last executing test programs:

3.452670224s ago: executing program 1 (id=3074):
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xfffffffffffffedd, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0)={0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1]}, 0x20)
syz_extract_tcp_res(&(0x7f0000000000), 0x5, 0x1ff)

3.341815441s ago: executing program 0 (id=3077):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf}}]}}]}, 0x3c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000"], 0x0, 0x6e, 0x0, 0x1}, 0x28)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100", @ANYRES32=r8, @ANYBLOB="000000000000000010000c800c00"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r10}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r10}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r10, &(0x7f00000001c0)="9ad632f5d53e48b6657ac4023f35075a16eb3cd6a7c702f40ba6afaa0a2688b116772543345b3481c7567ab81d592796b779f8b6381dba2ccb0b5df6d2ea94662d5ee6acae65c6707085e30d018346441108cecc52195b6111285d68b63567f3fab09b4333c21b74d82150f85d38e6ed6c614a1aeab5e8a32da64fcd89f4728285a5e06a481c880d6a4524cc62e9e1c7724a702c34ac960dda193ba98e1d79ef14ade033cd1e7f86d9bca8eb9894a2d8ae8959a5add1153afb072f1ffe1414c777a1436e1ae82f11aee820c8bdceebbe00cf554a4bb70b8df8d13967ad5a41c6d1fca22ce87de3cd1a9ba642f437cbe376177bb25e1a2e95d372fcf1ed", &(0x7f0000000040)=""/30}, 0x20)
r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r9)
sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0})
ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffc01, 0x0, 0x9, 0x100, 0x5c3})
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r14, 0x0, 0x41400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r14, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r11, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

3.045286321s ago: executing program 2 (id=3078):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
unshare(0x22020400)
r1 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x38}, 0x10001)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x0, 0x0)
ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000140)={0x1})
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0x9, 0x4)
getsockopt$netlink(r2, 0x10e, 0x4, 0x0, &(0x7f0000000000)=0xfffffffffffffdd4)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbdd4684bbaaaaaaaaaa1908004500001c000000000001907864010300ac14142c0d009078fffe0000"], 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r5, 0x0, 0x1a000, 0x0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast]}, 0x10)

2.930366104s ago: executing program 2 (id=3080):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000007000000080000000500000080000000", @ANYRES32, @ANYBLOB="004800e0fcbb939d79", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
unshare(0x26020480)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000500)={'batadv0\x00', <r5=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x3, 0x0, r3, 0x6, '\x00', r5, 0xffffffffffffffff, 0x4, 0x2}, 0x50) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x40818, 0x10043}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004020)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) (async)
r8 = socket(0x10, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r9, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) (async)
syz_emit_ethernet(0x2b, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1d, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty, '\x00'}}}}}, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async, rerun: 64)
write(r8, &(0x7f0000000340)="240000001a005f0400f9f4070009040180202000000000fbffffff000800020000000000", 0x24) (async, rerun: 64)
r10 = socket(0x1e, 0x805, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x10f, 0x20, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.73317511s ago: executing program 2 (id=3081):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000080)=0x80)
shutdown(r0, 0x1)
sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x0, 0x4}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="738aa60a410cf3831047e92431d630b955aa015b1d150a203ae05952bad7ecf649764316cc006f431c5a834af347b31af99a5c8eb282b776b6d447407fe969aa205ab6f166390c2b4d02e090a0f1c3bf050bb358735fa27afaaf9b0e822702", 0x5f}], 0x1, &(0x7f0000000200)=[{0x98, 0x109, 0x8, "0e2d981822456734abeaf4c0e00a6ff2b946ddaa62f303eaf9a0f5cc537e66ef9f469175509500f166d538cd48e17ab8ef76add9a59aad12b02494558f00977bd825a8c29cfb67636682be3eb3fd9b8baf21c28c869329df78a282bfb9fe7dab0c982c3e5cb45a40e4e44484a3cea61716b2fef000605934804fde03f97b7e7626"}, {0xa8, 0x5, 0x907, "beab9f7700b80490ce4e12788af2eead57ece41a36d62b4ff4a3b47249b1ea11442f68dcf616d1d388cf40c893cbba6c509469873c1bd1efbd2f322a74b5f54e5bf410951ff6cbeb8ba9f39308b8c68f2cac30771ec35ecf0d4b718eabb829780fcd0f6ec03449ebcb6b4a4cd58bebb239b65b786df5b54a44761a9e50008e16f2fa7763a9437b03560a20d5cca9e891fe8b9634"}, {0x100, 0x1, 0x0, "6ca1f8f92b396545778a0f1fecb482ae7ba6a7ecc669bef07ad2f52199fa11d4b290ba37afc44f737dd84b37747187c77e9ff6f4add3a551a9451ebedb58fdfa8496f3bf427ec9ddf1ba6d0fe077b053cb13553f846f9b107946befe75a645df9b8ae9405a04f4b3063c375febdf7313f4172983721dacfbfcfac117b25b59bc30af6f8660726d53232580f867edd4ed6ad8f0f1667084289af3fd1adca6e438b02c144ff53f5c2a60701b1aca12a3893355c1e59b1bd72be94efbd29217c4dfe880e5d6ae8c9434cd7f0aeda5c34982a420c18511253bc0a38c0826ee943f1d3e05acd312e92aefad2c0018bd5b1d3a"}, {0x70, 0x107, 0x10000, "eab075bd6ca797093eefa89573303408de9f6de3f23ed890166259d18f715fd2ab6dc2af4693c9ec54fa15a8e43ab2ff908bb458b25cf3ad3a99bdf0684a2cc99e6411cd58f3ef8bf59f397b89768d0039944874a85d3b8e6d"}, {0xe8, 0x2faed32f0fffc4b3, 0x10, "fb8eaf50a7e8d61dcfb7fabc9a005667a128117c69397d9636c5f535dc96eb0c3f3273dddeb3029140809e90beca720bbb21b0d0df94f2bc32261efc77de133ba18c91e1c540de9212b24a0889e75013cbd1dd9133cd2ff4c5762f63ed59c36d1ef100615d9bd3dcbbb89d0d4b1d09b38c406ccaf1e462c083c222be60ef753394e9502a61083c0c942b5b48ef8260fa898e9a155b4f05fcde6a5c334231101388c52c47e2d05f95cedb5044ecf2693c4d9953c8815cb20764807ca6968957965c010ce8fed796a2bc5addaa1e80f8ae6280492464"}, {0x80, 0xff, 0x3, "a5576a11e3dc38f4bf544c9f6a0df95f567e86c02b70f0b5e2b91eeaf584b416a05667c8d29aa67781663621290acb7ca37a75ba65d851efc4d893b6acd508f85c5fc040b9acfa6f82fd6aa7645e69ab362721b08404abd65f3e79e8bbc4f6a1aee1f34ea872e4779f36ff742831df"}, {0xe8, 0x10a, 0x9, "b1c0afcfc7ec9db511379528803530fcd51a43616db7844775737f0997d0d67dd05069a4d93a63fcc6cc3c5e3886e503bb8aac34dce00c85dab69ae630d600924638eed3ba10269dde9055b879666cf9852645e6ba44684aabc763b9fb49e3caade35cb1d151bc33700254169180866e6e216ae00cfcb61d871e0d39983a2fc481cb3f5e9e37b30e535c0e8fb19df7f4416e29bb1bf67aa6f207d3dbc62cdf45183efd152879a0f760bd7568c0e420eaea97bd57d977f3ee316dca21a32918d75312a3e4d9505e458fce70d00ebd8ca2c4"}, {0x10, 0x10f, 0xfffff66b}, {0x10, 0x8c, 0x7}, {0x110, 0x109, 0x1ff, "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"}], 0x630}, 0x20004000)
epoll_create1(0x80000)
connect$unix(r0, &(0x7f0000000880)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000900)={<r1=>0x0, 0x2d, "70378fedf549dfd252433d061a4fd4149309e403745b9a9ebe753ab5b7ff47d15114390b4a9fe72b843bf33ac4"}, &(0x7f0000000940)=0x35)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000980)={r1, 0x6}, 0x8)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x58, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8000}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x2}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0xc010)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000b00)={r1, 0x8}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b40)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000b80)=0x1, 0x4)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000bc0)={0xffffffffffffffff, 0x1, 0x96, r2, 0x8}, 0xc)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x20000000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000d40), &(0x7f0000000d80)=0x4)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x88, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x88}}, 0x80)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000f40)=0x2d03, 0x4)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x18, 0x36, 0x300, 0x70bd2d, 0x25dfdbfc, {0x20}, [@typed={0x4, 0xdf}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004010}, 0x200408c4)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001100)={<r6=>r1, 0x4}, &(0x7f0000001140)=0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001180)={'vxcan1\x00'})
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000011c0)={r6, 0x5}, 0x8)
ioctl$sock_ifreq(r5, 0x12, &(0x7f0000001240)={'caif0\x00', @ifru_data=&(0x7f0000001200)="f8c73e58816fd9ba37215855a70c06624feb3d5a47606851bf4e562d3fc36636"})
ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001280)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000012c0)={'vlan0\x00', {0x2, 0x4e22, @empty}})
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r7, 0x29, 0xc9, 0x0, 0x0)

2.719827879s ago: executing program 0 (id=3082):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)

2.604730064s ago: executing program 1 (id=3083):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022abd7001000000250f0000002a000e0068"], 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r2, 0x0, 0xfffffeeb)

2.532751257s ago: executing program 2 (id=3084):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007000000c5000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c}, 0x44)
sendmsg$nl_xfrm(r1, &(0x7f0000005ac0)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f00000058c0)=ANY=[@ANYBLOB="cc0000001b0001002bbd7000fddbdf2500000000002400000400000000000001ac1414390000000000000000000000004e2200014e2400050200a0a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000007000000000000000600000000000000020000000000000007000000000000000c00000000000000a604000000000000060000000000000002000000000000000000000000000000f4fffffffffffffff2ffffffffffffff790a0000b26b6e00010101010000000005000000000000000a00100002"], 0xcc}, 0x1, 0x0, 0x0, 0x44040}, 0x20000004)

2.371706355s ago: executing program 2 (id=3085):
gettid() (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (rerun: 64)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x184}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r3, 0x331, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async)
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x1}, 0x18)
sendmmsg$inet(r4, &(0x7f00000016c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000280)="d36df3f7", 0x4}], 0x1}}], 0x1, 0x40)
sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x1401, 0x1, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40008800}, 0x20000014)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0x2, 0x0, 0x0, @empty, 0x5}}}, &(0x7f0000000300)=0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.325426706s ago: executing program 1 (id=3086):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, r2, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x4}, @crypto_settings=[@NL80211_ATTR_PMK={0x27, 0xfe, "f2526f74638e0b19023e4c7a60a3180cd4094ba49ea1db3818b43b65abc1b3e347b37e"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac13, 0xfac07, 0xfac0a]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x64}}, 0x0)
nanosleep(&(0x7f0000000140)={0x77359400}, &(0x7f0000000180))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

2.061335524s ago: executing program 2 (id=3087):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8)
close(r3)

2.057248081s ago: executing program 4 (id=3088):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000540), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0xff58}, 0x2}, 0x0)
r3 = socket$inet(0x2, 0x80000, 0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={<r4=>0x0, @in6={{0xa, 0x4e20, 0x7, @local, 0x8}}, 0xfdd7, 0x99bd}, &(0x7f0000000200)=0x90)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={r4, 0x7, 0x0, 0x1}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = gettid()
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0x403, 0xe, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xba}, @IFLA_MAP={0x24, 0xe, {0x1, 0x2, 0x7f, 0xe85, 0x7, 0x7}}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c0d6}, 0x0)
getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000140), &(0x7f00000001c0)=0x10)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000100)="b70000000000", 0x6}, {&(0x7f0000000040)="37a8a6c4", 0x4}, {&(0x7f0000000280)="3de496b26cb156fc17de651bb0059979575c10b71057fbfd852720c6e528", 0x1e}], 0x4)

1.708717424s ago: executing program 3 (id=3090):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x89, 0x1, {{'rmd160\x00'}, 0x208, "d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52b9fbdc312b5aeab8894c493c358ef76ec179b21865e1b6f29b2da7d564f2bcd96ec67ffc"}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.701634413s ago: executing program 0 (id=3091):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = socket$inet6(0xa, 0x4, 0x1)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x80000)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x2, 0x6, 0xf9, 0x5}, {0x4, 0x8, 0x8, 0x4}, {0xffff, 0x81, 0x3, 0x40}]}, 0x10)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4, 0x0, @local, 0x3}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000029000000080000000400000000000000c83c1a986b4630731bf904d2ecea2aa8ef023c8ea8fb84140ce64c8fcdbf28bbf0233816832d325caf1a7e28875c29621031df6d64bf853f9dec450e6998e44ed42964e03749b6260a32be79b244adc0937d7132fd47423d477a90fcdf3f66d4ad5a3e477996d9c2f872c882"], 0x18}}], 0x1, 0x811)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030400000000fedbdf2500000400", @ANYRESOCT=r2, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e00", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="050001"], 0x44}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_TIOCOUTQ(r1, 0x5411, 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="01fc70df6fad4044ebcad29898def93a3c310077cd2307ac02ee76298a69b90f80cf30eb39a97cdc73fce527076f052b391665093835a945de8368f6ade64490078d5baf1a4ebd14c9ebd58ece178f7f80204116e7ff08ce93a6c932cb3ffb4d06af874311c6d3dae81e3c1557958eb12a91f064e9ad3bcf9784e3d414705853ed82ccb9f9e5fd2848d631be9f6c8f0921099374e407e3a828012a503fefe42330bd90236c4b406beddddb261892002a8581b5d6d400"/195, @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf25030000000600030004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44000)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="0800040000e40000140001000000000000000000cc0c3ae27f00000114000100fe8000000000000000000000000000aa2c00"], 0xb4}}, 0x0)
close(r0)

1.265299004s ago: executing program 0 (id=3092):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1480004000000000e5449f0800000000070000008903dd00"], 0x18}}], 0x2, 0xf00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

1.250460125s ago: executing program 4 (id=3093):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno\x00', 0x5)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(r0, &(0x7f0000000000)="920ff67eb7e1a7e31099aee9b0168d1bea279e34b7d030958e58a36750fe5f921fa344882069ef55f20f45d927bdc28f4969009f11dd9953dbc6521611546eb44337e2e59bf481e2d05b4438288fbab8a84a462342bb117d165ee74d04f58b7c1cbef06f7908139a75b4246b", 0x6c, 0x4000000, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRESOCT=r1], 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x800)

1.212228966s ago: executing program 3 (id=3094):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000851}, 0x200000c1)
socketpair(0x1a, 0x1, 0x808, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) (async)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x31a, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5e4e}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'hash\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x14008094)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x40004)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x2000a140) (async)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000540)=0x2, 0x4)
syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r5) (async)
recvmmsg(r3, &(0x7f0000007840)=[{{&(0x7f00000005c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000640)}, {&(0x7f0000000680)=""/23, 0x17}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/47, 0x2f}, {&(0x7f0000001700)=""/61, 0x3d}, {&(0x7f0000001740)=""/27, 0x1b}, {&(0x7f0000001780)=""/65, 0x41}, {&(0x7f0000001800)=""/62, 0x3e}, {&(0x7f0000001840)=""/37, 0x25}], 0x9, &(0x7f0000001940)=""/63, 0x3f}, 0x6}, {{&(0x7f0000001980)=@xdp, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a00)=""/74, 0x4a}, {&(0x7f0000001a80)=""/95, 0x5f}, {&(0x7f0000001b00)=""/84, 0x54}], 0x3, &(0x7f0000001bc0)=""/136, 0x88}, 0x1}, {{&(0x7f0000001c80)=@rc={0x1f, @none}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/200, 0xc8}], 0x1}, 0x378}, {{&(0x7f0000001e40)=@qipcrtr, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001ec0)}, {&(0x7f0000001f00)=""/30, 0x1e}], 0x2, &(0x7f0000001f80)=""/116, 0x74}, 0xffffffff}, {{&(0x7f0000002000)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000002080)=""/67, 0x43}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/33, 0x21}, {&(0x7f0000004140)=""/11, 0xb}, {&(0x7f0000004180)=""/149, 0x95}, {&(0x7f0000004240)=""/115, 0x73}], 0x7, &(0x7f0000004340)=""/149, 0x95}, 0x480}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000004400)=""/208, 0xd0}, {&(0x7f0000004500)=""/133, 0x85}, {&(0x7f00000045c0)=""/38, 0x26}], 0x3, &(0x7f0000004640)=""/70, 0x46}}, {{&(0x7f00000046c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000004740)=""/155, 0x9b}, {&(0x7f0000004800)=""/233, 0xe9}, {&(0x7f0000004900)=""/224, 0xe0}, {&(0x7f0000004a00)=""/104, 0x68}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/67, 0x43}, {&(0x7f0000005b00)=""/136, 0x88}], 0x7, &(0x7f0000005c40)=""/99, 0x63}, 0xfffffbff}, {{&(0x7f0000005cc0)=@nfc, 0x80, &(0x7f0000006140)=[{&(0x7f0000005d40)=""/252, 0xfc}, {&(0x7f0000005e40)=""/228, 0xe4}, {&(0x7f0000005f40)=""/222, 0xde}, {&(0x7f0000006040)=""/198, 0xc6}], 0x4, &(0x7f0000006180)=""/4096, 0x1000}, 0x80}, {{&(0x7f0000007180)=@xdp, 0x80, &(0x7f0000007700)=[{&(0x7f0000007200)=""/103, 0x67}, {&(0x7f0000007280)=""/66, 0x42}, {&(0x7f0000007300)=""/148, 0x94}, {&(0x7f00000073c0)=""/31, 0x1f}, {&(0x7f0000007400)=""/183, 0xb7}, {&(0x7f00000074c0)=""/167, 0xa7}, {&(0x7f0000007580)=""/19, 0x13}, {&(0x7f00000075c0)=""/58, 0x3a}, {&(0x7f0000007600)=""/218, 0xda}], 0x9, &(0x7f00000077c0)=""/68, 0x44}, 0x4}], 0x9, 0x0, &(0x7f0000007a80)={0x0, 0x3938700})
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000007b00), r5)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000007bc0)={&(0x7f0000007ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000007b80)={&(0x7f0000007b40)={0x3c, r7, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xa}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x23a}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x23}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x75d}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000007c00), 0x18080, 0x0)
ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000007c40)) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007cc0), r1)
sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000007e00)={&(0x7f0000007c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000007dc0)={&(0x7f0000007d00)={0x9c, r10, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x624}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4050}, 0x20008041) (async)
epoll_wait(r4, &(0x7f0000007e40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x6) (async)
r11 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r11, &(0x7f0000007ec0)="9c74f1230f5a51bd65a5348cd6cbe90ff87747fee9e1c33886105fb13912ef26fce9bf94af9509fec7ba103284e8a713bb1f6c49622ecd6d29b12e76188540e697a1e050b13989525202a039ec4b239faf268b65f7b13592b4ddd1eee1adb5f61bf266a202dce2ba23130c7434a8c202ca7c90d830126469c65035aad556feb500c2b217c218221c58424a2f725db8afc8318422397a7bfb117177303516a95ce280f66b0becb7abccc55d910fd9d02a83e1655e37054a928c86a7fa1188bba18d105de90a7b70029491e43f31b2a0f9f1c1d65ab72f3fb34842a3ca80f09b8a3c22055e1cb1627e98017c375fa7fe5bf315ea3fd0d96b7de36800b590d205bd60e088dcfe5fe7cdde56aea8fe6c7de40cc4c4da2afe39ee752d7546b6dae9dbd843547dcc4afa9d6b1709c2fa87d3eadc0f1ba4137845429b5f09dcc9f97cbdf31c2711cc0036581905aada2f7f048331861b6d83aaf41611463a6ed31b1e66e2ff78ce79bcd802dde23bd9efad113294eb08ef289c0ec45fe2889de2b2960116d4a64f29512433e2c998c03b365c606f514ab85abc5490e49ddfc5846a077d268b8d0e0fe1ed3cec11fabd6444e20162400414c516324f555419fc99019d15fb551292cfe0cc9d985d77b57de8b4eb8de0d863fe01bb8194c3c7a7274c418acccf931c4d707193966e889a57941b787c00b17d015831ed715136d708eae5bfe5a91241eba6ac0424ebfee01b26464992c6ce432ee9a232908da813d383c1e60350e45a04574f56fb2e1a464d5e1d056015ed20d90f45ee1540f3f545a3b62539ec70cd11b1fa8ba4eb723847596066785f463f071e07a0d39200fee53e64a1f722aa2ac8d4685abb46d2113abd2b17dd2afd62b03df45f123c9475ecded30d1b537fb885319ad67f70140d8589c55220821e097df6be4de4103fb0467c1cf3014fa1fbf1e40fa69284d7cc10a709b6a4b1f184c04473a21abeffdc6b1a3bfdf4c9e307f0a7d0566361c94ea45c0368928c2d42a4334993eece074d0c7c9eb5ad3ff89a7b211d13c4dff23a05e0fc0abb50f2cc96c86c82040e9ebdb000f1fdf8736bbc6ab803fdb2cee346b0d91469a04b074a463639388bcce60f68d7c7d459efb0d8bf9eec36c374ccdac5737cb2a8d9aa9b8a430b97999ef99a37e9e9592766730ad23b8dddef9277529d43feaa3b232c40a67c2eddf4a4a1020b4d17c046003c449feeebe6f6823bff6a62237065bcfdd42801c2dd88318c88ec2399045a31a8c9acaada60761cfe8efdc0c8b01c37f79231ca743635884dde060247b96e4893ea0ab44fd7538feb6f304bff4d7a1cbd24a5e6fa21eccdf2abe82e0eecb61d806b41994651855697ee897c4ccfe8fdb90ca3ff6b3038ecfeac013b5d193d39db5693c8662b5c868f438468dc0d06f7f85257d0b101b1a3a477a40c5d2296485f01ae84055894fecb03029202533efd8830d39d075852cccb7d484eee10beb3ddd62a12d3d196038163f81cc255b53153aed97a1f80fa8b1cf42606fe48823bf5f80cfbd6a2052138502f5362665ad9e374620328fe2f266a803d8303e3534d6418e7528153c9f284bd295296a98715446b2e41217c739f950f822c4926c14917012c7857be0ca278dae70928f919475281d8f298f0a16a114332b3e5029c8c0509432b551822a8c195386769c018b5879b081254236a548dd0ad95ecf770244785f90d41b567bfdf2c681345eb17b37f30a835f8598d19cb84cd5d8a682268b53e3e3ed5eaa14cf98436c68d7d9b5b43594d52164a3c9b37d5bfa15bde5da7f3e93667764486886fb41eaec302d387cd1f4522261f1694da371e3d90f61c220578d8a4f36bba1c1a6fd94bb7819cecf6810973a5c19f9e518edf96d16f94adcccfcff78ee45fecc521d42211b99974078bc0787edbb0a4dee95120515bd9c6964e2d6600dacd126c1b5951eca42e5b97aa4e208b0c1faf02ed94f126f09937ed03091a78e5f040795a82fedff1ff6be5a145380ff15d053cafc4d063505f8c5124bc66d0888319bdae87305e2025c9cdac85720949bdc3abcce24f28b0c055f9278af4f84ba5a653f832d10551b36df87087bcebc9e6f447cb500118a01dbf7d2bdb83966f758ba8c844960da79f1afbe608b2740b72ee2bff877e7ffcc52f454d0d9d2969d9270a6820beefd6fb1bcc98d030886311783457e32c9a791f54f20eb98c73ab75ae8363b36a0c79f3d52ea87743d52b57b9c81cab3665f4ba7843894a709e02482ee1d5f6bca3d7678dff249f81f93f870363692e3245a702f976b60fc5d112d97ca8e17c53738f5861f66aeb35bf52a6998fb46a4861aa570b31c1bd22f1210fa113fa095746db21ece6c77d299a72700d359f618047622cf564f29d1cda151296556b022637bd2a4301b427e465ffaeed99fa318a14b16d89e1b4ff06c5d23c4281d41e79f8afc504c02768ab706cea3ab5d6247bf8c69bca6f25e8de7af76b5ecf2fd579fb31e87040551e737437d987cfda7c2a98aa34a5233e125dcb97b333836367f03e98b14dca4e5f62c094bd67f7b8fd0db660fa42a1c5a611e6ef22f1a59c6b2818b22d9e849b44b1e501c5413350c03dd32fe1a9146ce74d2d7678503dffe239b4004ffdd191dc61bbda9e8004a077529a017f5a77368b16c57fc8f6b88218f134182ecf19bbd836e5e8a6b4b4c61e0c4990b15ddace0edea0796fc109680021c9fd974d8d3b3463e491bf602ff291dac6db88eebcb6bf0b0dfa5f352e0ac2723ae0d63380246b1cf78bb9f17fa78b54811084c1922f1a28bf33121b08f24b1e2f420c043430d48a13e4823f2f16c5456992e7b207ca42e19061ad639438d5036cf832806cb45df8cfd7fca80e930038c95bbe3a95fcbceefcf7509736570ada4abe730151a8b11ba7885b5e0066b28fa0ffeeab74554358ae653a115f2a8a035e69cdf3b3288192dbcde46abdf59e83c93671aaca5f1fda205b8d6d0977e7cee57349dc8f1c1e5c58a065a34fc57d62357a30954bdf2e05ca9501a9e8255f6628951c4cf34767147ad7f8fc4e9bafb36b536d21ded2474be25b97291867302b853d66e0065212e309f73237ddb49f65158475dad7d8abd2652cc0a13625af35b22e6888135b37b94a94fdc39f5d3c07193dd94de990ea3c2ed10861d2fbfaffe3da727a2b7d64d97b66cca1cf723aadc9874e3ec6f152c6ac2386953a386d0b218b7ecd7a85f3dd53016ee302f5b81c6599ed96720ad0380de26d521411ba37f6f49fc0eebde121edaae4e99168e11e8cb84855b650af76eee4cbdc321fdfab3f6503afd2dd01b3c5989ff0e784a582cafa343c199c07fc89472cb399926f9ab5b1a7b100e8d39312f9e25c4786a17f7819186c1ba17ae9f30bd4e807b6b5bbfbe7c7fbe4aa42ef9a88fcf961e63215c623d8be1199594e049cc89e99bac4c76598f2f1bc22832d4ca79cca7ad9a5045a67e67a4ceea0405a81477037c0ed53666482476bb33966ad03acc542ad7749363288dfbf9f72fc39138bb545b84e7020480df308c2c7d025d585bc27f107449095384d49395c0452ea27d50ad09403ab60d5db79fa5536586c84b588cb1334e7aa7a3a84399001d7b3379dedc467f3fd3ccd6ebbdd26c7c3c7d3edf9a0653c487ab531ef08e5a054ffc5eddcdd86116198bd7c858bdbc35b7124faf2f865493d26180b7915be911473fb3428bc87127afc7aa1f17694d7d386f03b469acb39f674eb3caebcd6cf8a629018b35260ec3eeb1b6915cdbd21724e6ad54fba4656bae9923b502703f055d59a5c23ece9917f94168be6932c341be8078594373e8dfed642bc51dbfda388d914a64261a78a77a34476966a4bf8e1bf259736b42323cd96facd269ab903fbaeac95eaa114a0df537e7c2627b3ecd3310fda50f56bb9c48d6aebc5500ea92bbdff9e24581c8d81f6753fa05c1d66fb8522058aaa35a988203aacb425cdba63180dbadb3701c6624f338d96bbf3db96d576d7fa29cb8130d789b7ffa61a5498cc28a6e9f4a04916bbf5e0af53e1610620a19560168a4f98afd7836ed75187e6e1065e33600486d4bcf493906df212938256fe29e1d9edac6893edabc1aea2b941d9054d01d1c12d9534d9fa8fddc47a6f4c22819571eca58641d1bac544ac063d2b9df52e6585bbbe99651951dac888f5c582e0c96eb38bb4d13027ee8fb57c489ba11803d2f33ea58843a5256f0f9d6b365c2ce4e11fa48f10601710543e04b5a82c4eeb701e0a9592de786989548cf8a70e7b1db7dbc3b71190168075b7899cd0a89415bdd052b77f270d487d5a50c8877977ca5c76f46871c12d409c78e842f659c677fd9b0e0a68a660ed8c7abe10de4f68528137f8eb2ef22c08b82cef228bbc8f489aebca3dca9279c677402a1e884f97f13830df4f083f1a0b57344c2ef6ac65f41a35af6d8b517dc30ea9f36a978e2a4694eb304ef778cc216fcac5ca2044c391d4d62979d64fcbd18872698d2ed3a5b23d193ce2c723e2e03032c43f5d28ff07a7d3856203c65c95899f1d2a381d965a77a3abd4ca127ad7e3ef3c8429ee3e68dce9b00655c2a6bcc5623c6c83e23be33cc8672ae237ff7cf5fa722e84eaaf8cd11f0bbff9252dd532c78d6e8bf7e694422b089cd0e3057c59de292654cbfa65af376fda43f82342b5919f902264e0d2a2bba79573d0030beb0634656ecadb1f54d41a38de082c79387d370dda2c0de99bcb3208d78f401af188296aa5c8f17cf3618b7767551adff58c5efefcdcb1fa025f7934288fe28770a2fd29bcaca8b47eba27558ea89b387153ba6e3480569b9ea256ea1a3f764a7e71c2002572c62b0df73a63dc8e34c0fd059f3ba11a6d8f1305adb330d6f6e526213e913417c746fc54d432c37677c341375365d4bd3f8a563f835ce5719eae1c6f8123896b7e9ae04c60a0675a806de97672928253cf1855885143f30083555f7fa41571d1e30ca56a5e9c04dcc7dd406f69be500580217976a54c91b3eb71813904b80c80254c19fde9a102ea34e044e2d4efa9359469183aeb400a6be7b2f731d93b313a67b3c6e16130d819f6721a89716bc19aafbc3ef9642a99f61881b73d33df3a28187e08a560c5e750f8ca6e7d80d17921e6a857b6199d077ed68f977e282ea791f16eca5516f85b36d760e2c16a85a33476042a73239917bce938b05996b0c8faf85337acadbe907b2d03c53c81a0508dc5486306e369560896ececec272bf83063087bdd437745a99d6d255040c6e1cc080077dba3dd72de81cff88d6549113ab259bf06ad0fad6335ac5810da18b2b4b11386119b5719347cef38af4192d646e5a4ee7f012893bfd10cc7c80dd3e817832125e14d25bfe6bcf81004afc6e64f0c27f4fed8a912ee4974119e643cd6a2da9defc4d2b3b47cc118cf8167fddde79d7053c8414003b128ac15349e5d1d6c1da47c2d0c4367d895ec6c8cb7f556702780dc4ab85d50c6cb4b4845acbed720bc5aa9114231a8edcc52a998a4d59c738695dfc7905c952ac08b20370e4a928863932a72ea8ac95e42c3671726d94f7e53cbd944ac01a1433522b6e86670ddd5e4931f69b5844ed1951e8beea72769410ab8a9ee7d4bbf70e88c784aea2307a92a6568f4116c0728300d0f237afd738a8087bb9f3032860e16f222b2fb9aca68d550fc16f0c74f24aeb31e1a11ff8a79e0bf0bc17577e54df479f5d8ebe2ac44d5f8a99b3231ff89a4f82e065a41ebb05d8075fa14109b37aafd2f636a848426da6367775bbe", 0x1000, 0x1, &(0x7f0000008ec0)={0xa, 0x4e23, 0xfffffffa, @mcast2, 0x200}, 0x1c) (async)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000008f00)={<r12=>0x0, 0x401, 0x9, 0x2, 0x10000, 0xa80}, &(0x7f0000008f40)=0x14)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000008f80)=r12, 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0), r4) (async)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000009000)) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000009040)={0x6, 0x6, 0x4, 0x6}, 0x14) (async)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000091c0)={&(0x7f0000009080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000009180)={&(0x7f0000009140)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)

1.136974701s ago: executing program 1 (id=3095):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', <r0=>0x0, 0x7, 0x700, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x66, 0x0, 0xf8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@noop, @noop]}}}}})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r0}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x210, 0x3a6d, {0x0, 0xea60}, {0x77359400}, {0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x1b, 0x1, 0x0, 0x0, "ef001f6ca08f619e95b9486947368200e769ec1b221b43c1a519c35ff8887a967bd372d9c96369d7167db1a9f23482ec0f964dac051957cbe8b3c6ad2b023783"}}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0xa, [@restrict={0x10, 0x0, 0x0, 0xb, 0x3}, @float={0x3, 0x0, 0x0, 0x10, 0x2}, @union={0x9, 0x3, 0x0, 0x5, 0x1, 0x9, [{0x1, 0x5, 0x10}, {0x3, 0x1, 0xbd000}, {0xf, 0x3, 0x4}]}, @float={0x6, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x1, 0x4}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x2e, 0x6f, 0x0, 0x2e, 0x0, 0x5f, 0x61, 0x30]}}, &(0x7f0000000500)=""/104, 0x92, 0x68, 0x0, 0xff, 0x10000}, 0x28) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x2, <r5=>0x0}, 0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x2e, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x3, 0x0, 0x6, 0x4, 0x1, 0x1, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @ringbuf_query, @jmp={0x5, 0x0, 0xb, 0x3, 0x6, 0x10, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x8f}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x3f, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x4, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff], 0x0, 0x10, 0x810b}, 0x94) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x7ff, 0xfffffffc, 0x7, 0x40004, 0x1, 0x40, '\x00', r0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0xd}, 0x50)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00'}, 0x18)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xa, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x0, 0x1, 0x7, 0xf, 0xfffffffffffffff4, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x36, &(0x7f00000003c0)=""/54, 0x41000, 0x8, '\x00', r0, @fallback=0x7, r4, 0x8, &(0x7f00000005c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x2, 0x800}, 0x10, r5, r6, 0x8, &(0x7f0000000b00)=[r7, r8, r9, r11], &(0x7f0000000b40)=[{0x4, 0x3, 0x10, 0x5}, {0x0, 0x2, 0x4, 0x7}, {0x0, 0x5, 0x1, 0x6}, {0x5, 0x4, 0x4, 0xc}, {0x2, 0x3, 0x8, 0x3}, {0x1, 0x5, 0x6, 0xc}, {0x1, 0x3, 0x10, 0x8}, {0x1, 0x3, 0x7, 0x2}], 0x10, 0x101}, 0x94) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5)
sendto$inet(r2, &(0x7f0000000800)="01", 0x1, 0x4004014, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x812, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x200, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x6}}}}, @IFLA_CARRIER={0x5, 0x21, 0x1}]}, 0x48}}, 0x4000)

1.002575926s ago: executing program 3 (id=3096):
unshare(0x8040480)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, r1, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "eade3d7b4cd07ec3ee777de774fc7987cca41989251bb817a02d64aed696ea022191ec1d"}}]}]}, 0x64}}, 0x4000000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x4}, 0x20)
socket$nl_rdma(0x10, 0x3, 0x14)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000814, &(0x7f0000000380)={0xa, 0x4e20, 0x6, @remote}, 0x1c)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
r6 = socket(0x5, 0x80805, 0x8)
sendmmsg$inet(r6, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1, 0x0, 0x26}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r8=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000300)={r8, 0x1}, 0x8)
listen(r5, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34})
r9 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)

999.05751ms ago: executing program 1 (id=3097):
r0 = socket(0x1e, 0x4, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000080), 0x10) (async, rerun: 64)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000000000000000000800000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000003020000b68c52d2be3c0d90"], 0x48}}, 0x0) (async, rerun: 64)
r5 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r6, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 32)

959.161951ms ago: executing program 4 (id=3098):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x4}, 0x10)
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x6, 0x4)
write(r0, &(0x7f0000000100)="3b000100010000", 0x7)

797.366473ms ago: executing program 0 (id=3099):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x155, 0x8001}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x6, 0x16}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x60}}, 0xc000)

793.513369ms ago: executing program 4 (id=3100):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x22e, &(0x7f00000002c0)={@random="4d481768776c", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "200001", 0x1f8, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, {[@dstopts={0x84, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, @fragment={0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x68}, @hopopts={0x5e, 0x22, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x6, 0xdd, "00f6d7911893870a694c0074b0c22f925a608330f468c02cc6ece9af26a5cd3d63073c0f4b273361fedc172abf59cae1cb55ab4ef608d469ff7f2536e466e75686a89b3ef807ee1f5b58e09b7a9d42bf1dbc27331ccb2a14a5b9cd7c4227095fc571d9c71b12a696b04a6ea41efa4035d3d7ca1156ed686d20c6b3da0ac678ad6c07ea32967a57a239c3ebe6ed6dc2fcbb7d416d0fc4053c18fa86cbbb4e0736837e3544a83fbc24e8538d659569801d92cf44aad958f75634182db2fe9b6089f76fb76ec9b67b7761cdb8f1200e78e1ed28729cdaf99ef61ca9db6afd"}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xd}]}, @hopopts={0x3a, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x81}]}, @routing={0x84, 0x10, 0x0, 0x10, 0x0, [@private0, @local, @private2, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {0x0, 0x883e, 0x30, 0x0, @opaque="86f79dbf77ab802c7f3cec19c5a8d8bedef27dc4d05e14deb36cbe369e251292a7baebcaa954dcf6"}}}}}}, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dmesg_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24008000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r6=>0x0})
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000894)

618.796755ms ago: executing program 0 (id=3101):
r0 = socket(0x15, 0x5, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'team_slave_1\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400090047681e757c15c282001300290bf1ff0092129ed32b40edab0768ee3a07007d639e0b1530fe35c61d94664fd344a1506b3a1b854a381a11f96984455fa3595f7d4aba10ad56f983d1fdb9e48c08ec9e34e215c8084f3e9e079be46e3485a3ddef0e93f5b99a26fa85b1f1b67fe9a1b1df113b1ff9a08d5844a906360080417d136fa0ea82b5cdad52d6978f9c818eba0d7f9a96acdf82767cf3f430ea0487cabc3b31b0faa8839a733a73f7872770ef33410ecd60bbdb998dc6e9b0e3138af8f49e0709276fc58c4e009e864dc3238289619183d1b58c8941562e", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e12000008000500000000000800000000000000"], 0x44}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

571.663152ms ago: executing program 3 (id=3102):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e22, 0x8, @remote, 0x9}}, 0x0, 0x0, 0xe, 0x0, "bb35373864ca41d6e5615445244740bd4c0b43a21d81000000000000008a1e2f964e654dc534a6324d4993fcf19b2df3ee818a058a7c49462189216d556daccd00"}, 0xd8)
sendto$inet6(r5, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00001700000000000c001a80080005800400"], 0x2c}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2100000000000000205012800800010068737273e5a22a2e51b99c7920000000028008000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB], 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x4}]}}]}, 0x38}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r8=>r0})
bind$rds(r8, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10)

333.360835ms ago: executing program 3 (id=3103):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socketpair(0xa, 0x2, 0x83, &(0x7f0000000080))
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000380)={'b', ' *:* ', 'rw\x00'}, 0x9)

289.580735ms ago: executing program 4 (id=3104):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000adca3a71d0d71ae700"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffb0b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

147.558754ms ago: executing program 4 (id=3105):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xb, 0xfb6}) (async)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xb, 0xfb6})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000004000000020"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x1003, r1}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x1003, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x6, r1}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x6, r1}, 0x38)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', <r2=>0x0, 0x8, 0x7800, 0x3, 0x5, {{0x11, 0x4, 0x3, 0x37, 0x44, 0x65, 0x0, 0xfe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@timestamp_prespec={0x44, 0x2c, 0x53, 0x3, 0x1, [{@rand_addr=0x64010101, 0x7}, {@local, 0x7fff}, {@rand_addr=0x64010101, 0x6}, {@multicast1, 0x4}, {@private=0xa010102, 0x659}]}, @noop]}}}}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0x6, 0x8001, 0x21000, r0, 0x7fff, '\x00', r2, r3, 0x4, 0x5, 0x3, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x71}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x71}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r4, 0x0)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0)

1.154202ms ago: executing program 3 (id=3106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x11, 0x4, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x3229000, 0x1000, 0xfffffff7}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)="1479c369caf28b0c600d5d976b000089bdbf4075277f938a9d8616c6bf", 0x1d}], 0x2}, 0x4048081)
bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0xa, 0xc}, {0xc, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x400c012}, 0x8850)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28)
socket$alg(0x26, 0x5, 0x0)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@remote}, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=r7, @ANYRESDEC, @ANYRES32=0x0, @ANYRESDEC=r7, @ANYRESDEC=r0], 0x48)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000006c0)={0x180, 0x0, 0x1, 0xffffffff, 0x200000, {}, [@ETHTOOL_A_FEATURES_WANTED={0x104, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1f, 0x2, 'virtio_transport_alloc_pkt\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'rose0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'k\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'rose0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1f, 0x2, 'virtio_transport_alloc_pkt\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x68, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x53, 0x5, "a67de6f99c92747dd3a9254e980d9e75c3e293a971432622591aab7b1fe2f9633202be55ca1926138c562bd438b211b6ff300da4755bda6aa192d28ce6ea8b5534dbd4d8dd8b8df5aafaa7ee63b3c5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmmsg(r8, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, 0x0, 0x0)
recvfrom$llc(r8, &(0x7f0000000000)=""/248, 0xf8, 0x40010001, 0x0, 0x0)

0s ago: executing program 1 (id=3107):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x2c060000)
unshare(0x2c020400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
pipe(&(0x7f0000002740))
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)
read$alg(r5, &(0x7f00000009c0)=""/75, 0x4b)
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYBLOB="41bf0359dedeb1c9a2af5381a5e01b0749a78b97f0047d6f64b166f1c4bdd43a558ca6ce35d71616429ddc0de0190ec6fa84fffe5aff637d197bfbc63394a4dc076cb4b826235b5953a530060efd532bd1f87fde32bd", @ANYRESHEX, @ANYRESHEX=r1, @ANYRESOCT=r1], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xe, 0x50, r4, 0x95c76000)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @any, 0x4, 0x1}, 0xe)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r7, 0x6)

kernel console output (not intermixed with test programs):

0:(READ) flags 0x0 phys_seg 1 prio class 0
[  254.603493][ T5855] Buffer I/O error on dev nbd1, logical block 0, async page read
[  254.613903][ T5855] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  254.686305][T12837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1779'.
[  254.691147][ T5855] Buffer I/O error on dev nbd1, logical block 1, async page read
[  254.733094][T12797] tipc: Resetting bearer <eth:syzkaller0>
[  254.762991][ T5855] ldm_validate_partition_table(): Disk read failed.
[  254.793132][ T5855] Dev nbd1: unable to read RDB block 0
[  254.815353][ T5855]  nbd1: unable to read partition table
[  254.823466][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1781'.
[  254.864806][T12797] tipc: Disabling bearer <eth:syzkaller0>
[  254.876013][ T5855] ldm_validate_partition_table(): Disk read failed.
[  254.894601][ T5855] Dev nbd1: unable to read RDB block 0
[  254.906494][ T5855]  nbd1: unable to read partition table
[  254.975482][T12846] lo speed is unknown, defaulting to 1000
[  255.011996][T12852] lo speed is unknown, defaulting to 1000
[  255.177719][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1785'.
[  255.260655][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1785'.
[  255.379790][T12854] validate_nla: 2 callbacks suppressed
[  255.379808][T12854] netlink: 'syz.4.1783': attribute type 13 has an invalid length.
[  255.399670][T12854] netlink: 'syz.4.1783': attribute type 17 has an invalid length.
[  255.524682][T12854] 8021q: adding VLAN 0 to HW filter on device team0
[  255.546354][T12854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.975548][T12879] lo speed is unknown, defaulting to 1000
[  257.712048][T12940] netlink: 'syz.4.1807': attribute type 7 has an invalid length.
[  257.928517][T12951] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  258.401575][T12966] lo speed is unknown, defaulting to 1000
[  259.269796][T13005] netlink: 'syz.3.1825': attribute type 10 has an invalid length.
[  259.278730][T13005] dummy0: left promiscuous mode
[  259.284681][T13005] dummy0: left allmulticast mode
[  259.307593][T13005] team0: Port device dummy0 added
[  259.362651][T13005] netlink: 'syz.3.1825': attribute type 10 has an invalid length.
[  259.404984][T13005] team0: Port device dummy0 removed
[  259.699533][T13023] netlink: 'syz.4.1829': attribute type 27 has an invalid length.
[  259.954871][T13034] syz.4.1832: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  259.987793][T13034] CPU: 0 UID: 0 PID: 13034 Comm: syz.4.1832 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  259.987822][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  259.987847][T13034] Call Trace:
[  259.987855][T13034]  <TASK>
[  259.987864][T13034]  dump_stack_lvl+0x189/0x250
[  259.987894][T13034]  ? __pfx_dump_stack_lvl+0x10/0x10
[  259.987913][T13034]  ? __pfx__printk+0x10/0x10
[  259.987935][T13034]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  259.987954][T13034]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  259.987975][T13034]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  259.987997][T13034]  warn_alloc+0x214/0x310
[  259.988014][T13034]  ? stack_depot_save_flags+0x40/0x900
[  259.988035][T13034]  ? __pfx_warn_alloc+0x10/0x10
[  259.988054][T13034]  ? kasan_save_track+0x4f/0x80
[  259.988078][T13034]  ? xskq_create+0x56/0x170
[  259.988098][T13034]  ? xsk_init_queue+0xb0/0x110
[  259.988118][T13034]  ? xsk_setsockopt+0x4dc/0x8d0
[  259.988136][T13034]  ? do_sock_setsockopt+0x17c/0x1b0
[  259.988151][T13034]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  259.988165][T13034]  ? do_syscall_64+0xfa/0x3b0
[  259.988189][T13034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.988215][T13034]  __vmalloc_node_range_noprof+0x125/0x12f0
[  259.988264][T13034]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  259.988284][T13034]  ? xskq_create+0x56/0x170
[  259.988316][T13034]  ? __kasan_kmalloc+0x93/0xb0
[  259.988343][T13034]  vmalloc_user_noprof+0xad/0xf0
[  259.988362][T13034]  ? xskq_create+0xbf/0x170
[  259.988385][T13034]  xskq_create+0xbf/0x170
[  259.988411][T13034]  xsk_init_queue+0xb0/0x110
[  259.988437][T13034]  xsk_setsockopt+0x4dc/0x8d0
[  259.988460][T13034]  ? __pfx_xsk_setsockopt+0x10/0x10
[  259.988482][T13034]  ? __pfx_aa_sk_perm+0x10/0x10
[  259.988509][T13034]  ? aa_sock_opt_perm+0x74/0x110
[  259.988533][T13034]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  259.988551][T13034]  ? __pfx_xsk_setsockopt+0x10/0x10
[  259.988575][T13034]  do_sock_setsockopt+0x17c/0x1b0
[  259.988599][T13034]  __x64_sys_setsockopt+0x13f/0x1b0
[  259.988624][T13034]  do_syscall_64+0xfa/0x3b0
[  259.988647][T13034]  ? lockdep_hardirqs_on+0x9c/0x150
[  259.988668][T13034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.988685][T13034]  ? clear_bhb_loop+0x60/0xb0
[  259.988706][T13034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.988723][T13034] RIP: 0033:0x7feb7138eb69
[  259.988740][T13034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.988754][T13034] RSP: 002b:00007feb72116038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  259.988776][T13034] RAX: ffffffffffffffda RBX: 00007feb715b5fa0 RCX: 00007feb7138eb69
[  259.988790][T13034] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  259.988802][T13034] RBP: 00007feb71411df1 R08: 0000000000000004 R09: 0000000000000000
[  259.988818][T13034] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.988830][T13034] R13: 0000000000000000 R14: 00007feb715b5fa0 R15: 00007ffea1831fc8
[  259.988860][T13034]  </TASK>
[  260.341147][T13034] Mem-Info:
[  260.344310][T13034] active_anon:8036 inactive_anon:0 isolated_anon:0
[  260.344310][T13034]  active_file:1931 inactive_file:39911 isolated_file:0
[  260.344310][T13034]  unevictable:768 dirty:233 writeback:0
[  260.344310][T13034]  slab_reclaimable:11522 slab_unreclaimable:129953
[  260.344310][T13034]  mapped:34627 shmem:4242 pagetables:1100
[  260.344310][T13034]  sec_pagetables:0 bounce:0
[  260.344310][T13034]  kernel_misc_reclaimable:0
[  260.344310][T13034]  free:1287023 free_pcp:19438 free_cma:0
[  260.389740][T13034] Node 0 active_anon:32144kB inactive_anon:0kB active_file:7724kB inactive_file:159440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138508kB dirty:932kB writeback:0kB shmem:15432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12904kB pagetables:4260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  260.397311][T13040] netlink: 'syz.1.1833': attribute type 12 has an invalid length.
[  260.423320][T13034] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  260.423378][T13034] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  260.423434][T13034] lowmem_reserve[]: 0 2500 2502 2502 2502
[  260.423475][T13034] Node 0 DMA32 free:1236388kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32100kB inactive_anon:0kB active_file:7724kB inactive_file:157608kB unevictable:1536kB writepending:932kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:55856kB local_pcp:35752kB free_cma:0kB
[  260.423531][T13034] lowmem_reserve[]: 0 0 1 1 1
[  260.423574][T13034] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  260.423626][T13034] lowmem_reserve[]: 0 0 0 0 0
[  260.423670][T13034] Node 1 Normal free:3896328kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21676kB local_pcp:9824kB free_cma:0kB
[  260.423726][T13034] lowmem_reserve[]: 0 0 0 0 0
[  260.423769][T13034] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  260.617470][T13034] Node 0 DMA32: 1477*4kB (UM) 844*8kB (UME) 651*16kB (UM) 760*32kB (UM) 128*64kB (UME) 19*128kB (UME) 7*256kB (UME) 10*512kB (U) 10*1024kB (U) 9*2048kB (UM) 279*4096kB (M) = 1236388kB
[  260.635960][T13034] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  260.648184][T13034] Node 1 Normal: 196*4kB (UE) 49*8kB (UME) 33*16kB (UME) 79*32kB (UME) 32*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3896328kB
[  260.666685][T13040] __nla_validate_parse: 3 callbacks suppressed
[  260.666702][T13040] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1833'.
[  260.683004][T13034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  260.738343][T13042] netlink: 'syz.3.1834': attribute type 29 has an invalid length.
[  260.746796][T13034] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  260.778234][T13042] netlink: 'syz.3.1834': attribute type 29 has an invalid length.
[  260.798813][T13042] netlink: 508 bytes leftover after parsing attributes in process `syz.3.1834'.
[  260.811901][T13034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  260.859255][T13034] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  260.903946][T13034] 46082 total pagecache pages
[  260.928932][T13034] 0 pages in swap cache
[  260.956977][T13034] Free swap  = 124996kB
[  260.973413][T13034] Total swap = 124996kB
[  260.976472][T13051] gretap1: entered promiscuous mode
[  260.977599][T13034] 2097051 pages RAM
[  260.977610][T13034] 0 pages HighMem/MovableOnly
[  260.977618][T13034] 424872 pages reserved
[  260.977625][T13034] 0 pages cma reserved
[  261.001907][T13051] gretap1: entered allmulticast mode
[  261.122747][T13048] lo speed is unknown, defaulting to 1000
[  261.215067][T13065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'.
[  261.256115][T13065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'.
[  261.457846][T13071] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1843'.
[  261.483033][T13071] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1843'.
[  261.496233][T13071] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1843'.
[  261.568819][T13077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1843'.
[  261.570545][T13076] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.659630][T13076] bond0: (slave rose0): Enslaving as an active interface with an up link
[  261.814748][T13083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1846'.
[  261.828166][T13085] netlink: 'syz.2.1848': attribute type 8 has an invalid length.
[  262.013923][T13083] bond2: entered promiscuous mode
[  262.019006][T13083] bond2: entered allmulticast mode
[  262.062003][T13083] 8021q: adding VLAN 0 to HW filter on device bond2
[  262.083159][T13082] lo speed is unknown, defaulting to 1000
[  262.310830][T13099] FAULT_INJECTION: forcing a failure.
[  262.310830][T13099] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.324909][T13099] CPU: 1 UID: 0 PID: 13099 Comm: syz.4.1850 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  262.324935][T13099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  262.324946][T13099] Call Trace:
[  262.324954][T13099]  <TASK>
[  262.324962][T13099]  dump_stack_lvl+0x189/0x250
[  262.324987][T13099]  ? __pfx____ratelimit+0x10/0x10
[  262.325011][T13099]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.325030][T13099]  ? __pfx__printk+0x10/0x10
[  262.325066][T13099]  should_fail_ex+0x414/0x560
[  262.325096][T13099]  _copy_to_user+0x31/0xb0
[  262.325123][T13099]  simple_read_from_buffer+0xe1/0x170
[  262.325154][T13099]  proc_fail_nth_read+0x1b3/0x220
[  262.325179][T13099]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  262.325203][T13099]  ? rw_verify_area+0x258/0x650
[  262.325225][T13099]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  262.325247][T13099]  vfs_read+0x1fd/0x980
[  262.325269][T13099]  ? fdget_pos+0x247/0x320
[  262.325291][T13099]  ? __pfx___mutex_lock+0x10/0x10
[  262.325316][T13099]  ? __pfx_vfs_read+0x10/0x10
[  262.325362][T13099]  ? __fget_files+0x2a/0x420
[  262.325384][T13099]  ? __fget_files+0x3a0/0x420
[  262.325399][T13099]  ? __fget_files+0x2a/0x420
[  262.325427][T13099]  ksys_read+0x145/0x250
[  262.325453][T13099]  ? __pfx_ksys_read+0x10/0x10
[  262.325482][T13099]  ? do_syscall_64+0xbe/0x3b0
[  262.325510][T13099]  do_syscall_64+0xfa/0x3b0
[  262.325533][T13099]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.325555][T13099]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.325573][T13099]  ? clear_bhb_loop+0x60/0xb0
[  262.325595][T13099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.325611][T13099] RIP: 0033:0x7feb7138d57c
[  262.325628][T13099] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  262.325643][T13099] RSP: 002b:00007feb72116030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  262.325663][T13099] RAX: ffffffffffffffda RBX: 00007feb715b5fa0 RCX: 00007feb7138d57c
[  262.325677][T13099] RDX: 000000000000000f RSI: 00007feb721160a0 RDI: 0000000000000005
[  262.325688][T13099] RBP: 00007feb72116090 R08: 0000000000000000 R09: 0000000000000000
[  262.325699][T13099] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  262.325710][T13099] R13: 0000000000000000 R14: 00007feb715b5fa0 R15: 00007ffea1831fc8
[  262.325742][T13099]  </TASK>
[  262.420852][T13098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.620415][T13098] syzkaller0: entered promiscuous mode
[  262.644619][T13098] syzkaller0: entered allmulticast mode
[  262.744258][T13098] tipc: Resetting bearer <eth:syzkaller0>
[  262.812380][T13082] netlink: 'syz.1.1847': attribute type 13 has an invalid length.
[  262.864311][T13108] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1853'.
[  262.885340][T13109] delete_channel: no stack
[  263.118011][T13096] tipc: Resetting bearer <eth:syzkaller0>
[  263.258157][T13096] tipc: Disabling bearer <eth:syzkaller0>
[  263.343875][T13131] netlink: 'syz.0.1859': attribute type 29 has an invalid length.
[  263.372440][T13131] netlink: 'syz.0.1859': attribute type 29 has an invalid length.
[  263.536560][T13139] veth7: entered promiscuous mode
[  263.801455][T13163] netlink: 'syz.0.1870': attribute type 15 has an invalid length.
[  263.979325][T13167] tun0: tun_chr_ioctl cmd 2147767520
[  264.073324][T13169] 8021q: adding VLAN 0 to HW filter on device bond4
[  264.081458][T13169] bridge0: port 2(bond4) entered blocking state
[  264.092047][T13169] bridge0: port 2(bond4) entered disabled state
[  264.105717][T13169] bond4: entered allmulticast mode
[  264.137689][T13169] bond4: entered promiscuous mode
[  264.644473][T13193] bridge4: entered promiscuous mode
[  264.658774][T13193] macsec1: entered promiscuous mode
[  264.675859][T13193] macsec1: entered allmulticast mode
[  264.700948][T13193] bridge4: entered allmulticast mode
[  264.707726][T13193] bridge4: port 1(macsec1) entered blocking state
[  264.736067][T13193] bridge4: port 1(macsec1) entered disabled state
[  264.795865][T13193] bridge4: left allmulticast mode
[  264.802618][T13193] bridge4: left promiscuous mode
[  264.942028][T13199] lo speed is unknown, defaulting to 1000
[  265.182176][T13207] netlink: 'syz.0.1880': attribute type 11 has an invalid length.
[  265.222711][T13203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.267069][T13203] syzkaller0: entered promiscuous mode
[  265.295825][T13203] syzkaller0: entered allmulticast mode
[  265.669859][T13218] __nla_validate_parse: 5 callbacks suppressed
[  265.669877][T13218] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1884'.
[  265.714731][T13218] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1884'.
[  265.722120][T13221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1884'.
[  265.736446][T13218] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1884'.
[  265.871333][T13201] tipc: Resetting bearer <eth:syzkaller0>
[  265.903922][T13201] tipc: Disabling bearer <eth:syzkaller0>
[  266.589537][T13256] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  266.609647][T13256] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  266.753261][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1896'.
[  266.777052][T13265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1896'.
[  266.986536][T13273] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1899'.
[  267.000709][T13273] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1899'.
[  267.009956][T13273] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1899'.
[  267.026749][T13273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1899'.
[  267.256100][T13284] lo speed is unknown, defaulting to 1000
[  267.653531][T13297] netlink: 'syz.3.1904': attribute type 29 has an invalid length.
[  267.702725][T13297] netlink: 'syz.3.1904': attribute type 29 has an invalid length.
[  268.057777][T13313] syzkaller1: entered promiscuous mode
[  268.066153][T13313] syzkaller1: entered allmulticast mode
[  268.112007][T13313] bond3 (unregistering): Released all slaves
[  268.580212][T13344] netlink: 'syz.3.1919': attribute type 29 has an invalid length.
[  268.592213][T13344] netlink: 'syz.3.1919': attribute type 29 has an invalid length.
[  269.001480][T13356] IPv6: Can't replace route, no match found
[  269.035482][T13364] lo speed is unknown, defaulting to 1000
[  269.339905][T13355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.423748][T13388] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.110926][T13427] netlink: 'syz.0.1943': attribute type 29 has an invalid length.
[  270.127179][T13427] netlink: 'syz.0.1943': attribute type 29 has an invalid length.
[  270.298040][T13433] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  270.501918][T13450] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.910228][T13469] lo speed is unknown, defaulting to 1000
[  270.984161][T13475] warn_alloc: 4 callbacks suppressed
[  270.984186][T13475] syz.1.1957: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  271.018636][T13477] netlink: 'syz.0.1958': attribute type 29 has an invalid length.
[  271.027681][T13475] CPU: 0 UID: 0 PID: 13475 Comm: syz.1.1957 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  271.027710][T13475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  271.027722][T13475] Call Trace:
[  271.027730][T13475]  <TASK>
[  271.027739][T13475]  dump_stack_lvl+0x189/0x250
[  271.027767][T13475]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.027787][T13475]  ? __pfx__printk+0x10/0x10
[  271.027809][T13475]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  271.027831][T13475]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  271.027854][T13475]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  271.027878][T13475]  warn_alloc+0x214/0x310
[  271.027897][T13475]  ? stack_depot_save_flags+0x40/0x900
[  271.027918][T13475]  ? __pfx_warn_alloc+0x10/0x10
[  271.027937][T13475]  ? kasan_save_track+0x4f/0x80
[  271.027959][T13475]  ? xskq_create+0x56/0x170
[  271.027980][T13475]  ? xsk_init_queue+0xb0/0x110
[  271.027999][T13475]  ? xsk_setsockopt+0x4dc/0x8d0
[  271.028017][T13475]  ? do_sock_setsockopt+0x17c/0x1b0
[  271.028033][T13475]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  271.028046][T13475]  ? do_syscall_64+0xfa/0x3b0
[  271.028067][T13475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.028093][T13475]  __vmalloc_node_range_noprof+0x125/0x12f0
[  271.028138][T13475]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  271.028162][T13475]  ? __kasan_kmalloc+0x93/0xb0
[  271.028188][T13475]  vmalloc_user_noprof+0xad/0xf0
[  271.028206][T13475]  ? xskq_create+0xbf/0x170
[  271.028228][T13475]  xskq_create+0xbf/0x170
[  271.028253][T13475]  xsk_init_queue+0xb0/0x110
[  271.028277][T13475]  xsk_setsockopt+0x4dc/0x8d0
[  271.028300][T13475]  ? __pfx_xsk_setsockopt+0x10/0x10
[  271.028321][T13475]  ? __pfx_aa_sk_perm+0x10/0x10
[  271.028348][T13475]  ? aa_sock_opt_perm+0x74/0x110
[  271.028372][T13475]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  271.028392][T13475]  ? __pfx_xsk_setsockopt+0x10/0x10
[  271.028424][T13475]  do_sock_setsockopt+0x17c/0x1b0
[  271.028449][T13475]  __x64_sys_setsockopt+0x13f/0x1b0
[  271.028474][T13475]  do_syscall_64+0xfa/0x3b0
[  271.028498][T13475]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.028523][T13475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.028541][T13475]  ? clear_bhb_loop+0x60/0xb0
[  271.028564][T13475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.028581][T13475] RIP: 0033:0x7f2829d8eb69
[  271.028599][T13475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.028614][T13475] RSP: 002b:00007f282ac74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  271.028635][T13475] RAX: ffffffffffffffda RBX: 00007f2829fb5fa0 RCX: 00007f2829d8eb69
[  271.028650][T13475] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  271.028662][T13475] RBP: 00007f2829e11df1 R08: 0000000000000004 R09: 0000000000000000
[  271.028677][T13475] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.028689][T13475] R13: 0000000000000000 R14: 00007f2829fb5fa0 R15: 00007ffcacafb5f8
[  271.028721][T13475]  </TASK>
[  271.325239][T13475] Mem-Info:
[  271.328384][T13475] active_anon:5155 inactive_anon:0 isolated_anon:0
[  271.328384][T13475]  active_file:1931 inactive_file:39915 isolated_file:0
[  271.328384][T13475]  unevictable:768 dirty:243 writeback:0
[  271.328384][T13475]  slab_reclaimable:11722 slab_unreclaimable:129405
[  271.328384][T13475]  mapped:29704 shmem:1375 pagetables:1067
[  271.328384][T13475]  sec_pagetables:0 bounce:0
[  271.328384][T13475]  kernel_misc_reclaimable:0
[  271.328384][T13475]  free:1293853 free_pcp:15779 free_cma:0
[  271.378147][T13477] netlink: 'syz.0.1958': attribute type 29 has an invalid length.
[  271.441708][T13475] Node 0 active_anon:20520kB inactive_anon:0kB active_file:7724kB inactive_file:159456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118716kB dirty:972kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12948kB pagetables:4028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  271.551092][T13475] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  271.565840][T13482] __nla_validate_parse: 19 callbacks suppressed
[  271.565859][T13482] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1961'.
[  271.582802][T13475] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  271.582864][T13475] lowmem_reserve[]: 0 2500 2502 2502 2502
[  271.582906][T13475] Node 0 DMA32 free:1263848kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20176kB inactive_anon:0kB active_file:7724kB inactive_file:157624kB unevictable:1536kB writepending:972kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:41020kB local_pcp:18352kB free_cma:0kB
[  271.582962][T13475] lowmem_reserve[]: 0
[  271.666372][T13482] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1961'.
[  271.692113][T13475]  0 1 1 1
[  271.696978][T13475] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  271.745358][T13482] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1961'.
[  271.764701][T13484] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1959'.
[  271.792534][T13491] syzkaller1: entered promiscuous mode
[  271.823844][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1961'.
[  271.834446][T13491] syzkaller1: entered allmulticast mode
[  271.840958][T13475] lowmem_reserve[]: 0 0 0 0 0
[  271.866069][T13475] Node 1 Normal free:3896328kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21676kB local_pcp:11852kB free_cma:0kB
[  271.911685][T13475] lowmem_reserve[]: 0 0 0 0 0
[  271.916546][T13475] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  271.940784][T13475] Node 0 DMA32: 2214*4kB (UME) 956*8kB (UME) 531*16kB (UME) 774*32kB (UME) 195*64kB (UM) 39*128kB (UM) 12*256kB (UME) 9*512kB (UM) 15*1024kB (UM) 8*2048kB (UM) 280*4096kB (UM) = 1253544kB
[  271.981868][T13475] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  271.997871][T13475] Node 1 Normal: 196*4kB (UE) 49*8kB (UME) 33*16kB (UME) 79*32kB (UME) 32*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3896328kB
[  272.023821][T13475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  272.033981][T13496] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1963'.
[  272.035173][T13475] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  272.065241][T13475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  272.086379][T13475] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  272.095880][T13475] 44372 total pagecache pages
[  272.105659][T13475] 0 pages in swap cache
[  272.117256][T13475] Free swap  = 124996kB
[  272.127083][T13475] Total swap = 124996kB
[  272.132692][T13475] 2097051 pages RAM
[  272.136596][T13475] 0 pages HighMem/MovableOnly
[  272.146796][T13475] 424872 pages reserved
[  272.153129][T13475] 0 pages cma reserved
[  272.554200][T13508] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1967'.
[  272.581574][T13508] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1967'.
[  272.615231][T13508] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1967'.
[  272.648119][T13513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1967'.
[  274.285958][T13590] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  274.344906][T13581] lo speed is unknown, defaulting to 1000
[  274.403699][T13590] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  274.483387][T13590] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  274.564047][T13590] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  274.755522][ T7347] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  274.798530][T13609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.802516][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  274.847114][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  274.874681][T13610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.898977][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  274.950241][T13609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  275.441186][T13641] bpq0: entered promiscuous mode
[  275.446381][T13641] bpq0: left allmulticast mode
[  275.462641][T13643] netlink: 'syz.1.2007': attribute type 9 has an invalid length.
[  275.472587][T13643] netlink: 'syz.1.2007': attribute type 7 has an invalid length.
[  275.484253][T13643] netlink: 'syz.1.2007': attribute type 8 has an invalid length.
[  275.745531][T13654] netlink: 'syz.1.2011': attribute type 303 has an invalid length.
[  275.950755][T13678] wg1: entered promiscuous mode
[  275.981047][T13678] wg1: entered allmulticast mode
[  276.197693][T13690] syzkaller0: entered promiscuous mode
[  276.203967][T13690] syzkaller0: entered allmulticast mode
[  276.228752][T13695] 8021q: VLANs not supported on sit0
[  276.423508][T13704] lo speed is unknown, defaulting to 1000
[  277.246135][T13740] __nla_validate_parse: 27 callbacks suppressed
[  277.246155][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'.
[  277.265560][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'.
[  278.350281][T13746] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2032'.
[  278.370111][T13746] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2032'.
[  278.382099][T13746] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2032'.
[  278.411210][T13746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2032'.
[  278.802990][   T25] block nbd0: Possible stuck request ffff888024fee000: control (read@0,1024B). Runtime 180 seconds
[  278.813937][   T25] block nbd0: Possible stuck request ffff888024fee1c0: control (read@1024,1024B). Runtime 180 seconds
[  278.825184][   T25] block nbd0: Possible stuck request ffff888024fee380: control (read@2048,1024B). Runtime 180 seconds
[  278.836306][   T25] block nbd0: Possible stuck request ffff888024fee540: control (read@3072,1024B). Runtime 180 seconds
[  279.044887][T13780] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2038'.
[  279.360866][T13796] netlink: 'syz.1.2042': attribute type 9 has an invalid length.
[  279.368638][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'.
[  279.400434][T13796] macvlan5: entered promiscuous mode
[  279.405775][T13796] vlan1: entered promiscuous mode
[  279.436336][T13796] macvlan5: entered allmulticast mode
[  279.453076][T13796] vlan1: entered allmulticast mode
[  279.458237][T13796] veth0_vlan: entered allmulticast mode
[  279.534499][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'.
[  279.600331][T13799] lo speed is unknown, defaulting to 1000
[  279.792110][T13821] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2047'.
[  279.908674][   T30] audit: type=1800 audit(1754133320.311:8): pid=13825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2047" name=0A dev="tmpfs" ino=2032 res=0 errno=0
[  280.168076][T13831] vlan3: entered promiscuous mode
[  280.178728][T13831] bridge0: entered promiscuous mode
[  280.256377][T13829] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  280.740496][T13853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.855614][T13860] netlink: 'syz.1.2058': attribute type 2 has an invalid length.
[  280.880580][T13860] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  280.892614][T13863] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001
[  281.086634][T13869] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.114842][T13869] syzkaller0: entered promiscuous mode
[  281.122961][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  281.141459][T13869] syzkaller0: entered allmulticast mode
[  281.262769][T13869] tipc: Resetting bearer <eth:syzkaller0>
[  281.386373][T13888] syzkaller1: entered promiscuous mode
[  281.407791][T13888] syzkaller1: entered allmulticast mode
[  281.433870][T13888] netlink: 'syz.2.2064': attribute type 6 has an invalid length.
[  281.533254][ T3550] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  281.533359][T13888] netlink: 'syz.2.2064': attribute type 6 has an invalid length.
[  281.547752][ T3550] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  281.562493][ T3550] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  281.578828][ T3550] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  281.774045][T13867] tipc: Resetting bearer <eth:syzkaller0>
[  281.833757][T13867] tipc: Disabling bearer <eth:syzkaller0>
[  281.860207][T13910] netlink: 'syz.3.2069': attribute type 1 has an invalid length.
[  281.982689][T13910] bond3: (slave gretap1): making interface the new active one
[  281.991068][T13910] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  282.159320][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  282.198565][T13929] netlink: 'syz.3.2076': attribute type 1 has an invalid length.
[  282.446349][T13935] lo speed is unknown, defaulting to 1000
[  282.534688][T13948] __nla_validate_parse: 21 callbacks suppressed
[  282.534706][T13948] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2083'.
[  282.556355][T13948] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2083'.
[  282.577910][T13948] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2083'.
[  282.649921][T13953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2083'.
[  283.201777][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  283.405122][T13975] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  283.559017][T13981] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  283.764489][T13992] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2094'.
[  283.894263][T13995] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2097'.
[  284.130919][T14004] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2100'.
[  284.143025][T14004] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2100'.
[  284.165936][T14004] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2100'.
[  284.215454][T14012] warn_alloc: 1 callbacks suppressed
[  284.215473][T14012] syz.4.2102: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  284.227474][T14004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2100'.
[  284.249253][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  284.258873][T14012] ,cpuset=/,mems_allowed=0-1
[  284.263743][T14012] CPU: 0 UID: 0 PID: 14012 Comm: syz.4.2102 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  284.263770][T14012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  284.263782][T14012] Call Trace:
[  284.263791][T14012]  <TASK>
[  284.263799][T14012]  dump_stack_lvl+0x189/0x250
[  284.263827][T14012]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.263847][T14012]  ? __pfx__printk+0x10/0x10
[  284.263869][T14012]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  284.263889][T14012]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  284.263909][T14012]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  284.263934][T14012]  warn_alloc+0x214/0x310
[  284.263953][T14012]  ? stack_depot_save_flags+0x40/0x900
[  284.263976][T14012]  ? __pfx_warn_alloc+0x10/0x10
[  284.263994][T14012]  ? kasan_save_track+0x4f/0x80
[  284.264015][T14012]  ? xskq_create+0x56/0x170
[  284.264033][T14012]  ? xsk_init_queue+0xb0/0x110
[  284.264048][T14012]  ? xsk_setsockopt+0x4dc/0x8d0
[  284.264064][T14012]  ? do_sock_setsockopt+0x17c/0x1b0
[  284.264077][T14012]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  284.264103][T14012]  ? do_syscall_64+0xfa/0x3b0
[  284.264123][T14012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.264146][T14012]  __vmalloc_node_range_noprof+0x125/0x12f0
[  284.264187][T14012]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  284.264207][T14012]  ? __kasan_kmalloc+0x93/0xb0
[  284.264231][T14012]  vmalloc_user_noprof+0xad/0xf0
[  284.264245][T14012]  ? xskq_create+0xbf/0x170
[  284.264264][T14012]  xskq_create+0xbf/0x170
[  284.264285][T14012]  xsk_init_queue+0xb0/0x110
[  284.264305][T14012]  xsk_setsockopt+0x4dc/0x8d0
[  284.264325][T14012]  ? __pfx_xsk_setsockopt+0x10/0x10
[  284.264343][T14012]  ? __pfx_aa_sk_perm+0x10/0x10
[  284.264364][T14012]  ? aa_sock_opt_perm+0x74/0x110
[  284.264384][T14012]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  284.264399][T14012]  ? __pfx_xsk_setsockopt+0x10/0x10
[  284.264418][T14012]  do_sock_setsockopt+0x17c/0x1b0
[  284.264436][T14012]  __x64_sys_setsockopt+0x13f/0x1b0
[  284.264456][T14012]  do_syscall_64+0xfa/0x3b0
[  284.264474][T14012]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.264493][T14012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.264507][T14012]  ? clear_bhb_loop+0x60/0xb0
[  284.264524][T14012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.264538][T14012] RIP: 0033:0x7feb7138eb69
[  284.264552][T14012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.264565][T14012] RSP: 002b:00007feb72116038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  284.264581][T14012] RAX: ffffffffffffffda RBX: 00007feb715b5fa0 RCX: 00007feb7138eb69
[  284.264592][T14012] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  284.264601][T14012] RBP: 00007feb71411df1 R08: 0000000000000004 R09: 0000000000000000
[  284.264610][T14012] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.264619][T14012] R13: 0000000000000000 R14: 00007feb715b5fa0 R15: 00007ffea1831fc8
[  284.264643][T14012]  </TASK>
[  284.264728][T14012] Mem-Info:
[  284.577234][T14012] active_anon:5182 inactive_anon:0 isolated_anon:0
[  284.577234][T14012]  active_file:1931 inactive_file:39921 isolated_file:0
[  284.577234][T14012]  unevictable:768 dirty:268 writeback:0
[  284.577234][T14012]  slab_reclaimable:11607 slab_unreclaimable:133114
[  284.577234][T14012]  mapped:29656 shmem:1385 pagetables:1112
[  284.577234][T14012]  sec_pagetables:0 bounce:0
[  284.577234][T14012]  kernel_misc_reclaimable:0
[  284.577234][T14012]  free:1285844 free_pcp:18519 free_cma:0
[  284.623503][T14012] Node 0 active_anon:20728kB inactive_anon:0kB active_file:7724kB inactive_file:159480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118724kB dirty:1072kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13164kB pagetables:4308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  284.753569][T14012] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  284.800943][T14012] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  284.901749][T14012] lowmem_reserve[]: 0 2500 2502 2502 2502
[  284.925568][T14012] Node 0 DMA32 free:1248028kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20660kB inactive_anon:0kB active_file:7724kB inactive_file:157648kB unevictable:1536kB writepending:1080kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:54960kB local_pcp:28352kB free_cma:0kB
[  284.966603][T14012] lowmem_reserve[]: 0 0 1 1 1
[  284.972015][T14012] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  285.067109][T14012] lowmem_reserve[]: 0 0 0 0 0
[  285.094774][T14012] Node 1 Normal free:3896328kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21740kB local_pcp:9888kB free_cma:0kB
[  285.183519][T14012] lowmem_reserve[]: 0 0 0 0 0
[  285.188325][T14012] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  285.263869][T14012] Node 0 DMA32: 1678*4kB (UME) 426*8kB (UME) 138*16kB (UME) 754*32kB (UME) 218*64kB (UME) 46*128kB (UME) 14*256kB (UME) 9*512kB (UM) 15*1024kB (UM) 6*2048kB (M) 283*4096kB (UM) = 1251304kB
[  285.285322][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  285.306755][T14012] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  285.385585][T14012] Node 1 Normal: 196*4kB (UE) 49*8kB (UME) 33*16kB (UME) 79*32kB (UME) 32*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3896328kB
[  285.449127][T14012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  285.508582][T14012] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  285.537934][T14012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  285.599312][T14012] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  285.626800][T14012] 44248 total pagecache pages
[  285.646318][T14012] 0 pages in swap cache
[  285.669006][T14012] Free swap  = 124996kB
[  285.674816][T14012] Total swap = 124996kB
[  285.690629][T14012] 2097051 pages RAM
[  285.694494][T14012] 0 pages HighMem/MovableOnly
[  285.719176][T14012] 424872 pages reserved
[  285.723369][T14012] 0 pages cma reserved
[  286.319204][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  287.360622][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  288.399266][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  288.692712][ T5207] udevd[5207]: worker [5839] /devices/virtual/block/nbd0 timeout; kill it
[  288.702652][ T5207] udevd[5207]: seq 11599 '/devices/virtual/block/nbd0' killed
[  289.440626][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  290.479230][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  291.520548][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  292.559242][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  293.600472][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  294.639230][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  295.680524][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  296.719476][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  297.761737][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  298.799227][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  299.841729][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  300.879229][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  301.920651][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  302.959227][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  304.000386][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  305.039466][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  306.080550][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  307.119210][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  308.160515][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  308.882237][   T25] block nbd0: Possible stuck request ffff888024fee000: control (read@0,1024B). Runtime 210 seconds
[  308.893020][   T25] block nbd0: Possible stuck request ffff888024fee1c0: control (read@1024,1024B). Runtime 210 seconds
[  308.904003][   T25] block nbd0: Possible stuck request ffff888024fee380: control (read@2048,1024B). Runtime 210 seconds
[  308.914989][   T25] block nbd0: Possible stuck request ffff888024fee540: control (read@3072,1024B). Runtime 210 seconds
[  309.199235][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  310.240532][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  311.279238][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  312.321756][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  313.359217][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  314.401727][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  315.439189][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  316.480660][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  317.519196][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  318.560521][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  319.599251][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  320.640487][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  321.679218][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  322.720660][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  323.759220][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  324.801785][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  325.839193][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  326.881766][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  327.919229][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  328.960552][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  329.999227][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  331.040577][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  332.079213][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  333.120530][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  334.159219][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  335.200661][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  336.239222][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  337.280537][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  338.319189][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  338.969283][   T25] block nbd0: Possible stuck request ffff888024fee000: control (read@0,1024B). Runtime 240 seconds
[  338.980295][   T25] block nbd0: Possible stuck request ffff888024fee1c0: control (read@1024,1024B). Runtime 240 seconds
[  338.991305][   T25] block nbd0: Possible stuck request ffff888024fee380: control (read@2048,1024B). Runtime 240 seconds
[  339.002292][   T25] block nbd0: Possible stuck request ffff888024fee540: control (read@3072,1024B). Runtime 240 seconds
[  339.361741][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  340.399225][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  341.440537][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  342.479222][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  343.520419][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  344.559238][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  345.601656][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  346.639217][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  347.681422][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  348.719252][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  349.075165][T14133] __nla_validate_parse: 7 callbacks suppressed
[  349.075183][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2123'.
[  349.434216][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2128'.
[  349.609792][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2129'.
[  349.761622][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  350.203350][T14179] lo speed is unknown, defaulting to 1000
[  350.292219][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'.
[  350.303809][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'.
[  350.318798][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'.
[  350.377255][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'.
[  350.393105][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'.
[  350.414155][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'.
[  350.423957][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'.
[  350.465026][T14182] gretap1: left promiscuous mode
[  350.471004][T14182] gretap1: left allmulticast mode
[  350.524227][ T7347] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  350.533911][ T7347] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  350.567155][ T7347] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  350.621091][ T7347] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  350.799142][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  351.362792][T14206] syzkaller1: entered promiscuous mode
[  351.378565][T14206] syzkaller1: entered allmulticast mode
[  351.841719][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  352.412280][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  352.433611][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  352.472556][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  352.495685][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  352.521151][T14244] lo speed is unknown, defaulting to 1000
[  352.657204][T14248] lo speed is unknown, defaulting to 1000
[  352.879281][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  353.142407][T14268] pimreg: entered allmulticast mode
[  353.283628][T14271] netlink: 'syz.3.2154': attribute type 1 has an invalid length.
[  353.341182][T14268] pimreg: left allmulticast mode
[  353.409717][T14276] bpq0: left promiscuous mode
[  353.428879][T14276] netlink: 'syz.1.2155': attribute type 1 has an invalid length.
[  353.509043][T14276] bond5: entered promiscuous mode
[  353.514618][T14276] 8021q: adding VLAN 0 to HW filter on device bond5
[  353.583803][T14277] bond5: (slave bridge4): making interface the new active one
[  353.613858][T14277] bridge4: entered promiscuous mode
[  353.636981][T14277] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  353.921529][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  354.009882][ T5902] IPVS: starting estimator thread 0...
[  354.099282][T14301] IPVS: using max 33 ests per chain, 79200 per kthread
[  354.132345][T14307] __nla_validate_parse: 79 callbacks suppressed
[  354.132364][T14307] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2165'.
[  354.148557][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'.
[  354.379853][T14318] bridge0: port 1(erspan0) entered blocking state
[  354.409504][T14318] bridge0: port 1(erspan0) entered disabled state
[  354.416243][T14318] erspan0: entered allmulticast mode
[  354.447937][T14318] erspan0: entered promiscuous mode
[  354.492691][T14328] erspan0: left allmulticast mode
[  354.545949][T14328] erspan0: left promiscuous mode
[  354.553040][T14328] bridge0: port 1(erspan0) entered disabled state
[  354.959143][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  355.188511][T14354] lo speed is unknown, defaulting to 1000
[  355.302849][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2182'.
[  355.443955][T14366] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  355.451488][T14369] netlink: 'syz.1.2185': attribute type 1 has an invalid length.
[  355.498952][T14369] 8021q: adding VLAN 0 to HW filter on device bond6
[  355.617507][T14369] bond6: (slave bridge5): making interface the new active one
[  355.628484][T14369] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  355.668212][T14371] gretap2: entered promiscuous mode
[  355.698886][T14371] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  356.001601][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  356.179550][T14392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2190'.
[  356.206208][T14393] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  356.231197][T14394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2190'.
[  356.512773][T14402] scsi_nl_rcv_msg: discarding partial skb
[  356.545169][T14409] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2195'.
[  356.572152][T14409] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2195'.
[  357.039151][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  357.072774][T14438] FAULT_INJECTION: forcing a failure.
[  357.072774][T14438] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  357.119911][T14438] CPU: 0 UID: 0 PID: 14438 Comm: syz.1.2203 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  357.119939][T14438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  357.119950][T14438] Call Trace:
[  357.119958][T14438]  <TASK>
[  357.119966][T14438]  dump_stack_lvl+0x189/0x250
[  357.119990][T14438]  ? __pfx____ratelimit+0x10/0x10
[  357.120015][T14438]  ? __pfx_dump_stack_lvl+0x10/0x10
[  357.120034][T14438]  ? __pfx__printk+0x10/0x10
[  357.120069][T14438]  should_fail_ex+0x414/0x560
[  357.120097][T14438]  _copy_to_user+0x31/0xb0
[  357.120121][T14438]  bpf_prog_test_run_syscall+0x331/0x4b0
[  357.120151][T14438]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  357.120182][T14438]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  357.120204][T14438]  bpf_prog_test_run+0x2c4/0x340
[  357.120232][T14438]  __sys_bpf+0x581/0x870
[  357.120256][T14438]  ? __pfx___sys_bpf+0x10/0x10
[  357.120290][T14438]  ? ksys_write+0x22a/0x250
[  357.120315][T14438]  ? __pfx_ksys_write+0x10/0x10
[  357.120343][T14438]  __x64_sys_bpf+0x7c/0x90
[  357.120362][T14438]  do_syscall_64+0xfa/0x3b0
[  357.120386][T14438]  ? lockdep_hardirqs_on+0x9c/0x150
[  357.120407][T14438]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.120422][T14438]  ? clear_bhb_loop+0x60/0xb0
[  357.120442][T14438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.120458][T14438] RIP: 0033:0x7f2829d8eb69
[  357.120475][T14438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  357.120489][T14438] RSP: 002b:00007f282ac74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  357.120511][T14438] RAX: ffffffffffffffda RBX: 00007f2829fb5fa0 RCX: 00007f2829d8eb69
[  357.120522][T14438] RDX: 0000000000000011 RSI: 00002000000007c0 RDI: 000000000000000a
[  357.120533][T14438] RBP: 00007f282ac74090 R08: 0000000000000000 R09: 0000000000000000
[  357.120542][T14438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  357.120581][T14438] R13: 0000000000000000 R14: 00007f2829fb5fa0 R15: 00007ffcacafb5f8
[  357.120611][T14438]  </TASK>
[  357.347370][T14443] syzkaller0: left promiscuous mode
[  357.358951][T14443] syzkaller0: left allmulticast mode
[  357.368141][T14443] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  357.389456][T14443] batadv0: entered promiscuous mode
[  357.395860][T14443] debugfs: 'hsr1' already exists in 'hsr'
[  357.401714][T14443] Cannot create hsr debugfs directory
[  357.407586][T14443] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  357.418585][T14443] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  357.429646][T14443] hsr1: entered allmulticast mode
[  357.434783][T14443] batadv0: entered allmulticast mode
[  357.449773][T14443] 8021q: adding VLAN 0 to HW filter on device hsr1
[  357.467691][T14447] netlink: 724 bytes leftover after parsing attributes in process `syz.2.2206'.
[  357.489809][T14447] netlink: 724 bytes leftover after parsing attributes in process `syz.2.2206'.
[  357.503605][T14443] batadv0: left promiscuous mode
[  357.582055][T14453] bond0: option mode: unable to set because the bond device is up
[  357.608242][T14460] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2206'.
[  357.765984][T14466] bridge0: port 1(gretap0) entered blocking state
[  357.775624][T14466] bridge0: port 1(gretap0) entered disabled state
[  357.803085][T14466] gretap0: entered allmulticast mode
[  357.817540][T14466] gretap0: entered promiscuous mode
[  357.894085][T14466] bridge0: port 1(gretap0) entered blocking state
[  357.900688][T14466] bridge0: port 1(gretap0) entered forwarding state
[  358.081755][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  358.134904][T14475] lo speed is unknown, defaulting to 1000
[  358.712873][T14516] netlink: 'syz.3.2225': attribute type 18 has an invalid length.
[  358.750374][T14516] netlink: 'syz.3.2225': attribute type 18 has an invalid length.
[  359.119239][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  359.425229][T14555] __nla_validate_parse: 10 callbacks suppressed
[  359.425247][T14555] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2234'.
[  360.161653][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  360.605578][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2246'.
[  360.706749][T14593] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2244'.
[  360.768636][T14604] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.887662][T14611] bpq0: entered promiscuous mode
[  360.904510][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2251'.
[  360.922026][T14613] gretap0: entered promiscuous mode
[  360.944271][T14613] macsec1: entered promiscuous mode
[  360.967922][T14613] gretap0: left promiscuous mode
[  361.034394][T14616] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2251'.
[  361.199284][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  361.291623][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2256'.
[  361.322402][T14630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2256'.
[  361.344639][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2256'.
[  361.369995][T14632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2256'.
[  361.482844][T14637] pim6reg: entered allmulticast mode
[  361.773940][T14647] syz_tun (unregistering): left promiscuous mode
[  362.242091][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  362.340619][T14680] lo speed is unknown, defaulting to 1000
[  362.532907][T14695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2274'.
[  362.911802][T14704] netlink: 'syz.3.2278': attribute type 1 has an invalid length.
[  363.279306][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  363.558968][T14733] lo speed is unknown, defaulting to 1000
[  363.641573][T14750] netlink: 'syz.3.2290': attribute type 2 has an invalid length.
[  364.247366][T14774] netlink: 'syz.3.2297': attribute type 1 has an invalid length.
[  364.304895][T14774] bond4: entered promiscuous mode
[  364.310534][T14774] 8021q: adding VLAN 0 to HW filter on device bond4
[  364.323249][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  364.509505][T14786] netlink: 'syz.3.2299': attribute type 1 has an invalid length.
[  364.577174][T14798] netlink: 'syz.0.2301': attribute type 1 has an invalid length.
[  365.129592][T14829] bridge0: port 2(erspan0) entered blocking state
[  365.169666][T14829] bridge0: port 2(erspan0) entered disabled state
[  365.176300][T14829] erspan0: entered allmulticast mode
[  365.221461][T14829] erspan0: entered promiscuous mode
[  365.353636][T14829] bridge0: port 2(erspan0) entered blocking state
[  365.360217][T14829] bridge0: port 2(erspan0) entered forwarding state
[  365.419403][T14835] erspan0: left allmulticast mode
[  365.459245][T14835] erspan0: left promiscuous mode
[  365.485540][T14835] bridge0: port 2(erspan0) entered disabled state
[  365.759464][T14874] __nla_validate_parse: 9 callbacks suppressed
[  365.759481][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'.
[  365.961921][T14884] lo speed is unknown, defaulting to 1000
[  366.337906][T14897] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2328'.
[  366.363912][T14897] netlink: zone id is out of range
[  366.369420][T14897] netlink: zone id is out of range
[  366.374861][T14897] netlink: zone id is out of range
[  366.380803][T14897] netlink: zone id is out of range
[  366.386777][T14897] netlink: zone id is out of range
[  366.392291][T14897] netlink: zone id is out of range
[  366.397634][T14897] netlink: zone id is out of range
[  366.405989][T14897] netlink: zone id is out of range
[  366.530145][T14903] geneve2: entered promiscuous mode
[  366.544467][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2329'.
[  366.585772][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  366.596130][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  366.615207][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  366.632886][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  366.657013][T14909] lo speed is unknown, defaulting to 1000
[  366.821651][T14925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2336'.
[  366.832197][T14926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2336'.
[  366.933226][T14932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2337'.
[  367.206055][ T5850] Bluetooth: hci4: link tx timeout
[  367.211699][ T5850] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  367.223899][T14946] syzkaller0: entered promiscuous mode
[  367.229692][T14946] syzkaller0: entered allmulticast mode
[  367.470612][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2344'.
[  367.479736][T14952] netlink: 'syz.4.2344': attribute type 21 has an invalid length.
[  367.663996][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2348'.
[  367.697959][T14967] lo speed is unknown, defaulting to 1000
[  367.713898][T14967] lo speed is unknown, defaulting to 1000
[  367.725450][T14967] lo speed is unknown, defaulting to 1000
[  368.044841][T14967] infiniband syz0: set down
[  368.049844][T14967] infiniband syz0: added lo
[  368.063062][ T5911] lo speed is unknown, defaulting to 1000
[  368.119766][T14967] RDS/IB: syz0: added
[  368.124784][T14967] smc: adding ib device syz0 with port count 1
[  368.155589][T14967] smc:    ib device syz0 port 1 has pnetid 
[  368.266697][T14982] syzkaller1: entered promiscuous mode
[  368.280149][T14982] syzkaller1: entered allmulticast mode
[  368.288820][ T5911] lo speed is unknown, defaulting to 1000
[  368.300717][T14967] lo speed is unknown, defaulting to 1000
[  368.573322][T15003] lo speed is unknown, defaulting to 1000
[  368.609498][ T5841] Bluetooth: hci4: link tx timeout
[  368.614659][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  368.620123][T15007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2358'.
[  368.622592][ T5841] Bluetooth: hci4: link tx timeout
[  368.636734][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  368.644463][ T5841] Bluetooth: hci4: link tx timeout
[  368.649828][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  368.683051][T14966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.713476][T14967] lo speed is unknown, defaulting to 1000
[  368.866786][T15003] lo speed is unknown, defaulting to 1000
[  369.015176][T14967] lo speed is unknown, defaulting to 1000
[  369.040648][   T25] block nbd0: Possible stuck request ffff888024fee000: control (read@0,1024B). Runtime 270 seconds
[  369.051642][   T25] block nbd0: Possible stuck request ffff888024fee1c0: control (read@1024,1024B). Runtime 270 seconds
[  369.062711][   T25] block nbd0: Possible stuck request ffff888024fee380: control (read@2048,1024B). Runtime 270 seconds
[  369.073818][   T25] block nbd0: Possible stuck request ffff888024fee540: control (read@3072,1024B). Runtime 270 seconds
[  369.231436][T15011] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2359'.
[  369.279265][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  369.377696][T14997] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  369.428260][T14967] lo speed is unknown, defaulting to 1000
[  370.008120][T15038] netlink: 'syz.3.2365': attribute type 10 has an invalid length.
[  370.056435][T15038] team0: Port device dummy0 added
[  370.103901][T15040] netlink: 'syz.3.2365': attribute type 10 has an invalid length.
[  370.251911][T15040] team0: Port device dummy0 removed
[  370.319442][T14967] lo speed is unknown, defaulting to 1000
[  370.416232][T15048] geneve2: entered promiscuous mode
[  370.435415][T15048] geneve2: entered allmulticast mode
[  371.479285][ T5850] Bluetooth: hci4: command 0x0405 tx timeout
[  371.583215][T15074] syzkaller1: entered promiscuous mode
[  371.617327][T15074] syzkaller1: entered allmulticast mode
[  371.891685][T15097] __nla_validate_parse: 2 callbacks suppressed
[  371.891704][T15097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2380'.
[  371.938238][T15097] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2380'.
[  371.943589][T15099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2380'.
[  371.975016][T15097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2380'.
[  372.228105][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2385'.
[  372.300537][T15116] team1: entered promiscuous mode
[  372.311381][T15116] team1: entered allmulticast mode
[  372.472747][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2387'.
[  372.550448][T15130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2389'.
[  372.613612][T15131] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2387'.
[  372.668790][T15134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2387'.
[  372.688167][T15131] net_ratelimit: 30 callbacks suppressed
[  372.688185][T15131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  372.744311][T15134] bridge5: entered promiscuous mode
[  372.787721][T15134] macsec1: entered promiscuous mode
[  372.824266][T15134] macsec1: entered allmulticast mode
[  372.850016][T15134] bridge5: entered allmulticast mode
[  372.873769][T15134] bridge5: port 1(macsec1) entered blocking state
[  372.881408][T15134] bridge5: port 1(macsec1) entered disabled state
[  372.974006][T15134] bridge5: left allmulticast mode
[  373.008219][T15134] bridge5: left promiscuous mode
[  373.061478][T15150] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2397'.
[  373.989497][T15198] lo speed is unknown, defaulting to 1000
[  374.013165][T15198] lo speed is unknown, defaulting to 1000
[  374.200872][T15208] netlink: 'syz.1.2412': attribute type 1 has an invalid length.
[  374.276810][T15212] vlan5: entered allmulticast mode
[  374.292715][T15212] bond8: entered allmulticast mode
[  375.604834][T15257] lo speed is unknown, defaulting to 1000
[  375.678434][T15257] lo speed is unknown, defaulting to 1000
[  375.853009][T15273] openvswitch: netlink: Flow key attr not present in new flow.
[  376.035377][T15278] veth0_to_bond: entered allmulticast mode
[  376.793364][T15305] netlink: 'syz.1.2444': attribute type 11 has an invalid length.
[  376.804049][T15306] netlink: 'syz.1.2444': attribute type 11 has an invalid length.
[  377.141000][T15317] __nla_validate_parse: 12 callbacks suppressed
[  377.141022][T15317] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2449'.
[  377.210537][T15325] netlink: 'syz.1.2452': attribute type 3 has an invalid length.
[  377.220964][T15327] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2450'.
[  377.254713][T15325] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  377.331324][T15329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2453'.
[  377.335559][T15325] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  377.340808][T15329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2453'.
[  377.365127][T15329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2453'.
[  377.374876][T15329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2453'.
[  377.541575][T15325] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  377.727518][T15325] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  377.786594][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2457'.
[  377.814411][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2457'.
[  377.904956][ T7345] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  377.952944][ T7345] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  377.992288][ T7345] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  378.002159][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2462'.
[  378.016577][ T7345] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  378.194804][T15370] netlink: 'syz.4.2464': attribute type 21 has an invalid length.
[  378.215992][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2465'.
[  378.228267][T15370] netlink: 'syz.4.2464': attribute type 1 has an invalid length.
[  378.392038][T15372] vlan1 (unregistering): left allmulticast mode
[  378.408704][T15372] veth0_vlan (unregistering): left allmulticast mode
[  378.417489][T15372] vlan1 (unregistering): left promiscuous mode
[  378.572197][T15387] netlink: 'syz.2.2468': attribute type 1 has an invalid length.
[  378.580939][T15387] netlink: 'syz.2.2468': attribute type 3 has an invalid length.
[  379.082847][T15421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  379.221821][T15430] netlink: 'syz.0.2482': attribute type 4 has an invalid length.
[  379.236012][T15430] netlink: 'syz.0.2482': attribute type 4 has an invalid length.
[  379.588152][T15442] !
: renamed from dummy0
[  379.847227][T15458] openvswitch: netlink: Flow actions attr not present in new flow.
[  379.858080][T15459] openvswitch: netlink: Flow actions attr not present in new flow.
[  380.148084][T15470] tap0: tun_chr_ioctl cmd 1074025677
[  380.163839][T15470] tap0: linktype set to 776
[  380.946153][T15503] netlink: 'syz.0.2499': attribute type 1 has an invalid length.
[  382.156302][T15560] lo speed is unknown, defaulting to 1000
[  382.175523][T15558] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  382.185024][T15560] lo speed is unknown, defaulting to 1000
[  382.283232][T15573] __nla_validate_parse: 19 callbacks suppressed
[  382.283252][T15573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2517'.
[  382.650832][T15595] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2527'.
[  382.963708][T15610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2532'.
[  382.985025][T15610] netlink: 560 bytes leftover after parsing attributes in process `syz.3.2532'.
[  382.996146][T15610] netlink: 'syz.3.2532': attribute type 1 has an invalid length.
[  383.055030][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2532'.
[  383.101212][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2532'.
[  383.200772][T15610] 8021q: adding VLAN 0 to HW filter on device bond5
[  383.215492][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2536'.
[  383.677973][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2540'.
[  383.734474][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2540'.
[  383.780443][T15636] geneve3: entered promiscuous mode
[  383.813845][T15636] geneve3: entered allmulticast mode
[  383.873846][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  383.889631][ T7345] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  383.932312][ T7345] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  383.972056][ T7345] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  384.072766][T15650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2544'.
[  384.130783][T15649] lo speed is unknown, defaulting to 1000
[  384.215069][T15649] lo speed is unknown, defaulting to 1000
[  384.299322][T15667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  384.306637][T15667] IPv6: NLM_F_CREATE should be set when creating new route
[  384.333142][T15667] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  384.356057][T15667] syzkaller0: entered promiscuous mode
[  384.369248][T15667] syzkaller0: entered allmulticast mode
[  384.375228][T15667] tipc: Resetting bearer <eth:syzkaller0>
[  384.645531][T15673] team0: Port device team_slave_0 removed
[  384.680885][T15673] team0: Port device team_slave_1 removed
[  384.697247][T15673] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  384.711760][T15673] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.741327][T15673] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.759418][T15673] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.791743][T15673] bond0: (slave bridge2): Releasing backup interface
[  384.799276][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  384.829988][T15673] bond3: (slave gretap1): Releasing active interface
[  386.032265][T15725] netlink: 'syz.2.2567': attribute type 1 has an invalid length.
[  386.124470][T15725] 8021q: adding VLAN 0 to HW filter on device bond8
[  386.152659][T15726] ipvlan0: entered allmulticast mode
[  386.158125][T15726] bond8: entered allmulticast mode
[  386.187618][T15725] bond8: (slave gretap2): making interface the new active one
[  386.195570][T15725] gretap2: entered allmulticast mode
[  386.202759][T15725] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  386.386782][T15745] netlink: 'syz.1.2573': attribute type 10 has an invalid length.
[  386.455042][T15745] !
: entered promiscuous mode
[  386.476483][T15745] !
: entered allmulticast mode
[  386.498002][T15745] bridge0: port 3(
0!
) entered blocking state
[  386.518426][T15745] bridge0: port 3(
0!
) entered disabled state
[  386.530560][T15757] netlink: 'syz.2.2576': attribute type 2 has an invalid length.
[  386.588289][T15756] lo speed is unknown, defaulting to 1000
[  386.641474][T15756] lo speed is unknown, defaulting to 1000
[  386.914849][T15774] netlink: 'syz.2.2582': attribute type 10 has an invalid length.
[  386.927397][T15774] team0: Port device dummy0 added
[  387.041511][T15766] netlink: 'syz.1.2579': attribute type 1 has an invalid length.
[  387.188115][T15782] netlink: 'syz.0.2583': attribute type 10 has an invalid length.
[  387.494379][T15803] FAULT_INJECTION: forcing a failure.
[  387.494379][T15803] name failslab, interval 1, probability 0, space 0, times 0
[  387.534974][T15803] CPU: 1 UID: 0 PID: 15803 Comm: syz.2.2590 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  387.535001][T15803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  387.535015][T15803] Call Trace:
[  387.535022][T15803]  <TASK>
[  387.535033][T15803]  dump_stack_lvl+0x189/0x250
[  387.535058][T15803]  ? __pfx____ratelimit+0x10/0x10
[  387.535082][T15803]  ? __pfx_dump_stack_lvl+0x10/0x10
[  387.535101][T15803]  ? __pfx__printk+0x10/0x10
[  387.535125][T15803]  ? __pfx___might_resched+0x10/0x10
[  387.535149][T15803]  ? fs_reclaim_acquire+0x7d/0x100
[  387.535186][T15803]  should_fail_ex+0x414/0x560
[  387.535219][T15803]  should_failslab+0xa8/0x100
[  387.535240][T15803]  __kmalloc_noprof+0xcb/0x4f0
[  387.535262][T15803]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  387.535290][T15803]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  387.535319][T15803]  genl_family_rcv_msg_doit+0xb8/0x300
[  387.535347][T15803]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  387.535370][T15803]  ? rcu_is_watching+0x15/0xb0
[  387.535398][T15803]  ? apparmor_capable+0x137/0x1b0
[  387.535418][T15803]  ? bpf_lsm_capable+0x9/0x20
[  387.535441][T15803]  ? security_capable+0x7e/0x2e0
[  387.535470][T15803]  genl_rcv_msg+0x60e/0x790
[  387.535498][T15803]  ? __pfx_genl_rcv_msg+0x10/0x10
[  387.535517][T15803]  ? __pfx_seg6_genl_sethmac+0x10/0x10
[  387.535552][T15803]  netlink_rcv_skb+0x205/0x470
[  387.535574][T15803]  ? __lock_acquire+0xab9/0xd20
[  387.535597][T15803]  ? __pfx_genl_rcv_msg+0x10/0x10
[  387.535619][T15803]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  387.535664][T15803]  ? down_read+0x1ad/0x2e0
[  387.535684][T15803]  genl_rcv+0x28/0x40
[  387.535701][T15803]  netlink_unicast+0x82c/0x9e0
[  387.535733][T15803]  ? __pfx_netlink_unicast+0x10/0x10
[  387.535758][T15803]  ? netlink_sendmsg+0x642/0xb30
[  387.535780][T15803]  ? skb_put+0x11b/0x210
[  387.535801][T15803]  netlink_sendmsg+0x805/0xb30
[  387.535836][T15803]  ? __pfx_netlink_sendmsg+0x10/0x10
[  387.535864][T15803]  ? aa_sock_msg_perm+0x94/0x160
[  387.535889][T15803]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  387.535907][T15803]  ? __pfx_netlink_sendmsg+0x10/0x10
[  387.535932][T15803]  __sock_sendmsg+0x219/0x270
[  387.535959][T15803]  ____sys_sendmsg+0x505/0x830
[  387.535984][T15803]  ? __pfx_____sys_sendmsg+0x10/0x10
[  387.536014][T15803]  ? import_iovec+0x74/0xa0
[  387.536041][T15803]  ___sys_sendmsg+0x21f/0x2a0
[  387.536061][T15803]  ? __pfx____sys_sendmsg+0x10/0x10
[  387.536117][T15803]  ? __fget_files+0x2a/0x420
[  387.536133][T15803]  ? __fget_files+0x3a0/0x420
[  387.536161][T15803]  __x64_sys_sendmsg+0x19b/0x260
[  387.536189][T15803]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  387.536219][T15803]  ? __pfx_ksys_write+0x10/0x10
[  387.536240][T15803]  ? rcu_is_watching+0x15/0xb0
[  387.536269][T15803]  ? do_syscall_64+0xbe/0x3b0
[  387.536296][T15803]  do_syscall_64+0xfa/0x3b0
[  387.536318][T15803]  ? lockdep_hardirqs_on+0x9c/0x150
[  387.536340][T15803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.536357][T15803]  ? clear_bhb_loop+0x60/0xb0
[  387.536377][T15803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.536391][T15803] RIP: 0033:0x7f662cb8eb69
[  387.536406][T15803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.536419][T15803] RSP: 002b:00007f662d976038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  387.536440][T15803] RAX: ffffffffffffffda RBX: 00007f662cdb5fa0 RCX: 00007f662cb8eb69
[  387.536452][T15803] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  387.536470][T15803] RBP: 00007f662d976090 R08: 0000000000000000 R09: 0000000000000000
[  387.536480][T15803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  387.536490][T15803] R13: 0000000000000000 R14: 00007f662cdb5fa0 R15: 00007ffe6b8027e8
[  387.536518][T15803]  </TASK>
[  388.002102][T15807] __nla_validate_parse: 16 callbacks suppressed
[  388.002120][T15807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2591'.
[  388.075524][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2593'.
[  388.103635][T15807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2591'.
[  388.203911][T15756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2577'.
[  388.528876][T15838] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.2598'.
[  388.687117][   T30] audit: type=1800 audit(1754133429.081:9): pid=15848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2601" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2730 res=0 errno=0
[  388.771168][   T30] audit: type=1800 audit(1754133429.081:10): pid=15848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2601" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2730 res=0 errno=0
[  389.243251][T15870] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2610'.
[  389.323610][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'.
[  389.446222][T15881] tipc: Can't bind to reserved service type 1
[  389.687290][T15893] netlink: 'syz.2.2618': attribute type 2 has an invalid length.
[  389.859784][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  389.888558][T15903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2621'.
[  390.041918][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2627'.
[  390.080083][T15912] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  390.095540][T15921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'.
[  390.105057][T15921] netlink: 'syz.3.2628': attribute type 5 has an invalid length.
[  390.125671][T15921] gtp1: entered promiscuous mode
[  390.149452][T15921] gtp1: entered allmulticast mode
[  390.165275][T15912] syzkaller1: entered promiscuous mode
[  390.170984][T15912] syzkaller1: entered allmulticast mode
[  390.343252][T15935] sctp: [Deprecated]: syz.1.2632 (pid 15935) Use of int in maxseg socket option.
[  390.343252][T15935] Use struct sctp_assoc_value instead
[  390.442925][T15934] lo speed is unknown, defaulting to 1000
[  390.497696][T15934] lo speed is unknown, defaulting to 1000
[  390.719500][ T7303] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  391.063426][T15964] netlink: 'syz.3.2640': attribute type 3 has an invalid length.
[  391.276859][T15976] netlink: 'syz.2.2644': attribute type 18 has an invalid length.
[  392.024099][T16020] FAULT_INJECTION: forcing a failure.
[  392.024099][T16020] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  392.046924][T16020] CPU: 0 UID: 0 PID: 16020 Comm: syz.2.2655 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  392.046954][T16020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  392.046965][T16020] Call Trace:
[  392.046973][T16020]  <TASK>
[  392.046980][T16020]  dump_stack_lvl+0x189/0x250
[  392.047004][T16020]  ? __pfx____ratelimit+0x10/0x10
[  392.047028][T16020]  ? __pfx_dump_stack_lvl+0x10/0x10
[  392.047045][T16020]  ? __pfx__printk+0x10/0x10
[  392.047066][T16020]  ? __might_fault+0xb0/0x130
[  392.047102][T16020]  should_fail_ex+0x414/0x560
[  392.047134][T16020]  _copy_from_user+0x2d/0xb0
[  392.047160][T16020]  kstrtouint_from_user+0xc4/0x170
[  392.047184][T16020]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  392.047224][T16020]  proc_fail_nth_write+0x88/0x200
[  392.047245][T16020]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  392.047271][T16020]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  392.047293][T16020]  vfs_write+0x27b/0xa90
[  392.047325][T16020]  ? __pfx_vfs_write+0x10/0x10
[  392.047350][T16020]  ? __fget_files+0x2a/0x420
[  392.047371][T16020]  ? __fget_files+0x3a0/0x420
[  392.047387][T16020]  ? __fget_files+0x2a/0x420
[  392.047415][T16020]  ksys_write+0x145/0x250
[  392.047439][T16020]  ? __pfx_ksys_write+0x10/0x10
[  392.047459][T16020]  ? rcu_is_watching+0x15/0xb0
[  392.047496][T16020]  ? do_syscall_64+0xbe/0x3b0
[  392.047525][T16020]  do_syscall_64+0xfa/0x3b0
[  392.047548][T16020]  ? lockdep_hardirqs_on+0x9c/0x150
[  392.047570][T16020]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.047587][T16020]  ? clear_bhb_loop+0x60/0xb0
[  392.047609][T16020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.047624][T16020] RIP: 0033:0x7f662cb8d61f
[  392.047640][T16020] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  392.047655][T16020] RSP: 002b:00007f662d976030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  392.047675][T16020] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f662cb8d61f
[  392.047687][T16020] RDX: 0000000000000001 RSI: 00007f662d9760a0 RDI: 0000000000000004
[  392.047698][T16020] RBP: 00007f662d976090 R08: 0000000000000000 R09: 0000000000000000
[  392.047709][T16020] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  392.047719][T16020] R13: 0000000000000000 R14: 00007f662cdb5fa0 R15: 00007ffe6b8027e8
[  392.047750][T16020]  </TASK>
[  392.460057][T16030] lo speed is unknown, defaulting to 1000
[  392.467788][T16030] lo speed is unknown, defaulting to 1000
[  392.767599][T16039] lo speed is unknown, defaulting to 1000
[  393.054771][T16053] lo speed is unknown, defaulting to 1000
[  393.133273][T16039] lo speed is unknown, defaulting to 1000
[  393.237406][T16059] __nla_validate_parse: 6 callbacks suppressed
[  393.237422][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'.
[  393.700617][T16053] lo speed is unknown, defaulting to 1000
[  393.798950][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'.
[  393.828232][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'.
[  393.975636][T16086] !
: renamed from dummy0 (while UP)
[  393.999350][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  394.627156][T16101] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2677'.
[  394.649351][T16101] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2677'.
[  394.658328][T16101] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2677'.
[  394.722900][T16101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2677'.
[  395.009917][T16119] netlink: 'syz.0.2681': attribute type 7 has an invalid length.
[  396.264606][T16172] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2691'.
[  396.381599][T16178] syzkaller1: entered promiscuous mode
[  396.396330][T16178] syzkaller1: entered allmulticast mode
[  396.451681][T16182] netlink: 'syz.4.2695': attribute type 2 has an invalid length.
[  396.605967][T16192] netlink: 'syz.0.2699': attribute type 1 has an invalid length.
[  396.625419][T16192] netlink: 13806 bytes leftover after parsing attributes in process `syz.0.2699'.
[  397.157860][T16219] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2706'.
[  397.832949][ T7347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.851852][ T7347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.000452][T16244] netlink: 'syz.2.2711': attribute type 303 has an invalid length.
[  398.265097][T16234] __nla_validate_parse: 4 callbacks suppressed
[  398.265118][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2711'.
[  399.122145][   T25] block nbd0: Possible stuck request ffff888024fee000: control (read@0,1024B). Runtime 300 seconds
[  399.133118][   T25] block nbd0: Possible stuck request ffff888024fee1c0: control (read@1024,1024B). Runtime 300 seconds
[  399.144450][   T25] block nbd0: Possible stuck request ffff888024fee380: control (read@2048,1024B). Runtime 300 seconds
[  399.144728][T16280] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2723'.
[  399.155717][   T25] block nbd0: Possible stuck request ffff888024fee540: control (read@3072,1024B). Runtime 300 seconds
[  399.233773][T16280] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2723'.
[  399.255780][T16280] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2723'.
[  399.303905][T16280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2723'.
[  399.551273][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2725'.
[  399.764063][T16300] netlink: 'syz.4.2728': attribute type 1 has an invalid length.
[  399.777260][T16300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2728'.
[  400.103409][T16318] netlink: 165988 bytes leftover after parsing attributes in process `syz.2.2731'.
[  400.103906][T16317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2732'.
[  400.353919][T16324] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  400.687266][T16338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2737'.
[  401.856113][T16370] 8021q: VLANs not supported on nlmon0
[  402.058664][T16378] lo speed is unknown, defaulting to 1000
[  402.082972][T16378] lo speed is unknown, defaulting to 1000
[  402.503321][T16389] sctp: [Deprecated]: syz.2.2754 (pid 16389) Use of int in maxseg socket option.
[  402.503321][T16389] Use struct sctp_assoc_value instead
[  402.519730][T16389] sctp: [Deprecated]: syz.2.2754 (pid 16389) Use of int in max_burst socket option.
[  402.519730][T16389] Use struct sctp_assoc_value instead
[  402.733102][T16391] lo speed is unknown, defaulting to 1000
[  402.779914][T16391] lo speed is unknown, defaulting to 1000
[  402.840352][T16401] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.343166][T16419] __nla_validate_parse: 2 callbacks suppressed
[  403.343187][T16419] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2763'.
[  403.398355][T16419] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2763'.
[  403.423815][T16419] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2763'.
[  403.501437][T16418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2763'.
[  404.198702][T16433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2768'.
[  404.210927][T16436] netlink: 'syz.4.2769': attribute type 12 has an invalid length.
[  404.570777][T16447] lo speed is unknown, defaulting to 1000
[  404.578223][T16447] lo speed is unknown, defaulting to 1000
[  404.581761][T16454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2770'.
[  405.150168][T16472] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2778'.
[  405.164899][T16472] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2778'.
[  405.183734][T16472] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2778'.
[  405.210378][T16472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2778'.
[  405.761012][T16486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  405.787209][T16489] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20002
[  406.370068][T16518] netlink: 'syz.1.2791': attribute type 1 has an invalid length.
[  407.202079][T16564] bridge_slave_1: entered promiscuous mode
[  407.228110][T16564] bridge_slave_1: left promiscuous mode
[  407.253663][T16565] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  407.405530][T16574] team0: Port device dummy0 removed
[  407.426927][T16574] tipc: Resetting bearer <eth:syzkaller0>
[  407.440347][T16574] bond8: (slave gretap2): Releasing active interface
[  407.447836][T16577] netlink: 'syz.1.2808': attribute type 9 has an invalid length.
[  407.457521][T16577] netlink: 'syz.1.2808': attribute type 7 has an invalid length.
[  407.468129][T16577] netlink: 'syz.1.2808': attribute type 8 has an invalid length.
[  407.481500][T16574] gretap2: left allmulticast mode
[  407.645387][T16585] IPVS: Error connecting to the multicast addr
[  407.655806][T16593] pim6reg1: entered allmulticast mode
[  407.665968][T16574] netlink: 'syz.2.2805': attribute type 10 has an invalid length.
[  407.677773][T16594] IPv6: sit2: Disabled Multicast RS
[  407.732654][T16599] bridge0: port 4(vlan0) entered blocking state
[  407.745963][T16599] bridge0: port 4(vlan0) entered disabled state
[  407.758006][T16599] vlan0: entered allmulticast mode
[  407.785525][T16599] bridge0: entered allmulticast mode
[  407.796871][T16599] vlan0: left allmulticast mode
[  407.813231][T16599] bridge0: left allmulticast mode
[  407.844462][T16586] pim6reg1: left allmulticast mode
[  408.023683][T16618] netlink: 'syz.2.2816': attribute type 1 has an invalid length.
[  408.056593][T16619] veth3: entered promiscuous mode
[  408.216322][T16620] tipc: Resetting bearer <eth:syzkaller0>
[  408.382338][T16629] lo speed is unknown, defaulting to 1000
[  408.416445][T16635] __nla_validate_parse: 7 callbacks suppressed
[  408.416462][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2818'.
[  408.435304][T16629] lo speed is unknown, defaulting to 1000
[  408.447543][T16635] openvswitch: netlink: Flow key attr not present in new flow.
[  408.473027][T16638] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2819'.
[  408.519420][T16638] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2819'.
[  408.549319][T16638] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2819'.
[  408.593830][T16645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2819'.
[  409.001388][T16655] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2822'.
[  409.019755][T16655] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2822'.
[  409.044904][T16655] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2822'.
[  409.071278][T16658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2822'.
[  409.596219][T16673] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2825'.
[  409.811306][T16623] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  409.896227][T16623] gretap3: entered promiscuous mode
[  410.474970][T16701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.457558][T16742] bridge0: port 1(gretap0) entered disabled state
[  411.624156][T16742] bridge0: port 1(gretap0) entered disabled state
[  411.689419][T16760] syz.1.2853 uses old SIOCAX25GETINFO
[  412.136705][ T1156] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  412.172749][ T1156] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  412.192613][ T1156] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  412.244976][ T1156] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  412.305560][T16777] netlink: 'syz.2.2856': attribute type 3 has an invalid length.
[  412.456682][T16778] netlink: 'syz.2.2856': attribute type 2 has an invalid length.
[  413.039741][T16800] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  413.293778][T16805] xfrm2: entered promiscuous mode
[  413.299012][T16805] xfrm2: entered allmulticast mode
[  413.484207][T16816] __nla_validate_parse: 25 callbacks suppressed
[  413.484225][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2870'.
[  413.606040][T16816] batadv_slave_0 (unregistering): left promiscuous mode
[  413.752634][T16822] netlink: 'syz.0.2873': attribute type 11 has an invalid length.
[  413.850461][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2876'.
[  413.908670][T16833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2876'.
[  414.134765][T16846] netlink: 'syz.0.2879': attribute type 2 has an invalid length.
[  414.198526][T16846] : entered promiscuous mode
[  414.439806][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2882'.
[  414.448941][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2882'.
[  414.464225][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2882'.
[  414.672233][T16867] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2886'.
[  414.683273][T16867] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2886'.
[  414.691612][T16858] hsr_slave_1 (unregistering): left promiscuous mode
[  414.700577][T16867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.782473][T16871] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  414.900170][T16875] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2889'.
[  415.079742][T16887] netlink: 'syz.0.2892': attribute type 4 has an invalid length.
[  415.121929][T16883] netlink: 'syz.0.2892': attribute type 4 has an invalid length.
[  415.765263][T16910] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2897'.
[  415.921011][T16918] netlink: 'syz.2.2899': attribute type 2 has an invalid length.
[  416.369883][ T7343] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20001 - 0
[  416.378378][ T7343] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20001 - 0
[  416.414051][ T7343] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20001 - 0
[  416.443414][ T7343] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20001 - 0
[  416.467076][T16939] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  416.513057][T16934] lo speed is unknown, defaulting to 1000
[  416.551347][T16946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  416.574203][T16934] lo speed is unknown, defaulting to 1000
[  416.593380][T16946] syzkaller0: entered promiscuous mode
[  416.608978][T16946] syzkaller0: entered allmulticast mode
[  416.735044][T16955] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  417.110913][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  417.120929][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  417.130477][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  417.148532][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  417.157390][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  417.232028][T16946] tipc: Resetting bearer <eth:syzkaller0>
[  417.340038][T16946] tipc: Disabling bearer <eth:syzkaller0>
[  417.478706][T16976] netlink: 'syz.1.2914': attribute type 6 has an invalid length.
[  417.503946][T16964] lo speed is unknown, defaulting to 1000
[  417.522681][T16964] lo speed is unknown, defaulting to 1000
[  417.677218][T16986] vlan0: left allmulticast mode
[  417.686418][T16986] hsr_slave_1: left allmulticast mode
[  417.745705][T16986] team0: Port device vlan0 added
[  418.122905][T16997] netlink: 'syz.1.2921': attribute type 10 has an invalid length.
[  418.148993][T16997] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.191972][T16997] team0: Port device bond0 added
[  418.530830][T17012] __nla_validate_parse: 11 callbacks suppressed
[  418.530849][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2924'.
[  418.584066][T17015] atomic_op ffff888058251998 conn xmit_atomic 0000000000000000
[  418.604723][ T5902] hid-generic 0005:0B57:0009.0001: unknown main item tag 0x0
[  418.608407][T16964] chnl_net:caif_netlink_parms(): no params data found
[  418.626312][ T5902] hid-generic 0005:0B57:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  418.711322][T17021] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2929'.
[  418.826944][T17028] syzkaller1: entered promiscuous mode
[  418.833585][T17028] syzkaller1: entered allmulticast mode
[  418.848830][T17030] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2931'.
[  418.872930][T17030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.893170][T17029] syz_tun: left allmulticast mode
[  418.898416][T17029] syz_tun: left promiscuous mode
[  418.908683][T17029] bridge0: port 1(syz_tun) entered disabled state
[  418.943253][T17029] team0: Port device bond0 removed
[  418.950845][T17029] bridge0: port 3(
0!
) entered disabled state
[  418.971434][T17029] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  419.125404][T16964] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.133072][T16964] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.141250][T16964] bridge_slave_0: entered allmulticast mode
[  419.149733][T16964] bridge_slave_0: entered promiscuous mode
[  419.158843][T16964] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.167311][T16964] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.175222][T16964] bridge_slave_1: entered allmulticast mode
[  419.189569][T16964] bridge_slave_1: entered promiscuous mode
[  419.199360][ T5850] Bluetooth: hci5: command tx timeout
[  419.306738][T17039] netlink: 'syz.0.2933': attribute type 4 has an invalid length.
[  419.322811][T16964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  419.356874][T16964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  419.487394][T16964] team0: Port device team_slave_0 added
[  419.512950][T16964] team0: Port device team_slave_1 added
[  419.535248][T17052] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2938'.
[  419.557166][T17052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2938'.
[  419.593381][T17054] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2938'.
[  419.622838][T17055] netlink: 'syz.2.2937': attribute type 10 has an invalid length.
[  419.639531][T16964] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.646669][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.675720][T16964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.753964][T16964] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.779766][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.846330][T16964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  420.001958][T16964] hsr_slave_0: entered promiscuous mode
[  420.008785][T16964] hsr_slave_1: entered promiscuous mode
[  420.015143][T16964] debugfs: 'hsr0' already exists in 'hsr'
[  420.021756][T16964] Cannot create hsr debugfs directory
[  420.030776][T17079] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  420.326659][T17092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2947'.
[  420.633510][T17106] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2951'.
[  420.651908][T17107] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2951'.
[  421.030308][T16964] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  421.082051][T16964] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  421.121168][T16964] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  421.153459][T16964] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  421.198421][T17130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2956'.
[  421.284418][ T5850] Bluetooth: hci5: command tx timeout
[  421.778172][T16964] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.858343][T16964] 8021q: adding VLAN 0 to HW filter on device team0
[  421.917020][ T7345] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.924287][ T7345] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.993387][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.000622][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.188713][T17166] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.360926][T17156] tipc: Disabling bearer <eth:syzkaller0>
[  422.409561][T17177] netlink: 'syz.1.2966': attribute type 1 has an invalid length.
[  422.709924][T16964] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.221326][T17220] vlan1: entered promiscuous mode
[  423.226393][T17220] team_slave_0: entered promiscuous mode
[  423.365018][ T5850] Bluetooth: hci5: command tx timeout
[  423.445725][T17239] netlink: 'syz.0.2979': attribute type 1 has an invalid length.
[  423.533212][T17239] 8021q: adding VLAN 0 to HW filter on device bond4
[  423.609023][T17239] 8021q: adding VLAN 0 to HW filter on device batadv2
[  423.662859][T17239] bond4: (slave batadv2): making interface the new active one
[  423.713010][T17239] bond4: (slave batadv2): Enslaving as an active interface with an up link
[  423.780302][T16964] veth0_vlan: entered promiscuous mode
[  423.806748][T17261] __nla_validate_parse: 3 callbacks suppressed
[  423.806764][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'.
[  423.816613][T16964] veth1_vlan: entered promiscuous mode
[  423.840200][T17262] netlink: 'syz.1.2984': attribute type 13 has an invalid length.
[  423.848687][T17262] netlink: 'syz.1.2984': attribute type 17 has an invalid length.
[  423.859040][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2985'.
[  423.868365][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2985'.
[  424.110336][T17264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.201258][T17264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.241841][T17262] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.261367][T17262] 8021q: adding VLAN 0 to HW filter on device team0
[  424.269835][T17264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.281180][T17262] !
: left promiscuous mode
[  424.285920][T17262] !
: left allmulticast mode
[  424.296411][T17262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  424.313714][ T7303] lo speed is unknown, defaulting to 1000
[  424.342146][ T7303] syz1: Port: 1 Link ACTIVE
[  424.433003][T16964] veth0_macvtap: entered promiscuous mode
[  424.484510][T16964] veth1_macvtap: entered promiscuous mode
[  424.540571][T16964] batman_adv: batadv0: Interface activated: batadv_slave_0
[  424.569828][T17287] lo speed is unknown, defaulting to 1000
[  424.578754][T16964] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.628232][T17287] lo speed is unknown, defaulting to 1000
[  424.641272][ T3550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.661171][ T3550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.675758][ T3550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.695084][ T3550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  424.936140][ T7343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.970257][ T7343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.107457][ T7343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.143337][ T7343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.187596][T17306] lo speed is unknown, defaulting to 1000
[  425.279974][T17312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2997'.
[  425.412368][T17316] netlink: 'syz.4.2903': attribute type 22 has an invalid length.
[  425.439684][ T5850] Bluetooth: hci5: command tx timeout
[  425.498541][T17306] lo speed is unknown, defaulting to 1000
[  425.975441][T17329] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  426.381522][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  426.400751][T17341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3003'.
[  426.405788][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  426.418400][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  426.431978][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  426.454895][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  426.459392][T17341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3003'.
[  426.519278][T17341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3003'.
[  426.543284][T17340] lo speed is unknown, defaulting to 1000
[  426.550986][T17340] lo speed is unknown, defaulting to 1000
[  426.912804][ T1156] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.924435][ T1156] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.037786][ T1156] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  427.066003][ T1156] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.203384][T17352] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3006'.
[  427.318579][ T1156] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  427.359563][ T1156] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.411982][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'.
[  427.436960][T17360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3008'.
[  427.572918][ T1156] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  427.583774][ T1156] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.734087][T17368] lo speed is unknown, defaulting to 1000
[  427.794010][T17368] lo speed is unknown, defaulting to 1000
[  428.141534][T17340] chnl_net:caif_netlink_parms(): no params data found
[  428.258550][T17402] netlink: 'syz.4.3019': attribute type 83 has an invalid length.
[  428.639295][ T5850] Bluetooth: hci3: command tx timeout
[  429.037412][T17421] __nla_validate_parse: 1 callbacks suppressed
[  429.037431][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3025'.
[  429.200446][   T25] block nbd0: Possible stuck request ffff888024fee000: control (read@0,1024B). Runtime 330 seconds
[  429.212307][   T25] block nbd0: Possible stuck request ffff888024fee1c0: control (read@1024,1024B). Runtime 330 seconds
[  429.223632][   T25] block nbd0: Possible stuck request ffff888024fee380: control (read@2048,1024B). Runtime 330 seconds
[  429.234850][   T25] block nbd0: Possible stuck request ffff888024fee540: control (read@3072,1024B). Runtime 330 seconds
[  429.306724][ T1156] bond1 (unregistering): Released all slaves
[  429.416050][ T1156] bond0 (unregistering): Released all slaves
[  429.520477][ T1156] bond2 (unregistering): Released all slaves
[  429.533186][ T1156] bond3 (unregistering): Released all slaves
[  429.644003][ T1156] bond4 (unregistering): Released all slaves
[  429.750616][ T1156] bond5 (unregistering): Released all slaves
[  429.765899][ T1156] bond6 (unregistering): Released all slaves
[  430.004559][T17406] lo speed is unknown, defaulting to 1000
[  430.010653][ T1156] tipc: Disabling bearer <udp:syz2>
[  430.025929][ T1156] tipc: Left network mode
[  430.048721][T17340] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.077417][T17340] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.092905][T17340] bridge_slave_0: entered allmulticast mode
[  430.104962][T17340] bridge_slave_0: entered promiscuous mode
[  430.210644][T17406] lo speed is unknown, defaulting to 1000
[  430.237626][T17340] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.247883][T17340] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.256702][ T1156] IPVS: stopping master sync thread 17079 ...
[  430.264039][T17340] bridge_slave_1: entered allmulticast mode
[  430.277607][T17340] bridge_slave_1: entered promiscuous mode
[  430.279408][ T1156] IPVS: stopping backup sync thread 8500 ...
[  430.477741][T17340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.536571][T17340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.719509][ T5850] Bluetooth: hci3: command tx timeout
[  430.760455][T17340] team0: Port device team_slave_0 added
[  430.830804][T17459] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3035'.
[  430.936395][T17340] team0: Port device team_slave_1 added
[  431.092906][T17465] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3036'.
[  431.193628][T17463] netlink: 'syz.0.3036': attribute type 1 has an invalid length.
[  431.201972][T17463] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3036'.
[  431.243079][T17465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3036'.
[  431.257933][ T1156] hsr_slave_0: left promiscuous mode
[  431.447747][T17472] netlink: 'syz.4.3039': attribute type 2 has an invalid length.
[  431.463904][T17472] netlink: 119 bytes leftover after parsing attributes in process `syz.4.3039'.
[  431.474151][ T1156] team0 (unregistering): Port device vlan0 removed
[  431.503053][ T1156] pim6reg (unregistering): left allmulticast mode
[  432.108222][T17340] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.115373][T17340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.141616][T17340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.158777][T17340] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.172375][T17340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.199239][T17340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.392002][T17340] hsr_slave_0: entered promiscuous mode
[  432.406741][T17340] hsr_slave_1: entered promiscuous mode
[  432.417369][T17340] debugfs: 'hsr0' already exists in 'hsr'
[  432.426067][T17340] Cannot create hsr debugfs directory
[  432.550023][T17482] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  432.573445][T17487] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3043'.
[  432.587036][T17486] syzkaller0: entered promiscuous mode
[  432.604760][T17486] syzkaller0: entered allmulticast mode
[  432.799899][ T5850] Bluetooth: hci3: command tx timeout
[  432.844914][T17494] netlink: 'syz.2.3044': attribute type 3 has an invalid length.
[  432.852925][T17489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3042'.
[  432.887455][T17494] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3044'.
[  432.954406][T17494] netlink: 'syz.2.3044': attribute type 2 has an invalid length.
[  432.972593][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'.
[  433.230867][ T1156] IPVS: stop unused estimator thread 0...
[  433.792635][T17507] bridge_slave_1: left allmulticast mode
[  433.808470][T17507] bridge_slave_1: left promiscuous mode
[  433.829651][T17507] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.855064][T17507] bridge_slave_0: left allmulticast mode
[  433.864832][T17507] bridge_slave_0: left promiscuous mode
[  433.875123][T17507] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.234723][T17518] lo speed is unknown, defaulting to 1000
[  434.333271][T17518] lo speed is unknown, defaulting to 1000
[  434.420712][T17533] netlink: 'syz.0.3053': attribute type 3 has an invalid length.
[  434.511126][T17535] __nla_validate_parse: 2 callbacks suppressed
[  434.511143][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'.
[  434.691020][T17340] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  434.743803][T17340] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  434.832839][T17340] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  434.880465][ T5850] Bluetooth: hci3: command tx timeout
[  434.889238][T17340] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  434.969969][T17556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3061'.
[  434.983253][T17558] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3061'.
[  435.067277][T17554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3060'.
[  435.095949][T17566] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3062'.
[  435.315291][T17340] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.366064][T17340] 8021q: adding VLAN 0 to HW filter on device team0
[  435.413770][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.420981][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.514745][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.521943][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.846662][T17580] netlink: 516 bytes leftover after parsing attributes in process `syz.1.3066'.
[  436.275369][T17340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.451445][T17340] veth0_vlan: entered promiscuous mode
[  436.472048][T17618] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3077'.
[  436.485351][T17340] veth1_vlan: entered promiscuous mode
[  436.491691][T17618] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3077'.
[  436.511016][T17618] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3077'.
[  436.540359][T17618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3077'.
[  436.567169][T17340] veth0_macvtap: entered promiscuous mode
[  436.618535][T17340] veth1_macvtap: entered promiscuous mode
[  436.806358][T17340] batman_adv: batadv0: Interface activated: batadv_slave_0
[  436.862582][T17340] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.966144][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805aec0400: rx timeout, send abort
[  437.197695][ T1156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.211678][ T1156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.222970][ T1156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.235012][ T1156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.405191][ T7343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.432035][T17652] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  437.443661][ T7343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.466295][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805aec3000: rx timeout, send abort
[  437.475753][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805aec0400: abort rx timeout. Force session deactivation
[  437.524046][ T7347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.564661][ T7347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.974666][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805aec3000: abort rx timeout. Force session deactivation
[  438.146091][T17668] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  438.220415][T17671] netlink: 'syz.3.3090': attribute type 11 has an invalid length.
[  438.241925][T17671] netlink: 'syz.3.3090': attribute type 11 has an invalid length.
[  438.350461][ T7347] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  438.379212][ T7347] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  438.497145][ T7347] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  438.539180][ T7347] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  438.630635][T17680] vlan0: entered promiscuous mode
[  438.646172][T17680] dummy0: entered promiscuous mode
[  438.827049][T17691] netlink: 'syz.1.3097': attribute type 1 has an invalid length.
[  438.862301][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  438.873278][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  438.882125][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  438.890320][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  438.898076][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  438.948342][T17691] netlink: 'syz.1.3097': attribute type 1 has an invalid length.
[  438.971574][T17691] netlink: 'syz.1.3097': attribute type 1 has an invalid length.
[  438.986788][T17691] netlink: 'syz.1.3097': attribute type 1 has an invalid length.
[  438.996034][T17691] netlink: 'syz.1.3097': attribute type 1 has an invalid length.
[  439.004577][T17691] netlink: 'syz.1.3097': attribute type 1 has an invalid length.
[  439.012695][T17691] netlink: 'syz.1.3097': attribute type 1 has an invalid length.
[  439.020829][T17691] netlink: 'syz.1.3097': attribute type 1 has an invalid length.
[  439.137998][T17698] lo speed is unknown, defaulting to 1000
[  439.154410][T17698] lo speed is unknown, defaulting to 1000
[  439.763738][T17728] __nla_validate_parse: 6 callbacks suppressed
[  439.763755][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3106'.
[  439.772972][T17727] GUP no longer grows the stack in syz.1.3107 (17727): 200000002000-20000000a000 (200000001000)
[  439.797712][T17727] CPU: 1 UID: 0 PID: 17727 Comm: syz.1.3107 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  439.797741][T17727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  439.797754][T17727] Call Trace:
[  439.797762][T17727]  <TASK>
[  439.797772][T17727]  dump_stack_lvl+0x189/0x250
[  439.797800][T17727]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.797818][T17727]  ? __pfx__printk+0x10/0x10
[  439.797837][T17727]  ? find_vma+0xe7/0x160
[  439.797876][T17727]  __get_user_pages+0x2a60/0x30b0
[  439.797940][T17727]  ? __pfx___get_user_pages+0x10/0x10
[  439.797974][T17727]  __gup_longterm_locked+0xd66/0x15b0
[  439.798003][T17727]  ? try_grab_folio_fast+0x35b/0x4f0
[  439.798033][T17727]  ? sanity_check_pinned_pages+0x11c8/0x12c0
[  439.798066][T17727]  gup_fast_fallback+0x1cd4/0x2260
[  439.798096][T17727]  ? is_bpf_text_address+0x26/0x2b0
[  439.798163][T17727]  ? __pfx_gup_fast_fallback+0x10/0x10
[  439.798183][T17727]  ? stack_trace_save+0x9c/0xe0
[  439.798205][T17727]  ? stack_depot_save_flags+0x40/0x900
[  439.798234][T17727]  ? pin_user_pages_fast+0x4d/0xb0
[  439.798260][T17727]  iov_iter_extract_pages+0x35a/0x5e0
[  439.798295][T17727]  extract_iter_to_sg+0xe46/0x24e0
[  439.798334][T17727]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  439.798376][T17727]  ? __asan_memset+0x22/0x50
[  439.798400][T17727]  af_alg_get_rsgl+0x436/0x810
[  439.798448][T17727]  aead_recvmsg+0x4cc/0x13f0
[  439.798494][T17727]  ? __pfx_aead_recvmsg+0x10/0x10
[  439.798510][T17727]  ? __schedule+0x1755/0x4d30
[  439.798536][T17727]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  439.798566][T17727]  ? __pfx_aead_recvmsg+0x10/0x10
[  439.798586][T17727]  sock_recvmsg_nosec+0x186/0x1c0
[  439.798615][T17727]  ____sys_recvmsg+0x3aa/0x460
[  439.798651][T17727]  ? __pfx_____sys_recvmsg+0x10/0x10
[  439.798690][T17727]  ? import_iovec+0x74/0xa0
[  439.798718][T17727]  ___sys_recvmsg+0x1b5/0x510
[  439.798743][T17727]  ? __pfx____sys_recvmsg+0x10/0x10
[  439.798792][T17727]  ? __might_fault+0xb0/0x130
[  439.798822][T17727]  do_recvmmsg+0x307/0x770
[  439.798852][T17727]  ? __pfx_do_recvmmsg+0x10/0x10
[  439.798869][T17727]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  439.798908][T17727]  ? __pfx_do_futex+0x10/0x10
[  439.798949][T17727]  __x64_sys_recvmmsg+0x190/0x240
[  439.798972][T17727]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  439.798990][T17727]  ? rcu_is_watching+0x15/0xb0
[  439.799021][T17727]  ? do_syscall_64+0xbe/0x3b0
[  439.799050][T17727]  do_syscall_64+0xfa/0x3b0
[  439.799072][T17727]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.799102][T17727]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.799118][T17727]  ? clear_bhb_loop+0x60/0xb0
[  439.799139][T17727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.799156][T17727] RIP: 0033:0x7f2829d8eb69
[  439.799173][T17727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  439.799187][T17727] RSP: 002b:00007f282ac74038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  439.799209][T17727] RAX: ffffffffffffffda RBX: 00007f2829fb5fa0 RCX: 00007f2829d8eb69
[  439.799223][T17727] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000b
[  439.799234][T17727] RBP: 00007f2829e11df1 R08: 0000000000000000 R09: 0000000000000000
[  439.799246][T17727] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  439.799257][T17727] R13: 0000000000000000 R14: 00007f2829fb5fa0 R15: 00007ffcacafb5f8
[  439.799290][T17727]  </TASK>
[  440.147451][   T31] INFO: task udevd:5839 blocked for more than 143 seconds.
[  440.154922][   T31]       Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0
[  440.162361][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  440.171280][   T31] task:udevd           state:D stack:21896 pid:5839  tgid:5839  ppid:1      task_flags:0x400140 flags:0x00004006
[  440.183359][   T31] Call Trace:
[  440.186651][   T31]  <TASK>
[  440.189667][   T31]  __schedule+0x1737/0x4d30
[  440.194186][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  440.199645][   T31]  ? schedule+0x165/0x360
[  440.203993][   T31]  ? __pfx___schedule+0x10/0x10
[  440.208874][   T31]  ? schedule+0x91/0x360
[  440.213616][   T31]  schedule+0x165/0x360
[  440.217810][   T31]  io_schedule+0x80/0xd0
[  440.222341][   T31]  folio_wait_bit_common+0x6b0/0xb90
[  440.227689][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  440.233573][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  440.240003][   T31]  ? __filemap_get_folio+0x6e0/0xaf0
[  440.245321][   T31]  ? do_read_cache_folio+0x4e9/0x590
[  440.250660][   T31]  do_read_cache_folio+0x1aa/0x590
[  440.255786][   T31]  ? __pfx_blkdev_read_folio+0x10/0x10
[  440.261335][   T31]  read_part_sector+0xb6/0x2b0
[  440.266113][   T31]  adfspart_check_POWERTEC+0x8c/0xf30
[  440.271537][   T31]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  440.277098][   T31]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  440.283150][   T31]  bdev_disk_changed+0x75c/0x14b0
[  440.288214][   T31]  ? __pfx_bdev_disk_changed+0x10/0x10
[  440.293737][   T31]  ? wait_on_inode+0xc0/0x230
[  440.298864][   T31]  blkdev_get_whole+0x380/0x510
[  440.303814][   T31]  bdev_open+0x31e/0xd30
[  440.308086][   T31]  blkdev_open+0x3a8/0x510
[  440.312613][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  440.317567][   T31]  do_dentry_open+0xdf3/0x1970
[  440.322452][   T31]  vfs_open+0x3b/0x340
[  440.326538][   T31]  ? path_openat+0x2ecd/0x3830
[  440.331397][   T31]  path_openat+0x2ee5/0x3830
[  440.336009][   T31]  ? arch_stack_walk+0xfc/0x150
[  440.341681][   T31]  ? __pfx_path_openat+0x10/0x10
[  440.346654][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.352838][   T31]  do_filp_open+0x1fa/0x410
[  440.357358][   T31]  ? __lock_acquire+0xab9/0xd20
[  440.362287][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  440.367351][   T31]  ? _raw_spin_unlock+0x28/0x50
[  440.372281][   T31]  ? alloc_fd+0x64c/0x6c0
[  440.376642][   T31]  do_sys_openat2+0x121/0x1c0
[  440.381374][   T31]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  440.386846][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  440.392132][   T31]  ? rcu_is_watching+0x15/0xb0
[  440.396920][   T31]  __x64_sys_openat+0x138/0x170
[  440.402050][   T31]  do_syscall_64+0xfa/0x3b0
[  440.406575][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.412698][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  440.418879][   T31]  ? clear_bhb_loop+0x60/0xb0
[  440.423632][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.429597][   T31] RIP: 0033:0x7f810baa7407
[  440.434028][   T31] RSP: 002b:00007ffd82888130 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  440.443236][   T31] RAX: ffffffffffffffda RBX: 00007f810c16a880 RCX: 00007f810baa7407
[  440.451295][   T31] RDX: 00000000000a0800 RSI: 000055b94a09aa30 RDI: ffffffffffffff9c
[  440.459343][   T31] RBP: 000055b94a081910 R08: 0000000000000000 R09: 0000000000000000
[  440.467332][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b94a0a3060
[  440.475719][   T31] R13: 000055b94a099430 R14: 0000000000000000 R15: 000055b94a0a3060
[  440.483984][   T31]  </TASK>
[  440.487154][   T31] 
[  440.487154][   T31] Showing all locks held in the system:
[  440.495040][   T31] 1 lock held by khungtaskd/31:
[  440.499990][   T31]  #0: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  440.510358][   T31] 2 locks held by kworker/u8:6/1156:
[  440.515670][   T31] 2 locks held by getty/5605:
[  440.540722][   T31]  #0: ffff88814dbf80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  440.556630][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  440.579132][   T31] 1 lock held by udevd/5839:
[  440.583759][   T31]  #0: ffff888143fd4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  440.608665][   T31] 2 locks held by syz-executor/17698:
[  440.614427][   T31] 1 lock held by syz.3.3106/17728:
[  440.619807][   T31]  #0: ffffffff8e141e00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  440.630032][   T31] 
[  440.632461][   T31] =============================================
[  440.632461][   T31] 
[  440.641125][   T31] NMI backtrace for cpu 1
[  440.641144][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  440.641164][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  440.641175][   T31] Call Trace:
[  440.641183][   T31]  <TASK>
[  440.641191][   T31]  dump_stack_lvl+0x189/0x250
[  440.641222][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.641240][   T31]  ? __pfx__printk+0x10/0x10
[  440.641275][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  440.641299][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  440.641323][   T31]  ? __pfx__printk+0x10/0x10
[  440.641347][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  440.641373][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  440.641397][   T31]  watchdog+0xf93/0xfe0
[  440.641425][   T31]  ? watchdog+0x1de/0xfe0
[  440.641453][   T31]  kthread+0x70e/0x8a0
[  440.641475][   T31]  ? __pfx_watchdog+0x10/0x10
[  440.641496][   T31]  ? __pfx_kthread+0x10/0x10
[  440.641517][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  440.641538][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.641558][   T31]  ? __pfx_kthread+0x10/0x10
[  440.641579][   T31]  ret_from_fork+0x3fc/0x770
[  440.641606][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  440.641636][   T31]  ? __switch_to_asm+0x39/0x70
[  440.641654][   T31]  ? __switch_to_asm+0x33/0x70
[  440.641671][   T31]  ? __pfx_kthread+0x10/0x10
[  440.641691][   T31]  ret_from_fork_asm+0x1a/0x30
[  440.641735][   T31]  </TASK>
[  440.641742][   T31] Sending NMI from CPU 1 to CPUs 0:
[  440.711563][T17698] chnl_net:caif_netlink_parms(): no params data found
[  440.716824][    C0] NMI backtrace for cpu 0
[  440.716838][    C0] CPU: 0 UID: 0 PID: 17698 Comm: syz-executor Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  440.716856][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  440.716866][    C0] RIP: 0010:__hrtimer_next_event_base+0x1a3/0x2d0
[  440.716891][    C0] Code: 24 01 00 00 4d 8d 67 3a 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 d3 00 00 00 41 0f b6 2c 24 <31> ff 89 ee e8 04 19 12 00 85 ed 49 89 de 74 3a e8 f8 15 12 00 4c
[  440.716911][    C0] RSP: 0018:ffffc90000007e48 EFLAGS: 00000046
[  440.716926][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000
[  440.716937][    C0] RDX: 0000000000010000 RSI: 7fffffffffffffff RDI: 00000066b0eb74e1
[  440.716947][    C0] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004
[  440.716956][    C0] R10: dffffc0000000000 R11: fffff52000000f84 R12: ffff88804c92e0ca
[  440.716972][    C0] R13: 00000066b0eb74e1 R14: 0000000000000001 R15: ffff88804c92e090
[  440.716983][    C0] FS:  0000555593acd500(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000
[  440.716996][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  440.717007][    C0] CR2: 00007fdc360e7d60 CR3: 000000007de12000 CR4: 00000000003526f0
[  440.717021][    C0] Call Trace:
[  440.717027][    C0]  <IRQ>
[  440.717037][    C0]  hrtimer_interrupt+0x4e2/0xaa0
[  440.717079][    C0]  __sysvec_apic_timer_interrupt+0x108/0x410
[  440.717097][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  440.717116][    C0]  </IRQ>
[  440.717122][    C0]  <TASK>
[  440.717128][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  440.717143][    C0] RIP: 0010:vprintk_emit+0x58f/0x7a0
[  440.717158][    C0] Code: 85 32 01 00 00 e8 01 78 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 f0 77 1f 00 eb 06 e8 e9 77 1f 00 fb 48 c7 c7 80 07 13 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 f9 36
[  440.717171][    C0] RSP: 0018:ffffc90003aceee0 EFLAGS: 00000293
[  440.717184][    C0] RAX: ffffffff81a038c7 RBX: ffffffff81a03784 RCX: ffff88803053bc00
[  440.717195][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e130780
[  440.717205][    C0] RBP: ffffc90003aceff0 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[  440.717216][    C0] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: dffffc0000000000
[  440.717227][    C0] R13: 1ffff92000759de0 R14: 0000000000000200 R15: 0000000000000033
[  440.717240][    C0]  ? vprintk_emit+0x444/0x7a0
[  440.717254][    C0]  ? vprintk_emit+0x587/0x7a0
[  440.717271][    C0]  ? vprintk_emit+0x444/0x7a0
[  440.717286][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  440.717309][    C0]  _printk+0xcf/0x120
[  440.717325][    C0]  ? alloc_netdev_mqs+0xc59/0x1170
[  440.717343][    C0]  ? trace_kmalloc+0x1f/0xd0
[  440.717364][    C0]  ? __pfx__printk+0x10/0x10
[  440.717381][    C0]  ? validate_linkmsg+0x765/0x950
[  440.717403][    C0]  ipcaif_newlink+0x204/0x4f0
[  440.717424][    C0]  ? __pfx_ipcaif_newlink+0x10/0x10
[  440.717445][    C0]  rtnl_newlink_create+0x30d/0xb00
[  440.717463][    C0]  ? __pfx_aa_get_newest_label+0x10/0x10
[  440.717484][    C0]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  440.717500][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  440.717523][    C0]  ? full_name_hash+0x92/0xe0
[  440.717543][    C0]  rtnl_newlink+0x16d6/0x1c70
[  440.717571][    C0]  ? __pfx_rtnl_newlink+0x10/0x10
[  440.717598][    C0]  ? __lock_acquire+0xab9/0xd20
[  440.717623][    C0]  ? __lock_acquire+0xab9/0xd20
[  440.717651][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  440.717675][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  440.717694][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  440.717718][    C0]  ? __lock_acquire+0xab9/0xd20
[  440.717748][    C0]  ? __pfx_rtnl_newlink+0x10/0x10
[  440.717767][    C0]  rtnetlink_rcv_msg+0x7cc/0xb70
[  440.717785][    C0]  ? __lock_acquire+0xab9/0xd20
[  440.717804][    C0]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  440.717822][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  440.717850][    C0]  netlink_rcv_skb+0x205/0x470
[  440.717868][    C0]  ? __lock_acquire+0xab9/0xd20
[  440.717886][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  440.717907][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  440.717931][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  440.717955][    C0]  netlink_unicast+0x82c/0x9e0
[  440.717981][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[  440.718000][    C0]  ? netlink_sendmsg+0x642/0xb30
[  440.718018][    C0]  ? skb_put+0x11b/0x210
[  440.718033][    C0]  netlink_sendmsg+0x805/0xb30
[  440.718057][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  440.718078][    C0]  ? aa_sock_msg_perm+0x94/0x160
[  440.718096][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  440.718113][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  440.718132][    C0]  __sock_sendmsg+0x219/0x270
[  440.718151][    C0]  __sys_sendto+0x3bd/0x520
[  440.718172][    C0]  ? __pfx___sys_sendto+0x10/0x10
[  440.718197][    C0]  ? count_memcg_event_mm+0x21/0x260
[  440.718224][    C0]  ? rcu_is_watching+0x15/0xb0
[  440.718246][    C0]  __x64_sys_sendto+0xde/0x100
[  440.718268][    C0]  do_syscall_64+0xfa/0x3b0
[  440.718286][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.718304][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.718318][    C0]  ? clear_bhb_loop+0x60/0xb0
[  440.718334][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.718348][    C0] RIP: 0033:0x7fdc353909fc
[  440.718361][    C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  440.718372][    C0] RSP: 002b:00007ffe59e54420 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  440.718387][    C0] RAX: ffffffffffffffda RBX: 00007fdc360e4620 RCX: 00007fdc353909fc
[  440.718398][    C0] RDX: 0000000000000038 RSI: 00007fdc360e4670 RDI: 0000000000000003
[  440.718408][    C0] RBP: 0000000000000000 R08: 00007ffe59e54474 R09: 000000000000000c
[  440.718418][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  440.718427][    C0] R13: 0000000000000000 R14: 00007fdc360e4670 R15: 0000000000000000
[  440.718444][    C0]  </TASK>
[  440.718908][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  440.718922][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  440.718944][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  440.718954][   T31] Call Trace:
[  440.718962][   T31]  <TASK>
[  440.718970][   T31]  dump_stack_lvl+0x99/0x250
[  440.718991][   T31]  ? __asan_memcpy+0x40/0x70
[  440.719012][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.719030][   T31]  ? __pfx__printk+0x10/0x10
[  440.719068][   T31]  panic+0x2db/0x790
[  440.719092][   T31]  ? __pfx_panic+0x10/0x10
[  440.719109][   T31]  ? __pfx___x2apic_send_IPI_mask+0x10/0x10
[  440.719139][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  440.719167][   T31]  watchdog+0xfd2/0xfe0
[  440.719195][   T31]  ? watchdog+0x1de/0xfe0
[  440.719222][   T31]  kthread+0x70e/0x8a0
[  440.719246][   T31]  ? __pfx_watchdog+0x10/0x10
[  440.719267][   T31]  ? __pfx_kthread+0x10/0x10
[  440.719288][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  440.719309][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.719330][   T31]  ? __pfx_kthread+0x10/0x10
[  440.719351][   T31]  ret_from_fork+0x3fc/0x770
[  440.719379][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  440.719408][   T31]  ? __switch_to_asm+0x39/0x70
[  440.719426][   T31]  ? __switch_to_asm+0x33/0x70
[  440.719444][   T31]  ? __pfx_kthread+0x10/0x10
[  440.719465][   T31]  ret_from_fork_asm+0x1a/0x30
[  440.719499][   T31]  </TASK>
[  440.722865][   T31] Kernel Offset: disabled