a7054a543651fbdb96ac444a158141b4b2452a6afb5ac1d7d8e8262c0fabaf9fddba6d815168c282a4aa0e406aef611fdbe1f1fdd0f4ba03dd75689f71c5e59e3c2bd5da6dd724aabb7fc8c5ea", 0xbb}, {&(0x7f0000000b40)="18522bd51daf9987f85fbe2bc312f3fbb4e4a15ec8ade6898b04839eab663b0c2a53c46d1d62d06ab0913ebddeaa82e7c5e861a4972dd7316ea7fdd6c783fe3e6655cd525cb986ec21f7d0d6ada98bc246", 0x51}, {&(0x7f0000000bc0)="f7e870792670729ec91759e9d341404bcb8edbc6bc3871203e4c135bd4a49a4d0bdcd77cefbf4e4972aa68950eca0405a360d31ef9", 0x35}], 0x9)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r2, <r12=>0xffffffffffffffff}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$IP_VS_SO_GET_TIMEOUT(r13, 0x0, 0x486, &(0x7f0000000d40), 0x0)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000dc0)={'bond_slave_1\x00', 0x1})
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xd0, r9, 0x0, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x33}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x91}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbb21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x40040)
recvfrom$unix(r0, &(0x7f0000000fc0)=""/21, 0x15, 0x2, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x4000010, r5, 0xbd760000)
setsockopt$sock_int(r10, 0x1, 0x26, &(0x7f0000001000), 0x4)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_SCRUB(r12, 0xc400941b, &(0x7f0000001180)={<r15=>0x0, 0x6, 0x7})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r14, 0xc400941d, &(0x7f0000001580)={r15, 0xfffffffffffffffa, 0x6, 0x1})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)

0s ago: executing program 4 (id=4547):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x8110)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000ecff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="180500000800000000000000f7ffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff0009000000a100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$rds(0x15, 0x5, 0x0)
getsockopt(r4, 0x1, 0x7, &(0x7f0000000000)=""/110, &(0x7f0000000240)=0x6e)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
syz_emit_ethernet(0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb00000200000008050003fd45465de5fcad1278427c84beae059ca35f687186ab9d9ddeec2f544d0cfa461ec63dd2b60cf607c220688f65446a9dc8932b17cd0cb1673f7a7a6fe285ab2fc9012ada3605a2666f1056646e6f53bc0b36"], &(0x7f00000007c0)={0x1, 0x4, [0x5f2, 0x4cb, 0x30d, 0x652]})
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r9, r6, 0x25, 0x0, @void}, 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
r10 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r10, 0x0, 0x0)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r9, @ANYBLOB="d17f9460a6cb85552ef2609c80cd9dc81c2dd7491ef39ecf180440bc2a7c42617bdd7649b41b58025e3dc246a76475ec5885d2e55b7408706b52b91ceb57e5d7dccde8f719d066dc87a6144594eb0bf2a203141287f7fc8774485a8ed208b8331eabcc50ae30bab64f46fb0826ebbaf8a3ed79067a5e7c28cb95c1ac229afc4a2f51f6249ba0cdbe1c833f0992e6f1c6f4dcbd44d4e3733edbcf3387bfad04d186fc5316027e7ba8850eea90ac64a28a53031f822a8453cf1e3b97f7259187", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f00000003c0)="ec", 0x0, 0xcff, 0xe0000000, 0xffffffffffffff3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x48)
listen(0xffffffffffffffff, 0x0)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r13, 0x6, 0xe, &(0x7f00000006c0)={@in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x0, 0x0, 0x2810, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc7bb05a780156ae3de96945d296a285858a891a3b4e7bff572ef64061628d62a3b45bb98872fb1900"}, 0xd8)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32, @ANYRESOCT=r11], 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

.960927][T20362]  ? tomoyo_check_unix_address+0x16d/0x7e0
[  601.961040][T20362]  ? tomoyo_encode2+0x28b/0x540
[  601.961062][T20362]  ? tomoyo_encode2+0x28b/0x540
[  601.961093][T20362]  tomoyo_encode2+0x28b/0x540
[  601.961124][T20362]  tomoyo_check_unix_address+0x39f/0x7e0
[  601.961163][T20362]  ? tomoyo_check_unix_address+0x16d/0x7e0
[  601.961188][T20362]  ? __pfx_tomoyo_check_unix_address+0x10/0x10
[  601.961229][T20362]  ? __might_fault+0xaf/0x130
[  601.961264][T20362]  tomoyo_socket_sendmsg_permission+0x1d9/0x300
[  601.961304][T20362]  security_socket_sendmsg+0xc0/0x280
[  601.961370][T20362]  ____sys_sendmsg+0x51d/0x850
[  601.961404][T20362]  ? __pfx_____sys_sendmsg+0x10/0x10
[  601.961438][T20362]  ? import_iovec+0x73/0xa0
[  601.961476][T20362]  ___sys_sendmsg+0x2a5/0x360
[  601.961497][T20362]  ? __lock_acquire+0x683/0x2cf0
[  601.961533][T20362]  ? __pfx____sys_sendmsg+0x10/0x10
[  601.961563][T20362]  ? kstrtouint+0x6e/0xe0
[  601.961621][T20362]  ? __fget_files+0x2a/0x420
[  601.961649][T20362]  ? __fget_files+0x3a2/0x420
[  601.961690][T20362]  __sys_sendmmsg+0x273/0x4d0
[  601.961720][T20362]  ? __pfx___sys_sendmmsg+0x10/0x10
[  601.961759][T20362]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  601.961802][T20362]  ? ksys_write+0x242/0x270
[  601.961839][T20362]  ? __pfx_ksys_write+0x10/0x10
[  601.961879][T20362]  __x64_sys_sendmmsg+0xa0/0xc0
[  601.961903][T20362]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.961927][T20362]  do_syscall_64+0x174/0x580
[  601.961950][T20362]  ? trace_irq_disable+0x3b/0x140
[  601.961979][T20362]  ? clear_bhb_loop+0x40/0x90
[  601.962006][T20362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.962028][T20362] RIP: 0033:0x7fde39b9de99
[  601.962050][T20362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.962069][T20362] RSP: 002b:00007fde37df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  601.962094][T20362] RAX: ffffffffffffffda RBX: 00007fde39e25fa0 RCX: 00007fde39b9de99
[  601.962110][T20362] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000004
[  601.962124][T20362] RBP: 00007fde37df6090 R08: 0000000000000000 R09: 0000000000000000
[  601.962145][T20362] R10: 0000000014080880 R11: 0000000000000246 R12: 0000000000000001
[  601.962159][T20362] R13: 00007fde39e26038 R14: 00007fde39e25fa0 R15: 00007ffcf1ad3378
[  601.962196][T20362]  </TASK>
[  602.382317][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  602.409996][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  602.434815][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  602.461344][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  602.554170][T20378] netlink: 'syz.2.3600': attribute type 1 has an invalid length.
[  602.632042][T20378] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3600'.
[  602.675294][T20384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3600'.
[  603.434651][T20411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3611'.
[  603.464347][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'.
[  603.497383][T20413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3612'.
[  604.140104][T20448] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  604.156801][T20448] batman_adv: batadv0: Adding interface: gretap1
[  604.170676][T20448] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  604.207679][T20448] batman_adv: batadv0: Interface activated: gretap1
[  604.373923][T20453] nbd: must specify a size in bytes for the device
[  604.687496][T20466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3630'.
[  605.021308][T20450] veth5: entered promiscuous mode
[  605.081101][T20484] __nla_validate_parse: 1 callbacks suppressed
[  605.081125][T20484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3636'.
[  605.100350][T20486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3635'.
[  605.110632][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3636'.
[  605.226790][T20486] 8021q: adding VLAN 0 to HW filter on device bond2
[  605.261917][T20496] xt_HMARK: spi-set and port-set can't be combined
[  605.301886][T20483] bond2: entered promiscuous mode
[  605.309375][T20483] bond2: entered allmulticast mode
[  605.935092][T20515] ip6t_REJECT: ECHOREPLY is not supported
[  605.948369][T20516] netlink: 'syz.3.3645': attribute type 1 has an invalid length.
[  606.025456][T20521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3644'.
[  606.059185][T20521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3644'.
[  606.093076][T20521] netlink: 'syz.2.3644': attribute type 12 has an invalid length.
[  606.102085][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3646'.
[  606.124288][T20521] netlink: 'syz.2.3644': attribute type 11 has an invalid length.
[  606.185635][T20522] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  606.218680][T20522] bond4 (unregistering): Released all slaves
[  606.266494][T20516] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode
[  606.426334][T20532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3649'.
[  606.544399][T20534] pim6reg1: entered promiscuous mode
[  606.562167][T20534] pim6reg1: entered allmulticast mode
[  606.585881][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3650'.
[  606.616956][T20534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3650'.
[  606.672999][T20540] netlink: 'syz.2.3651': attribute type 1 has an invalid length.
[  606.955899][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3654'.
[  607.003948][T20558] netlink: 'syz.3.3656': attribute type 16 has an invalid length.
[  607.060187][T20559] netlink: 'syz.1.3654': attribute type 1 has an invalid length.
[  607.821918][T20598] netlink: 'syz.4.3665': attribute type 8 has an invalid length.
[  608.112538][T20614] netlink: 'syz.2.3668': attribute type 16 has an invalid length.
[  608.332123][T20625] Bluetooth: MGMT ver 1.23
[  608.354312][T20617] 

: option downdelay: invalid value (18446744073709547007)
[  608.401538][T20617] 

: option downdelay: allowed values 0 - 2147483647
[  608.450747][T20617] 

 (unregistering): Released all slaves
[  608.672073][T20637] netlink: 'syz.3.3677': attribute type 210 has an invalid length.
[  608.689955][T20638] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  608.762578][T20645] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  609.027393][T20661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  609.031248][T20654] bridge3: entered promiscuous mode
[  609.075712][T20665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  609.094196][T20654] bridge3: entered allmulticast mode
[  609.165394][T20654] team0: Port device bridge3 added
[  609.185256][T16027] IPVS: starting estimator thread 0...
[  609.212403][T20669] netlink: 'syz.3.3684': attribute type 16 has an invalid length.
[  609.293510][T20670] IPVS: using max 30 ests per chain, 72000 per kthread
[  609.330509][T20649] bridge4: entered promiscuous mode
[  609.371004][T20649] bridge4: entered allmulticast mode
[  609.421733][T20649] team0: Port device bridge4 added
[  609.742412][T20683] bond1: (slave macvlan1): Enslaving as an active interface with an up link
[  609.900600][T20697] tipc: Failed to remove unknown binding: 66,1,1/2827077735:3441233077/3441233079
[  609.981118][T20677] syzkaller0: entered promiscuous mode
[  610.004762][T20677] syzkaller0: entered allmulticast mode
[  610.082824][T20683] bond1 (unregistering): (slave macvlan1): Releasing backup interface
[  610.136168][T20683] bond1 (unregistering): Released all slaves
[  610.155657][T20705] __nla_validate_parse: 6 callbacks suppressed
[  610.155682][T20705] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3691'.
[  610.970030][T20732] validate_nla: 1 callbacks suppressed
[  610.970087][T20732] netlink: 'syz.0.3698': attribute type 1 has an invalid length.
[  612.177640][T20762] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3703'.
[  612.305375][T20765] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3703'.
[  614.719866][T20737] bridge_slave_0: left allmulticast mode
[  614.733115][T20737] bridge_slave_0: left promiscuous mode
[  614.745960][T20737] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.796528][T20737] bridge_slave_1: left allmulticast mode
[  614.819171][T20737] bridge_slave_1: left promiscuous mode
[  614.833829][T20737] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.847508][T20737] bond0: (slave bond_slave_0): Releasing backup interface
[  614.868708][T20737] bond0: (slave bond_slave_1): Releasing backup interface
[  614.880064][T20737] team0: Port device team_slave_0 removed
[  614.888523][T20737] team0: Port device team_slave_1 removed
[  614.895193][T20737] batman_adv: batadv0: Removing interface: batadv_slave_0
[  614.908224][T20737] batman_adv: batadv0: Removing interface: batadv_slave_1
[  614.924035][T20737] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  614.985424][T20762] gretap0: entered promiscuous mode
[  615.021102][T20765] 0ªî{X¹¦: renamed from gretap0
[  615.040451][T20765] 0ªî{X¹¦: left promiscuous mode
[  615.051975][T20765] 0ªî{X¹¦: entered allmulticast mode
[  615.060816][T20765] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  615.237552][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3709'.
[  615.296178][T20788] netlink: 'syz.0.3711': attribute type 2 has an invalid length.
[  615.551784][T20797] xt_hashlimit: size too large, truncated to 1048576
[  615.619993][T20806] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.3715'.
[  615.638654][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3715'.
[  615.667714][T20806] veth0_to_hsr: entered promiscuous mode
[  615.675556][T20806] veth0_to_hsr: left promiscuous mode
[  615.791267][T20811] netlink: 'syz.0.3716': attribute type 8 has an invalid length.
[  615.837308][T20811] FAULT_INJECTION: forcing a failure.
[  615.837308][T20811] name failslab, interval 1, probability 0, space 0, times 0
[  615.873690][T20811] CPU: 0 UID: 0 PID: 20811 Comm: syz.0.3716 Not tainted syzkaller #0 PREEMPT(full) 
[  615.873722][T20811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  615.873739][T20811] Call Trace:
[  615.873749][T20811]  <TASK>
[  615.873759][T20811]  dump_stack_lvl+0xe8/0x150
[  615.873803][T20811]  should_fail_ex+0x40c/0x560
[  615.873841][T20811]  ? alloc_netdev_mqs+0x8f3/0x12b0
[  615.873953][T20811]  should_failslab+0xa8/0x100
[  615.873989][T20811]  __kvmalloc_node_noprof+0x176/0x860
[  615.874020][T20811]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  615.874092][T20811]  ? alloc_netdev_mqs+0x8f3/0x12b0
[  615.874127][T20811]  alloc_netdev_mqs+0x8f3/0x12b0
[  615.874155][T20811]  ? __pfx_br_dev_setup+0x10/0x10
[  615.874234][T20811]  rtnl_create_link+0x321/0xd70
[  615.874271][T20811]  rtnl_newlink_create+0x258/0x7b0
[  615.874330][T20811]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  615.874358][T20811]  ? __pfx___mutex_lock+0x10/0x10
[  615.874395][T20811]  ? ns_capable+0x89/0xe0
[  615.874443][T20811]  rtnl_newlink+0x166d/0x1c30
[  615.874495][T20811]  ? __pfx_rtnl_newlink+0x10/0x10
[  615.874529][T20811]  ? __lock_acquire+0x683/0x2cf0
[  615.874571][T20811]  ? __lock_acquire+0x683/0x2cf0
[  615.874605][T20811]  ? __lock_acquire+0x683/0x2cf0
[  615.874645][T20811]  ? unwind_next_frame+0x8f/0x2550
[  615.874685][T20811]  ? is_bpf_text_address+0x26/0x2b0
[  615.874732][T20811]  ? is_bpf_text_address+0x26/0x2b0
[  615.874769][T20811]  ? __lock_acquire+0x683/0x2cf0
[  615.874802][T20811]  ? kernel_text_address+0xa5/0xe0
[  615.874853][T20811]  ? __kernel_text_address+0xd/0x30
[  615.874885][T20811]  ? unwind_get_return_address+0x4d/0x90
[  615.874907][T20811]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  615.874942][T20811]  ? arch_stack_walk+0xfb/0x150
[  615.874987][T20811]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  615.875040][T20811]  ? __pfx_rtnl_newlink+0x10/0x10
[  615.875071][T20811]  rtnetlink_rcv_msg+0x802/0xc00
[  615.875102][T20811]  ? netlink_sendmsg+0x5d4/0xb40
[  615.875132][T20811]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  615.875164][T20811]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  615.875199][T20811]  ? __lock_acquire+0x683/0x2cf0
[  615.875242][T20811]  netlink_rcv_skb+0x226/0x4a0
[  615.875268][T20811]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  615.875304][T20811]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  615.875340][T20811]  ? netlink_deliver_tap+0x2e/0x1b0
[  615.875362][T20811]  ? netlink_deliver_tap+0x2e/0x1b0
[  615.875391][T20811]  netlink_unicast+0x7bb/0x940
[  615.875437][T20811]  netlink_sendmsg+0x813/0xb40
[  615.875471][T20811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  615.875500][T20811]  ? aa_sock_msg_perm+0xf1/0x1b0
[  615.875531][T20811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  615.875554][T20811]  sock_sendmsg_nosec+0x13a/0x180
[  615.875588][T20811]  ____sys_sendmsg+0x54e/0x850
[  615.875619][T20811]  ? __pfx_____sys_sendmsg+0x10/0x10
[  615.875653][T20811]  ? import_iovec+0x73/0xa0
[  615.875691][T20811]  ___sys_sendmsg+0x2a5/0x360
[  615.875713][T20811]  ? __lock_acquire+0x683/0x2cf0
[  615.875753][T20811]  ? __pfx____sys_sendmsg+0x10/0x10
[  615.875819][T20811]  ? __fget_files+0x2a/0x420
[  615.875857][T20811]  ? __fget_files+0x3a2/0x420
[  615.875898][T20811]  __x64_sys_sendmsg+0x1b1/0x290
[  615.875925][T20811]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  615.875969][T20811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.875995][T20811]  do_syscall_64+0x174/0x580
[  615.876018][T20811]  ? trace_irq_disable+0x3b/0x140
[  615.876047][T20811]  ? clear_bhb_loop+0x40/0x90
[  615.876074][T20811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.876096][T20811] RIP: 0033:0x7f185df9de99
[  615.876118][T20811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  615.876136][T20811] RSP: 002b:00007f185eefa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  615.876161][T20811] RAX: ffffffffffffffda RBX: 00007f185e225fa0 RCX: 00007f185df9de99
[  615.876178][T20811] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003
[  615.876191][T20811] RBP: 00007f185eefa090 R08: 0000000000000000 R09: 0000000000000000
[  615.876204][T20811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  615.876217][T20811] R13: 00007f185e226038 R14: 00007f185e225fa0 R15: 00007ffd351f4d18
[  615.876254][T20811]  </TASK>
[  616.491143][T20817] bridge1: entered promiscuous mode
[  616.511527][T20817] bridge1: entered allmulticast mode
[  616.527308][T20817] team0: Port device bridge1 added
[  616.552675][T20822] nbd: nbd0 already in use
[  616.610204][T20819] netlink: 'syz.4.3720': attribute type 17 has an invalid length.
[  616.624629][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3720'.
[  616.636531][T20819] bond0: option all_slaves_active: invalid value (183)
[  616.644418][T20819] block nbd0: NBD_DISCONNECT
[  616.649232][T20819] block nbd0: Send disconnect failed -32
[  616.655649][T20819] block nbd0: shutting down sockets
[  616.718861][T20828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3722'.
[  616.787273][T20831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3724'.
[  616.831739][T10198] dvmrp8: left allmulticast mode
[  616.880155][T20833] xt_hashlimit: size too large, truncated to 1048576
[  617.218603][T10198] bond7 (unregistering): (slave ip6erspan0): Releasing active interface
[  617.551792][T10198] team0: Port device gtp0 removed
[  617.575108][T10198] bond13 (unregistering): (slave geneve4): Releasing active interface
[  617.596186][T10198] geneve4 (unregistering): left allmulticast mode
[  617.801191][T10198] bond4 (unregistering): (slave bridge2): Releasing active interface
[  618.087089][T10198] bond0 (unregistering): (slave team0): Releasing backup interface
[  618.111500][T10198] bond0 (unregistering): Released all slaves
[  618.143561][T10198] bond1 (unregistering): Released all slaves
[  618.204737][T10198] bond2 (unregistering): Released all slaves
[  618.264732][T10198] bond3 (unregistering): Released all slaves
[  618.299222][T10198] bond4 (unregistering): Released all slaves
[  618.323914][T10198] bond5 (unregistering): (slave veth11): Releasing active interface
[  618.344117][T10198] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface
[  618.358366][T10198] bond5 (unregistering): Released all slaves
[  618.380346][T10198] bond6 (unregistering): Released all slaves
[  618.403476][T10198] bond7 (unregistering): Released all slaves
[  618.421694][T10198] bond8 (unregistering): Released all slaves
[  618.442747][T10198] bond9 (unregistering): Released all slaves
[  618.465212][T10198] bond10 (unregistering): (slave bond11): Releasing backup interface
[  618.473507][T10198] bond11 (unregistering): left promiscuous mode
[  618.480628][T10198] bond10 (unregistering): Released all slaves
[  618.501923][T10198] bond11 (unregistering): Released all slaves
[  618.519381][T10198] bond12 (unregistering): Released all slaves
[  618.540611][T10198] bond13 (unregistering): Released all slaves
[  618.566212][T20831] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  619.033763][T20896] netlink: 'syz.0.3729': attribute type 15 has an invalid length.
[  619.133266][T20896] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3729'.
[  619.431599][T20912] x_tables: ip_tables: osf match: only valid for protocol 6
[  619.538356][T10198] 
: left promiscuous mode
[  619.718689][T20922] netlink: 'syz.2.3737': attribute type 1 has an invalid length.
[  619.905708][T20922] bond1: entered promiscuous mode
[  619.911518][T20922] 8021q: adding VLAN 0 to HW filter on device bond1
[  620.067046][T20926] bond1: (slave bridge6): making interface the new active one
[  620.084361][T20926] bridge6: entered promiscuous mode
[  620.091921][T20926] bond1: (slave bridge6): Enslaving as an active interface with an up link
[  620.102969][T10198] tipc: Disabling bearer <eth:syzkaller0>
[  620.119006][T10198] tipc: Left network mode
[  622.112911][T20978] netlink: 'syz.1.3750': attribute type 21 has an invalid length.
[  622.143315][T20978] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3750'.
[  624.261118][T20978] netlink: 'syz.1.3750': attribute type 5 has an invalid length.
[  624.279404][T20978] netlink: 'syz.1.3750': attribute type 6 has an invalid length.
[  624.294938][T20978] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3750'.
[  624.399957][T20985] vlan2: entered allmulticast mode
[  624.416888][T20985] bond0: entered allmulticast mode
[  624.774266][T20998] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3756'.
[  624.855131][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  624.944649][T21004] xt_connbytes: Forcing CT accounting to be enabled
[  625.068918][T21004] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3758'.
[  625.285016][T10198] IPVS: stop unused estimator thread 0...
[  625.506003][T21015] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3761'.
[  625.680542][T21028] openvswitch: netlink: Duplicate or invalid key (type 0).
[  625.713535][T21028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  625.732321][ T5625] Bluetooth: hci4: link tx timeout
[  625.744622][ T5625] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  625.757735][T18173] Bluetooth: hci4: link tx timeout
[  625.763060][T18173] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  626.317492][T21054] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3772'.
[  626.507659][T21059] netlink: 'syz.0.3773': attribute type 1 has an invalid length.
[  626.593399][T21063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3773'.
[  626.696171][T21068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3774'.
[  626.744822][T21071] netlink: 'syz.0.3773': attribute type 8 has an invalid length.
[  626.755332][T21062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3774'.
[  626.808901][T21059] 8021q: adding VLAN 0 to HW filter on device bond1
[  626.882179][T21066] bond1: (slave dummy0): making interface the new active one
[  626.892600][T18173] Bluetooth: hci3: command 0x0406 tx timeout
[  626.942733][T21066] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  626.974850][T21063] bond1: entered promiscuous mode
[  627.016567][T21063] dummy0: entered promiscuous mode
[  627.046806][T21063] bond1: entered allmulticast mode
[  627.101361][T21063] dummy0: entered allmulticast mode
[  627.171985][T21070] 8021q: adding VLAN 0 to HW filter on device team0
[  627.217358][T21070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'.
[  627.592055][T21097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'.
[  627.636017][T21099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'.
[  627.843662][ T5625] Bluetooth: hci4: command 0x0405 tx timeout
[  627.948357][T21112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3784'.
[  627.971880][T21114] netlink: 'syz.3.3785': attribute type 16 has an invalid length.
[  628.055421][T21117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3786'.
[  628.065604][T21117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3786'.
[  629.631744][T21123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3788'.
[  629.739697][T21127] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  629.855577][T21135] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3792'.
[  629.885577][T21140] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3795'.
[  629.898556][T21134] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3792'.
[  629.929796][T21140] bridge0: port 2(bridge_slave_1) entered disabled state
[  629.937676][T21140] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.950991][T21144] netlink: 'syz.3.3796': attribute type 16 has an invalid length.
[  630.830527][T21186] netlink: 'syz.1.3809': attribute type 16 has an invalid length.
[  630.952500][T21189] netlink: 'syz.2.3808': attribute type 62 has an invalid length.
[  630.975147][T21195] netlink: 'syz.0.3810': attribute type 83 has an invalid length.
[  631.946371][T21181] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  632.446508][T14844] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  632.495808][T14844] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.532226][T14844] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  632.589080][T14844] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.646260][T14844] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  632.694062][T14844] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.726125][T21220] __nla_validate_parse: 6 callbacks suppressed
[  632.726150][T21220] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3818'.
[  632.746996][T14844] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  632.762340][T21221] netlink: 'syz.3.3815': attribute type 1 has an invalid length.
[  632.776765][T14844] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.830821][T21222] gretap1: entered allmulticast mode
[  632.902037][T21221] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  632.948326][T21224] bond2: invalid ARP target 0.0.0.0 specified for addition
[  632.965424][T21224] bond2: option arp_ip_target: invalid value (0)
[  632.975209][T21224] bond2 (unregistering): Released all slaves
[  633.024131][T21215] syzkaller0: entered promiscuous mode
[  633.049426][T21215] syzkaller0: entered allmulticast mode
[  634.167598][T21280] netlink: 'syz.1.3831': attribute type 1 has an invalid length.
[  634.182278][T21279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3830'.
[  634.197059][T21279] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  634.289453][T21287] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  634.831814][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3838'.
[  634.852229][T21308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3838'.
[  634.871558][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3838'.
[  634.881301][T21308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3838'.
[  635.277039][T21336] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3845'.
[  635.296214][T21333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3843'.
[  635.344723][T21333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3843'.
[  635.770160][T21360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3853'.
[  635.814579][T21362] batadv0: entered promiscuous mode
[  635.835228][T21362] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  636.277108][T21382] dvmrp0: left allmulticast mode
[  636.404740][T21381] netlink: 'syz.1.3851': attribute type 8 has an invalid length.
[  636.535151][T21391] netlink: 'syz.3.3861': attribute type 1 has an invalid length.
[  636.593588][T21387] openvswitch: netlink: Message has 512 unknown bytes.
[  636.745448][T21405] sctp: [Deprecated]: syz.2.3865 (pid 21405) Use of int in max_burst socket option.
[  636.745448][T21405] Use struct sctp_assoc_value instead
[  636.895599][T21400] bond4: (slave dummy0): making interface the new active one
[  636.979742][T21400] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  637.264877][T21428] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[  637.427968][T21435] tipc: Enabled bearer <eth:ip6gre0>, priority 2
[  637.524888][T21440] bridge: RTM_NEWNEIGH with invalid state 0x0
[  638.026475][T21455] netlink: 'syz.0.3875': attribute type 2 has an invalid length.
[  638.058643][T21416] infiniband syz1: set down
[  638.079170][T21416] infiniband syz1: added syz_tun
[  638.127907][T21416] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  638.157563][T21416] infiniband syz1: Couldn't open port 1
[  638.182408][T21455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  638.202911][T21416] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  638.246862][T21416] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  638.290964][T21416] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  638.386140][T21416] RDS/IB: syz1: added
[  638.395007][T21416] smc: adding ib device syz1 with port count 1
[  638.408624][T21416] smc:    ib device syz1 port 1 has no pnetid
[  638.543364][ T6894] tipc: Node number set to 2512381725
[  638.578638][T21479] __nla_validate_parse: 8 callbacks suppressed
[  638.578664][T21479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3884'.
[  638.896005][T21489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3886'.
[  638.950209][T21489] hsr_slave_0: left promiscuous mode
[  638.976211][T21489] hsr_slave_1: left promiscuous mode
[  639.041880][T21497] netlink: 'syz.4.3889': attribute type 21 has an invalid length.
[  639.206643][T21497] netlink: 'syz.4.3889': attribute type 6 has an invalid length.
[  639.236318][T21497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3889'.
[  639.279388][T21497] netlink: 'syz.4.3889': attribute type 21 has an invalid length.
[  639.354105][T21497] netlink: 'syz.4.3889': attribute type 6 has an invalid length.
[  639.382408][T21497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3889'.
[  639.408575][T21504] netlink: 'syz.0.3891': attribute type 8 has an invalid length.
[  639.417520][T21497] netlink: 'syz.4.3889': attribute type 21 has an invalid length.
[  639.462294][T21497] netlink: 'syz.4.3889': attribute type 6 has an invalid length.
[  639.503535][T21497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3889'.
[  639.575127][T21497] netlink: 'syz.4.3889': attribute type 21 has an invalid length.
[  639.619739][T21497] netlink: 'syz.4.3889': attribute type 6 has an invalid length.
[  639.643534][T21497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3889'.
[  639.713070][T21497] netlink: 'syz.4.3889': attribute type 21 has an invalid length.
[  639.848784][T21497] netlink: 'syz.4.3889': attribute type 6 has an invalid length.
[  639.887870][T21497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3889'.
[  640.189143][T21519] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3896'.
[  640.767061][T21537] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3903'.
[  640.785764][T21534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  641.192991][T21543] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002
[  641.280196][T21547] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3907'.
[  641.320373][T21547] unsupported nlmsg_type 40
[  641.502416][T21555] netlink: 'syz.2.3909': attribute type 11 has an invalid length.
[  641.711407][T21559] ipip0: entered promiscuous mode
[  643.113087][T21588] syzkaller0: entered promiscuous mode
[  643.129927][T21588] syzkaller0: entered allmulticast mode
[  643.702727][T21604] macvtap1: entered allmulticast mode
[  643.724951][T21604] bond2: (slave bridge4): making interface the new active one
[  643.741477][T21604] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  643.751087][T21609] __nla_validate_parse: 2 callbacks suppressed
[  643.751109][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3923'.
[  643.811290][T21607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3924'.
[  644.003610][T21618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  644.395040][T21632] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3931'.
[  644.404200][T21633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3931'.
[  644.649289][T21637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  644.728356][T21635] tipc: Disabling bearer <eth:syzkaller0>
[  645.194612][T21668] validate_nla: 2 callbacks suppressed
[  645.194636][T21668] netlink: 'syz.4.3940': attribute type 9 has an invalid length.
[  645.379026][T21672] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3944'.
[  645.574054][T21685] macsec1: entered promiscuous mode
[  645.589766][T21685] bridge0: entered promiscuous mode
[  645.755039][   T29] audit: type=1800 audit(1784718478.440:7): pid=21694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3952" name="memory.events" dev="tmpfs" ino=614 res=0 errno=0
[  645.773030][T21683] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  646.458900][T21719] batman_adv: batadv0: Removing interface: batadv_slave_0
[  646.569038][T21723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  646.592420][T21724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3958'.
[  646.602355][T21723] syzkaller0: entered promiscuous mode
[  646.613974][T21723] syzkaller0: entered allmulticast mode
[  646.634494][T21723] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  646.799292][T21732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  646.815244][T21732] syzkaller0: entered promiscuous mode
[  646.826012][T21732] syzkaller0: entered allmulticast mode
[  646.853561][T21732] tipc: Resetting bearer <eth:syzkaller0>
[  646.865573][T21732] netlink: 'syz.2.3962': attribute type 1 has an invalid length.
[  646.934704][T21731] tipc: Resetting bearer <eth:syzkaller0>
[  646.980826][T21731] tipc: Disabling bearer <eth:syzkaller0>
[  647.361831][T21735] tipc: Resetting bearer <eth:syzkaller0>
[  647.449870][T21735] tipc: Disabling bearer <eth:syzkaller0>
[  648.230165][T21776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3974'.
[  648.293537][T21779] netlink: 'syz.3.3975': attribute type 4 has an invalid length.
[  648.314823][T21779] netlink: 'syz.3.3975': attribute type 4 has an invalid length.
[  649.906960][T21810] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3986'.
[  649.926652][T21810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3986'.
[  649.938429][T21810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3986'.
[  651.083552][T21771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  651.095527][T21783] netlink: 'syz.3.3977': attribute type 1 has an invalid length.
[  651.104733][T21783] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3977'.
[  651.358685][T21815] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3987'.
[  651.410355][T21815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  651.710095][T21815] syzkaller1: entered promiscuous mode
[  651.728716][T21815] syzkaller1: entered allmulticast mode
[  652.060727][T21860] openvswitch: netlink: Missing key (keys=40, expected=100)
[  652.107057][T21859] x_tables: ip_tables: ah match: only valid for protocol 51
[  652.268312][T21857] 8021q: adding VLAN 0 to HW filter on device bond0
[  652.289583][T21857] 8021q: adding VLAN 0 to HW filter on device team0
[  652.310976][T21857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  652.323061][T21873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4003'.
[  652.388077][T21857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  652.404159][T21857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  652.415956][T21857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  652.454972][T21857] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  652.486015][ T5631] Bluetooth: hci2: command 0x0406 tx timeout
[  652.692747][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.700147][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.752850][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.760213][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state
[  652.829281][T21873] ip6gre1: entered promiscuous mode
[  652.836659][T21873] ip6gre1: entered allmulticast mode
[  652.932125][T21888] tipc: Enabled bearer <eth:macvlan1>, priority 0
[  652.951460][T21887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4007'.
[  653.001985][T21888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4007'.
[  653.086157][T21899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  653.201156][T21906] tipc: Enabled bearer <eth:wg1>, priority 0
[  653.688814][T10198] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  653.717659][ T6894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  653.730048][T10198] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  653.774339][T21924] netlink: 'syz.0.4018': attribute type 11 has an invalid length.
[  653.916696][T21936] FAULT_INJECTION: forcing a failure.
[  653.916696][T21936] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  653.969210][T21936] CPU: 0 UID: 0 PID: 21936 Comm: syz.1.4024 Not tainted syzkaller #0 PREEMPT(full) 
[  653.969252][T21936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  653.969268][T21936] Call Trace:
[  653.969278][T21936]  <TASK>
[  653.969289][T21936]  dump_stack_lvl+0xe8/0x150
[  653.969340][T21936]  should_fail_ex+0x40c/0x560
[  653.969380][T21936]  _copy_from_user+0x2d/0xb0
[  653.969418][T21936]  bpf_test_init+0xd8/0x150
[  653.969454][T21936]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  653.969500][T21936]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  653.969534][T21936]  ? __fget_files+0x2a/0x420
[  653.969575][T21936]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  653.969612][T21936]  bpf_prog_test_run+0x2c5/0x340
[  653.969654][T21936]  __sys_bpf+0xa22/0xd90
[  653.969696][T21936]  ? __pfx___sys_bpf+0x10/0x10
[  653.969739][T21936]  ? __fget_files+0x2a/0x420
[  653.969792][T21936]  ? ksys_write+0x242/0x270
[  653.969835][T21936]  ? __pfx_ksys_write+0x10/0x10
[  653.969879][T21936]  __x64_sys_bpf+0xba/0xd0
[  653.969909][T21936]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.969938][T21936]  do_syscall_64+0x174/0x580
[  653.969966][T21936]  ? trace_irq_disable+0x3b/0x140
[  653.969996][T21936]  ? clear_bhb_loop+0x40/0x90
[  653.970037][T21936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.970061][T21936] RIP: 0033:0x7fde39b9de99
[  653.970084][T21936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  653.970104][T21936] RSP: 002b:00007fde37df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  653.970140][T21936] RAX: ffffffffffffffda RBX: 00007fde39e25fa0 RCX: 00007fde39b9de99
[  653.970157][T21936] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  653.970171][T21936] RBP: 00007fde37df6090 R08: 0000000000000000 R09: 0000000000000000
[  653.970184][T21936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  653.970196][T21936] R13: 00007fde39e26038 R14: 00007fde39e25fa0 R15: 00007ffcf1ad3378
[  653.970235][T21936]  </TASK>
[  654.185827][ T6894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  654.215478][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4022'.
[  654.267350][T21939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4022'.
[  654.409580][ T6894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  654.464218][T21937] hsr_slave_1 (unregistering): left promiscuous mode
[  655.058206][T21966] FAULT_INJECTION: forcing a failure.
[  655.058206][T21966] name failslab, interval 1, probability 0, space 0, times 0
[  655.099561][T21966] CPU: 1 UID: 0 PID: 21966 Comm: syz.2.4035 Not tainted syzkaller #0 PREEMPT(full) 
[  655.099595][T21966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  655.099608][T21966] Call Trace:
[  655.099618][T21966]  <TASK>
[  655.099627][T21966]  dump_stack_lvl+0xe8/0x150
[  655.099669][T21966]  should_fail_ex+0x40c/0x560
[  655.099701][T21966]  ? bpf_test_run_xdp_live+0x1ef/0x1c20
[  655.099729][T21966]  should_failslab+0xa8/0x100
[  655.099765][T21966]  __kvmalloc_node_noprof+0x176/0x860
[  655.099802][T21966]  ? bpf_test_run_xdp_live+0x1ef/0x1c20
[  655.099834][T21966]  bpf_test_run_xdp_live+0x1ef/0x1c20
[  655.099864][T21966]  ? bpf_dispatcher_change_prog+0xc4c/0xf20
[  655.099934][T21966]  ? __mutex_unlock_slowpath+0x731/0x900
[  655.099967][T21966]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  655.099996][T21966]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  655.100023][T21966]  ? bpf_dispatcher_xdp+0x800/0x1000
[  655.100097][T21966]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  655.100132][T21966]  ? _copy_from_user+0x94/0xb0
[  655.100166][T21966]  ? bpf_test_init+0x113/0x150
[  655.100187][T21966]  ? xdp_convert_md_to_buff+0x5b/0x330
[  655.100214][T21966]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  655.100257][T21966]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  655.100287][T21966]  ? __fget_files+0x2a/0x420
[  655.100322][T21966]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  655.100348][T21966]  bpf_prog_test_run+0x2c5/0x340
[  655.100382][T21966]  __sys_bpf+0xa22/0xd90
[  655.100419][T21966]  ? __pfx___sys_bpf+0x10/0x10
[  655.100461][T21966]  ? __fget_files+0x2a/0x420
[  655.100508][T21966]  ? ksys_write+0x242/0x270
[  655.100550][T21966]  ? __pfx_ksys_write+0x10/0x10
[  655.100589][T21966]  __x64_sys_bpf+0xba/0xd0
[  655.100615][T21966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.100639][T21966]  do_syscall_64+0x174/0x580
[  655.100662][T21966]  ? trace_irq_disable+0x3b/0x140
[  655.100689][T21966]  ? clear_bhb_loop+0x40/0x90
[  655.100717][T21966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.100739][T21966] RIP: 0033:0x7f29bed9de99
[  655.100764][T21966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  655.100783][T21966] RSP: 002b:00007f29bfd21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  655.100807][T21966] RAX: ffffffffffffffda RBX: 00007f29bf025fa0 RCX: 00007f29bed9de99
[  655.100823][T21966] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  655.100838][T21966] RBP: 00007f29bfd21090 R08: 0000000000000000 R09: 0000000000000000
[  655.100852][T21966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  655.100865][T21966] R13: 00007f29bf026038 R14: 00007f29bf025fa0 R15: 00007fff796e9f88
[  655.100899][T21966]  </TASK>
[  655.608054][T21974] __nla_validate_parse: 1 callbacks suppressed
[  655.608080][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4036'.
[  655.660891][T21977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4037'.
[  655.678748][T21974] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  655.702306][T21974] batman_adv: batadv0: Removing interface: batadv_slave_1
[  655.894213][T21977] 8021q: adding VLAN 0 to HW filter on device bond3
[  656.047947][T21992] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4042'.
[  656.147550][T21996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4043'.
[  656.632379][T22014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4041'.
[  656.693094][T22021] FAULT_INJECTION: forcing a failure.
[  656.693094][T22021] name failslab, interval 1, probability 0, space 0, times 0
[  656.729731][T22021] CPU: 1 UID: 0 PID: 22021 Comm: syz.1.4047 Not tainted syzkaller #0 PREEMPT(full) 
[  656.729776][T22021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  656.729792][T22021] Call Trace:
[  656.729801][T22021]  <TASK>
[  656.729811][T22021]  dump_stack_lvl+0xe8/0x150
[  656.729855][T22021]  should_fail_ex+0x40c/0x560
[  656.729886][T22021]  ? bpf_test_run_xdp_live+0x220/0x1c20
[  656.729916][T22021]  should_failslab+0xa8/0x100
[  656.729954][T22021]  __kvmalloc_node_noprof+0x176/0x860
[  656.729991][T22021]  ? __kvmalloc_node_noprof+0x35c/0x860
[  656.730022][T22021]  ? bpf_test_run_xdp_live+0x220/0x1c20
[  656.730055][T22021]  bpf_test_run_xdp_live+0x220/0x1c20
[  656.730086][T22021]  ? bpf_dispatcher_change_prog+0xc4c/0xf20
[  656.730126][T22021]  ? __mutex_unlock_slowpath+0x731/0x900
[  656.730160][T22021]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  656.730190][T22021]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  656.730217][T22021]  ? 0xffffffffa02057c0
[  656.730296][T22021]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  656.730333][T22021]  ? _copy_from_user+0x94/0xb0
[  656.730369][T22021]  ? bpf_test_init+0x113/0x150
[  656.730391][T22021]  ? xdp_convert_md_to_buff+0x5b/0x330
[  656.730422][T22021]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  656.730466][T22021]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  656.730498][T22021]  ? __fget_files+0x2a/0x420
[  656.730550][T22021]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  656.730578][T22021]  bpf_prog_test_run+0x2c5/0x340
[  656.730617][T22021]  __sys_bpf+0xa22/0xd90
[  656.730659][T22021]  ? __pfx___sys_bpf+0x10/0x10
[  656.730702][T22021]  ? __fget_files+0x2a/0x420
[  656.730768][T22021]  ? ksys_write+0x242/0x270
[  656.730809][T22021]  ? __pfx_ksys_write+0x10/0x10
[  656.730855][T22021]  __x64_sys_bpf+0xba/0xd0
[  656.730884][T22021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.730913][T22021]  do_syscall_64+0x174/0x580
[  656.730940][T22021]  ? trace_irq_disable+0x3b/0x140
[  656.730971][T22021]  ? clear_bhb_loop+0x40/0x90
[  656.731001][T22021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.731027][T22021] RIP: 0033:0x7fde39b9de99
[  656.731049][T22021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  656.731070][T22021] RSP: 002b:00007fde37df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  656.731097][T22021] RAX: ffffffffffffffda RBX: 00007fde39e25fa0 RCX: 00007fde39b9de99
[  656.731114][T22021] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  656.731130][T22021] RBP: 00007fde37df6090 R08: 0000000000000000 R09: 0000000000000000
[  656.731145][T22021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  656.731158][T22021] R13: 00007fde39e26038 R14: 00007fde39e25fa0 R15: 00007ffcf1ad3378
[  656.731198][T22021]  </TASK>
[  657.072302][T21999] bridge_slave_0: left allmulticast mode
[  657.078142][T21999] bridge_slave_0: left promiscuous mode
[  657.084209][T21999] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.167189][T21999] bridge_slave_1: left allmulticast mode
[  657.175283][T21999] bridge_slave_1: left promiscuous mode
[  657.183343][T21999] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.198573][T21999] bond0: (slave bond_slave_0): Releasing backup interface
[  657.241123][T21999] bond0: (slave bond_slave_1): Releasing backup interface
[  657.273703][T21999] team0: Port device team_slave_0 removed
[  657.305285][T21999] team0: Port device team_slave_1 removed
[  657.312611][T21999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  657.320703][T21999] batman_adv: batadv0: Removing interface: batadv_slave_0
[  657.333106][T21999] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  657.523462][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  657.598181][T22030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  657.830924][T22045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4052'.
[  657.875478][T22045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4052'.
[  657.909473][T22045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4052'.
[  657.970557][T22051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4055'.
[  658.106788][T22054] netlink: 'syz.3.4056': attribute type 1 has an invalid length.
[  658.120875][T22054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4056'.
[  658.144648][T22054] bond4: (slave dummy0): Releasing active interface
[  658.227560][T22058] FAULT_INJECTION: forcing a failure.
[  658.227560][T22058] name failslab, interval 1, probability 0, space 0, times 0
[  658.284722][T22058] CPU: 1 UID: 0 PID: 22058 Comm: syz.4.4058 Not tainted syzkaller #0 PREEMPT(full) 
[  658.284758][T22058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  658.284771][T22058] Call Trace:
[  658.284780][T22058]  <TASK>
[  658.284791][T22058]  dump_stack_lvl+0xe8/0x150
[  658.284833][T22058]  should_fail_ex+0x40c/0x560
[  658.284866][T22058]  should_failslab+0xa8/0x100
[  658.284901][T22058]  __kmalloc_cache_node_noprof+0xaa/0x630
[  658.284932][T22058]  ? bpf_test_run_xdp_live+0x220/0x1c20
[  658.284961][T22058]  ? page_pool_create_percpu+0x73/0xc70
[  658.285112][T22058]  ? page_pool_create_percpu+0x73/0xc70
[  658.285150][T22058]  page_pool_create_percpu+0x73/0xc70
[  658.285186][T22058]  ? page_pool_create+0xd/0x20
[  658.285217][T22058]  bpf_test_run_xdp_live+0x23a/0x1c20
[  658.285247][T22058]  ? bpf_dispatcher_change_prog+0xc4c/0xf20
[  658.285284][T22058]  ? __mutex_unlock_slowpath+0x731/0x900
[  658.285318][T22058]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  658.285347][T22058]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  658.285372][T22058]  ? bpf_dispatcher_xdp+0x800/0x1000
[  658.285446][T22058]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  658.285481][T22058]  ? _copy_from_user+0x94/0xb0
[  658.285515][T22058]  ? bpf_test_init+0x113/0x150
[  658.285535][T22058]  ? xdp_convert_md_to_buff+0x5b/0x330
[  658.285563][T22058]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  658.285605][T22058]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  658.285635][T22058]  ? __fget_files+0x2a/0x420
[  658.285670][T22058]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  658.285696][T22058]  bpf_prog_test_run+0x2c5/0x340
[  658.285731][T22058]  __sys_bpf+0xa22/0xd90
[  658.285769][T22058]  ? __pfx___sys_bpf+0x10/0x10
[  658.285809][T22058]  ? __fget_files+0x2a/0x420
[  658.285857][T22058]  ? ksys_write+0x242/0x270
[  658.285894][T22058]  ? __pfx_ksys_write+0x10/0x10
[  658.285933][T22058]  __x64_sys_bpf+0xba/0xd0
[  658.285960][T22058]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.285985][T22058]  do_syscall_64+0x174/0x580
[  658.286008][T22058]  ? trace_irq_disable+0x3b/0x140
[  658.286035][T22058]  ? clear_bhb_loop+0x40/0x90
[  658.286064][T22058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.286087][T22058] RIP: 0033:0x7fe6b139de99
[  658.286107][T22058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  658.286125][T22058] RSP: 002b:00007fe6b2342028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  658.286150][T22058] RAX: ffffffffffffffda RBX: 00007fe6b1625fa0 RCX: 00007fe6b139de99
[  658.286166][T22058] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  658.286189][T22058] RBP: 00007fe6b2342090 R08: 0000000000000000 R09: 0000000000000000
[  658.286203][T22058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  658.286217][T22058] R13: 00007fe6b1626038 R14: 00007fe6b1625fa0 R15: 00007ffdb69a4db8
[  658.286251][T22058]  </TASK>
[  658.662769][T22069] xt_connbytes: Forcing CT accounting to be enabled
[  658.687699][T22069] x_tables: ip6_tables: mh match: only valid for protocol 135
[  658.820808][T22073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  659.154211][T22090] netlink: 'syz.4.4069': attribute type 1 has an invalid length.
[  661.990994][T22101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  662.001444][T22127] __nla_validate_parse: 8 callbacks suppressed
[  662.001465][T22127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4077'.
[  662.161170][T22171] FAULT_INJECTION: forcing a failure.
[  662.161170][T22171] name failslab, interval 1, probability 0, space 0, times 0
[  662.195543][T22172] sctp: [Deprecated]: syz.3.4089 (pid 22172) Use of int in max_burst socket option.
[  662.195543][T22172] Use struct sctp_assoc_value instead
[  662.231472][T22171] CPU: 0 UID: 0 PID: 22171 Comm: syz.2.4088 Not tainted syzkaller #0 PREEMPT(full) 
[  662.231506][T22171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  662.231519][T22171] Call Trace:
[  662.231528][T22171]  <TASK>
[  662.231537][T22171]  dump_stack_lvl+0xe8/0x150
[  662.231580][T22171]  should_fail_ex+0x40c/0x560
[  662.231621][T22171]  should_failslab+0xa8/0x100
[  662.231657][T22171]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  662.231685][T22171]  ? skb_clone+0x212/0x3a0
[  662.231710][T22171]  ? skb_clone+0x212/0x3a0
[  662.231740][T22171]  skb_clone+0x212/0x3a0
[  662.231768][T22171]  __netlink_deliver_tap+0x413/0x860
[  662.231808][T22171]  ? netlink_deliver_tap+0x2e/0x1b0
[  662.231834][T22171]  netlink_deliver_tap+0x19c/0x1b0
[  662.231859][T22171]  netlink_unicast+0x77f/0x940
[  662.231904][T22171]  netlink_sendmsg+0x813/0xb40
[  662.231939][T22171]  ? __pfx_netlink_sendmsg+0x10/0x10
[  662.231969][T22171]  ? aa_sock_msg_perm+0xf1/0x1b0
[  662.232001][T22171]  ? __pfx_netlink_sendmsg+0x10/0x10
[  662.232024][T22171]  sock_sendmsg_nosec+0x13a/0x180
[  662.232058][T22171]  ____sys_sendmsg+0x54e/0x850
[  662.232089][T22171]  ? __pfx_____sys_sendmsg+0x10/0x10
[  662.232121][T22171]  ? import_iovec+0x73/0xa0
[  662.232159][T22171]  ___sys_sendmsg+0x2a5/0x360
[  662.232181][T22171]  ? __lock_acquire+0x683/0x2cf0
[  662.232218][T22171]  ? __pfx____sys_sendmsg+0x10/0x10
[  662.232282][T22171]  ? __fget_files+0x2a/0x420
[  662.232311][T22171]  ? __fget_files+0x3a2/0x420
[  662.232350][T22171]  __x64_sys_sendmsg+0x1b1/0x290
[  662.232378][T22171]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  662.232421][T22171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.232446][T22171]  do_syscall_64+0x174/0x580
[  662.232471][T22171]  ? trace_irq_disable+0x3b/0x140
[  662.232500][T22171]  ? clear_bhb_loop+0x40/0x90
[  662.232528][T22171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.232551][T22171] RIP: 0033:0x7f29bed9de99
[  662.232572][T22171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  662.232591][T22171] RSP: 002b:00007f29bfd21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  662.232623][T22171] RAX: ffffffffffffffda RBX: 00007f29bf025fa0 RCX: 00007f29bed9de99
[  662.232639][T22171] RDX: 0000000020084884 RSI: 0000200000000040 RDI: 0000000000000003
[  662.232654][T22171] RBP: 00007f29bfd21090 R08: 0000000000000000 R09: 0000000000000000
[  662.232668][T22171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  662.232681][T22171] R13: 00007f29bf026038 R14: 00007f29bf025fa0 R15: 00007fff796e9f88
[  662.232717][T22171]  </TASK>
[  662.618474][T22176] openvswitch: netlink: Message has 1 unknown bytes.
[  662.719690][T22176] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  663.581347][T22237] FAULT_INJECTION: forcing a failure.
[  663.581347][T22237] name failslab, interval 1, probability 0, space 0, times 0
[  663.602290][T22237] CPU: 0 UID: 0 PID: 22237 Comm: syz.4.4104 Not tainted syzkaller #0 PREEMPT(full) 
[  663.602322][T22237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  663.602337][T22237] Call Trace:
[  663.602347][T22237]  <TASK>
[  663.602357][T22237]  dump_stack_lvl+0xe8/0x150
[  663.602403][T22237]  should_fail_ex+0x40c/0x560
[  663.602439][T22237]  should_failslab+0xa8/0x100
[  663.602479][T22237]  __kmalloc_cache_noprof+0xa8/0x660
[  663.602512][T22237]  ? ip_set_pernet+0x23/0x240
[  663.602683][T22237]  ? ip_set_create+0x38f/0x1a40
[  663.602704][T22237]  ? ip_set_create+0x38f/0x1a40
[  663.602737][T22237]  ip_set_create+0x38f/0x1a40
[  663.602769][T22237]  ? rcu_is_watching+0x15/0xb0
[  663.602818][T22237]  ? __pfx_ip_set_create+0x10/0x10
[  663.602887][T22237]  nfnetlink_rcv_msg+0xcc2/0x12b0
[  663.602989][T22237]  ? unwind_get_return_address+0x4d/0x90
[  663.603018][T22237]  ? nfnetlink_rcv_msg+0x228/0x12b0
[  663.603080][T22237]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  663.603177][T22237]  netlink_rcv_skb+0x226/0x4a0
[  663.603205][T22237]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  663.603244][T22237]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  663.603282][T22237]  ? bpf_lsm_capable+0x9/0x20
[  663.603313][T22237]  ? security_capable+0x7e/0x2c0
[  663.603423][T22237]  nfnetlink_rcv+0x2b9/0x28c0
[  663.603464][T22237]  ? __dev_queue_xmit+0x29b/0x3820
[  663.603526][T22237]  ? __local_bh_enable_ip+0xd0/0x130
[  663.603555][T22237]  ? lockdep_hardirqs_on+0x7a/0x110
[  663.603583][T22237]  ? __dev_queue_xmit+0x29b/0x3820
[  663.603609][T22237]  ? __local_bh_enable_ip+0xd0/0x130
[  663.603644][T22237]  ? __dev_queue_xmit+0x29b/0x3820
[  663.603671][T22237]  ? __dev_queue_xmit+0x1edc/0x3820
[  663.603697][T22237]  ? do_syscall_64+0x174/0x580
[  663.603722][T22237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.603763][T22237]  ? __dev_queue_xmit+0x29b/0x3820
[  663.603791][T22237]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  663.603837][T22237]  ? __pfx___dev_queue_xmit+0x10/0x10
[  663.603876][T22237]  ? ref_tracker_free+0x689/0x830
[  663.603912][T22237]  ? __pfx_ref_tracker_free+0x10/0x10
[  663.603955][T22237]  ? __skb_clone+0x449/0x6c0
[  663.603988][T22237]  ? skb_clone+0x246/0x3a0
[  663.604019][T22237]  ? __netlink_deliver_tap+0x811/0x860
[  663.604044][T22237]  ? netlink_deliver_tap+0x2e/0x1b0
[  663.604079][T22237]  ? netlink_deliver_tap+0x2e/0x1b0
[  663.604105][T22237]  ? netlink_deliver_tap+0x2e/0x1b0
[  663.604139][T22237]  netlink_unicast+0x7bb/0x940
[  663.604192][T22237]  netlink_sendmsg+0x813/0xb40
[  663.604232][T22237]  ? __pfx_netlink_sendmsg+0x10/0x10
[  663.604265][T22237]  ? aa_sock_msg_perm+0xf1/0x1b0
[  663.604297][T22237]  ? __pfx_netlink_sendmsg+0x10/0x10
[  663.604323][T22237]  sock_sendmsg_nosec+0x13a/0x180
[  663.604360][T22237]  ____sys_sendmsg+0x54e/0x850
[  663.604393][T22237]  ? __pfx_____sys_sendmsg+0x10/0x10
[  663.604432][T22237]  ? import_iovec+0x73/0xa0
[  663.604472][T22237]  ___sys_sendmsg+0x2a5/0x360
[  663.604496][T22237]  ? __lock_acquire+0x683/0x2cf0
[  663.604535][T22237]  ? __pfx____sys_sendmsg+0x10/0x10
[  663.604607][T22237]  ? __fget_files+0x2a/0x420
[  663.604646][T22237]  ? __fget_files+0x3a2/0x420
[  663.604693][T22237]  __x64_sys_sendmsg+0x1b1/0x290
[  663.604723][T22237]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  663.604773][T22237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.604800][T22237]  do_syscall_64+0x174/0x580
[  663.604824][T22237]  ? trace_irq_disable+0x3b/0x140
[  663.604855][T22237]  ? clear_bhb_loop+0x40/0x90
[  663.604886][T22237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.604911][T22237] RIP: 0033:0x7fe6b139de99
[  663.604935][T22237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  663.604956][T22237] RSP: 002b:00007fe6b2342028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  663.604983][T22237] RAX: ffffffffffffffda RBX: 00007fe6b1625fa0 RCX: 00007fe6b139de99
[  663.605001][T22237] RDX: 0000000020084884 RSI: 0000200000000040 RDI: 0000000000000003
[  663.605018][T22237] RBP: 00007fe6b2342090 R08: 0000000000000000 R09: 0000000000000000
[  663.605033][T22237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  663.605047][T22237] R13: 00007fe6b1626038 R14: 00007fe6b1625fa0 R15: 00007ffdb69a4db8
[  663.605087][T22237]  </TASK>
[  664.328725][T22249] openvswitch: netlink: Missing key (keys=40, expected=100)
[  664.420653][T22256] netlink: 393 bytes leftover after parsing attributes in process `syz.4.4113'.
[  664.519114][T22261] FAULT_INJECTION: forcing a failure.
[  664.519114][T22261] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  664.575238][T22261] CPU: 1 UID: 0 PID: 22261 Comm: syz.3.4112 Not tainted syzkaller #0 PREEMPT(full) 
[  664.575277][T22261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  664.575292][T22261] Call Trace:
[  664.575302][T22261]  <TASK>
[  664.575313][T22261]  dump_stack_lvl+0xe8/0x150
[  664.575360][T22261]  should_fail_ex+0x40c/0x560
[  664.575398][T22261]  _copy_from_user+0x2d/0xb0
[  664.575438][T22261]  ___sys_sendmsg+0x1c6/0x360
[  664.575465][T22261]  ? __lock_acquire+0x683/0x2cf0
[  664.575504][T22261]  ? __pfx____sys_sendmsg+0x10/0x10
[  664.575574][T22261]  ? __fget_files+0x2a/0x420
[  664.575613][T22261]  ? __fget_files+0x3a2/0x420
[  664.575658][T22261]  __x64_sys_sendmsg+0x1b1/0x290
[  664.575688][T22261]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  664.575737][T22261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.575764][T22261]  do_syscall_64+0x174/0x580
[  664.575792][T22261]  ? trace_irq_disable+0x3b/0x140
[  664.575824][T22261]  ? clear_bhb_loop+0x40/0x90
[  664.575855][T22261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.575881][T22261] RIP: 0033:0x7f3bff99de99
[  664.575906][T22261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  664.575928][T22261] RSP: 002b:00007f3c008a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  664.575955][T22261] RAX: ffffffffffffffda RBX: 00007f3bffc25fa0 RCX: 00007f3bff99de99
[  664.575973][T22261] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[  664.575989][T22261] RBP: 00007f3c008a7090 R08: 0000000000000000 R09: 0000000000000000
[  664.576005][T22261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  664.576020][T22261] R13: 00007f3bffc26038 R14: 00007f3bffc25fa0 R15: 00007ffed0336f68
[  664.576060][T22261]  </TASK>
[  664.639083][T22273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  664.649058][T22268] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20001
[  664.783498][T22263] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  665.123363][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  665.148120][T22297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4121'.
[  665.213767][T22288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4118'.
[  665.677809][T22324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4126'.
[  665.739343][T22324] xt_hashlimit: size too large, truncated to 1048576
[  665.905733][T22321] veth7: entered allmulticast mode
[  666.182604][T22343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4130'.
[  666.193747][T22344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4130'.
[  666.217626][T22337] bridge1: entered promiscuous mode
[  666.226699][T22337] bridge1: entered allmulticast mode
[  666.261998][T22344] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  666.292432][T22343] bond1: entered promiscuous mode
[  666.309017][T22343] 8021q: adding VLAN 0 to HW filter on device bond1
[  666.326692][T22346] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  666.370885][T22346] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  666.703834][T22364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4136'.
[  666.991585][T22386] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4142'.
[  667.039332][T22386] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4142'.
[  667.097732][T22392] netlink: 'syz.3.4144': attribute type 13 has an invalid length.
[  667.113672][T22390] netlink: 'syz.3.4144': attribute type 13 has an invalid length.
[  667.169506][T22386] 8021q: adding VLAN 0 to HW filter on device bond4
[  667.269559][T22405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4147'.
[  667.282226][T22405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4147'.
[  667.354470][T22395] bridge_slave_0: left allmulticast mode
[  667.360552][T22395] bridge_slave_0: left promiscuous mode
[  667.367706][T22395] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.386596][T22395] bridge_slave_1: left allmulticast mode
[  667.395811][T22395] bridge_slave_1: left promiscuous mode
[  667.402546][T22395] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.422205][T22395] bond0: (slave bond_slave_0): Releasing backup interface
[  667.436497][T22395] bond0: (slave bond_slave_1): Releasing backup interface
[  667.459957][T22395] team0: Port device team_slave_0 removed
[  667.482706][T22395] team0: Port device team_slave_1 removed
[  667.490699][T22395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  667.499240][T22395] batman_adv: batadv0: Removing interface: batadv_slave_0
[  667.512513][T22395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  667.653096][T22401] team0: Device xfrm0 is of different type
[  667.850958][ T5625] Bluetooth: hci1: command 0x0406 tx timeout
[  668.001936][T22422] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4150'.
[  668.067815][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4153'.
[  668.142150][T22425] syzkaller0: entered promiscuous mode
[  668.156866][T22425] syzkaller0: entered allmulticast mode
[  668.283801][T22425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  668.317358][T22423] tipc: Resetting bearer <eth:syzkaller0>
[  668.699567][T22423] tipc: Disabling bearer <eth:syzkaller0>
[  668.731218][T22431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4157'.
[  668.899453][T22442] x_tables: ip_tables: SYNPROXY target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD
[  668.954789][T22442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4158'.
[  669.253798][T22452] syzkaller0: entered promiscuous mode
[  669.265494][T22452] syzkaller0: entered allmulticast mode
[  669.298534][T22452] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4161'.
[  669.340665][T22452] vlan2: entered allmulticast mode
[  669.347750][T22452] bond0: entered allmulticast mode
[  669.363456][T22452] bond_slave_0: entered allmulticast mode
[  669.374525][T22452] bond_slave_1: entered allmulticast mode
[  669.623036][T22444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4160'.
[  669.886793][T22463] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4163'.
[  669.970241][T22467] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  670.261096][T22476] siw: device registration error -23
[  671.018224][T22526] FAULT_INJECTION: forcing a failure.
[  671.018224][T22526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  671.083309][T22526] CPU: 0 UID: 0 PID: 22526 Comm: syz.3.4182 Not tainted syzkaller #0 PREEMPT(full) 
[  671.083345][T22526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  671.083361][T22526] Call Trace:
[  671.083371][T22526]  <TASK>
[  671.083382][T22526]  dump_stack_lvl+0xe8/0x150
[  671.083430][T22526]  should_fail_ex+0x40c/0x560
[  671.083466][T22526]  _copy_from_iter+0x1d3/0x1660
[  671.083510][T22526]  ? _copy_from_iter+0x21b/0x1660
[  671.083545][T22526]  ? __pfx__copy_from_iter+0x10/0x10
[  671.083584][T22526]  ? __pfx__copy_from_iter+0x10/0x10
[  671.083627][T22526]  copy_page_from_iter+0x219/0x2d0
[  671.083666][T22526]  skb_copy_datagram_from_iter+0x2f4/0x720
[  671.083796][T22526]  unix_stream_sendmsg+0x5ce/0xde0
[  671.083900][T22526]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  671.083936][T22526]  ? aa_sock_msg_perm+0xda/0x1b0
[  671.083969][T22526]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  671.083995][T22526]  sock_sendmsg_nosec+0x13a/0x180
[  671.084031][T22526]  ____sys_sendmsg+0x54e/0x850
[  671.084064][T22526]  ? __pfx_____sys_sendmsg+0x10/0x10
[  671.084102][T22526]  ? import_iovec+0x73/0xa0
[  671.084142][T22526]  ___sys_sendmsg+0x2a5/0x360
[  671.084167][T22526]  ? __lock_acquire+0x683/0x2cf0
[  671.084210][T22526]  ? __pfx____sys_sendmsg+0x10/0x10
[  671.084278][T22526]  ? __fget_files+0x2a/0x420
[  671.084310][T22526]  ? __fget_files+0x3a2/0x420
[  671.084354][T22526]  __x64_sys_sendmsg+0x1b1/0x290
[  671.084384][T22526]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  671.084432][T22526]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.084460][T22526]  do_syscall_64+0x174/0x580
[  671.084487][T22526]  ? trace_irq_disable+0x3b/0x140
[  671.084520][T22526]  ? clear_bhb_loop+0x40/0x90
[  671.084551][T22526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.084576][T22526] RIP: 0033:0x7f3bff99de99
[  671.084599][T22526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.084619][T22526] RSP: 002b:00007f3c008a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  671.084647][T22526] RAX: ffffffffffffffda RBX: 00007f3bffc25fa0 RCX: 00007f3bff99de99
[  671.084665][T22526] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[  671.084681][T22526] RBP: 00007f3c008a7090 R08: 0000000000000000 R09: 0000000000000000
[  671.084696][T22526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  671.084710][T22526] R13: 00007f3bffc26038 R14: 00007f3bffc25fa0 R15: 00007ffed0336f68
[  671.084749][T22526]  </TASK>
[  671.760999][T22550] geneve1: Caught tx_queue_len zero misconfig
[  672.071751][T22568] FAULT_INJECTION: forcing a failure.
[  672.071751][T22568] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  672.086546][T22568] CPU: 0 UID: 0 PID: 22568 Comm: syz.3.4196 Not tainted syzkaller #0 PREEMPT(full) 
[  672.086579][T22568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  672.086593][T22568] Call Trace:
[  672.086603][T22568]  <TASK>
[  672.086612][T22568]  dump_stack_lvl+0xe8/0x150
[  672.086653][T22568]  should_fail_ex+0x40c/0x560
[  672.086685][T22568]  _copy_from_iter+0x1d3/0x1660
[  672.086732][T22568]  ? _copy_from_iter+0x21b/0x1660
[  672.086763][T22568]  ? __pfx__copy_from_iter+0x10/0x10
[  672.086798][T22568]  ? __pfx__copy_from_iter+0x10/0x10
[  672.086836][T22568]  copy_page_from_iter+0x219/0x2d0
[  672.086870][T22568]  skb_copy_datagram_from_iter+0x2f4/0x720
[  672.086910][T22568]  unix_stream_sendmsg+0x5ce/0xde0
[  672.086952][T22568]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  672.086979][T22568]  ? aa_sock_msg_perm+0xda/0x1b0
[  672.087007][T22568]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  672.087028][T22568]  sock_sendmsg_nosec+0x13a/0x180
[  672.087060][T22568]  ____sys_sendmsg+0x54e/0x850
[  672.087088][T22568]  ? __pfx_____sys_sendmsg+0x10/0x10
[  672.087122][T22568]  ? import_iovec+0x73/0xa0
[  672.087161][T22568]  ___sys_sendmsg+0x2a5/0x360
[  672.087183][T22568]  ? __lock_acquire+0x683/0x2cf0
[  672.087217][T22568]  ? __pfx____sys_sendmsg+0x10/0x10
[  672.087279][T22568]  ? __fget_files+0x2a/0x420
[  672.087308][T22568]  ? __fget_files+0x3a2/0x420
[  672.087347][T22568]  __x64_sys_sendmsg+0x1b1/0x290
[  672.087374][T22568]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  672.087418][T22568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.087443][T22568]  do_syscall_64+0x174/0x580
[  672.087469][T22568]  ? clear_bhb_loop+0x40/0x90
[  672.087497][T22568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.087519][T22568] RIP: 0033:0x7f3bff99de99
[  672.087542][T22568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  672.087562][T22568] RSP: 002b:00007f3c008a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  672.087587][T22568] RAX: ffffffffffffffda RBX: 00007f3bffc25fa0 RCX: 00007f3bff99de99
[  672.087603][T22568] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[  672.087617][T22568] RBP: 00007f3c008a7090 R08: 0000000000000000 R09: 0000000000000000
[  672.087631][T22568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  672.087644][T22568] R13: 00007f3bffc26038 R14: 00007f3bffc25fa0 R15: 00007ffed0336f68
[  672.087680][T22568]  </TASK>
[  672.346437][T22571] ieee802154 phy1 wpan1: encryption failed: -22
[  672.498381][T22569] bond3: (slave bond_slave_1): Device is not our slave
[  672.505651][T22569] bond3: option active_slave: invalid value (bond_slave_1)
[  672.516301][T22569] bond3 (unregistering): Released all slaves
[  672.546330][T22565] SET target dimension over the limit!
[  672.583818][T22564] __nla_validate_parse: 4 callbacks suppressed
[  672.583843][T22564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4193'.
[  672.639554][T22588] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4199'.
[  672.659259][T22588] netlink: 'syz.3.4199': attribute type 7 has an invalid length.
[  672.676217][T22565] syzkaller0: entered promiscuous mode
[  672.698691][T22565] syzkaller0: entered allmulticast mode
[  672.973658][T22597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'.
[  673.017816][T22597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'.
[  673.241172][T22610] netlink: 'syz.3.4205': attribute type 1 has an invalid length.
[  673.311927][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4204'.
[  673.350842][T22610] bond5: entered promiscuous mode
[  673.385786][T22610] 8021q: adding VLAN 0 to HW filter on device bond5
[  673.412082][T22624] netlink: 'syz.4.4207': attribute type 1 has an invalid length.
[  673.440720][T22624] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4207'.
[  673.476418][T22624] netlink: 'syz.4.4207': attribute type 1 has an invalid length.
[  673.521428][T22618] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  673.605416][T22618] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  673.632544][T22628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4209'.
[  673.635126][T22618] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  673.926795][T22628] batman_adv: batadv0: Removing interface: batadv_slave_1
[  674.472151][T22633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  674.521516][T22656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  674.879448][T22677] netlink: 'syz.3.4223': attribute type 1 has an invalid length.
[  674.944568][T22677] bond6: (slave dummy0): making interface the new active one
[  674.952985][T22682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4224'.
[  674.962430][T22677] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  675.019592][T22686] atomic_op ffff888082310998 conn xmit_atomic 0000000000000000
[  675.028263][T22677] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.036062][T22677] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.326260][T22682] 8021q: adding VLAN 0 to HW filter on device bond3
[  675.510754][ T1120] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  675.537843][ T1120] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  675.656675][T22708] netlink: 'syz.1.4228': attribute type 3 has an invalid length.
[  675.666311][T22708] netlink: 646 bytes leftover after parsing attributes in process `syz.1.4228'.
[  675.680765][T22708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4228'.
[  676.009280][ T1120] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  676.019318][ T1120] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.028641][ T1120] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  676.038122][ T1120] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.048011][ T1120] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  676.057836][ T1120] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.309262][   T29] audit: type=1800 audit(1784718510.990:8): pid=22780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4248" name=B702 dev="tmpfs" ino=1557 res=0 errno=0
[  678.427848][T22783] __nla_validate_parse: 2 callbacks suppressed
[  678.427873][T22783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4250'.
[  678.551552][T22783] vlan2: entered allmulticast mode
[  678.577508][T22783] bridge8: entered allmulticast mode
[  678.605129][T22790] bridge8: port 1(erspan0) entered blocking state
[  678.618611][T22790] bridge8: port 1(erspan0) entered disabled state
[  678.632588][T22790] erspan0: entered allmulticast mode
[  678.654333][T22790] erspan0: entered promiscuous mode
[  678.669719][T22790] bridge8: port 1(erspan0) entered blocking state
[  678.676582][T22790] bridge8: port 1(erspan0) entered forwarding state
[  678.719892][T22783] syzkaller0: entered promiscuous mode
[  678.733731][T22783] syzkaller0: entered allmulticast mode
[  678.972582][T22803] netlink: 'syz.1.4255': attribute type 1 has an invalid length.
[  679.100649][T22805] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4256'.
[  679.254310][T22811] netlink: 'syz.1.4258': attribute type 1 has an invalid length.
[  679.282490][T22811] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4258'.
[  679.301768][T22811] netlink: 'syz.1.4258': attribute type 1 has an invalid length.
[  679.795299][T22836] syzkaller0: entered allmulticast mode
[  679.976853][T22847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4270'.
[  680.126628][T22855] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4272'.
[  680.176795][T22853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4270'.
[  680.483525][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  680.530272][T22871] netlink: 'syz.2.4276': attribute type 1 has an invalid length.
[  680.540502][T22871] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4276'.
[  680.552372][T22871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4276'.
[  680.650249][T22875] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4277'.
[  680.671775][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4278'.
[  681.165031][T22898] lo: Caught tx_queue_len zero misconfig
[  681.181670][T22898] netlink: 'syz.3.4285': attribute type 11 has an invalid length.
[  681.191699][T22898] netlink: 'syz.3.4285': attribute type 4 has an invalid length.
[  681.205357][T22899] netlink: 'syz.3.4285': attribute type 11 has an invalid length.
[  681.213942][T22899] netlink: 'syz.3.4285': attribute type 4 has an invalid length.
[  681.428805][ T6880] IPVS: starting estimator thread 0...
[  681.544756][T22906] IPVS: using max 26 ests per chain, 62400 per kthread
[  681.656766][T22915] syzkaller0: entered promiscuous mode
[  681.673438][T22915] syzkaller0: entered allmulticast mode
[  681.696426][T22915] xt_CT: You must specify a L4 protocol and not use inversions on it
[  681.842259][T22929] xt_hashlimit: size too large, truncated to 1048576
[  681.851085][T22929] xt_hashlimit: invalid interval
[  682.054899][T22927] 8021q: adding VLAN 0 to HW filter on device bond0
[  682.108466][T22927] 8021q: adding VLAN 0 to HW filter on device team0
[  682.168974][T22927] 8021q: adding VLAN 0 to HW filter on device batadv0
[  682.188328][T22941] x_tables: duplicate underflow at hook 1
[  682.262096][T22927] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  682.276418][T22927] veth1_vlan: left promiscuous mode
[  682.286331][T22927] veth0_vlan: left promiscuous mode
[  682.294818][T22927] veth0_vlan: entered promiscuous mode
[  682.305951][T22927] veth1_vlan: entered promiscuous mode
[  682.325222][T22927] veth1_macvtap: left promiscuous mode
[  682.332570][T22927] veth0_macvtap: left promiscuous mode
[  682.340918][T22927] veth0_macvtap: entered promiscuous mode
[  682.350709][T22927] veth1_macvtap: entered promiscuous mode
[  682.378027][T22927] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  682.389304][T22927] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  682.402210][T22927] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  682.415008][T22927] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  682.454736][T22927] 8021q: adding VLAN 0 to HW filter on device bond1
[  682.500618][T22927] 8021q: adding VLAN 0 to HW filter on device bond2
[  682.522365][T22927] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[  682.564471][T14844] bridge0: port 1(bridge_slave_0) entered blocking state
[  682.571803][T14844] bridge0: port 1(bridge_slave_0) entered forwarding state
[  682.612360][T14844] bridge0: port 2(bridge_slave_1) entered blocking state
[  682.619653][T14844] bridge0: port 2(bridge_slave_1) entered forwarding state
[  682.820820][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  682.835178][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  682.886352][T22956] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  682.905480][T22956] hsr1: left promiscuous mode
[  682.919854][T22956] sit1: left promiscuous mode
[  682.939517][T22956] bond2: left promiscuous mode
[  682.984452][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  683.000659][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  683.012822][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  683.024082][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  683.060804][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  683.074661][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  683.147449][ T1120] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  683.286484][T22984] netlink: 'syz.4.4308': attribute type 62 has an invalid length.
[  683.446332][T22978] netlink: 'syz.1.4307': attribute type 14 has an invalid length.
[  683.627977][T22993] __nla_validate_parse: 6 callbacks suppressed
[  683.627999][T22993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4311'.
[  683.811849][T22993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4311'.
[  683.945853][T22993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4311'.
[  684.106989][T22993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4311'.
[  684.251008][T22993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4311'.
[  684.366105][T22993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4311'.
[  684.445585][T23022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  684.778081][T23023] syzkaller1: entered promiscuous mode
[  684.783928][T23023] syzkaller1: entered allmulticast mode
[  684.821475][T23040] netlink: 'syz.2.4319': attribute type 5 has an invalid length.
[  684.863064][   T42] syz1: Port: 1 Link ACTIVE
[  685.175905][T23052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4322'.
[  685.215248][T23049] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4321'.
[  685.312151][T23052] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4322'.
[  685.627678][T23077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4328'.
[  685.728826][T23086] openvswitch: netlink: Flow actions attr not present in new flow.
[  685.903925][T23087] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  686.245766][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  686.256553][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  686.399396][T23109] tipc: Enabled bearer <eth:gre0>, priority 25
[  689.935873][T23124] __nla_validate_parse: 5 callbacks suppressed
[  689.935897][T23124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4338'.
[  689.956590][T23124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4338'.
[  689.965858][T23124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4338'.
[  689.983475][T23124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4338'.
[  690.013413][T23124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4338'.
[  690.039521][T23124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4338'.
[  690.063457][T23124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4338'.
[  690.096090][T23124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4338'.
[  690.108652][T23124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4338'.
[  690.123713][T23124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4338'.
[  690.162552][T23124] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.170263][T23124] bridge0: port 1(bridge_slave_0) entered disabled state
[  690.465971][T14843] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  690.483326][T14843] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  690.514395][T14843] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  690.535189][T14843] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  690.581133][T14843] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  690.603726][T14843] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  690.623811][T14843] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  690.635223][T14843] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  691.002591][T23175] netlink: 'syz.3.4352': attribute type 11 has an invalid length.
[  691.043487][T23175] netlink: 'syz.3.4352': attribute type 4 has an invalid length.
[  691.060271][T23171] SET target dimension over the limit!
[  691.111811][T23177] netlink: 'syz.0.4354': attribute type 1 has an invalid length.
[  691.225310][T23186] FAULT_INJECTION: forcing a failure.
[  691.225310][T23186] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  691.264508][T23186] CPU: 0 UID: 0 PID: 23186 Comm: syz.2.4355 Not tainted syzkaller #0 PREEMPT(full) 
[  691.264541][T23186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  691.264554][T23186] Call Trace:
[  691.264563][T23186]  <TASK>
[  691.264573][T23186]  dump_stack_lvl+0xe8/0x150
[  691.264612][T23186]  should_fail_ex+0x40c/0x560
[  691.264644][T23186]  _copy_from_iter+0x1d3/0x1660
[  691.264672][T23186]  ? skb_set_owner_w+0x263/0x3d0
[  691.264727][T23186]  ? __pfx__copy_from_iter+0x10/0x10
[  691.264763][T23186]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  691.264792][T23186]  skb_copy_datagram_from_iter+0xe6/0x720
[  691.264821][T23186]  ? __pfx_sock_def_readable+0x10/0x10
[  691.264855][T23186]  ? get_pid+0x52/0x80
[  691.264956][T23186]  ? skb_put+0x112/0x210
[  691.264992][T23186]  unix_stream_sendmsg+0x5ce/0xde0
[  691.265033][T23186]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  691.265063][T23186]  ? aa_sock_msg_perm+0xda/0x1b0
[  691.265093][T23186]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  691.265114][T23186]  sock_sendmsg_nosec+0x13a/0x180
[  691.265147][T23186]  ____sys_sendmsg+0x54e/0x850
[  691.265176][T23186]  ? __pfx_____sys_sendmsg+0x10/0x10
[  691.265210][T23186]  ? import_iovec+0x73/0xa0
[  691.265254][T23186]  ___sys_sendmsg+0x2a5/0x360
[  691.265275][T23186]  ? __lock_acquire+0x683/0x2cf0
[  691.265306][T23186]  ? __pfx____sys_sendmsg+0x10/0x10
[  691.265365][T23186]  ? __fget_files+0x2a/0x420
[  691.265393][T23186]  ? __fget_files+0x3a2/0x420
[  691.265429][T23186]  __x64_sys_sendmsg+0x1b1/0x290
[  691.265454][T23186]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  691.265496][T23186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.265521][T23186]  do_syscall_64+0x174/0x580
[  691.265544][T23186]  ? trace_irq_disable+0x3b/0x140
[  691.265573][T23186]  ? clear_bhb_loop+0x40/0x90
[  691.265600][T23186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.265622][T23186] RIP: 0033:0x7f29bed9de99
[  691.265643][T23186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.265661][T23186] RSP: 002b:00007f29bfd00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  691.265687][T23186] RAX: ffffffffffffffda RBX: 00007f29bf026090 RCX: 00007f29bed9de99
[  691.265703][T23186] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[  691.265717][T23186] RBP: 00007f29bfd00090 R08: 0000000000000000 R09: 0000000000000000
[  691.265730][T23186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  691.265742][T23186] R13: 00007f29bf026128 R14: 00007f29bf026090 R15: 00007fff796e9f88
[  691.265776][T23186]  </TASK>
[  691.281848][T23177] 8021q: adding VLAN 0 to HW filter on device bond3
[  692.015654][T23177] bond3: (slave geneve2): making interface the new active one
[  692.039562][T23177] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  695.785794][ T1172] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  695.805328][ T1172] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  695.909708][ T1172] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  695.919762][T23223] __nla_validate_parse: 162 callbacks suppressed
[  695.919784][T23223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4363'.
[  695.939324][ T1172] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  696.020534][T23225] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  696.126550][T23231] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  696.140991][T23231] bond7 (unregistering): Released all slaves
[  696.160786][T23242] FAULT_INJECTION: forcing a failure.
[  696.160786][T23242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  696.195386][T23245] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4369'.
[  696.205583][T23242] CPU: 1 UID: 0 PID: 23242 Comm: syz.4.4367 Not tainted syzkaller #0 PREEMPT(full) 
[  696.205615][T23242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  696.205629][T23242] Call Trace:
[  696.205637][T23242]  <TASK>
[  696.205647][T23242]  dump_stack_lvl+0xe8/0x150
[  696.205689][T23242]  should_fail_ex+0x40c/0x560
[  696.205722][T23242]  _copy_from_iter+0x1d3/0x1660
[  696.205760][T23242]  ? _copy_from_iter+0x21b/0x1660
[  696.205791][T23242]  ? __pfx__copy_from_iter+0x10/0x10
[  696.205827][T23242]  ? __pfx__copy_from_iter+0x10/0x10
[  696.205864][T23242]  copy_page_from_iter+0x219/0x2d0
[  696.205899][T23242]  skb_copy_datagram_from_iter+0x2f4/0x720
[  696.205940][T23242]  unix_stream_sendmsg+0x5ce/0xde0
[  696.205986][T23242]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  696.206017][T23242]  ? aa_sock_msg_perm+0xda/0x1b0
[  696.206046][T23242]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  696.206066][T23242]  sock_sendmsg_nosec+0x13a/0x180
[  696.206096][T23242]  ____sys_sendmsg+0x54e/0x850
[  696.206121][T23242]  ? __pfx_____sys_sendmsg+0x10/0x10
[  696.206152][T23242]  ? import_iovec+0x73/0xa0
[  696.206186][T23242]  ___sys_sendmsg+0x2a5/0x360
[  696.206206][T23242]  ? __lock_acquire+0x683/0x2cf0
[  696.206241][T23242]  ? __pfx____sys_sendmsg+0x10/0x10
[  696.206296][T23242]  ? __fget_files+0x2a/0x420
[  696.206321][T23242]  ? __fget_files+0x3a2/0x420
[  696.206360][T23242]  __x64_sys_sendmsg+0x1b1/0x290
[  696.206393][T23242]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  696.206433][T23242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.206456][T23242]  do_syscall_64+0x174/0x580
[  696.206479][T23242]  ? trace_irq_disable+0x3b/0x140
[  696.206507][T23242]  ? clear_bhb_loop+0x40/0x90
[  696.206534][T23242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.206557][T23242] RIP: 0033:0x7fe6b139de99
[  696.206579][T23242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  696.206598][T23242] RSP: 002b:00007fe6b2321028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  696.206622][T23242] RAX: ffffffffffffffda RBX: 00007fe6b1626090 RCX: 00007fe6b139de99
[  696.206638][T23242] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[  696.206653][T23242] RBP: 00007fe6b2321090 R08: 0000000000000000 R09: 0000000000000000
[  696.206666][T23242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  696.206679][T23242] R13: 00007fe6b1626128 R14: 00007fe6b1626090 R15: 00007ffdb69a4db8
[  696.206725][T23242]  </TASK>
[  696.670730][T23248] IPVS: Error connecting to the multicast addr
[  696.706447][T23240] syzkaller1: entered promiscuous mode
[  696.721180][T23240] syzkaller1: entered allmulticast mode
[  696.949138][T23265] netlink: 'syz.1.4376': attribute type 1 has an invalid length.
[  697.068875][T23265] 8021q: adding VLAN 0 to HW filter on device bond5
[  697.186466][T23265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  697.305417][T23274] netlink: 'syz.0.4378': attribute type 1 has an invalid length.
[  697.437323][T23274] bond4: (slave geneve3): making interface the new active one
[  697.446202][T23274] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  697.455836][ T1172] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  697.467231][ T1172] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  697.479207][T23274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4378'.
[  697.482312][T23280] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.4380'.
[  697.501514][T23274] 8021q: adding VLAN 0 to HW filter on device bond4
[  697.515015][ T1172] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  697.574727][ T1172] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  697.583995][ T5626] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  697.707822][T23284] FAULT_INJECTION: forcing a failure.
[  697.707822][T23284] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  697.722270][T23284] CPU: 0 UID: 0 PID: 23284 Comm: syz.0.4381 Not tainted syzkaller #0 PREEMPT(full) 
[  697.722300][T23284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  697.722314][T23284] Call Trace:
[  697.722323][T23284]  <TASK>
[  697.722332][T23284]  dump_stack_lvl+0xe8/0x150
[  697.722373][T23284]  should_fail_ex+0x40c/0x560
[  697.722405][T23284]  _copy_from_iter+0x1d3/0x1660
[  697.722462][T23284]  ? _copy_from_iter+0x21b/0x1660
[  697.722491][T23284]  ? __pfx__copy_from_iter+0x10/0x10
[  697.722526][T23284]  ? __pfx__copy_from_iter+0x10/0x10
[  697.722564][T23284]  copy_page_from_iter+0x219/0x2d0
[  697.722598][T23284]  skb_copy_datagram_from_iter+0x2f4/0x720
[  697.722639][T23284]  unix_stream_sendmsg+0x5ce/0xde0
[  697.722683][T23284]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  697.722713][T23284]  ? aa_sock_msg_perm+0xda/0x1b0
[  697.722743][T23284]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  697.722773][T23284]  sock_sendmsg_nosec+0x13a/0x180
[  697.722806][T23284]  ____sys_sendmsg+0x54e/0x850
[  697.722835][T23284]  ? __pfx_____sys_sendmsg+0x10/0x10
[  697.722869][T23284]  ? import_iovec+0x73/0xa0
[  697.722905][T23284]  ___sys_sendmsg+0x2a5/0x360
[  697.722927][T23284]  ? __lock_acquire+0x683/0x2cf0
[  697.722962][T23284]  ? __pfx____sys_sendmsg+0x10/0x10
[  697.723024][T23284]  ? __fget_files+0x2a/0x420
[  697.723053][T23284]  ? __fget_files+0x3a2/0x420
[  697.723092][T23284]  __x64_sys_sendmsg+0x1b1/0x290
[  697.723120][T23284]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  697.723162][T23284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.723185][T23284]  do_syscall_64+0x174/0x580
[  697.723208][T23284]  ? trace_irq_disable+0x3b/0x140
[  697.723235][T23284]  ? clear_bhb_loop+0x40/0x90
[  697.723261][T23284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.723284][T23284] RIP: 0033:0x7f185df9de99
[  697.723305][T23284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  697.723323][T23284] RSP: 002b:00007f185eefa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  697.723347][T23284] RAX: ffffffffffffffda RBX: 00007f185e225fa0 RCX: 00007f185df9de99
[  697.723363][T23284] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[  697.723377][T23284] RBP: 00007f185eefa090 R08: 0000000000000000 R09: 0000000000000000
[  697.723389][T23284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  697.723401][T23284] R13: 00007f185e226038 R14: 00007f185e225fa0 R15: 00007ffd351f4d18
[  697.723434][T23284]  </TASK>
[  698.023374][ T5626] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  698.208377][T23291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4383'.
[  698.702772][T23320] FAULT_INJECTION: forcing a failure.
[  698.702772][T23320] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  698.728288][T23322] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  698.738514][T23320] CPU: 1 UID: 0 PID: 23320 Comm: syz.3.4393 Not tainted syzkaller #0 PREEMPT(full) 
[  698.738545][T23320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  698.738558][T23320] Call Trace:
[  698.738567][T23320]  <TASK>
[  698.738576][T23320]  dump_stack_lvl+0xe8/0x150
[  698.738617][T23320]  should_fail_ex+0x40c/0x560
[  698.738646][T23320]  _copy_from_iter+0x1d3/0x1660
[  698.738683][T23320]  ? _copy_from_iter+0x21b/0x1660
[  698.738713][T23320]  ? __pfx__copy_from_iter+0x10/0x10
[  698.738749][T23320]  ? __pfx__copy_from_iter+0x10/0x10
[  698.738785][T23320]  copy_page_from_iter+0x219/0x2d0
[  698.738820][T23320]  skb_copy_datagram_from_iter+0x2f4/0x720
[  698.738860][T23320]  unix_stream_sendmsg+0x5ce/0xde0
[  698.738902][T23320]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  698.738931][T23320]  ? aa_sock_msg_perm+0xda/0x1b0
[  698.738957][T23320]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  698.738977][T23320]  sock_sendmsg_nosec+0x13a/0x180
[  698.739006][T23320]  ____sys_sendmsg+0x54e/0x850
[  698.739033][T23320]  ? __pfx_____sys_sendmsg+0x10/0x10
[  698.739064][T23320]  ? import_iovec+0x73/0xa0
[  698.739104][T23320]  ___sys_sendmsg+0x2a5/0x360
[  698.739134][T23320]  ? __lock_acquire+0x683/0x2cf0
[  698.739168][T23320]  ? __pfx____sys_sendmsg+0x10/0x10
[  698.739229][T23320]  ? __fget_files+0x2a/0x420
[  698.739257][T23320]  ? __fget_files+0x3a2/0x420
[  698.739296][T23320]  __x64_sys_sendmsg+0x1b1/0x290
[  698.739322][T23320]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  698.739362][T23320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.739387][T23320]  do_syscall_64+0x174/0x580
[  698.739409][T23320]  ? trace_irq_disable+0x3b/0x140
[  698.739438][T23320]  ? clear_bhb_loop+0x40/0x90
[  698.739465][T23320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.739488][T23320] RIP: 0033:0x7f3bff99de99
[  698.739509][T23320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  698.739528][T23320] RSP: 002b:00007f3c008a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  698.739552][T23320] RAX: ffffffffffffffda RBX: 00007f3bffc25fa0 RCX: 00007f3bff99de99
[  698.739568][T23320] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[  698.739582][T23320] RBP: 00007f3c008a7090 R08: 0000000000000000 R09: 0000000000000000
[  698.739596][T23320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  698.739608][T23320] R13: 00007f3bffc26038 R14: 00007f3bffc25fa0 R15: 00007ffed0336f68
[  698.739643][T23320]  </TASK>
[  699.016576][T23322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4395'.
[  699.089833][T23322] netlink: 'syz.4.4395': attribute type 1 has an invalid length.
[  699.091331][T23337] netlink: 'syz.3.4398': attribute type 4 has an invalid length.
[  699.179928][T23341] netlink: 'syz.3.4398': attribute type 4 has an invalid length.
[  699.268730][T23322] bond2: entered promiscuous mode
[  699.277677][T23322] 8021q: adding VLAN 0 to HW filter on device bond2
[  699.574491][T23349] dvmrp0: entered allmulticast mode
[  699.599389][T23349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4400'.
[  699.777128][T23369] syzkaller1: entered promiscuous mode
[  699.782940][T23369] syzkaller1: entered allmulticast mode
[  700.201894][T23389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4411'.
[  700.631309][T23411] netlink: 'syz.1.4419': attribute type 2 has an invalid length.
[  700.852835][T23425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4423'.
[  702.476712][T23489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4441'.
[  702.565895][T23491] veth5: left promiscuous mode
[  702.585434][T23491] bridge1: left promiscuous mode
[  702.596110][T23491] bridge1: left allmulticast mode
[  702.606487][T23493] netlink: 'syz.4.4440': attribute type 13 has an invalid length.
[  702.615564][T23491] vlan2: left allmulticast mode
[  702.641400][T23491] bond0: left allmulticast mode
[  702.654500][T23491] bond1: left promiscuous mode
[  702.667787][T23491] dummy0: left promiscuous mode
[  702.685167][T23491] bond1: left allmulticast mode
[  702.704815][T23491] dummy0: left allmulticast mode
[  702.722643][T23491] ipip0: left promiscuous mode
[  702.753840][T23491] macvtap1: left allmulticast mode
[  702.801983][T23491] ip6gre1: left promiscuous mode
[  702.829399][T23491] ip6gre1: left allmulticast mode
[  702.869459][T23491] veth7: left allmulticast mode
[  703.211945][T23495] macvlan2: entered allmulticast mode
[  703.242927][T23495] batadv_slave_1: entered allmulticast mode
[  703.262060][T23495] batman_adv: batadv0: Adding interface: macvlan2
[  703.269114][T23495] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  703.316557][T23495] batman_adv: batadv0: Interface activated: macvlan2
[  703.423861][T14843] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  703.452885][T14843] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  703.514300][T23506] 0ªî{X¹¦: entered promiscuous mode
[  703.531593][T14843] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  703.550414][T14843] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  703.574216][T14843] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  703.582762][T14843] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  703.587547][T23511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4446'.
[  703.655768][T14843] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  703.672240][T23526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4446'.
[  703.684837][T14843] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  703.695149][T23511] bond0: Device is already in use.
[  703.708432][T23526] bond0: Device is already in use.
[  706.381232][T23514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  706.548076][T23545] FAULT_INJECTION: forcing a failure.
[  706.548076][T23545] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  706.584361][T23545] CPU: 0 UID: 0 PID: 23545 Comm: syz.0.4455 Not tainted syzkaller #0 PREEMPT(full) 
[  706.584394][T23545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  706.584407][T23545] Call Trace:
[  706.584417][T23545]  <TASK>
[  706.584428][T23545]  dump_stack_lvl+0xe8/0x150
[  706.584473][T23545]  should_fail_ex+0x40c/0x560
[  706.584510][T23545]  _copy_from_iter+0x1d3/0x1660
[  706.584542][T23545]  ? kmem_cache_alloc_node_noprof+0x1d1/0x610
[  706.584574][T23545]  ? rcu_is_watching+0x15/0xb0
[  706.584623][T23545]  ? trace_kmem_cache_alloc+0x29/0xe0
[  706.584655][T23545]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  706.584684][T23545]  ? __pfx__copy_from_iter+0x10/0x10
[  706.584715][T23545]  ? __alloc_skb+0x276/0x7a0
[  706.584751][T23545]  ? __alloc_skb+0x276/0x7a0
[  706.584794][T23545]  ? netlink_sendmsg+0x650/0xb40
[  706.584822][T23545]  ? skb_put+0x112/0x210
[  706.584868][T23545]  netlink_sendmsg+0x6c0/0xb40
[  706.584906][T23545]  ? __pfx_netlink_sendmsg+0x10/0x10
[  706.584939][T23545]  ? aa_sock_msg_perm+0xf1/0x1b0
[  706.584973][T23545]  ? __pfx_netlink_sendmsg+0x10/0x10
[  706.584998][T23545]  sock_sendmsg_nosec+0x13a/0x180
[  706.585035][T23545]  ____sys_sendmsg+0x54e/0x850
[  706.585069][T23545]  ? __pfx_____sys_sendmsg+0x10/0x10
[  706.585107][T23545]  ? import_iovec+0x73/0xa0
[  706.585146][T23545]  ___sys_sendmsg+0x2a5/0x360
[  706.585170][T23545]  ? __lock_acquire+0x683/0x2cf0
[  706.585210][T23545]  ? __pfx____sys_sendmsg+0x10/0x10
[  706.585278][T23545]  ? __fget_files+0x2a/0x420
[  706.585310][T23545]  ? __fget_files+0x3a2/0x420
[  706.585356][T23545]  __x64_sys_sendmsg+0x1b1/0x290
[  706.585386][T23545]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  706.585434][T23545]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.585462][T23545]  do_syscall_64+0x174/0x580
[  706.585489][T23545]  ? trace_irq_disable+0x3b/0x140
[  706.585521][T23545]  ? clear_bhb_loop+0x40/0x90
[  706.585552][T23545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.585577][T23545] RIP: 0033:0x7f185df9de99
[  706.585609][T23545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  706.585629][T23545] RSP: 002b:00007f185eefa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  706.585655][T23545] RAX: ffffffffffffffda RBX: 00007f185e225fa0 RCX: 00007f185df9de99
[  706.585673][T23545] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  706.585689][T23545] RBP: 00007f185eefa090 R08: 0000000000000000 R09: 0000000000000000
[  706.585704][T23545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  706.585719][T23545] R13: 00007f185e226038 R14: 00007f185e225fa0 R15: 00007ffd351f4d18
[  706.585758][T23545]  </TASK>
[  706.901350][T23551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4458'.
[  707.031224][T23565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4459'.
[  707.118163][T23563] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  707.130503][T23571] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4464'.
[  707.142513][T23563] bond5 (unregistering): Released all slaves
[  707.159582][T23575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4459'.
[  707.636381][T23598] FAULT_INJECTION: forcing a failure.
[  707.636381][T23598] name failslab, interval 1, probability 0, space 0, times 0
[  707.659847][T23598] CPU: 1 UID: 0 PID: 23598 Comm: syz.2.4470 Not tainted syzkaller #0 PREEMPT(full) 
[  707.659878][T23598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  707.659892][T23598] Call Trace:
[  707.659900][T23598]  <TASK>
[  707.659909][T23598]  dump_stack_lvl+0xe8/0x150
[  707.659949][T23598]  should_fail_ex+0x40c/0x560
[  707.659981][T23598]  should_failslab+0xa8/0x100
[  707.660014][T23598]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  707.660044][T23598]  ? skb_clone+0x212/0x3a0
[  707.660068][T23598]  ? skb_clone+0x212/0x3a0
[  707.660098][T23598]  skb_clone+0x212/0x3a0
[  707.660124][T23598]  __netlink_deliver_tap+0x413/0x860
[  707.660158][T23598]  ? netlink_deliver_tap+0x2e/0x1b0
[  707.660184][T23598]  netlink_deliver_tap+0x19c/0x1b0
[  707.660209][T23598]  netlink_unicast+0x77f/0x940
[  707.660252][T23598]  netlink_sendmsg+0x813/0xb40
[  707.660284][T23598]  ? __pfx_netlink_sendmsg+0x10/0x10
[  707.660313][T23598]  ? aa_sock_msg_perm+0xf1/0x1b0
[  707.660341][T23598]  ? __pfx_netlink_sendmsg+0x10/0x10
[  707.660363][T23598]  sock_sendmsg_nosec+0x13a/0x180
[  707.660394][T23598]  ____sys_sendmsg+0x54e/0x850
[  707.660424][T23598]  ? __pfx_____sys_sendmsg+0x10/0x10
[  707.660457][T23598]  ? import_iovec+0x73/0xa0
[  707.660492][T23598]  ___sys_sendmsg+0x2a5/0x360
[  707.660512][T23598]  ? __lock_acquire+0x683/0x2cf0
[  707.660547][T23598]  ? __pfx____sys_sendmsg+0x10/0x10
[  707.660610][T23598]  ? __fget_files+0x2a/0x420
[  707.660638][T23598]  ? __fget_files+0x3a2/0x420
[  707.660679][T23598]  __x64_sys_sendmsg+0x1b1/0x290
[  707.660705][T23598]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  707.660745][T23598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.660770][T23598]  do_syscall_64+0x174/0x580
[  707.660806][T23598]  ? trace_irq_disable+0x3b/0x140
[  707.660835][T23598]  ? clear_bhb_loop+0x40/0x90
[  707.660863][T23598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.660886][T23598] RIP: 0033:0x7f29bed9de99
[  707.660907][T23598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.660925][T23598] RSP: 002b:00007f29bfd21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  707.660950][T23598] RAX: ffffffffffffffda RBX: 00007f29bf025fa0 RCX: 00007f29bed9de99
[  707.660966][T23598] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  707.660979][T23598] RBP: 00007f29bfd21090 R08: 0000000000000000 R09: 0000000000000000
[  707.660993][T23598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  707.661006][T23598] R13: 00007f29bf026038 R14: 00007f29bf025fa0 R15: 00007fff796e9f88
[  707.661043][T23598]  </TASK>
[  707.960153][T23600] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4471'.
[  708.095915][T23606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4474'.
[  708.305541][T23619] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4476'.
[  708.353937][T23612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4473'.
[  708.733477][T23636] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4480'.
[  708.807522][T23645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4482'.
[  708.859605][T23645] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  709.726959][T23669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4490'.
[  709.737294][T23669] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4490'.
[  709.930682][T23673] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4491'.
[  712.012154][T23672] gretap0: left promiscuous mode
[  712.111145][T23672] batadv0: left promiscuous mode
[  712.143446][T23672] veth0_to_bond: left promiscuous mode
[  712.178471][T23682] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4494'.
[  712.210289][T23672] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  712.237622][T23672] veth1_vlan: left promiscuous mode
[  712.264358][T23672] veth0_vlan: left promiscuous mode
[  712.286907][T23672] veth0_vlan: entered promiscuous mode
[  712.307076][T23672] veth1_vlan: entered promiscuous mode
[  712.326077][T23672] tipc: Resetting bearer <eth:macvlan1>
[  712.345532][T23672] veth1_macvtap: left promiscuous mode
[  712.357520][T23672] veth0_macvtap: left promiscuous mode
[  712.370176][T23672] veth0_macvtap: entered promiscuous mode
[  712.380229][T23672] veth1_macvtap: entered promiscuous mode
[  712.400405][T23672] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  712.412051][T23672] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  712.425352][T23672] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  712.436551][T23672] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  712.452553][T23672] geneve2: left promiscuous mode
[  712.458532][T23672] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  712.531462][T10195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  712.549000][T10195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  712.572494][T10195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  712.597151][T10195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  713.018941][T23715] __nla_validate_parse: 3 callbacks suppressed
[  713.018966][T23715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4505'.
[  713.097000][T23715] 8021q: adding VLAN 0 to HW filter on device bond5
[  713.121182][T23717] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  713.244835][T23719] bond5: (slave batadv1): Opening slave failed
[  713.818548][T23735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4508'.
[  713.968498][T23737] 8021q: adding VLAN 0 to HW filter on device bond0
[  713.998794][T23737] 8021q: adding VLAN 0 to HW filter on device team0
[  714.042278][T23742] FAULT_INJECTION: forcing a failure.
[  714.042278][T23742] name failslab, interval 1, probability 0, space 0, times 0
[  714.069257][T23737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  714.110346][T23742] CPU: 1 UID: 0 PID: 23742 Comm: syz.4.4510 Not tainted syzkaller #0 PREEMPT(full) 
[  714.110379][T23742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  714.110393][T23742] Call Trace:
[  714.110403][T23742]  <TASK>
[  714.110413][T23742]  dump_stack_lvl+0xe8/0x150
[  714.110454][T23742]  should_fail_ex+0x40c/0x560
[  714.110484][T23742]  ? alloc_slab_obj_exts+0xba/0x230
[  714.110511][T23742]  should_failslab+0xa8/0x100
[  714.110545][T23742]  __kmalloc_flags_noprof+0x129/0x7f0
[  714.110578][T23742]  ? alloc_slab_obj_exts+0xba/0x230
[  714.110610][T23742]  alloc_slab_obj_exts+0xba/0x230
[  714.110638][T23742]  __memcg_slab_post_alloc_hook+0x5d3/0xf10
[  714.110693][T23742]  ? kmem_cache_alloc_node_noprof+0x1d1/0x610
[  714.110722][T23742]  kmem_cache_alloc_node_noprof+0x400/0x610
[  714.110748][T23742]  ? local_lock_release+0x9c/0x160
[  714.110779][T23742]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  714.110808][T23742]  ? __alloc_skb+0x1d7/0x7a0
[  714.110838][T23742]  ? __alloc_skb+0x1d7/0x7a0
[  714.110878][T23742]  __alloc_skb+0x1d7/0x7a0
[  714.110915][T23742]  alloc_skb_with_frags+0xc6/0x760
[  714.110951][T23742]  sock_alloc_send_pskb+0x878/0x990
[  714.110984][T23742]  ? sock_def_readable+0xae/0x550
[  714.111023][T23742]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  714.111053][T23742]  ? sk_psock_verdict_data_ready+0xad/0x690
[  714.111168][T23742]  ? __pfx_sock_def_readable+0x10/0x10
[  714.111195][T23742]  ? sk_psock_verdict_data_ready+0xad/0x690
[  714.111220][T23742]  ? sk_psock_verdict_data_ready+0x4e7/0x690
[  714.111247][T23742]  unix_stream_sendmsg+0x4ba/0xde0
[  714.111292][T23742]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  714.111327][T23742]  ? aa_sock_msg_perm+0xda/0x1b0
[  714.111356][T23742]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  714.111377][T23742]  sock_sendmsg_nosec+0x13a/0x180
[  714.111409][T23742]  ____sys_sendmsg+0x54e/0x850
[  714.111439][T23742]  ? __pfx_____sys_sendmsg+0x10/0x10
[  714.111471][T23742]  ? import_iovec+0x73/0xa0
[  714.111509][T23742]  ___sys_sendmsg+0x2a5/0x360
[  714.111530][T23742]  ? __lock_acquire+0x683/0x2cf0
[  714.111564][T23742]  ? __pfx____sys_sendmsg+0x10/0x10
[  714.111624][T23742]  ? __fget_files+0x2a/0x420
[  714.111661][T23742]  ? __fget_files+0x3a2/0x420
[  714.111701][T23742]  __x64_sys_sendmsg+0x1b1/0x290
[  714.111727][T23742]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  714.111767][T23742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.111791][T23742]  do_syscall_64+0x174/0x580
[  714.111816][T23742]  ? trace_irq_disable+0x3b/0x140
[  714.111844][T23742]  ? clear_bhb_loop+0x40/0x90
[  714.111871][T23742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.111893][T23742] RIP: 0033:0x7fe6b139de99
[  714.111915][T23742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.111932][T23742] RSP: 002b:00007fe6b2321028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  714.111953][T23742] RAX: ffffffffffffffda RBX: 00007fe6b1626090 RCX: 00007fe6b139de99
[  714.111968][T23742] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[  714.111980][T23742] RBP: 00007fe6b2321090 R08: 0000000000000000 R09: 0000000000000000
[  714.111993][T23742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  714.112006][T23742] R13: 00007fe6b1626128 R14: 00007fe6b1626090 R15: 00007ffdb69a4db8
[  714.112042][T23742]  </TASK>
[  714.523028][T23748] netlink: 'syz.2.4512': attribute type 27 has an invalid length.
[  714.618180][T23745] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  714.641193][T23737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  714.662634][T23737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  714.680463][T23737] veth1_vlan: left promiscuous mode
[  714.689571][T23737] veth0_vlan: left promiscuous mode
[  714.696994][T23737] veth0_vlan: entered promiscuous mode
[  714.705095][T23737] veth1_vlan: entered promiscuous mode
[  714.716766][T23737] veth1_macvtap: left promiscuous mode
[  714.723853][T23737] veth0_macvtap: left promiscuous mode
[  714.730619][T23737] veth0_macvtap: entered promiscuous mode
[  714.737881][T23737] veth1_macvtap: entered promiscuous mode
[  714.750738][T23737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  714.759782][T23737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  714.769449][T23737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  714.779067][T23737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  714.793614][T23737] 8021q: adding VLAN 0 to HW filter on device bond1
[  714.873712][T23737] 8021q: adding VLAN 0 to HW filter on device bond2
[  714.923710][T23737] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  714.975965][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state
[  714.983277][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  715.027323][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state
[  715.034638][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state
[  715.129308][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  715.149411][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  715.171360][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  715.187546][T23777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4517'.
[  715.242184][T23774] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4516'.
[  715.281838][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  715.365110][T23783] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4519'.
[  715.736806][T23795] netlink: 'syz.3.4523': attribute type 4 has an invalid length.
[  715.756298][T23795] netlink: 'syz.3.4523': attribute type 2 has an invalid length.
[  716.131731][T23809] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  716.148264][T23809] bond5 (unregistering): Released all slaves
[  717.026065][T23833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  717.143924][T23841] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[  717.177576][T23841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4534'.
[  717.265033][T23846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4533'.
[  717.310721][T23841] 8021q: adding VLAN 0 to HW filter on device bond0
[  717.334330][T23841] 8021q: adding VLAN 0 to HW filter on device team0
[  717.383407][T23841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  717.530445][T23841] batadv_slave_1: entered promiscuous mode
[  717.578540][T23841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  717.596628][T23841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  717.616672][T23841] veth1_vlan: left promiscuous mode
[  717.625983][T23841] veth0_vlan: left promiscuous mode
[  717.633879][T23841] veth0_vlan: entered promiscuous mode
[  717.646829][T23841] veth1_vlan: entered promiscuous mode
[  717.659533][T23841] veth1_macvtap: left promiscuous mode
[  717.669031][T23841] veth0_macvtap: left promiscuous mode
[  717.679762][T23841] veth0_macvtap: entered promiscuous mode
[  717.691290][T23841] veth1_macvtap: entered promiscuous mode
[  717.747070][T23841] 8021q: adding VLAN 0 to HW filter on device bond1
[  717.758380][T23841] 8021q: adding VLAN 0 to HW filter on device eth0
[  717.767859][T23841] 8021q: adding VLAN 0 to HW filter on device eth1
[  717.778372][T23841] 8021q: adding VLAN 0 to HW filter on device eth2
[  717.789072][T23841] 8021q: adding VLAN 0 to HW filter on device eth3
[  717.803804][T23841] 8021q: adding VLAN 0 to HW filter on device bond2
[  717.812048][T23841] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  717.822880][T23841] 8021q: adding VLAN 0 to HW filter on device batadv1
[  717.853767][T23841] 8021q: adding VLAN 0 to HW filter on device bond3
[  717.863674][T23841] 8021q: adding VLAN 0 to HW filter on device bond4
[  717.875442][T23845] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4534'.
[  717.896150][ T5815] bridge4: entered promiscuous mode
[  717.913415][T23859] netlink: 'syz.4.4538': attribute type 1 has an invalid length.
[  717.968173][T23860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4538'.
[  718.068547][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  718.078840][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  718.129352][T23867] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4539'.
[  718.183519][T23859] 8021q: adding VLAN 0 to HW filter on device bond3
[  718.245838][   T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  718.260590][ T5626] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  718.269099][   T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  718.281454][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  718.298058][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  718.320491][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  718.338905][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  718.372454][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  718.383905][T23873] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4543'.
[  718.402770][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  718.514527][ T5815] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  718.595101][T23881] FAULT_INJECTION: forcing a failure.
[  718.595101][T23881] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  718.636092][T23881] CPU: 0 UID: 0 PID: 23881 Comm: syz.4.4545 Not tainted syzkaller #0 PREEMPT(full) 
[  718.636129][T23881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  718.636144][T23881] Call Trace:
[  718.636154][T23881]  <TASK>
[  718.636165][T23881]  dump_stack_lvl+0xe8/0x150
[  718.636212][T23881]  should_fail_ex+0x40c/0x560
[  718.636249][T23881]  _copy_from_iter+0x1d3/0x1660
[  718.636282][T23881]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  718.636323][T23881]  ? __pfx_policy_nodemask+0x10/0x10
[  718.636365][T23881]  ? unwind_next_frame+0x8f/0x2550
[  718.636393][T23881]  ? __pfx__copy_from_iter+0x10/0x10
[  718.636429][T23881]  ? alloc_pages_mpol+0x24a/0x380
[  718.636478][T23881]  copy_page_from_iter+0x219/0x2d0
[  718.636518][T23881]  tun_get_user+0x1bf1/0x4370
[  718.636704][T23881]  ? tun_get_user+0x6e7/0x4370
[  718.636758][T23881]  ? aa_file_perm+0x4ed/0x15f0
[  718.636785][T23881]  ? __pfx_tun_get_user+0x10/0x10
[  718.636823][T23881]  ? __lock_acquire+0x683/0x2cf0
[  718.636875][T23881]  ? ref_tracker_alloc+0x341/0x4b0
[  718.636904][T23881]  ? get_pid_task+0x20/0x1f0
[  718.636941][T23881]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  718.636974][T23881]  ? tun_get+0x1c/0x2f0
[  718.637008][T23881]  ? tun_get+0x1c/0x2f0
[  718.637048][T23881]  ? tun_get+0x1c/0x2f0
[  718.637080][T23881]  ? tun_get+0x1c/0x2f0
[  718.637120][T23881]  tun_chr_write_iter+0x113/0x200
[  718.637158][T23881]  vfs_write+0x612/0xba0
[  718.637208][T23881]  ? __pfx_vfs_write+0x10/0x10
[  718.637258][T23881]  ? __fget_files+0x2a/0x420
[  718.637302][T23881]  ksys_write+0x150/0x270
[  718.637343][T23881]  ? __pfx_ksys_write+0x10/0x10
[  718.637392][T23881]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.637421][T23881]  do_syscall_64+0x174/0x580
[  718.637449][T23881]  ? trace_irq_disable+0x3b/0x140
[  718.637482][T23881]  ? clear_bhb_loop+0x40/0x90
[  718.637513][T23881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.637538][T23881] RIP: 0033:0x7fe6b135e6ce
[  718.637564][T23881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  718.637585][T23881] RSP: 002b:00007fe6b2341fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  718.637612][T23881] RAX: ffffffffffffffda RBX: 00007fe6b23426c0 RCX: 00007fe6b135e6ce
[  718.637631][T23881] RDX: 0000000000000036 RSI: 0000200000000200 RDI: 00000000000000c8
[  718.637647][T23881] RBP: 00007fe6b2342090 R08: 0000000000000000 R09: 0000000000000000
[  718.637664][T23881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  718.637687][T23881] R13: 00007fe6b1626038 R14: 00007fe6b1625fa0 R15: 00007ffdb69a4db8
[  718.637727][T23881]  </TASK>
[  719.033893][T23877] 
[  719.036574][T23877] ======================================================
[  719.043724][T23877] WARNING: possible circular locking dependency detected
[  719.050866][T23877] syzkaller #0 Not tainted
[  719.055495][T23877] ------------------------------------------------------
[  719.062675][T23877] syz.2.4542/23877 is trying to acquire lock:
[  719.068889][T23877] ffff8880252c46b8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  719.078632][T23877] 
[  719.078632][T23877] but task is already holding lock:
[  719.086038][T23877] ffff8880252c4190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x194/0x480
[  719.096291][T23877] 
[  719.096291][T23877] which lock already depends on the new lock.
[  719.096291][T23877] 
[  719.106721][T23877] 
[  719.106721][T23877] the existing dependency chain (in reverse order) is:
[  719.115759][T23877] 
[  719.115759][T23877] -> #6 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  719.124523][T23877]        blk_alloc_queue+0x544/0x690
[  719.129910][T23877]        __blk_mq_alloc_disk+0x194/0x390
[  719.135659][T23877]        nbd_dev_add+0x494/0xb60
[  719.140895][T23877]        nbd_init+0x15f/0x1e0
[  719.145797][T23877]        do_one_initcall+0x250/0x870
[  719.151132][T23877]        do_initcall_level+0x10a/0x1a0
[  719.156687][T23877]        do_initcalls+0x59/0xa0
[  719.161567][T23877]        kernel_init_freeable+0x29d/0x3e0
[  719.167314][T23877]        kernel_init+0x1d/0x1d0
[  719.172192][T23877]        ret_from_fork+0x514/0xb70
[  719.177330][T23877]        ret_from_fork_asm+0x1a/0x30
[  719.182637][T23877] 
[  719.182637][T23877] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  719.189874][T23877]        fs_reclaim_acquire+0x71/0x100
[  719.195372][T23877]        __kmalloc_cache_node_noprof+0x66/0x630
[  719.201642][T23877]        create_worker+0x112/0x7b0
[  719.206784][T23877]        workqueue_prepare_cpu+0xe4/0x170
[  719.212539][T23877]        cpuhp_invoke_callback+0x434/0x810
[  719.218369][T23877]        _cpu_up+0x2ce/0x5b0
[  719.222979][T23877]        cpu_up+0x1d2/0x220
[  719.227596][T23877]        cpuhp_bringup_mask+0xb2/0x1a0
[  719.233194][T23877]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  719.239595][T23877]        bringup_nonboot_cpus+0x17/0x30
[  719.245288][T23877]        smp_init+0x32/0x110
[  719.250199][T23877]        kernel_init_freeable+0x27f/0x3e0
[  719.256045][T23877]        kernel_init+0x1d/0x1d0
[  719.261109][T23877]        ret_from_fork+0x514/0xb70
[  719.266353][T23877]        ret_from_fork_asm+0x1a/0x30
[  719.271666][T23877] 
[  719.271666][T23877] -> #4 (cpu_hotplug_lock){++++}-{0:0}:
[  719.279431][T23877]        cpus_read_lock+0x42/0x160
[  719.284760][T23877]        static_key_slow_inc+0x12/0x30
[  719.290292][T23877]        nbd_genl_reconfigure+0x1301/0x1e80
[  719.296244][T23877]        genl_family_rcv_msg_doit+0x233/0x340
[  719.302480][T23877]        genl_rcv_msg+0x614/0x7a0
[  719.307565][T23877]        netlink_rcv_skb+0x226/0x4a0
[  719.312988][T23877]        genl_rcv+0x28/0x40
[  719.317618][T23877]        netlink_unicast+0x7bb/0x940
[  719.322939][T23877]        netlink_sendmsg+0x813/0xb40
[  719.328254][T23877]        sock_sendmsg_nosec+0x13a/0x180
[  719.333834][T23877]        ____sys_sendmsg+0x54e/0x850
[  719.339207][T23877]        ___sys_sendmsg+0x2a5/0x360
[  719.344446][T23877]        __x64_sys_sendmsg+0x1b1/0x290
[  719.350021][T23877]        do_syscall_64+0x174/0x580
[  719.355164][T23877]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.361686][T23877] 
[  719.361686][T23877] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  719.369384][T23877]        __mutex_lock+0x19d/0x1550
[  719.374527][T23877]        nbd_queue_rq+0x373/0x1150
[  719.379687][T23877]        blk_mq_dispatch_rq_list+0x499/0x1990
[  719.385790][T23877]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  719.392844][T23877]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  719.399379][T23877]        blk_mq_run_work_fn+0x16c/0x300
[  719.404947][T23877]        process_scheduled_works+0xa8e/0x14e0
[  719.411036][T23877]        worker_thread+0xa47/0xfb0
[  719.416163][T23877]        kthread+0x388/0x470
[  719.420778][T23877]        ret_from_fork+0x514/0xb70
[  719.426009][T23877]        ret_from_fork_asm+0x1a/0x30
[  719.431335][T23877] 
[  719.431335][T23877] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  719.438669][T23877]        __mutex_lock+0x19d/0x1550
[  719.443809][T23877]        nbd_queue_rq+0xc1/0x1150
[  719.448962][T23877]        blk_mq_dispatch_rq_list+0x499/0x1990
[  719.455151][T23877]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  719.462054][T23877]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  719.468672][T23877]        blk_mq_run_work_fn+0x16c/0x300
[  719.474239][T23877]        process_scheduled_works+0xa8e/0x14e0
[  719.480344][T23877]        worker_thread+0xa47/0xfb0
[  719.485584][T23877]        kthread+0x388/0x470
[  719.490211][T23877]        ret_from_fork+0x514/0xb70
[  719.495784][T23877]        ret_from_fork_asm+0x1a/0x30
[  719.501090][T23877] 
[  719.501090][T23877] -> #1 (set->srcu){.+.+}-{0:0}:
[  719.508242][T23877]        __synchronize_srcu+0xc9/0x2f0
[  719.513733][T23877]        elevator_switch+0x1e8/0x7b0
[  719.519041][T23877]        elevator_change+0x2fa/0x480
[  719.524357][T23877]        elevator_set_default+0x375/0x440
[  719.530108][T23877]        blk_register_queue+0x3f3/0x4e0
[  719.535742][T23877]        __add_disk+0x6cb/0xe30
[  719.540612][T23877]        add_disk_fwnode+0x100/0x3a0
[  719.545932][T23877]        nbd_dev_add+0x733/0xb60
[  719.550901][T23877]        nbd_init+0x15f/0x1e0
[  719.555613][T23877]        do_one_initcall+0x250/0x870
[  719.560926][T23877]        do_initcall_level+0x10a/0x1a0
[  719.566493][T23877]        do_initcalls+0x59/0xa0
[  719.571376][T23877]        kernel_init_freeable+0x29d/0x3e0
[  719.577127][T23877]        kernel_init+0x1d/0x1d0
[  719.582012][T23877]        ret_from_fork+0x514/0xb70
[  719.587412][T23877]        ret_from_fork_asm+0x1a/0x30
[  719.592890][T23877] 
[  719.592890][T23877] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  719.600750][T23877]        __lock_acquire+0x1520/0x2cf0
[  719.606149][T23877]        lock_acquire+0x106/0x350
[  719.611205][T23877]        __mutex_lock+0x19d/0x1550
[  719.616346][T23877]        elevator_change+0x1af/0x480
[  719.621659][T23877]        elevator_set_none+0xb5/0x140
[  719.627062][T23877]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  719.633426][T23877]        nbd_start_device+0x189/0xb30
[  719.638839][T23877]        nbd_genl_connect+0x1597/0x1c10
[  719.644412][T23877]        genl_family_rcv_msg_doit+0x233/0x340
[  719.650649][T23877]        genl_rcv_msg+0x614/0x7a0
[  719.655823][T23877]        netlink_rcv_skb+0x226/0x4a0
[  719.661126][T23877]        genl_rcv+0x28/0x40
[  719.665653][T23877]        netlink_unicast+0x7bb/0x940
[  719.670970][T23877]        netlink_sendmsg+0x813/0xb40
[  719.676273][T23877]        sock_sendmsg_nosec+0x13a/0x180
[  719.681845][T23877]        ____sys_sendmsg+0x54e/0x850
[  719.687323][T23877]        ___sys_sendmsg+0x2a5/0x360
[  719.692554][T23877]        __x64_sys_sendmsg+0x1b1/0x290
[  719.698032][T23877]        do_syscall_64+0x174/0x580
[  719.703165][T23877]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.709609][T23877] 
[  719.709609][T23877] other info that might help us debug this:
[  719.709609][T23877] 
[  719.719937][T23877] Chain exists of:
[  719.719937][T23877]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#49
[  719.719937][T23877] 
[  719.733710][T23877]  Possible unsafe locking scenario:
[  719.733710][T23877] 
[  719.741323][T23877]        CPU0                    CPU1
[  719.746749][T23877]        ----                    ----
[  719.752213][T23877]   lock(&q->q_usage_counter(io)#49);
[  719.757708][T23877]                                lock(fs_reclaim);
[  719.764236][T23877]                                lock(&q->q_usage_counter(io)#49);
[  719.772158][T23877]   lock(&q->elevator_lock);
[  719.776791][T23877] 
[  719.776791][T23877]  *** DEADLOCK ***
[  719.776791][T23877] 
[  719.785004][T23877] 6 locks held by syz.2.4542/23877:
[  719.790304][T23877]  #0: ffffffff9009d8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  719.798689][T23877]  #1: ffffffff9009d6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  719.807774][T23877]  #2: ffff88802668a1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0
[  719.819299][T23877]  #3: ffff88802668a0d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0
[  719.830305][T23877]  #4: ffff8880252c4190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x194/0x480
[  719.840981][T23877]  #5: ffff8880252c41c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[  719.851901][T23877] 
[  719.851901][T23877] stack backtrace:
[  719.858008][T23877] CPU: 1 UID: 0 PID: 23877 Comm: syz.2.4542 Not tainted syzkaller #0 PREEMPT(full) 
[  719.858035][T23877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  719.858048][T23877] Call Trace:
[  719.858056][T23877]  <TASK>
[  719.858066][T23877]  dump_stack_lvl+0xe8/0x150
[  719.858099][T23877]  print_circular_bug+0x2e1/0x300
[  719.858121][T23877]  check_noncircular+0x12e/0x150
[  719.858153][T23877]  __lock_acquire+0x1520/0x2cf0
[  719.858188][T23877]  ? elevator_change+0x1af/0x480
[  719.858212][T23877]  lock_acquire+0x106/0x350
[  719.858235][T23877]  ? elevator_change+0x1af/0x480
[  719.858265][T23877]  __mutex_lock+0x19d/0x1550
[  719.858285][T23877]  ? elevator_change+0x1af/0x480
[  719.858309][T23877]  ? rcu_is_watching+0x15/0xb0
[  719.858341][T23877]  ? elevator_change+0x1af/0x480
[  719.858364][T23877]  ? __pfx___mutex_lock+0x10/0x10
[  719.858383][T23877]  ? enable_work+0x17f/0x230
[  719.858408][T23877]  ? lockdep_hardirqs_on+0x7a/0x110
[  719.858430][T23877]  ? __cancel_work_sync+0xf7/0x110
[  719.858454][T23877]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  719.858484][T23877]  elevator_change+0x1af/0x480
[  719.858510][T23877]  elevator_set_none+0xb5/0x140
[  719.858540][T23877]  ? __pfx_elevator_set_none+0x10/0x10
[  719.858566][T23877]  ? xa_load+0x1db/0x210
[  719.858657][T23877]  blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  719.858688][T23877]  ? kernfs_add_one+0x480/0x5e0
[  719.858735][T23877]  ? nbd_start_device+0x17d/0xb30
[  719.858767][T23877]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  719.858801][T23877]  ? sysfs_add_file_mode_ns+0x258/0x300
[  719.858825][T23877]  nbd_start_device+0x189/0xb30
[  719.858857][T23877]  ? device_create_file+0xf4/0x1b0
[  719.858941][T23877]  nbd_genl_connect+0x1597/0x1c10
[  719.858973][T23877]  ? __pfx_nbd_genl_connect+0x10/0x10
[  719.859000][T23877]  ? rcu_is_watching+0x15/0xb0
[  719.859027][T23877]  ? trace_kmalloc+0x2a/0xf0
[  719.859053][T23877]  ? __kmalloc_noprof+0x396/0x720
[  719.859077][T23877]  ? __nla_parse+0x40/0x60
[  719.859104][T23877]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  719.859132][T23877]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  719.859161][T23877]  genl_family_rcv_msg_doit+0x233/0x340
[  719.859191][T23877]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  719.859220][T23877]  ? __lock_acquire+0x683/0x2cf0
[  719.859248][T23877]  genl_rcv_msg+0x614/0x7a0
[  719.859275][T23877]  ? __pfx_genl_rcv_msg+0x10/0x10
[  719.859299][T23877]  ? __pfx_nbd_genl_connect+0x10/0x10
[  719.859332][T23877]  netlink_rcv_skb+0x226/0x4a0
[  719.859351][T23877]  ? __pfx_genl_rcv_msg+0x10/0x10
[  719.859376][T23877]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  719.859400][T23877]  ? down_read+0x2be/0x330
[  719.859422][T23877]  genl_rcv+0x28/0x40
[  719.859444][T23877]  netlink_unicast+0x7bb/0x940
[  719.859477][T23877]  netlink_sendmsg+0x813/0xb40
[  719.859501][T23877]  ? __pfx_netlink_sendmsg+0x10/0x10
[  719.859522][T23877]  ? aa_sock_msg_perm+0xf1/0x1b0
[  719.859549][T23877]  ? __pfx_netlink_sendmsg+0x10/0x10
[  719.859568][T23877]  sock_sendmsg_nosec+0x13a/0x180
[  719.859595][T23877]  ____sys_sendmsg+0x54e/0x850
[  719.859615][T23877]  ? __pfx_____sys_sendmsg+0x10/0x10
[  719.859638][T23877]  ? import_iovec+0x73/0xa0
[  719.859666][T23877]  ___sys_sendmsg+0x2a5/0x360
[  719.859684][T23877]  ? __lock_acquire+0x683/0x2cf0
[  719.859710][T23877]  ? __pfx____sys_sendmsg+0x10/0x10
[  719.859730][T23877]  ? futex_wait+0x2a2/0x390
[  719.859771][T23877]  ? __fget_files+0x2a/0x420
[  719.859794][T23877]  ? __fget_files+0x3a2/0x420
[  719.859822][T23877]  __x64_sys_sendmsg+0x1b1/0x290
[  719.859841][T23877]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  719.859868][T23877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.859888][T23877]  do_syscall_64+0x174/0x580
[  719.859907][T23877]  ? trace_irq_disable+0x3b/0x140
[  719.859931][T23877]  ? clear_bhb_loop+0x40/0x90
[  719.859952][T23877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.859971][T23877] RIP: 0033:0x7f29bed9de99
[  719.859990][T23877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.860007][T23877] RSP: 002b:00007f29bfd00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  719.860027][T23877] RAX: ffffffffffffffda RBX: 00007f29bf026090 RCX: 00007f29bed9de99
[  719.860043][T23877] RDX: 000000000400400c RSI: 0000200000001ac0 RDI: 000000000000000c
[  719.860055][T23877] RBP: 00007f29bee33eaf R08: 0000000000000000 R09: 0000000000000000
[  719.860067][T23877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  719.860079][T23877] R13: 00007f29bf026128 R14: 00007f29bf026090 R15: 00007fff796e9f88
[  719.860101][T23877]  </TASK>
[  719.868784][T14843] wlan1: Trigger new scan to find an IBSS to join
[  719.998593][T23890] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4547'.
[  720.019594][ T5626] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  720.392612][ T5625] block nbd0: Receive control failed (result -32)
[  720.404658][ T5631] block nbd0: Receive control failed (result -32)
[  721.923394][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  723.283369][T10195] wlan1: Trigger new scan to find an IBSS to join
[  724.173631][T14843] wlan1: Creating new IBSS network, BSSID be:a0:97:8e:20:1b