last executing test programs:

7.311404681s ago: executing program 4 (id=6506):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000300000000000000000006000000000000000000000000000000ac1414aa000000000000000000000000e000000200000000000000000000000005000500000000000a004e2200000000fc0100000000000000000000000000000000000000000000070019"], 0xd8}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x31d940, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1b0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, '\x00'}, @NFTA_TARGET_REV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}]}}}, {0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x90, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x80, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPRESSIONS={0x64, 0xa, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_MSECS={0xc}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}]}}}]}]}}}]}]}], {0x14}}, 0x1d8}}, 0x0)
close(r8)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r15 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r15, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCGDEBUG(r15, 0x80047441, &(0x7f0000000680))

6.752299654s ago: executing program 4 (id=6513):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x48, 0x68, 0x309, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_OIF={0x8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x5}}]}, 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="0a0001"], 0x48}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r6, 0x11b, 0x8, 0x0, &(0x7f0000000180))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000001)

6.473395541s ago: executing program 1 (id=6516):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r1, &(0x7f0000002100)={&(0x7f0000001ac0)={0xa, 0x4e21, 0x6, @empty, 0xff}, 0x1c, 0x0, 0x0, &(0x7f0000002080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x18}, 0x4044812)
recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00'})
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, 0x0, 0x20044010)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)
listen(0xffffffffffffffff, 0x8)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
close(0xffffffffffffffff)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r7, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

6.149061814s ago: executing program 4 (id=6517):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
unshare(0x200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000a40)={{}, "4590ca0bacb4e93f726a999850ec624e008296eefa3268a61d9f7ccc71193c63479fb59efcceb4c5c18057c6467db140aba922c3cee0eed01c892ae5ba37811999ca552a8685a2cbb8c2f21db1e729c6e1d29e3fc4b63f9d20bdeea5f65b949743d47a90ad7af14e35d09fff06955600d04f556debb6f254991c3f7815aeb68b5146e95ab8e8716eae508babe8fbe689ff10c3c3b81514318f059916414f63d48cb91f0c9a78e9537c77e14f0bf20871441239b997a133f199c92b1b21bfaed3c3f477dda636df4f254c9a2e6052b4bc136da91ce5ec0c77a817f118ae84adae0ff741b2d40ec79e58a32a6060c15497eaa33a63d3392fd66215a42849e20dc3fc14bb4c5ebf2f18f508a5023e9989afad9ed36eff7d04a96be22526c96dad86f4bf4cbd1f60a09fbfc82ff2f2906ab4336c76f21a89c6325a07963a7e5b369bf47f358634165a95a91953ff1c5886f37509f1724aba50f99a03f4392ec554eaad0597ee7a8898c4401a2f6b52bd5067e22f57916d860b0dabadbb29bf0c6cc6e68a2ac283c10d39f9195fdd2aeefa1d656c7f146c1d28e98e8c368ff388fed3c16d3bdee58c7c220dbd6a7a6e936616acac5f32198581d272d03b13c24d6d76b07bcda5ac3e20d7eb0c5498fc44a27a744feebc640f019884ecee86c510b4af8d3ea2507889abeab776ae36fbd244d8eb16cc44e96ae42d84a3082cfba539cebeaa1da7ffc71bc9ed18df69828f1bab262b9e6a951f0b121159a5b2bed53016b2c43128826ca280c4e0c9635a82172bc0ddac95e01dd9d1263a6c3394c7cc82f61e98a8d9cd46d5a22453190844d094d6b55853ee53dd216810d7c12766aacc8440159e2633fac263349b45259114556d43f39120e32eb564bce6a0848f21970698cd545f224bcc8e027402a7714d186f094ef9a371912ac324ff1914ac0894e8ba96069a0fe9e1ab80aae8761d4fe0a55fadff9524299ce0fc6360d5032ba9eb263c0dad0ad4b6a211cf42a8184d3ec506e8b95c9e93b9f32a846946b2d0f3c05da9a7a5d67eb0e90f97d682ab9ab3bf50025b658cba3bef518cef865ea6d0910b2367bcd3be61a465f2131f03167ee0f763b44933b9b493193400293062dfa09e0845a1746e315eac880604739143835ce016148ee34b98b6f878e707312623028f80a3a8bc3174519bcdf5e85eb72631826ce208a3a8ea464d9dfb1607cda89101b7121e6bd22a0d12155bb116576b57af141c2bdd65a5895a65b3d3180914b90112f2c083ee7e93afd931ef4455047d8ae7de2654a6d3243cf35ddd0c4198a5908210fd063b4316231b719b9f7d9dda2de0c0ea0884e4a0b9d9adca07fce53c4d27872de969b60f67b51e256a0ed842b8a993b8187f645e3b8f4e15df34c9f0c96b7a6ad88cd35208af5841d035603f7216c5cdbf0c3c1f9e8b5f817e5b21fa2fe7e7e1afc8f859cbfb83ec74527df13e3cec3da53031e078b5618d7ac7f9ad9d10f2690aa4c1e7b13044cbabd72f8f5b6d54a20df31d4d334e16b9221f8226ac599fc2789bc146ecf44a2be01d3def4679ea87d540d47d7d96722eb61c6143d98234fdd291c1c9b0d02d17c12df847fc97d71d307d2ccfbfd1ea8bc7c91c9c7f3181beaba1466fecb5e7caffd8e6c04ee130cb92aa28eac643a0fe713b739c2564b424fbf6cb273e45372d71e3f6f0f87ed5ed1e6e4b1ad84a821c6723bdb2785414baad6cb880e6df6bc21f7440d8ce6e0bb6e24d269db0ec453fbc71a6a69718cbdf85a781d960e2009b2d4e3e17e96cdd0c949bb1d26c1d5c60d5b9eff6460c25aeae6a8de70715a8ae6124bacefac40c107d90c45cbaa1feaf965f78b9ffeb47c0f44741012220ceaecb3fc3e166faae8623fdcf4650f7e315bf6b35d8360043d353f602b524b5f9b16de16f848111e55afc68ed4e367252f0fc72286056024ca8e87aa6c7919d9a89ad9614c5f822b5edb265aaf6cad9018ff761cb018c9e0b464e8f29b4d5c4447ccf4b25fcb294bf650944583ee7d3bd19f122da7641f18aedfd07fbc3b7bb2cfeb6986cf609086d58cde63d19c53a5b3ffa1a75f8a80a9c41bf487c5e3033fb9874d27b6cc7947ff12053f512e599b283cb342e41ebc12f8ea461e0d576e2db8995c0ee318e753e1f8559ccbdccbdc00dddc5f3ce99f969e347d7b2d4eedeb9fbdd72931dd706f72e32930b47c1b5dfb0aa476108f681f2f57a34a02c11d8c669bd6fa2316392a4604059a67c917135ade39430974de0648713f650d8f6a938b34a1faba8effcce03df9016a0418337780c8edc9f6c69f29523f5c2b949ba5fc7427964669d4340f1d81a5a1e7cf22a1451a643b2d5ea8cbf92744d5c260fa5ac6626f0266fe14119396cdd5c02ec7d669b5172d15552553800cb8b453231ff9d362e1120ef2b79602ed18479592aeae31b17db45783d053fe98fb0eee9f2521c6cf362718f7f27cdbeeb183c2f1bbfc361906ffa9e48532b9366c2e1c8cd63b15bb1f57d231c8dc138cd4ba71916e14cc4085d1495439a3a1651810a0203eb32f0d3b6eb4d6fe7885292f28a1e70fa201f9b250b71ecc0a49aea14f1262c77ff25eb202f760238d542a0d25018561883da64163a492e712907c132065f910d63fb22ab1a032aecf923c4c9bcf552090e6c3a16f1b514ab7d6e6d771db5e932999dc75dd66478797025e8517c5a4769f627bb326351e40434391a1c7d3e4aa1f6541f87aaad8470afbd61ba9e530a2464189cff2727b3b4940f3b210212fc9deb480bd6f3e23bad51a1ee19c2b78522fb0f5f8e68233bd462dad4991517f4b3977930ddd3682d2ab8a594857bc7eb82497e38f4ef109bc5765de8a0ed0174978e0e868d218f5ead5c6feba4aab585e754d43628366fad098ac834900362461597e431fe661c039b6820546a47455d43e54d66cc5ef6e9b0a6d1cff023be1a096ef39a08eda0f1dee0f88ffdfa8ad9af4233542c0bf1a691dd3623764833f3e0ad43c995a4b0884ef783d47fffc31f9fea28eff045136d0e33d0d698b79aae4ee7800057edf7ac43dd1079b438d3959adde0fecf5358566df4a5c514625520b02665c9ed96f6f645448ddf96adee74f7858b84b6d58a110c83a60d39b1478cbe6f83c344ee23f5b6942425dc62864a75a97924aa425cd5d0d04663a7627c174c657574c52cac632dac7d35f215084108053ebde2b3bef4ecbc2cf3f0ac8a6d97e9706f5f64d151b4fee33a45a2d97fda33df8058e374e496ae28fa30d7dcb4221e82e6571762e80d375b4daeea2e4d2930afc07776a4224385f7d1425439977aafd9b0d85cde1eb76f92e90b203e7ddd6afe6295a635f31c7147bb71c5c8ed8b0bf429d14f287e67c9aa81ca905f1440a4b6a1de2be84ac2654905de8203ae5290bddfdb3db4faf661c6c361b72895cf6d82a60bc8dab851ddc8256adb654b94bfc8012d4656912bb09577162cb96ea48b8a7b0436c4681f4d06bfe5f53ffcd7f3a7379fb9ff770a2f486fca2f03519a2aa999b4f903ce7325029c43924cb8e31270d7fb0ebad646f5b897e001aae50d7421a8d71710b09866c69ab33160a9385c24c5678f382fa3a91ee79144b6afd1b0856f96871786e5c43a043d589f766a223eb6743a1e2236379c41bde85dfeb0327d114f7a53364be80cf463c5dfe2e5a2618d94dfa3cfdae91a7d4c0a40bce0f9e8cea0e8f8a395145733d70d94d50becf18c842504e3508c5dec65264baf425f411c6040fd310830fe3b852dd675ac25d5b408fb2e83b2e3bab34c23e046949ff68a3dd22765a1c830b7e61fd13103c3088b93acb9b899496dc61ff4b4148dc813f40c1eece76e61d30bc0491f991be7552020b4be135fa32186bea915dee600e3977cb2270dabdb06e02765de51381b2b0087aca646ac849eb6d51627e795c410402b547f28cbebbbcdf935225b0c723d0e3ecd0d56f525455d47a2a6582ec3e1da9bf2a144b34ab75898d9d1741f5573c95dba7dcd1b0aea1667c3a21420e447e9f8d110eff27c9b44a43900aa6426a6433dfbde80e3c91dff0a6b06e7e72360434053d4908c07dc0b2ad777d8a5506848327139aca2784f9cd6b18c6f08eb6c496ff90a9b9179878ec441db6dcdc5459934c2290a69647eac26b37bffa65be54d2bac1d7209aab4fc0886ba5af66e4fcee61cf0ded434b23cd8249caf9c02259e31c8a0d62ae004de8ce7e2402082f2e544359d54b119e39d9c1f5e603ed189334c08ff8179a8a8ff08c158676fa4dfbfd531ad1d6e719f67974ffbaebebbc236c96165f72375a909913a62bca75dc63e8681e590d86063d1f9b3a3c6e797ee424503352da3fce52b53879e7d4cd6fa80949a69ac74fbb982889b2b6c9fc8ef28c36089f0f21da62da8b47b862691bb43f7b3a756e5ab137b464f1f0e1e85ce7e5a4eac76e7aa63d0306b153e440be9c8d37982783aaaef6e4fe18749882bbffed049f81f71dc7d8cf57527f69247a1e0848d1b40d32dba447721408ca04ad7951487f875f37559e172059660a207e87a2ccf7bf85b2427000748429b54de3cf0b6debf85f32c6889496dfaa89b8e8eaac336abf16287cc6a05d79724a0629e52264166a685af5469cb72940a851486912e7b8cb164335cf523e808ec07652e1d91fd964fe59f2986866981fe71c74655e3831afe41903bc8fe464ff085bb52d35d736854f1ab6b231a194dbfae3cb80ef6041795d1c482a4d46866847e306d7633bba715887adce1e866ec6388cac977d469a6357491d47c44cf9b104b37d1e6975cdb7242a0790db169aa2c815c940d4c68a4a29c2d07ab72d6c3440226e584ba74bd36c2f20387482156a69efbf51db94d17132a5bf2e44f978948dada309ab2957d0ebc6e725f7d78cba5b2478d1490f208dc3e1074644d79ed7d84024a29cd01600800372f51d77e21e7ebbc276e61f08b62fd42c93e3ad5dc039408d8fda3cdd13d6ae91690ace04564eae6fbd214504cd00b035c7a1c46713b666b61b23e4ced965c1830657bde43fe5b5733153982dc6b8497db01aa23191d019765781e845a44df466fc7b0e0866f7277a09608fac8196dd449084378798b9137700417f585903e7ac48a662dd0d5285def43a8e1d8168727e17430e314ab1f4a0193d83a61caaa1d9a65b6a78c436e117558687cecb3d3a57172c1552f91c36f9eda108195479e81585b3211540f1afca7791e242132327c758b23738df56e8e23b87d423d0a31d0899a99ca1eafd9961d284d59eb62bad0eab8ae9c86ea2b81c5e8633c69ef86a1e1a5cf62b831886dca1da250799ab2efa67e335ec8a913abbbf7b85a10fd3e7acebeb362cc6f4a35e95c8bbf0da56b252d8eb2ec6de5afc17b0f5a0dc53f4664e4ce80b2a714424fe58e81b94548ba841937aebe7a97dd9747eaf3f907cf97ec21256fa5ccb4ab8f4128afca75bcccacb0749f470526d111cac6d76ea04dc9c13d157ad883ff9f18c99e7fa3a7eac49b6fe8736e1ad83a567a81413f31beb6b0ad68deb2e28673669fe516f239a25ae6e698ac069711fec0e4d2cbd0d0de5f3fc88c8c0e14dece7c7e95de2717670c20252dc49895d23f8873da35c639a9ad0f5d5df210d715c03705f8222478b29c054cce6a35db69e7aa7db48428cc2e0233dd9c2159c80746bf8e115008df051c8e4c547c93a7ba586ef2859260873b8db676eea0890566a408c87445d06d3a59315f1e553caaa7497acf9bf208cdca14dd85aa067e921f2c3dd60b0262e9044fbbc932"})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
unshare(0x2c060000)
unshare(0x60400)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6)
r2 = socket$packet(0x11, 0x3, 0x300)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0200632b596200"/24, @ANYRES16=0x0, @ANYBLOB], 0x22c}, 0x1, 0x0, 0x0, 0x40}, 0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x80}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="060000000400000008001e1ca4d112a54f4ce0643c40e72c438701b1fcef9b2804d17ffd0cb08a8eed6b0eeda9d17a292eb6f21b462674cdc8bba6219a46b1a7df8c012b831f47f813", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r5 = accept$packet(r2, &(0x7f0000000500), &(0x7f0000000540)=0x14)
sendto$packet(r5, &(0x7f0000000440)="90528c73e1ff37d2e33e2c9cf30a1b3fc5e2420252807dc949a368e911dfa992bc4f9a7e2ebc93b7497d03082d735db9f9b6fa68", 0x34, 0x4004000, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x1, 0x2}, 0x14)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000100", @ANYRES16=0x0, @ANYBLOB="00002dbd7000fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400})
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/19, @ANYRES8=r6], 0x20}}, 0x40001)

5.675111994s ago: executing program 3 (id=6519):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, &(0x7f0000000080)) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002140)=ANY=[@ANYBLOB="f81000004000070100000000fcdbdf25047c0000d810e8801400c400000000000000000000000000000000010c006000070000000000000022001d800b5c12707e7574b34c0cae6066ca1a42a54f0f03532702a24d356f5fd79600008f1009803ec786812c223474a8974a3ab08010716586804697c6dc287ed90536a6266174f88a5f650152ec0dac3c0f07464fd89dca44627adddae1a175744862d320b42535001a22c630d62e94a7484f94006f57be465799fcdf2845ff3582cdba6a0c4a3a90b55f18a55f550042eef99d7025fe67993bd4485e2923d329aa42379c0023c81fcbd9c1fa0286caf071526eb2786fa6e820a32f39f3094cf794f7d49f259ebd2fe0ae7d00842f09a29e78033da42ae0f4160bcf1f12802816a46b0d516c92c968cefdc4396cdf2294d3ef8462af889448fc136f946c6f38433b22a4fce32af85528c91314bf90786ef7c79bef1adfc4be37afc7086cd60e04c240df73329e5aed3b7ba44e3827d2cf11cd16c5f26eea9e60591b93a3ca92aef65130499e8a29fe351a33886f0e00f04851031ba192cee54f5f73a36990ee0068e500acae297492e2e6778990f0b3be5e4e3189be224010a9780273a37860f990b59ce375e80454906e4147e97e94a3dc4c857bcb552b912829912c5a6c0f5a30d7977ba94c4d82358a8ab70c1f1c3805b75eb77061f224f7fa4e9f22a549a22e6db56fd6752aeabf8e51732dcce8f21313b2b9c2c0453afc983a876ae415b5154812ae1078097195d3cd6f133941014f69a747457fc31b0b95c493916cb976ba846ae291b156024dee4234c1231ada7ef8c47b9cf94d01b4a0b793fd39f264f8fcd16f1025fd6986b815f9e6ef6aa3748e00cd1a65171f74aa446c239c7531874db0ba402acb3cb3b25611916272664ee2efa4f7bcc18c1d417646f8ee8474a3955db27c085ce828f5af83a7bdb8f0a3b51b700c86bf5167e4b0fc29f4fbf35e5c7b80b7fdeac692d59b36e74c10aa334135ad55da6e849b28351e7068579ad98272e7f0c4df8af62a7b7d3a06a91e6276276f187491affc12646b588294649bd9d712dda5620d47bd2b25cdb64c91f2c36d25c695bb8184bb6e79b92c016ac0cd7dbe04fd50fb9a153d99dc6a2604afb2b838ad78114446de31f792e663ec448705a86b0e9f8ff5cd90c7195c5d2bc82836e251379a76a57c27353d0d1bafd15398ea195a292eb031a03cc307dc90ddfb397699f11a147456d728790f060f0e81e06c60e3cee51d39e3b04c453149200baf6043d473c74f2347c281c9a5ad88f2dfd3cfef12e955315636d6715c7b3c3f85789140c69498effd1b5ab5c17b3182294d0e6674facc0b33e924fbc40cc174226eefa19c4b1fad683e017afa06fb648ad4377fd8a49fcfb1a52c7158a0ebdc9d1479beaa2fea6acee50e280712046223d6988d067496749bf55c0c41f2b2cc6296351db60b854a31ce9d2dafdd468ea7e30dcbea4cf0c60258f84ecfddb645494814308f79242c419706ecc556dc472d6184fbfa46cfd1963d16af1f69a3a23f76095e32968a446cb26d63ff8c997e980d587b225905f6ef550125ff2fc2840d5aaa5f9525c6eab80b21d9bdf2d8efaa49eea262afe741c5eb61bb105678b6c925eb24ffda7be2cc751d06bbebcd8bee401299d7c0b6915708e69ba424a54c6d7bcc1df0c68a0dc45370c9d654770dae969d8fa94d4caee9e40bc4593509315043b32686e8a510785685992c4b5a712f6298bbde50fe76bff9a173e048e9eb098190f80bf6e51515aa93b0e5fc36498f1a1cd6a7d22499ed75a2c719aac820d22f5c58de6d584771c4e957ff9f4f2e4d1a9320e449e02081191baed7e31e7c3cfdbd7c50867525e472c04fe8a960292c3a0cf3ba86a3a0a97c9eb00b27cd03b746d616abf758343deec0aa13bb427bb41c1c6b6b7954b5693969baf4f15006a45ea313fda6147470a981038fbffd3f421158fb5a2f3a0484957647dd6ca4912857c2ffe7a98e193958d1c5a755de7e5e35348ab3f5a70ba9e6d27a318414046e3f78ac107d3cddc79415024a76773e3687d5f54ba0f72a4a875a4c59b34fb1844887b7a41ea324d663f312d467b7ea0500000000000000c1c49bb6e34d570ad272370c832d73453840c34721683bc8bed871a2e261273b4bec1bef2c223bbbc1215ae36a40c222b5482a64424a2df16de196d052ab798c3095c0ad64c014719c3dbc2f6b03f7495f829315b5d347a850737c9620ef5526cb11e319f0d486fe3ea6f8b623a5f07185b8a4a5c2108af1d94fd4dc8a416cf42999fa019dc687a511ea3ad276f1c48584076619973b7ff7eab22a8d5fed6c16cc68f751e1450546885742e7747e5b7c9c8a813b9eb9b4d2f3ad52bc46b67a25574f07f12e4bf71df4679366213e3913be1649d107ca03ac12c6bb9b0516742c33c9b915310dfa8599e1e66a1b128bb0366b61173f32a3f9fb72ebea678b60690f381e04694d1e81108ad4275c8886eefedeca57a1b0d8454be40b0ecc39bfca4e1fdc676bc6b5a8448af562696c6feb8ebbb5f243a430ea515fb00430b7eeab06c10d83994c7c7d3521081db9f8bcf1e2b62fedf9be3243d335f89a7f697ab64300f6735e9ebe512ae16c878c06046bd05ec2c915261d15185a7ca089483fdee7277fbd508a305d2136a8b34ae389ddb913f1faa0ecf5d5bfa50a1e1c5711459e9fb53efdb5b8bbf4a82e7a13d41351898db8e0fa416e3281944afd6d171f05f83a3b8d636cbc6b18c9c3fdb49eeab71317fa1bac70c7ac3910d3ffe075f3a24d27d13ec257d1a70bb5d9b841198ae4d6b4cc48d52e4d3c97f1dc419a56170f45acb33e84e3c3cc50bd72d293f6a599c2e1fdc65947cb7cb64415881c039330d4d059fcdcb5b54684c3901c8b0917865e642127dee305ec2f1a8041036197ba73e9080fa69356b432d9165522d4dbc50ef9d4e1eb51361a2e5da415c1da817eb67e6c123a50c904b50a417bc7f3afb2f7074717dc99677c299b844ee9b3424f57ec4eefeb50e2df36723ee6e04b6af526118bc2087d7c9e3fb807fb5ec36fb97379c155bbb45e91127cd5752213a171c731b56a12455e092f703e4f6969fbde626ca7a9b48040acd8794b6ea25d89a4bd9ce0fd9dee5e96bbeda64e3f219314500e1897e13416d99673e34af0a4fa78a9b441687a424ebb59354339a5ae30574dce05ae8eda75d593d9d850c0f6d2b39ac7e852f738b5b779a37ab9890e1bfce9cad32c125164c0e449aa36c7551752471ea260c6df62c70c3f5e9632ff364a4f18795235d8689ecd16859c548e11cd26d4004741498c51271ec37ee1833eebfe2dfe3d2e09d246a40285019d48c87f5c80d60ec3139514e8c1190eb487bdfdd2d46fb3de9242ac071ffeedbb589fd10b0dde92931b3b343ee7776f9ecff670b73395250e85fbb2c047d5c0f31bb4526fa366ba14edf831c70b1655de9ccae472bea51409d19689ea9cf8cb556dd4cb3d2536bccfd1955807551ad4b6e23c70cc3d5a3188cd4b7fcd63a0f031c8fe4c274109b884d60ad67ea09200a101e999175ff23e1e32fe436388af570eb9ffb9e506aefff0fd0df66aded64668dffccbeed5544bbeb4a3ce803da12f5874c52f13e3e5809cd9fd9dd1b7488babbaf8647a185d64b798876d7de6f8a0b0bde40cfe1c614f818215ff8faa5720f26b9d577ad913842a0516dd0f99f15774861d01ccfbf45784f986888bb98ba10531799d50b67db2c4795a1ad779dda418cb0d1c61f3fc4d96e37e72c68860014f521313ba131c8425e9d06d0d543c9a447994056a8b148177459f2910645c979a74996ad0dcb6a10addf1ae3c0986de488d4fc1ecbad581ae714ebf256feae17f98bd2cb88c14220db1b0cccb463cfb1f20d8628258ff63af056c8a38d45effb3a08272c5e897c46de2681d525416b4134373b1cbcdca05837d3b2eb3a2d718c0099862268caf628030aae670b64d79a3f284ba68cfd3f2391c4b5ebb268be050eb88163d2b7bc7b5b3b39311b4013930a632a219bb81d7a60654e0a2c01f9e4ee01432da04caef29f657a9d968fa1816c51f381e622b0bbde0bc8f8189537a65908206cba02806a9e9b96ad236f052f61c83c0bcf216449126406759361010a44e165d34db463125ff814c894c24b58f602039e8bb5a5eceb23bf78cd0d31d1d8265933368c8428b498c442c9565fae063f4f6eba7ea7ab4a0f1da6f55183b65058b21965b6db314f01d55df235da63a1e69c839971ea83e48e5efb343b5daca16918f95177e0ee8aab82cd10e94511a68f2f1162ca3acb26614302868a9f551dd28e57070e1d3d6190626caac6d2d8695d5d5875d487f341589b13b8a8a035bdf6250f7c3005cc0859c19c15c16bca94f37b05846e4009dbf893234a4b5a33a1a404a010cfa9f09a549b86952172e574e9af9388904baed36edc187afae63f713900e0d73aeeac060af3dcc22b8abef2abf95eab020c4e0a6878a211bc19b0def81fed91957cedc1893bd4d51d7c0cd895b1479952ac8b33aff11f6e16c16202db79a12fb408563e48f4a917d2847a33a84328e27c04d3c11d217feb8364c2b590145ac6859aef30ebac9544dfa30077221ec1592a804979363e4dd4024acf84d3123dc561c43920eb6f344f0ddf9545f1cfb1aaa99f55388d4c8902ea52fc6b4d3c3cecccdae8aa4145039af47f283a19f149f45f2904424d92b95b58eedc643c28d619c7f5630e5e255f87886aa233342e4a8f726af612c0fd4ed205bca5d2bc1fd99ef0b52e306dcdc864a58c8e6adcc0b17cb117e1c45d3fd5a416ad837efb1c186e8eb84eb971d5d77d42852557bcdf8dde065e8060bbf6b63570308967840fdc16677d578933a983f2254f14240919ab95af0fed431f9367d6df026a1e2bb3619448554bf0ae3d879f1f982db4065d6fc3e06fd66207410d3e4f88dd826414fd2b72e6936f67ba54dee0a2d87af1abd37c3acebd533761400645e9e7f1dd056c85cc3cd0318dfec3001f5b40d188719df36b4eaf5cd0542c3170dfa7cbaf25064e2ec243fdfcd005df6298693baaabf6ab846814e7c7e84a651eaacf80ec3356f0cf90680627ab84ef25bc90b2f0cfc248044bd9f16d49598ad5250c1b5c3d7fc27060f5a1958e1e382717533501dd7293c9cbdb8f73605443040aaa60e933c7bf99fe798236c9da9c86ff16e0cc5381ecf67209a754958e802d88432b8ccc5bbde3c266da32481c77a14ac57cd289944a566159502c56f3cf4c68f0c828b93a6b4fafaa31de96289959c47743cdbf4bf1dfe728baccc6b872755f0966b4e7349aa28c65e155d40338c8fe7b797bb2cfff27b0e10bd819dc10e8a181c08adf4d68f92890469f1c366d7252b28db3249ebf22476070229d6cd9c1815e1c5b299151fbc18cf851796c0ec5fb13500ec8177252f293512f6cbb8946155df94ff5728c46739900946d3d2a082f11f1afbd8c717119099e44657f8739f53173d53e85240c3d6cc5609188575a7a7b0deb0dd81951d59972ee2e91089b2372a0714eba4f6eb2661cd4770b48c22c34b452232816e89e40c714f015237b53535309a26d49e2598057cca41d16fadfcb8749c75bde28d9e527c7812a1224572d819cac2884ff8491b72de4cba95bdac3dd88ea35fb7321740761b44a4f36dd33625fd61dcaba2ea09a80a4440b079aa6c63642b53af932ed21d80c0983695255ff8947c9277c8f4a24a55c0c01600cc59aea3674fc68d66bafe9f6f3156fdc70ee3114b8d7146e381ebdba2c8c61ff355479bafd71c1c22384496eb7bb87937d77750be38a68f661fb1b843b9c3c2e904fa52371ad4af3c6d061d4638303f010eef70c3358be515a879d07659ee27ac6c9e57321f072bb9a3d198cd2f9370240c005b000700000000000000a4eb7839a3e052eec29e381bd10e7b923f7b740a46862a9ef4ae01c164412dbea6195cc4afda1262ee23c06eb17b4c999cc3f1e8b8ab5e5b95139878c3f5f1f4fe250db1415277237cfa4064bad0140a9cfe9fca3bac14c40c13e5dce0fc5e1c3044cb3c5f5201f3471834ab623828200990d500d2f79e473bade3ecf38891000c0001"], 0x10f8}, 0x1, 0x0, 0x0, 0x48800}, 0x10) (async, rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002", @ANYRESHEX=r4, @ANYRES8=r1, @ANYRESDEC=r1, @ANYRES64=r4, @ANYRES64=r4], 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x0) (rerun: 32)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async, rerun: 64)
sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000040a0102"], 0x14}}, 0x0) (rerun: 64)
recvmmsg(r5, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12010, 0x0) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xf11, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x7f}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) (rerun: 64)

5.618371587s ago: executing program 4 (id=6520):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum64={0x2, 0x1, 0x0, 0x13, 0x1, 0x4, [{0xfffffff8, 0x2, 0x9}]}]}}, 0x0, 0x32, 0x0, 0x1, 0xfffffa15}, 0x28)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff8000000000000000000000000000000000000000040000000000000800120000000200000000000200000006000000000000000900000000000000000000000080ff000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0)

5.421254855s ago: executing program 1 (id=6521):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf25010000001800028014001c0000000000000003f86f161ed927187f830000000000ac1414bb00"/66], 0x38}}, 0xc004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010329bd7000fcdbdf25240000001800018014000200626f6e643000000000000000000000008da4eaa647097ae1058905b585a2bfdb92754e3c215d4336ce414088afd0490b9cfb4b9d8742c61e35237ee005992673cecf21049b346034fe23e4e7be316a119840db"], 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000000380)={0x2c, 0x0, 0x404, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8891}, 0x22000080)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x4000001)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000015c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x15, &(0x7f0000000000)=0x7b, 0x4)
shutdown(r4, 0x1)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000100), 0x4)
r7 = socket$kcm(0xa, 0x7, 0x3a)
sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000600)=@xdp={0x2c, 0x4, 0x0, 0x2000030}, 0x80, &(0x7f0000001140)=[{0x0}, {&(0x7f00000007c0)="e49b", 0x2}], 0x2, 0x0, 0x0, 0x900}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001480)={&(0x7f00000002c0)="df7657fd85a2c95d300236e2e1bcfdb4657f67ea8ff858a7133a4b3b223e9724ee7a9413c238e16858d24aec00468eba081d8d6d87d35ea181f2afd03f7984c098c08d0159f9e9e2fe98818c7bde76947065447c19e8976dbb5bf74973b7d33a76b21fea95752944ee23e59bdfbeec3a336eb6985d7d4d4a55a37b32db135afe0b43c73db9be194c137f51b13011043727349b42dbfe185ac22c2317b42a2db202ca8c81564a68015c427f4bcd2abd3f9830f32578ff8394", &(0x7f0000000180)=""/20, &(0x7f00000003c0)="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", &(0x7f00000013c0)="42e21ec455519e23d895ee28369d67f3538bd522b57852da032b4aa0c6290ccce2cc9d2bce764658c2b80314adbd3b324467ee0e7e4be086719b76765ff8e82f2bc6fa06d038a7b3491aaa23301f571b86c5c3944e2430941dabed6417357002687bfaf7148ce45e5d2b2b3e019c5f9a7ad74c1a67d34d2f81fe0ea143d428f0698ff3ccf9f8a833113dd9b6f734f82fa4316be13abd8e9898a24b1ac5ea9d736527dbd800"/179, 0xe, r8, 0x4}, 0x38)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, &(0x7f0000000040)={0x3}, 0x1)
sendto$inet6(r9, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

5.342325827s ago: executing program 3 (id=6522):
r0 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)={0x10, 0x3d, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0)

5.303397262s ago: executing program 4 (id=6524):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)

5.202768535s ago: executing program 3 (id=6525):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000006009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afffffff8000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

5.193492051s ago: executing program 4 (id=6526):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$rose(r0, &(0x7f0000000300)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000600)="afae64833442e70dfe9af45729ec", 0x0, 0x4, 0x0, 0xf6, 0x0, &(0x7f0000000800)="fd377b8c3d8fbb8633d3dd79b2c3d3c33b974a629590287a063236fc3953915d8be272d9ce95982f76df46f4950ee5e555064ad18f47c1d18ada04af38aaa6f8d666b136f2fea10052695880fd6bb527e879670ac9324a2e07b1137d7041b6e525997d2af41db3f14d1a3bfd1ce37527c02d98054268ccdb460e05124a60b723b835fd0d78e3be3085fd17808b58f98b078478d7ca17837a8fdf2ae53807969ca7d4407c0712ad1a7a7789041f3240a0df49688b11a77e886d84dbf78859c1e955efaa6d605898067b95d68a8818853165bb25b4c42cf223d015749a3ef00d47bd3755c5037e1fd43133cba11431af483f6e4ffc00b6", 0x0, 0x0, 0x0, 0x80000001}, 0x50) (async)
unshare(0x6a040000)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800010000000000000000021400000003fd050000000008001e00ff0f000004000880ca3473a08e26215b061d8ab342"], 0x28}, 0x1, 0x0, 0x0, 0x4d4}, 0x4000050)

5.015628239s ago: executing program 3 (id=6527):
socket$inet(0xa, 0x801, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400fcdfffff0200000000000000b9b14ff1a5e2cb692e4b0ce5a867000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd7000ffcbdf250900020073797a1b0000000008004100736977001400330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r4], 0x7c}}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4daa5ea71600000400000578080000000a000000884c4bcd6e000b00"], 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800b0001006c6f6f6b7570000050000280080002400000001308000240000000120800054000000001080004400000000108000240000000130800024000000008080002400000000b08000440000000010900010073797a31000000000900010073797a30000000000900020073797a3200"], 0xb8}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e23, 0xa, 0x4e23, 0x0, 0x2, 0xa0, 0x0, 0x84, r8, 0xffffffffffffffff}, {0x5, 0x5, 0x4, 0x8000000005, 0xcc, 0x1, 0x4, 0x1}, {0x0, 0x8, 0x66296995, 0x5}, 0x3, 0x6e6bb7, 0x1, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x3501, 0x0, 0x0, 0x7, 0x7, 0x9, 0x1}}, 0xe8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xbc, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x8c, 0x2, {{0xd, [0x10, 0x6, 0x5, 0xf, 0x0, 0x3, 0x8, 0x1, 0xa, 0xd, 0x10, 0xf, 0x3, 0xe, 0x2, 0x1], 0x1, [0xd8, 0x0, 0x1000, 0x1, 0x8bcd, 0x7, 0x9, 0x3, 0xef, 0x4499, 0xfc01, 0x12ac, 0x674, 0x3ff, 0x504, 0x800], [0xffff, 0x2, 0x1000, 0x6, 0x3, 0x9, 0x9, 0xbc, 0x0, 0x0, 0x7fff, 0xd, 0x0, 0x1, 0x41, 0x8a]}, [@TCA_MQPRIO_MAX_RATE64={0x34, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xf59b}, {0xc, 0x4, 0x9}]}]}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r10 = accept4(r9, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x32, 0x400c0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/124, 0x7c}, {0x0}, {&(0x7f0000000800)=""/88, 0x58}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4}, 0x40000001)

4.92016235s ago: executing program 1 (id=6529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
socket$kcm(0x2, 0xa, 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x152829b66759750a}, &(0x7f0000000180)=0x60)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
gettid()
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
socket$key(0xf, 0x3, 0x2)

4.774451846s ago: executing program 1 (id=6530):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x88}}, 0x240080c0)

4.734618228s ago: executing program 1 (id=6531):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r1, &(0x7f0000002100)={&(0x7f0000001ac0)={0xa, 0x4e21, 0x6, @empty, 0xff}, 0x1c, 0x0, 0x0, &(0x7f0000002080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x18}, 0x4044812)
recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00'})
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, 0x0, 0x20044010)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)
listen(0xffffffffffffffff, 0x8)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
close(0xffffffffffffffff)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r7, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

4.432911285s ago: executing program 1 (id=6532):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x8, 0x20, 0x4, 0x6, {{0x21, 0x4, 0x1, 0x23, 0x84, 0x65, 0x0, 0x80, 0x2f, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0x13, 0xb0, [@multicast1, @loopback, @loopback, @private=0xa010102]}, @ssrr={0x89, 0x23, 0xd4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101, @remote, @local, @local, @empty, @dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0x1, [{@remote, 0x9fe8}]}, @timestamp_addr={0x44, 0x2c, 0xc, 0x1, 0x3, [{@rand_addr=0x64010100, 0x5d}, {@private=0xa010100, 0x1}, {@remote, 0x1}, {@loopback, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x81, {{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}}}, 0x88)
write$cgroup_int(r0, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$nl_crypto(0x10, 0x3, 0x15)
close(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x2)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0)

3.229383293s ago: executing program 2 (id=6544):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket$kcm(0x29, 0x2, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0)
connect$phonet_pipe(r0, &(0x7f0000000400)={0x23, 0x0, 0x7f, 0x8}, 0x10)
syz_emit_ethernet(0xb7, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa4d56667500000800460000a6000000000073907800000300e000000100000000000000000091905822a95b853b9239e4a2ab41018ebcbb8194820dc4f6f1b3c647339016e1a31b10de75dd2d50402260ed4a4032e6c5da0cc638421c9efc23451d9b8d35fad055748555012544127a4885f7590183f429c30c2df758e987186fd5e2c40db99fee60ab874de4554540dc13a11bf463558556c72ccccac4420d3563863f41056d8cc4832176255dbef7e19cf54bc573a4e1f765b6031960151d00000000"], 0x0)

3.033847385s ago: executing program 2 (id=6545):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000100)="c1188e199f5d02ff4284860186dd352ac4fa12dda5b5a94e07762d86534b6465f412a524572731a256da773ec722643459e4db0558f7", 0x0, 0x80000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
socket(0x10, 0x803, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2c020400)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r5=>0x0})
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r6, r7, 0x4, r3}, 0x10)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000011c0)={0x2, 'veth0_to_hsr\x00'}, 0x18)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x14, r11, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r9, 0x0, 0x51)
r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4021)
r14 = socket$inet6(0xa, 0xa, 0x8)
bind$inet6(r14, &(0x7f0000f5dfe4)={0xa, 0x5e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffe0000}, 0xffffffffffffffa4)

2.457925486s ago: executing program 0 (id=6547):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x29, 0x1a, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001000000ffff000040"], 0x50) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', <r2=>0x0}) (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r3, &(0x7f00000126c0)=[{{&(0x7f000000a200)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd0de}, 0x1c, 0x0, 0x0, &(0x7f000000a2c0)=ANY=[@ANYBLOB="24000000000000002900000002000000ff0200"/29, @ANYRES32], 0x28}}], 0x1, 0x8000) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001a0001002bbd7000fcdbdf251c141081ff00ff0b0028000005001a00030000001400120000005648259beb1e1c4732b2bb079ffa08000100000000000c000900ff0f3a05", @ANYRES32=r2, @ANYBLOB="aff320cdb458c96f28bdb734622369dfe882d348cb3cbf62b21a68d94137d4c790bf857b531f8ccd692a61f03d480509ac2c"], 0x4c}}, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x4) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c0000001100010026bd7000fcdbdf2500000000", @ANYBLOB="8010000044d0000008001d0005000000180034801400350076657468315f766972745f7769666900080013"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70200000100000085000000a0000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) (async)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001800c0010800400088004000b800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x44, r12, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x38}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x80)
connect$pppl2tp(r6, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x3, 0x3, 0x3, {0xa, 0x4e21, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7c}}}, 0x32) (async)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010)

2.269932694s ago: executing program 0 (id=6548):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket(0x11, 0x800000003, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x92}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x207ffe, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x2}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x20004040)
bind$packet(r3, &(0x7f0000000d00)={0x11, 0x9, r2, 0x1, 0x7f, 0x6, @broadcast}, 0x14)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000040)=0x2a501, 0x4)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}})
ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}})
socket(0x200000000000011, 0x2, 0x0)
writev(r0, &(0x7f00000003c0), 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002000010000000000fcdbdf250aff0000000000031a000300140001"], 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000440)={0x4, {{0xa, 0x4e22, 0xbdf, @mcast2, 0x4}}, {{0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x75c70346}}}, 0x108)

1.822762013s ago: executing program 0 (id=6549):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, 0x0, 0x0}, 0x20)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r5, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x5f}}, 0x0)

1.727822567s ago: executing program 0 (id=6550):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}}, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x13, 0x1, 0xc, [{@remote, 0x7}, {@local, 0x9}, {@private=0xa010102, 0x9}]}]}}}], 0x50}, 0x0)
socketpair(0x2c, 0x803, 0x0, &(0x7f0000000240))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x9, 0x0, 0x1, [@nested={0x14, 0xff, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @pid}]}]}]}]}, @typed={0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)

1.618347923s ago: executing program 0 (id=6551):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)

1.609215934s ago: executing program 0 (id=6552):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4)
connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r3, @ANYRES16, @ANYRESDEC=0x0, @ANYRES32, @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x40880)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r5, @ANYBLOB="99455f5a2a64547eee40a1ef40a4a94a8fde213a28f08b484c25a0fd788443b38de9a412506b87b4d2ad7c37affd57329bd3597bb92bebbd2ec76099f02c745feecdf13f60ca7e438b7df3c349cdab08e9b1f2399daab2a4cc98b503eccadfe2dffbb9c679aeb5f7bfb628294419a321a726109e18896e5cd73eae628617d9bbedcabb3191ca3f80bf9d78be346f6bd964"], 0x1c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0x444, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xfff3}, {0xe, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0xb, 0x1, 0x116f, 0x8, 0x4, 0x4, 0x40, 0x1, 0xf, 0x3ff, 0x3079, 0x200, 0x9, 0x8, 0xabcc, 0x4000007, 0x400, 0x4, 0x6, 0xc, 0x8, 0x10002, 0xd, 0x0, 0x2000000, 0x80000001, 0x2, 0x10001, 0x1, 0x1, 0x2, 0x5, 0xffffff81, 0x4, 0x7, 0x80000001, 0x8, 0x3ff, 0x3, 0x2, 0x1000, 0x40, 0x1000, 0x7, 0x7fff, 0x5, 0x8, 0x40, 0x9, 0x6, 0x5, 0x5, 0xe, 0x5, 0x6, 0x5, 0x9, 0x8001, 0x0, 0x4, 0x9, 0xa7, 0xe, 0x9, 0x8, 0x3, 0x1, 0xbd, 0x7, 0x2, 0x9, 0xd, 0x10, 0x4, 0x3, 0x8, 0x3, 0x8, 0x3, 0xf, 0x1000, 0x0, 0x3, 0x5, 0x40dc, 0x0, 0x89, 0x7, 0x3, 0x7, 0x40, 0x5, 0x4090000, 0x4, 0x200, 0x6, 0x7, 0x1, 0x5, 0x81, 0x1, 0x800, 0x3e, 0x80, 0x1de3, 0xd09d, 0x80000001, 0x5, 0x9, 0x4, 0xffffffff, 0x1a, 0x2, 0x2, 0x1, 0xff, 0x4, 0x0, 0x9, 0x5, 0x9, 0x2, 0x5, 0x3, 0x2, 0xffffffff, 0x7, 0x7773276c, 0x7f, 0x8000, 0x4, 0x2, 0xfffffffe, 0xd, 0xf11, 0xd, 0x9, 0x6, 0x5e7c4a39, 0x5, 0x6, 0x22f, 0x2, 0x6, 0x3, 0x6, 0x0, 0x1ff, 0x6, 0xfffffffc, 0xe1, 0x7, 0x4, 0x7ff, 0xa2, 0x5, 0x3, 0x4, 0x7ff, 0x6, 0x4, 0x10000, 0xfffffff8, 0x24, 0x2, 0x3, 0x5944, 0x1, 0x1, 0xe, 0x7, 0x0, 0xbe70, 0x2, 0x7, 0xb9, 0x80000000, 0x0, 0xb, 0xffffffdf, 0x5, 0xa60, 0x4, 0x101, 0x2b, 0x8, 0xffffb2cb, 0x892, 0x9, 0xfffffac7, 0x10000, 0x1, 0x1, 0x6, 0xc0ef, 0x40, 0x6, 0x8, 0x6, 0x3, 0x7f, 0x3, 0xfffffffc, 0x6, 0x0, 0x5, 0x42c3, 0x10000, 0x2, 0x1, 0x10000, 0x6, 0x2, 0x0, 0xe, 0x1, 0x1, 0x7f, 0x8, 0x284, 0xcd4e, 0x5, 0x0, 0xd6, 0xfffffffb, 0xd6df, 0x800, 0x71e, 0x5, 0x3ff, 0x5, 0xff, 0x2, 0x3, 0x9, 0xfffffffd, 0x3ff, 0x8, 0x9, 0x7, 0x9, 0xd, 0xca, 0x8001, 0x9, 0x6, 0x6, 0x7, 0x2, 0x7fffffff, 0x7, 0x3, 0x5, 0x3, 0xcb]}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x444}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000000)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e0000001a200002800c00fe001e0000001f00000007000100fc0f00000600050088a8000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x60}}, 0x4008000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000ec0f00ff0127bd7008fbdbdf25000000009c0d4897721f063bcb08365755d112abd67e3952dbc43322d1c8b9", @ANYRES32=0x0, @ANYBLOB="100a0500231b05002400128008000100677265001800028005000a0000000000050013000100000004001200"], 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040)
ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000680))
r11 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000140)={&(0x7f0000000000)=@llc={0x1a, 0x311, 0x0, 0xd, 0x7f, 0x4, @link_local}, 0x80, 0x0}, 0x0)

1.588357628s ago: executing program 3 (id=6553):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0xfffffffb, 0x53, 0x36, 0x1c, 0x10, 0x1d, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008804)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB="00dc24379320c1768600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r6}, 0x38)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)="5cc346dc2aaa5767cba5445aad3795742d6a25774113465511900068408081ff000000007eda0dfe9f7d23c3e8b8861b6405dc5b1edc22b29de245322fadbdb520aadcd4b40ec031f1ef778dcea6d05c0ef6e05c871bf72dbba19bf732de2472250a6a72c98a34d9c7e63d5705e8aec40ae6bec7e2017f7cd3ed04fad31d6a8349fb4856a68e734c7074a599f93b7b7e12dc387ebaf444d36778272fb7905ae0cf2b0000000000", &(0x7f0000000000), 0xcff5, r7, 0x4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/125, &(0x7f0000000380)="e086eb5868a02d9d201346491b5741d4157846885e12f06a28a3c1ce70eefcdbb49535163c374ba1ac86", &(0x7f0000000280), 0x5, r7}, 0x38)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket(0x10, 0x3, 0x0)
sendto$inet6(r10, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r11=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000140)={r11, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x120, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004084}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x18, &(0x7f0000000400)=@raw=[@generic={0x0, 0x1, 0xc, 0x45, 0x10001}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000ffd}}, @map_val={0x18, 0x2, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7ff}, @alu={0x4, 0x1, 0x8, 0x2, 0x6, 0x4, 0x10}, @exit, @ringbuf_query, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x64, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)

1.572945376s ago: executing program 2 (id=6554):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 64)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async, rerun: 64)
r3 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) (async)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) (rerun: 64)
close(r8) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x50}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r8}, 0xc)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x4}}, 0x10)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async, rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async, rerun: 32)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r11 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r11, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 32)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) (async, rerun: 32)
close(r1)

1.238082889s ago: executing program 2 (id=6555):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0}) (async)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r3=>0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async, rerun: 32)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) (rerun: 32)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x1f}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x30}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4080}, 0x40040) (async)
r7 = openat$cgroup_procs(r6, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0)
readv(r7, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/48, 0x30}], 0x4)
ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f00000004c0)=0x5) (async)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x212, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd70}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f5}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000011}, 0x40) (async)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000680)={0x0, 0x2, 0xfffffffffffffff4}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000006c0)={'ip6_vti0\x00', 0x2000})
ioctl$int_in(r5, 0x5421, &(0x7f0000000700)=0x1000) (async, rerun: 32)
recvmsg(r0, &(0x7f0000001e00)={&(0x7f0000000740)=@alg, 0x80, &(0x7f0000001c80)=[{&(0x7f00000007c0)=""/24, 0x18}, {&(0x7f0000000800)=""/102, 0x66}, {&(0x7f0000000880)=""/197, 0xc5}, {&(0x7f0000000980)=""/247, 0xf7}, {&(0x7f0000000a80)=""/78, 0x4e}, {&(0x7f0000000b00)=""/31, 0x1f}, {&(0x7f0000000b40)=""/158, 0x9e}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/126, 0x7e}], 0x9, &(0x7f0000001d40)=""/176, 0xb0}, 0x2) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001e80), r0) (async, rerun: 64)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001ec0)={<r9=>0x0, @initdev}, &(0x7f0000001f00)=0xc) (rerun: 64)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x68, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_LINK={0x8}]}, 0x68}}, 0x20000010)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000021c0)={{r6, <r10=>0xffffffffffffffff}, &(0x7f0000002140), &(0x7f0000002180)='%pK    \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002280)={0x11, 0x3, &(0x7f0000002040)=@raw=[@alu={0x4, 0x1, 0xc, 0x5, 0xa, 0xffffffffffffffe0, 0x10}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000002080)='GPL\x00', 0xf2, 0x0, 0x0, 0x41000, 0x53, '\x00', r9, 0x0, r6, 0x8, &(0x7f00000020c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000002100)={0x3, 0xa, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002200)=[0xffffffffffffffff, r6, r6, r6, r6, r6, r6, r10, r6, r6], &(0x7f0000002240)=[{0x0, 0x2, 0x7, 0x8}], 0x10, 0x3}, 0x94) (async)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x150ea728}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, '%]*\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xf6e9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfffffffb}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000044) (async)
r11 = openat$cgroup(r6, &(0x7f0000002480)='syz1\x00', 0x200002, 0x0)
openat$cgroup(r11, &(0x7f00000024c0)='syz0\x00', 0x200002, 0x0) (async, rerun: 32)
r12 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000002500), &(0x7f0000002540)=0x10, 0x80000) (rerun: 32)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000002600)={'ip_vti0\x00', &(0x7f0000002580)=@ethtool_gstrings={0x1b, 0x6, 0x6d, "fe7cb1188704cb9e318da4487e4c446a1bf7a164d7de1e801f895ac2ea6c32784fdc8e1d3443b750095dd8638e979acadfca2a6389aa28b9ec53603b65d051a88e4e2fbb27eaaf8c66f23f16d06cf95795f99e797e133899b720059246cb119738395ddcebd188579d927c2c04"}})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r13, &(0x7f0000002900)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002680)={0x22c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xf2}, {0x6, 0x11, 0xd3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfdf}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x401}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xec0b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xf}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x48045}, 0x20004840)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r14, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x74, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x53}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x64}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x44}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0xd, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @supported_rates={0x1, 0x4, [{0x12}, {0x4, 0x1}, {0x3, 0x1}, {0x36}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

1.062041104s ago: executing program 2 (id=6556):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r1, &(0x7f0000002100)={&(0x7f0000001ac0)={0xa, 0x4e21, 0x6, @empty, 0xff}, 0x1c, 0x0, 0x0, &(0x7f0000002080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x18}, 0x4044812)
recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00'})
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, 0x0, 0x20044010)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)
listen(0xffffffffffffffff, 0x8)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
close(0xffffffffffffffff)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r7, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000"], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

34.05921ms ago: executing program 2 (id=6557):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000100)={{r0}, "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"})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x9d}, 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48141, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000040000100fcff070004000000010000"], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010105}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @broadcast}, 0x149, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x11ff, 0x2})
write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = getuid()
ioctl$TUNSETOWNER(r2, 0x400454cc, r5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000000)=@ipv4_getnexthop={0x24, 0x6a, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x24}}, 0x0)

0s ago: executing program 3 (id=6558):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xc}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000200}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x58, 0xfffffffffffffffe}, 0x10)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x0)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), r2)

kernel console output (not intermixed with test programs):

00007fb75ba16038 R14: 00007fb75ba15fa0 R15: 00007ffdfe7115c8
[  633.338809][T27741]  </TASK>
[  633.694654][T27728] ip6_vti0 speed is unknown, defaulting to 1000
[  633.824098][T27751] bond11 (unregistering): Released all slaves
[  633.859299][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5760'.
[  634.729792][T27784] netlink: 'syz.3.5769': attribute type 1 has an invalid length.
[  635.020009][T27789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  635.038400][T27789] syzkaller0: entered promiscuous mode
[  635.056386][T27789] syzkaller0: entered allmulticast mode
[  635.100571][T27789] tipc: Resetting bearer <eth:syzkaller0>
[  635.159187][T27788] tipc: Resetting bearer <eth:syzkaller0>
[  635.260408][T27788] tipc: Disabling bearer <eth:syzkaller0>
[  635.359085][T27805] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  635.519616][T27817] FAULT_INJECTION: forcing a failure.
[  635.519616][T27817] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  635.533222][T27817] CPU: 1 UID: 0 PID: 27817 Comm: syz.0.5779 Not tainted syzkaller #0 PREEMPT(full) 
[  635.533249][T27817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  635.533261][T27817] Call Trace:
[  635.533269][T27817]  <TASK>
[  635.533277][T27817]  dump_stack_lvl+0xe8/0x150
[  635.533306][T27817]  should_fail_ex+0x412/0x560
[  635.533333][T27817]  _copy_from_iter+0x1d3/0x1670
[  635.533366][T27817]  ? rcu_is_watching+0x15/0xb0
[  635.533386][T27817]  ? __pfx__copy_from_iter+0x10/0x10
[  635.533408][T27817]  ? kmem_cache_alloc_node_noprof+0x473/0x6f0
[  635.533443][T27817]  ? netlink_sendmsg+0x650/0xb40
[  635.533463][T27817]  ? skb_put+0x11b/0x210
[  635.533489][T27817]  netlink_sendmsg+0x6c0/0xb40
[  635.533520][T27817]  ? __pfx_netlink_sendmsg+0x10/0x10
[  635.533544][T27817]  ? aa_sock_msg_perm+0xf1/0x1b0
[  635.533568][T27817]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  635.533590][T27817]  ? __pfx_netlink_sendmsg+0x10/0x10
[  635.533610][T27817]  ____sys_sendmsg+0xa68/0xad0
[  635.533644][T27817]  ? __might_fault+0xaf/0x130
[  635.533676][T27817]  ? __pfx_____sys_sendmsg+0x10/0x10
[  635.533710][T27817]  ? import_iovec+0x73/0xa0
[  635.533738][T27817]  ___sys_sendmsg+0x2a5/0x360
[  635.533760][T27817]  ? __lock_acquire+0x6b5/0x2cf0
[  635.533789][T27817]  ? __pfx____sys_sendmsg+0x10/0x10
[  635.533848][T27817]  ? __fget_files+0x2a/0x420
[  635.533868][T27817]  ? __fget_files+0x3a0/0x420
[  635.533897][T27817]  __x64_sys_sendmsg+0x1bd/0x2a0
[  635.533923][T27817]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  635.533957][T27817]  ? __pfx_ksys_write+0x10/0x10
[  635.533995][T27817]  do_syscall_64+0xe2/0xf80
[  635.534016][T27817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.534034][T27817]  ? trace_irq_disable+0x37/0x100
[  635.534052][T27817]  ? clear_bhb_loop+0x60/0xb0
[  635.534073][T27817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.534091][T27817] RIP: 0033:0x7f316bb9aeb9
[  635.534108][T27817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.534122][T27817] RSP: 002b:00007f316cb21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  635.534142][T27817] RAX: ffffffffffffffda RBX: 00007f316be15fa0 RCX: 00007f316bb9aeb9
[  635.534156][T27817] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003
[  635.534168][T27817] RBP: 00007f316cb21090 R08: 0000000000000000 R09: 0000000000000000
[  635.534178][T27817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  635.534187][T27817] R13: 00007f316be16038 R14: 00007f316be15fa0 R15: 00007ffd9dca3688
[  635.534214][T27817]  </TASK>
[  635.801402][T27819] __nla_validate_parse: 2 callbacks suppressed
[  635.801421][T27819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5780'.
[  635.835524][T27819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  635.842858][T27819] IPv6: NLM_F_CREATE should be set when creating new route
[  635.852397][T27819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  635.859703][T27819] IPv6: NLM_F_CREATE should be set when creating new route
[  636.046740][T27827] mac80211_hwsim hwsim73 wlan1: entered allmulticast mode
[  636.070342][T27827] bond0: left allmulticast mode
[  636.077319][T27827] 
: left allmulticast mode
[  636.092316][T27827] bond_slave_1: left allmulticast mode
[  636.120220][T27839] netlink: 'syz.1.5784': attribute type 10 has an invalid length.
[  636.126421][T27827] bond4: left allmulticast mode
[  636.166681][T27827] bridge0: port 3(bond0) entered disabled state
[  636.258724][T27827] ¾x9ÿ: left allmulticast mode
[  636.263557][T27827] ¾x9ÿ: left promiscuous mode
[  636.296616][T27827] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  636.331712][T27827] bridge_slave_1: left promiscuous mode
[  636.337710][T27827] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.388098][T27827] bond0: (slave 
3
0
): Releasing backup interface
[  636.405077][T27827] 
: left promiscuous mode
[  636.425900][T27827] bond0: (slave bond_slave_1): Releasing backup interface
[  636.452715][T27827] bond_slave_1: left promiscuous mode
[  636.470650][T27827] team_slave_0: left promiscuous mode
[  636.505559][T27827] team0: Port device team_slave_0 removed
[  636.512864][T27827] team_slave_1: left promiscuous mode
[  636.538008][T27827] team0: Port device team_slave_1 removed
[  636.560466][T27827] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  636.581239][T27827] batman_adv: batadv0: Removing interface: batadv_slave_0
[  636.599391][T27827] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  636.607287][T27827] batman_adv: batadv0: Removing interface: batadv_slave_1
[  636.623777][T27827] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  636.637642][T27860] FAULT_INJECTION: forcing a failure.
[  636.637642][T27860] name failslab, interval 1, probability 0, space 0, times 0
[  636.654071][T27839] mac80211_hwsim hwsim73 wlan1: left allmulticast mode
[  636.661282][T27860] CPU: 1 UID: 0 PID: 27860 Comm: syz.2.5791 Not tainted syzkaller #0 PREEMPT(full) 
[  636.661307][T27860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  636.661317][T27860] Call Trace:
[  636.661325][T27860]  <TASK>
[  636.661331][T27860]  dump_stack_lvl+0xe8/0x150
[  636.661356][T27860]  should_fail_ex+0x412/0x560
[  636.661378][T27860]  should_failslab+0xa8/0x100
[  636.661396][T27860]  __kmalloc_cache_noprof+0x83/0x6e0
[  636.661412][T27860]  ? __lock_acquire+0x6b5/0x2cf0
[  636.661431][T27860]  ? rtnl_newlink+0x136/0x1be0
[  636.661453][T27860]  rtnl_newlink+0x136/0x1be0
[  636.661470][T27860]  ? unwind_next_frame+0xa5/0x23c0
[  636.661493][T27860]  ? __pfx_rtnl_newlink+0x10/0x10
[  636.661514][T27860]  ? is_bpf_text_address+0x26/0x2b0
[  636.661536][T27860]  ? __lock_acquire+0x6b5/0x2cf0
[  636.661560][T27860]  ? __lock_acquire+0x6b5/0x2cf0
[  636.661582][T27860]  ? __lock_acquire+0x6b5/0x2cf0
[  636.661608][T27860]  ? unwind_next_frame+0xa5/0x23c0
[  636.661628][T27860]  ? unwind_next_frame+0xa5/0x23c0
[  636.661646][T27860]  ? is_bpf_text_address+0x26/0x2b0
[  636.661666][T27860]  ? __lock_acquire+0x6b5/0x2cf0
[  636.661692][T27860]  ? is_bpf_text_address+0x292/0x2b0
[  636.661707][T27860]  ? is_bpf_text_address+0x26/0x2b0
[  636.661732][T27860]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  636.661758][T27860]  ? __pfx_rtnl_newlink+0x10/0x10
[  636.661775][T27860]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  636.661794][T27860]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  636.661809][T27860]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  636.661831][T27860]  ? __lock_acquire+0x6b5/0x2cf0
[  636.661861][T27860]  netlink_rcv_skb+0x232/0x4b0
[  636.661878][T27860]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  636.661896][T27860]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  636.661920][T27860]  ? netlink_deliver_tap+0x2e/0x1b0
[  636.661941][T27860]  netlink_unicast+0x80f/0x9b0
[  636.661962][T27860]  ? __pfx_netlink_unicast+0x10/0x10
[  636.661977][T27860]  ? netlink_sendmsg+0x650/0xb40
[  636.661992][T27860]  ? skb_put+0x11b/0x210
[  636.662012][T27860]  netlink_sendmsg+0x813/0xb40
[  636.662035][T27860]  ? __pfx_netlink_sendmsg+0x10/0x10
[  636.662054][T27860]  ? aa_sock_msg_perm+0xf1/0x1b0
[  636.662077][T27860]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  636.662094][T27860]  ? __pfx_netlink_sendmsg+0x10/0x10
[  636.662110][T27860]  ____sys_sendmsg+0xa68/0xad0
[  636.662129][T27860]  ? __might_fault+0xaf/0x130
[  636.662154][T27860]  ? __pfx_____sys_sendmsg+0x10/0x10
[  636.662179][T27860]  ? import_iovec+0x73/0xa0
[  636.662203][T27860]  ___sys_sendmsg+0x2a5/0x360
[  636.662221][T27860]  ? __lock_acquire+0x6b5/0x2cf0
[  636.662243][T27860]  ? __pfx____sys_sendmsg+0x10/0x10
[  636.662288][T27860]  ? __fget_files+0x2a/0x420
[  636.662303][T27860]  ? __fget_files+0x3a0/0x420
[  636.662326][T27860]  __x64_sys_sendmsg+0x1bd/0x2a0
[  636.662347][T27860]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  636.662373][T27860]  ? __pfx_ksys_write+0x10/0x10
[  636.662402][T27860]  do_syscall_64+0xe2/0xf80
[  636.662419][T27860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.662434][T27860]  ? trace_irq_disable+0x37/0x100
[  636.662448][T27860]  ? clear_bhb_loop+0x60/0xb0
[  636.662465][T27860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.662480][T27860] RIP: 0033:0x7f380f79aeb9
[  636.662495][T27860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.662508][T27860] RSP: 002b:00007f3810703028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  636.662525][T27860] RAX: ffffffffffffffda RBX: 00007f380fa15fa0 RCX: 00007f380f79aeb9
[  636.662537][T27860] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003
[  636.662547][T27860] RBP: 00007f3810703090 R08: 0000000000000000 R09: 0000000000000000
[  636.662557][T27860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.662566][T27860] R13: 00007f380fa16038 R14: 00007f380fa15fa0 R15: 00007ffc0fa32758
[  636.662591][T27860]  </TASK>
[  636.765533][T27862] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  637.205279][T27863] syzkaller0: entered promiscuous mode
[  637.205457][T27877] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  637.212197][T27863] syzkaller0: entered allmulticast mode
[  637.344734][T27885] batadv_slave_0: entered promiscuous mode
[  637.362924][T27878] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  637.419089][T27885] batadv_slave_0: left promiscuous mode
[  637.472543][T27898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5799'.
[  637.500349][T27898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  637.507656][T27898] IPv6: NLM_F_CREATE should be set when creating new route
[  637.515955][T27898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  637.522476][T27900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  637.523261][T27898] IPv6: NLM_F_CREATE should be set when creating new route
[  637.532672][T27900] syzkaller0: entered promiscuous mode
[  637.542647][T27900] syzkaller0: entered allmulticast mode
[  637.570283][T27900] tipc: Resetting bearer <eth:syzkaller0>
[  637.593142][T27899] tipc: Resetting bearer <eth:syzkaller0>
[  637.620063][T27899] tipc: Disabling bearer <eth:syzkaller0>
[  637.751123][   T11] block nbd3: Possible stuck request ffff8880258c8000: control (read@0,1024B). Runtime 150 seconds
[  637.768145][   T11] block nbd3: Possible stuck request ffff8880258c8200: control (read@1024,1024B). Runtime 150 seconds
[  637.779529][   T11] block nbd3: Possible stuck request ffff8880258c8400: control (read@2048,1024B). Runtime 150 seconds
[  637.790909][   T11] block nbd3: Possible stuck request ffff8880258c8600: control (read@3072,1024B). Runtime 150 seconds
[  637.847151][T27913] FAULT_INJECTION: forcing a failure.
[  637.847151][T27913] name failslab, interval 1, probability 0, space 0, times 0
[  637.861214][T27913] CPU: 0 UID: 0 PID: 27913 Comm: syz.0.5804 Not tainted syzkaller #0 PREEMPT(full) 
[  637.861241][T27913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  637.861253][T27913] Call Trace:
[  637.861261][T27913]  <TASK>
[  637.861269][T27913]  dump_stack_lvl+0xe8/0x150
[  637.861299][T27913]  should_fail_ex+0x412/0x560
[  637.861327][T27913]  should_failslab+0xa8/0x100
[  637.861351][T27913]  __kvmalloc_node_noprof+0x166/0x8d0
[  637.861373][T27913]  ? alloc_netdev_mqs+0xa6/0x11b0
[  637.861406][T27913]  alloc_netdev_mqs+0xa6/0x11b0
[  637.861431][T27913]  ? __pfx_macsec_setup+0x10/0x10
[  637.861463][T27913]  rtnl_create_link+0x31f/0xd70
[  637.861497][T27913]  rtnl_newlink_create+0x277/0xb70
[  637.861526][T27913]  ? __mutex_lock+0x5ac/0x1300
[  637.861553][T27913]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  637.861581][T27913]  ? __pfx___mutex_lock+0x10/0x10
[  637.861614][T27913]  ? ns_capable+0x89/0xe0
[  637.861652][T27913]  rtnl_newlink+0x1666/0x1be0
[  637.861689][T27913]  ? __pfx_rtnl_newlink+0x10/0x10
[  637.861712][T27913]  ? is_bpf_text_address+0x26/0x2b0
[  637.861739][T27913]  ? __lock_acquire+0x6b5/0x2cf0
[  637.861775][T27913]  ? __lock_acquire+0x6b5/0x2cf0
[  637.861803][T27913]  ? __lock_acquire+0x6b5/0x2cf0
[  637.861837][T27913]  ? unwind_next_frame+0xa5/0x23c0
[  637.861868][T27913]  ? unwind_next_frame+0xa5/0x23c0
[  637.861892][T27913]  ? is_bpf_text_address+0x26/0x2b0
[  637.861919][T27913]  ? __lock_acquire+0x6b5/0x2cf0
[  637.861953][T27913]  ? is_bpf_text_address+0x292/0x2b0
[  637.861973][T27913]  ? is_bpf_text_address+0x26/0x2b0
[  637.862006][T27913]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  637.862042][T27913]  ? __pfx_rtnl_newlink+0x10/0x10
[  637.862063][T27913]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  637.862092][T27913]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  637.862112][T27913]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  637.862133][T27913]  ? __lock_acquire+0x6b5/0x2cf0
[  637.862172][T27913]  netlink_rcv_skb+0x232/0x4b0
[  637.862195][T27913]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  637.862218][T27913]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  637.862250][T27913]  ? netlink_deliver_tap+0x2e/0x1b0
[  637.862279][T27913]  netlink_unicast+0x80f/0x9b0
[  637.862307][T27913]  ? __pfx_netlink_unicast+0x10/0x10
[  637.862327][T27913]  ? netlink_sendmsg+0x650/0xb40
[  637.862346][T27913]  ? skb_put+0x11b/0x210
[  637.862372][T27913]  netlink_sendmsg+0x813/0xb40
[  637.862402][T27913]  ? __pfx_netlink_sendmsg+0x10/0x10
[  637.862426][T27913]  ? aa_sock_msg_perm+0xf1/0x1b0
[  637.862450][T27913]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  637.862472][T27913]  ? __pfx_netlink_sendmsg+0x10/0x10
[  637.862491][T27913]  ____sys_sendmsg+0xa68/0xad0
[  637.862516][T27913]  ? __might_fault+0xaf/0x130
[  637.862549][T27913]  ? __pfx_____sys_sendmsg+0x10/0x10
[  637.862583][T27913]  ? import_iovec+0x73/0xa0
[  637.862613][T27913]  ___sys_sendmsg+0x2a5/0x360
[  637.862641][T27913]  ? __lock_acquire+0x6b5/0x2cf0
[  637.862671][T27913]  ? __pfx____sys_sendmsg+0x10/0x10
[  637.862733][T27913]  ? __fget_files+0x2a/0x420
[  637.862753][T27913]  ? __fget_files+0x3a0/0x420
[  637.862784][T27913]  __x64_sys_sendmsg+0x1bd/0x2a0
[  637.862816][T27913]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  637.862851][T27913]  ? __pfx_ksys_write+0x10/0x10
[  637.862889][T27913]  do_syscall_64+0xe2/0xf80
[  637.862910][T27913]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.862929][T27913]  ? trace_irq_disable+0x37/0x100
[  637.862947][T27913]  ? clear_bhb_loop+0x60/0xb0
[  637.862970][T27913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.862988][T27913] RIP: 0033:0x7f316bb9aeb9
[  637.863006][T27913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  637.863023][T27913] RSP: 002b:00007f316cb21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  637.863043][T27913] RAX: ffffffffffffffda RBX: 00007f316be15fa0 RCX: 00007f316bb9aeb9
[  637.863057][T27913] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003
[  637.863070][T27913] RBP: 00007f316cb21090 R08: 0000000000000000 R09: 0000000000000000
[  637.863082][T27913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  637.863094][T27913] R13: 00007f316be16038 R14: 00007f316be15fa0 R15: 00007ffd9dca3688
[  637.863127][T27913]  </TASK>
[  638.680394][T27938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5809'.
[  638.841712][T27948] tipc: Resetting bearer <eth:syzkaller0>
[  638.852033][T27949] netlink: 'syz.0.5815': attribute type 10 has an invalid length.
[  638.880305][T27949] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5815'.
[  638.923063][T27942] tipc: Resetting bearer <eth:syzkaller0>
[  639.063919][T27960] netlink: 'syz.1.5818': attribute type 11 has an invalid length.
[  639.387322][T27979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5825'.
[  639.422911][T27979] veth0_to_bridge: left allmulticast mode
[  639.433405][T27979] veth0_to_bridge: left promiscuous mode
[  639.466635][T27979] bridge0: port 3(veth0_to_bridge) entered disabled state
[  639.491521][T27979] bridge_slave_1: left allmulticast mode
[  639.498900][T27979] bridge_slave_1: left promiscuous mode
[  639.505873][T27979] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.539394][T27979] bridge_slave_0: left allmulticast mode
[  639.549858][T27979] bridge_slave_0: left promiscuous mode
[  639.563876][T27979] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.705844][T28007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5830'.
[  639.863280][T27996] syzkaller0: entered promiscuous mode
[  639.874353][T27996] syzkaller0: entered allmulticast mode
[  639.906003][ T1167] tipc: Resetting bearer <eth:syzkaller0>
[  640.349466][T28038] sctp: [Deprecated]: syz.2.5838 (pid 28038) Use of int in maxseg socket option.
[  640.349466][T28038] Use struct sctp_assoc_value instead
[  640.364977][T28039] tipc: Resetting bearer <eth:syzkaller0>
[  640.478187][T28037] tipc: Resetting bearer <eth:syzkaller0>
[  640.643136][T27984] ip6_vti0 speed is unknown, defaulting to 1000
[  640.773917][T28051] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  640.885483][T28060] tipc: Resetting bearer <eth:syzkaller0>
[  640.991122][T28053] tipc: Resetting bearer <eth:syzkaller0>
[  641.314726][T28076] netlink: 'syz.1.5852': attribute type 4 has an invalid length.
[  641.332601][T28076] netlink: 'syz.1.5852': attribute type 1 has an invalid length.
[  641.343204][T28076] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5852'.
[  641.556031][T28083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5853'.
[  642.161417][   T48] tipc: Resetting bearer <eth:syzkaller0>
[  642.178224][T28111] tipc: Resetting bearer <eth:syzkaller0>
[  642.231504][T28109] geneve4: entered promiscuous mode
[  642.239829][T28097] tipc: Resetting bearer <eth:syzkaller0>
[  642.270914][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5863'.
[  642.280069][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5863'.
[  642.412455][T28126] FAULT_INJECTION: forcing a failure.
[  642.412455][T28126] name failslab, interval 1, probability 0, space 0, times 0
[  642.466858][T28126] CPU: 0 UID: 0 PID: 28126 Comm: syz.1.5865 Not tainted syzkaller #0 PREEMPT(full) 
[  642.466886][T28126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  642.466898][T28126] Call Trace:
[  642.466906][T28126]  <TASK>
[  642.466914][T28126]  dump_stack_lvl+0xe8/0x150
[  642.466944][T28126]  should_fail_ex+0x412/0x560
[  642.466980][T28126]  should_failslab+0xa8/0x100
[  642.467003][T28126]  kmem_cache_alloc_lru_noprof+0x8c/0x6c0
[  642.467032][T28126]  ? __d_alloc+0x37/0x6f0
[  642.467059][T28126]  __d_alloc+0x37/0x6f0
[  642.467087][T28126]  d_alloc+0x4b/0x190
[  642.467106][T28126]  ? lookup_one_qstr_excl+0xc8/0x360
[  642.467131][T28126]  lookup_one_qstr_excl+0xdc/0x360
[  642.467152][T28126]  ? lookup_noperm_common+0x245/0x430
[  642.467177][T28126]  start_dirop+0x5c/0x90
[  642.467199][T28126]  simple_start_creating+0xcc/0x110
[  642.467218][T28126]  ? __pfx_simple_start_creating+0x10/0x10
[  642.467241][T28126]  ? do_raw_spin_unlock+0xf5/0x210
[  642.467262][T28126]  ? mntput+0x65/0xc0
[  642.467293][T28126]  debugfs_start_creating+0xdb/0x1a0
[  642.467317][T28126]  __debugfs_create_file+0x6f/0x400
[  642.467344][T28126]  debugfs_create_file_full+0x3f/0x60
[  642.467369][T28126]  ref_tracker_dir_debugfs+0x197/0x360
[  642.467393][T28126]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  642.467444][T28126]  ? trace_kmalloc+0x1f/0xb0
[  642.467459][T28126]  ? __kvmalloc_node_noprof+0x5ba/0x8d0
[  642.467486][T28126]  ? __raw_spin_lock_init+0x45/0x100
[  642.467510][T28126]  alloc_netdev_mqs+0x272/0x11b0
[  642.467537][T28126]  ? __pfx_macsec_setup+0x10/0x10
[  642.467568][T28126]  rtnl_create_link+0x31f/0xd70
[  642.467601][T28126]  rtnl_newlink_create+0x277/0xb70
[  642.467630][T28126]  ? kasan_quarantine_put+0xbb/0x1f0
[  642.467656][T28126]  ? lockdep_hardirqs_on+0x7a/0x110
[  642.467680][T28126]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  642.467707][T28126]  ? __pfx___mutex_lock+0x10/0x10
[  642.467740][T28126]  ? ns_capable+0x89/0xe0
[  642.467770][T28126]  rtnl_newlink+0x1666/0x1be0
[  642.467808][T28126]  ? __pfx_rtnl_newlink+0x10/0x10
[  642.467826][T28126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.467884][T28126]  ? kasan_quarantine_put+0xbb/0x1f0
[  642.467910][T28126]  ? lockdep_hardirqs_on+0x7a/0x110
[  642.467935][T28126]  ? kmem_cache_free+0x195/0x610
[  642.467952][T28126]  ? nlmon_xmit+0xb0/0x100
[  642.467988][T28126]  ? __lock_acquire+0x6b5/0x2cf0
[  642.468023][T28126]  ? __local_bh_enable_ip+0xd0/0x130
[  642.468041][T28126]  ? lockdep_hardirqs_on+0x7a/0x110
[  642.468060][T28126]  ? __dev_queue_xmit+0x274/0x3850
[  642.468083][T28126]  ? __local_bh_enable_ip+0xd0/0x130
[  642.468098][T28126]  ? __dev_queue_xmit+0x274/0x3850
[  642.468130][T28126]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  642.468163][T28126]  ? __pfx_rtnl_newlink+0x10/0x10
[  642.468183][T28126]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  642.468208][T28126]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  642.468227][T28126]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  642.468246][T28126]  ? ref_tracker_free+0x693/0x840
[  642.468267][T28126]  ? __copy_skb_header+0xa3/0x4a0
[  642.468293][T28126]  ? __pfx_ref_tracker_free+0x10/0x10
[  642.468326][T28126]  netlink_rcv_skb+0x232/0x4b0
[  642.468350][T28126]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  642.468373][T28126]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  642.468405][T28126]  ? netlink_deliver_tap+0x2e/0x1b0
[  642.468433][T28126]  netlink_unicast+0x80f/0x9b0
[  642.468461][T28126]  ? __pfx_netlink_unicast+0x10/0x10
[  642.468482][T28126]  ? netlink_sendmsg+0x650/0xb40
[  642.468501][T28126]  ? skb_put+0x11b/0x210
[  642.468527][T28126]  netlink_sendmsg+0x813/0xb40
[  642.468558][T28126]  ? __pfx_netlink_sendmsg+0x10/0x10
[  642.468581][T28126]  ? aa_sock_msg_perm+0xf1/0x1b0
[  642.468606][T28126]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  642.468628][T28126]  ? __pfx_netlink_sendmsg+0x10/0x10
[  642.468647][T28126]  ____sys_sendmsg+0xa68/0xad0
[  642.468672][T28126]  ? __might_fault+0xaf/0x130
[  642.468710][T28126]  ? __pfx_____sys_sendmsg+0x10/0x10
[  642.468744][T28126]  ? import_iovec+0x73/0xa0
[  642.468774][T28126]  ___sys_sendmsg+0x2a5/0x360
[  642.468797][T28126]  ? __lock_acquire+0x6b5/0x2cf0
[  642.468827][T28126]  ? __pfx____sys_sendmsg+0x10/0x10
[  642.468889][T28126]  ? __fget_files+0x2a/0x420
[  642.468908][T28126]  ? __fget_files+0x3a0/0x420
[  642.468939][T28126]  __x64_sys_sendmsg+0x1bd/0x2a0
[  642.468973][T28126]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  642.469007][T28126]  ? __pfx_ksys_write+0x10/0x10
[  642.469044][T28126]  do_syscall_64+0xe2/0xf80
[  642.469064][T28126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.469083][T28126]  ? clear_bhb_loop+0x60/0xb0
[  642.469105][T28126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.469123][T28126] RIP: 0033:0x7f5a5259aeb9
[  642.469141][T28126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  642.469157][T28126] RSP: 002b:00007f5a53430028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  642.469178][T28126] RAX: ffffffffffffffda RBX: 00007f5a52815fa0 RCX: 00007f5a5259aeb9
[  642.469192][T28126] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003
[  642.469205][T28126] RBP: 00007f5a53430090 R08: 0000000000000000 R09: 0000000000000000
[  642.469216][T28126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  642.469228][T28126] R13: 00007f5a52816038 R14: 00007f5a52815fa0 R15: 00007ffef1021da8
[  642.469261][T28126]  </TASK>
[  643.015832][T28130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5867'.
[  643.037722][T28126] macsec1: entered promiscuous mode
[  643.046628][T28126] macsec1: entered allmulticast mode
[  643.244804][ T6968] tipc: Resetting bearer <eth:syzkaller0>
[  643.303869][T28139] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5869'.
[  643.356706][T28139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5869'.
[  643.474265][T28149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5871'.
[  643.540235][T28143] netlink: 'syz.1.5871': attribute type 10 has an invalid length.
[  643.556648][T28136] syzkaller1: entered promiscuous mode
[  643.575666][T28143] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5871'.
[  643.617046][T28136] syzkaller1: entered allmulticast mode
[  643.666592][T28143] bridge0: port 1(bond0) entered blocking state
[  643.673170][T28143] bridge0: port 1(bond0) entered disabled state
[  643.687817][T28143] bond0: entered allmulticast mode
[  643.697803][T28143] bond4: entered allmulticast mode
[  643.713975][T28143] bridge0: port 1(bond0) entered blocking state
[  643.720546][T28143] bridge0: port 1(bond0) entered forwarding state
[  643.772189][T28133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5868'.
[  644.290737][T28168] netlink: 'syz.1.5878': attribute type 11 has an invalid length.
[  644.392229][T28173] FAULT_INJECTION: forcing a failure.
[  644.392229][T28173] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  644.436723][T28173] CPU: 1 UID: 0 PID: 28173 Comm: syz.2.5879 Not tainted syzkaller #0 PREEMPT(full) 
[  644.436750][T28173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  644.436761][T28173] Call Trace:
[  644.436769][T28173]  <TASK>
[  644.436778][T28173]  dump_stack_lvl+0xe8/0x150
[  644.436805][T28173]  should_fail_ex+0x412/0x560
[  644.436833][T28173]  _copy_from_user+0x2d/0xb0
[  644.436861][T28173]  __copy_msghdr+0x3c5/0x5b0
[  644.436893][T28173]  ___sys_sendmsg+0x213/0x360
[  644.436916][T28173]  ? __lock_acquire+0x6b5/0x2cf0
[  644.436946][T28173]  ? __pfx____sys_sendmsg+0x10/0x10
[  644.436976][T28173]  ? kstrtouint+0x6e/0xe0
[  644.437022][T28173]  ? __fget_files+0x2a/0x420
[  644.437049][T28173]  ? __fget_files+0x3a0/0x420
[  644.437080][T28173]  __sys_sendmmsg+0x27c/0x4e0
[  644.437110][T28173]  ? __pfx___sys_sendmmsg+0x10/0x10
[  644.437132][T28173]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  644.437180][T28173]  ? ksys_write+0x242/0x270
[  644.437208][T28173]  ? __pfx_ksys_write+0x10/0x10
[  644.437240][T28173]  __x64_sys_sendmmsg+0xa0/0xc0
[  644.437266][T28173]  do_syscall_64+0xe2/0xf80
[  644.437287][T28173]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.437305][T28173]  ? trace_irq_disable+0x37/0x100
[  644.437323][T28173]  ? clear_bhb_loop+0x60/0xb0
[  644.437346][T28173]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.437364][T28173] RIP: 0033:0x7f380f79aeb9
[  644.437382][T28173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.437398][T28173] RSP: 002b:00007f3810703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  644.437419][T28173] RAX: ffffffffffffffda RBX: 00007f380fa15fa0 RCX: 00007f380f79aeb9
[  644.437434][T28173] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000a
[  644.437446][T28173] RBP: 00007f3810703090 R08: 0000000000000000 R09: 0000000000000000
[  644.437459][T28173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.437470][T28173] R13: 00007f380fa16038 R14: 00007f380fa15fa0 R15: 00007ffc0fa32758
[  644.437501][T28173]  </TASK>
[  644.854156][T28186] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  645.193278][T28174] ip6_vti0 speed is unknown, defaulting to 1000
[  645.319143][T28195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  645.326470][T28195] IPv6: NLM_F_CREATE should be set when creating new route
[  645.335969][T28195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  645.343361][T28195] IPv6: NLM_F_CREATE should be set when creating new route
[  645.497818][T28186] rdma_rxe: rxe_newlink: failed to add bond0
[  645.747299][T28211] netlink: 'syz.2.5893': attribute type 11 has an invalid length.
[  646.137132][T28224] netlink: 'syz.4.5899': attribute type 11 has an invalid length.
[  646.421332][T16468] lec:lec_start_xmit: lec0:No lecd attached
[  646.431753][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  646.443790][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  646.456451][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  646.496516][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  646.504187][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  646.528074][T28243] __nla_validate_parse: 8 callbacks suppressed
[  646.528094][T28243] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5903'.
[  646.583489][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  646.595641][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  646.603131][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  646.611280][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  646.622380][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  646.930621][T28248] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  647.163454][T28266] netlink: zone id is out of range
[  647.169159][T28267] netlink: zone id is out of range
[  647.225532][T28253] ip6_vti0 speed is unknown, defaulting to 1000
[  647.281352][T28273] netpci0: tun_chr_ioctl cmd 1074025678
[  647.290714][T28273] netpci0: group set to 0
[  647.413693][T28282] netlink: 'syz.2.5912': attribute type 1 has an invalid length.
[  647.460407][T28282] bond7: entered promiscuous mode
[  647.466431][T28282] bond7: entered allmulticast mode
[  647.467438][T28286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5912'.
[  647.486955][T28282] 8021q: adding VLAN 0 to HW filter on device bond7
[  647.528333][T28286] macvlan0: entered promiscuous mode
[  647.543917][T28286] macvlan0: entered allmulticast mode
[  647.762349][T28238] ip6_vti0 speed is unknown, defaulting to 1000
[  648.003984][T28311] tipc: Resetting bearer <eth:syzkaller0>
[  648.208065][T28310] tipc: Resetting bearer <eth:syzkaller0>
[  648.495810][T28322] tipc: Resetting bearer <eth:syzkaller0>
[  648.536923][T28319] tipc: Resetting bearer <eth:syzkaller0>
[  648.545421][T28319] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5922'.
[  648.589305][T28317] tipc: Resetting bearer <eth:syzkaller0>
[  648.607658][T28317] tipc: Resetting bearer <eth:syzkaller0>
[  648.706605][ T5832] Bluetooth: hci2: command tx timeout
[  648.868545][T28238] chnl_net:caif_netlink_parms(): no params data found
[  648.967697][  T750] tipc: Resetting bearer <eth:syzkaller0>
[  649.014478][T28338] netlink: 'syz.3.5926': attribute type 1 has an invalid length.
[  649.034562][T28238] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.041939][T28238] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.042230][T28338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5926'.
[  649.049263][T28238] bridge_slave_0: entered allmulticast mode
[  649.077435][T28238] bridge_slave_0: entered promiscuous mode
[  649.090469][T28238] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.097791][T28238] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.105190][T28238] bridge_slave_1: entered allmulticast mode
[  649.119406][T28342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5929'.
[  649.120660][T28238] bridge_slave_1: entered promiscuous mode
[  649.137806][T28338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5926'.
[  649.175585][T28346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5929'.
[  649.185385][T28342] 8021q: adding VLAN 0 to HW filter on device bond8
[  649.273784][T28238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  649.287987][T28238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  649.370007][T28238] team0: Port device team_slave_0 added
[  649.380680][T28238] team0: Port device team_slave_1 added
[  649.455864][T28238] batman_adv: batadv0: Adding interface: batadv_slave_0
[  649.476838][T28238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  649.526850][T28238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  649.539635][T28238] batman_adv: batadv0: Adding interface: batadv_slave_1
[  649.546718][T28238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  649.556969][T28359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5935'.
[  649.586192][T28238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  649.768287][T28238] hsr_slave_0: entered promiscuous mode
[  649.769811][T28377] netlink: 'syz.4.5941': attribute type 89 has an invalid length.
[  649.785294][T28238] hsr_slave_1: entered promiscuous mode
[  649.799472][T28374] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  650.787017][ T5832] Bluetooth: hci2: command tx timeout
[  651.826484][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5400 ms
[  651.834525][    C0] lec:lec_tx_timeout: lec0
[  652.155802][T28379] syzkaller0: entered promiscuous mode
[  652.161790][T28379] syzkaller0: entered allmulticast mode
[  652.604992][T28238] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  652.631854][T28238] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.768897][T28238] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  652.802997][T28238] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.884575][ T5832] Bluetooth: hci2: command tx timeout
[  652.918730][T28432] FAULT_INJECTION: forcing a failure.
[  652.918730][T28432] name failslab, interval 1, probability 0, space 0, times 0
[  652.941330][T28432] CPU: 0 UID: 0 PID: 28432 Comm: syz.1.5957 Not tainted syzkaller #0 PREEMPT(full) 
[  652.941354][T28432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  652.941364][T28432] Call Trace:
[  652.941371][T28432]  <TASK>
[  652.941379][T28432]  dump_stack_lvl+0xe8/0x150
[  652.941407][T28432]  should_fail_ex+0x412/0x560
[  652.941432][T28432]  should_failslab+0xa8/0x100
[  652.941453][T28432]  __kmalloc_cache_noprof+0x83/0x6e0
[  652.941470][T28432]  ? __asan_memset+0x22/0x50
[  652.941492][T28432]  ? alloc_netdev_mqs+0xb97/0x11b0
[  652.941518][T28432]  ? __xdp_rxq_info_reg+0x171/0x280
[  652.941541][T28432]  alloc_netdev_mqs+0xb97/0x11b0
[  652.941569][T28432]  rtnl_create_link+0x31f/0xd70
[  652.941611][T28432]  rtnl_newlink_create+0x277/0xb70
[  652.941643][T28432]  ? __mutex_lock+0x5ac/0x1300
[  652.941671][T28432]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  652.941698][T28432]  ? __pfx___mutex_lock+0x10/0x10
[  652.941729][T28432]  ? ns_capable+0x89/0xe0
[  652.941757][T28432]  rtnl_newlink+0x1666/0x1be0
[  652.941795][T28432]  ? __pfx_rtnl_newlink+0x10/0x10
[  652.941813][T28432]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.941869][T28432]  ? kasan_quarantine_put+0xbb/0x1f0
[  652.941891][T28432]  ? lockdep_hardirqs_on+0x7a/0x110
[  652.941912][T28432]  ? kmem_cache_free+0x195/0x610
[  652.941926][T28432]  ? nlmon_xmit+0xb0/0x100
[  652.941951][T28432]  ? __lock_acquire+0x6b5/0x2cf0
[  652.941980][T28432]  ? __local_bh_enable_ip+0xd0/0x130
[  652.941993][T28432]  ? lockdep_hardirqs_on+0x7a/0x110
[  652.942009][T28432]  ? __dev_queue_xmit+0x274/0x3850
[  652.942029][T28432]  ? __local_bh_enable_ip+0xd0/0x130
[  652.942042][T28432]  ? __dev_queue_xmit+0x274/0x3850
[  652.942067][T28432]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  652.942096][T28432]  ? __pfx_rtnl_newlink+0x10/0x10
[  652.942115][T28432]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  652.942138][T28432]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  652.942158][T28432]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  652.942181][T28432]  ? ref_tracker_free+0x693/0x840
[  652.942202][T28432]  ? __copy_skb_header+0xa3/0x4a0
[  652.942229][T28432]  ? __pfx_ref_tracker_free+0x10/0x10
[  652.942260][T28432]  netlink_rcv_skb+0x232/0x4b0
[  652.942282][T28432]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  652.942304][T28432]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  652.942336][T28432]  ? netlink_deliver_tap+0x2e/0x1b0
[  652.942364][T28432]  netlink_unicast+0x80f/0x9b0
[  652.942392][T28432]  ? __pfx_netlink_unicast+0x10/0x10
[  652.942412][T28432]  ? netlink_sendmsg+0x650/0xb40
[  652.942431][T28432]  ? skb_put+0x11b/0x210
[  652.942456][T28432]  netlink_sendmsg+0x813/0xb40
[  652.942487][T28432]  ? __pfx_netlink_sendmsg+0x10/0x10
[  652.942511][T28432]  ? aa_sock_msg_perm+0xf1/0x1b0
[  652.942536][T28432]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  652.942557][T28432]  ? __pfx_netlink_sendmsg+0x10/0x10
[  652.942577][T28432]  ____sys_sendmsg+0xa68/0xad0
[  652.942600][T28432]  ? __might_fault+0xaf/0x130
[  652.942628][T28432]  ? __pfx_____sys_sendmsg+0x10/0x10
[  652.942659][T28432]  ? import_iovec+0x73/0xa0
[  652.942687][T28432]  ___sys_sendmsg+0x2a5/0x360
[  652.942709][T28432]  ? __lock_acquire+0x6b5/0x2cf0
[  652.942735][T28432]  ? __pfx____sys_sendmsg+0x10/0x10
[  652.942791][T28432]  ? __fget_files+0x2a/0x420
[  652.942809][T28432]  ? __fget_files+0x3a0/0x420
[  652.942838][T28432]  __x64_sys_sendmsg+0x1bd/0x2a0
[  652.942870][T28432]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  652.942904][T28432]  ? __pfx_ksys_write+0x10/0x10
[  652.942941][T28432]  do_syscall_64+0xe2/0xf80
[  652.942959][T28432]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.942974][T28432]  ? trace_irq_disable+0x37/0x100
[  652.942993][T28432]  ? clear_bhb_loop+0x60/0xb0
[  652.943016][T28432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.943034][T28432] RIP: 0033:0x7f5a5259aeb9
[  652.943052][T28432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  652.943068][T28432] RSP: 002b:00007f5a53430028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  652.943089][T28432] RAX: ffffffffffffffda RBX: 00007f5a52815fa0 RCX: 00007f5a5259aeb9
[  652.943103][T28432] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003
[  652.943114][T28432] RBP: 00007f5a53430090 R08: 0000000000000000 R09: 0000000000000000
[  652.943126][T28432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  652.943137][T28432] R13: 00007f5a52816038 R14: 00007f5a52815fa0 R15: 00007ffef1021da8
[  652.943170][T28432]  </TASK>
[  653.386131][T28238] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  653.405635][T28238] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  653.425335][T28438] dvmrp0: left allmulticast mode
[  653.539975][T28238] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  653.573577][T28238] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  653.752259][ T9667] block nbd5: Possible stuck request ffff8880259b0000: control (read@0,1024B). Runtime 30 seconds
[  653.763090][ T9667] block nbd5: Possible stuck request ffff8880259b0200: control (read@1024,1024B). Runtime 30 seconds
[  653.774556][ T9667] block nbd5: Possible stuck request ffff8880259b0400: control (read@2048,1024B). Runtime 30 seconds
[  653.785527][ T9667] block nbd5: Possible stuck request ffff8880259b0600: control (read@3072,1024B). Runtime 30 seconds
[  653.940327][T28470] xt_connbytes: Forcing CT accounting to be enabled
[  654.075254][T28475] FAULT_INJECTION: forcing a failure.
[  654.075254][T28475] name failslab, interval 1, probability 0, space 0, times 0
[  654.109553][T28475] CPU: 1 UID: 0 PID: 28475 Comm: syz.1.5967 Not tainted syzkaller #0 PREEMPT(full) 
[  654.109581][T28475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  654.109593][T28475] Call Trace:
[  654.109601][T28475]  <TASK>
[  654.109610][T28475]  dump_stack_lvl+0xe8/0x150
[  654.109640][T28475]  should_fail_ex+0x412/0x560
[  654.109669][T28475]  should_failslab+0xa8/0x100
[  654.109693][T28475]  __kmalloc_cache_noprof+0x83/0x6e0
[  654.109712][T28475]  ? __asan_memset+0x22/0x50
[  654.109736][T28475]  ? alloc_netdev_mqs+0xb97/0x11b0
[  654.109770][T28475]  ? __xdp_rxq_info_reg+0x171/0x280
[  654.109798][T28475]  alloc_netdev_mqs+0xb97/0x11b0
[  654.109833][T28475]  rtnl_create_link+0x31f/0xd70
[  654.109865][T28475]  rtnl_newlink_create+0x277/0xb70
[  654.109893][T28475]  ? kasan_quarantine_put+0xbb/0x1f0
[  654.109918][T28475]  ? lockdep_hardirqs_on+0x7a/0x110
[  654.109942][T28475]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  654.109967][T28475]  ? __pfx___mutex_lock+0x10/0x10
[  654.109998][T28475]  ? ns_capable+0x89/0xe0
[  654.110026][T28475]  rtnl_newlink+0x1666/0x1be0
[  654.110064][T28475]  ? __pfx_rtnl_newlink+0x10/0x10
[  654.110082][T28475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.110140][T28475]  ? kasan_quarantine_put+0xbb/0x1f0
[  654.110166][T28475]  ? lockdep_hardirqs_on+0x7a/0x110
[  654.110192][T28475]  ? kmem_cache_free+0x195/0x610
[  654.110210][T28475]  ? nlmon_xmit+0xb0/0x100
[  654.110240][T28475]  ? __lock_acquire+0x6b5/0x2cf0
[  654.110276][T28475]  ? __local_bh_enable_ip+0xd0/0x130
[  654.110293][T28475]  ? lockdep_hardirqs_on+0x7a/0x110
[  654.110313][T28475]  ? __dev_queue_xmit+0x274/0x3850
[  654.110337][T28475]  ? __local_bh_enable_ip+0xd0/0x130
[  654.110352][T28475]  ? __dev_queue_xmit+0x274/0x3850
[  654.110385][T28475]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  654.110422][T28475]  ? __pfx_rtnl_newlink+0x10/0x10
[  654.110443][T28475]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  654.110467][T28475]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  654.110486][T28475]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  654.110505][T28475]  ? ref_tracker_free+0x693/0x840
[  654.110526][T28475]  ? __copy_skb_header+0xa3/0x4a0
[  654.110551][T28475]  ? __pfx_ref_tracker_free+0x10/0x10
[  654.110586][T28475]  netlink_rcv_skb+0x232/0x4b0
[  654.110609][T28475]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  654.110629][T28475]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  654.110659][T28475]  ? netlink_deliver_tap+0x2e/0x1b0
[  654.110684][T28475]  netlink_unicast+0x80f/0x9b0
[  654.110709][T28475]  ? __pfx_netlink_unicast+0x10/0x10
[  654.110734][T28475]  ? netlink_sendmsg+0x650/0xb40
[  654.110760][T28475]  ? skb_put+0x11b/0x210
[  654.110785][T28475]  netlink_sendmsg+0x813/0xb40
[  654.110817][T28475]  ? __pfx_netlink_sendmsg+0x10/0x10
[  654.110841][T28475]  ? aa_sock_msg_perm+0xf1/0x1b0
[  654.110866][T28475]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  654.110888][T28475]  ? __pfx_netlink_sendmsg+0x10/0x10
[  654.110907][T28475]  ____sys_sendmsg+0xa68/0xad0
[  654.110932][T28475]  ? __might_fault+0xaf/0x130
[  654.110963][T28475]  ? __pfx_____sys_sendmsg+0x10/0x10
[  654.110995][T28475]  ? import_iovec+0x73/0xa0
[  654.111023][T28475]  ___sys_sendmsg+0x2a5/0x360
[  654.111046][T28475]  ? __lock_acquire+0x6b5/0x2cf0
[  654.111076][T28475]  ? __pfx____sys_sendmsg+0x10/0x10
[  654.111139][T28475]  ? __fget_files+0x2a/0x420
[  654.111158][T28475]  ? __fget_files+0x3a0/0x420
[  654.111190][T28475]  __x64_sys_sendmsg+0x1bd/0x2a0
[  654.111217][T28475]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  654.111251][T28475]  ? __pfx_ksys_write+0x10/0x10
[  654.111289][T28475]  do_syscall_64+0xe2/0xf80
[  654.111310][T28475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.111328][T28475]  ? trace_irq_disable+0x37/0x100
[  654.111345][T28475]  ? clear_bhb_loop+0x60/0xb0
[  654.111368][T28475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.111386][T28475] RIP: 0033:0x7f5a5259aeb9
[  654.111404][T28475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  654.111418][T28475] RSP: 002b:00007f5a53430028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  654.111437][T28475] RAX: ffffffffffffffda RBX: 00007f5a52815fa0 RCX: 00007f5a5259aeb9
[  654.111450][T28475] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003
[  654.111461][T28475] RBP: 00007f5a53430090 R08: 0000000000000000 R09: 0000000000000000
[  654.111473][T28475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  654.111484][T28475] R13: 00007f5a52816038 R14: 00007f5a52815fa0 R15: 00007ffef1021da8
[  654.111516][T28475]  </TASK>
[  654.111870][T28238] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  654.658444][T28238] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  654.682079][   T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  654.693207][   T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  654.706499][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  654.718894][T28238] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  654.734712][T28238] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  654.946638][ T5832] Bluetooth: hci2: command tx timeout
[  654.996539][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  655.018423][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  655.147533][T28524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5980'.
[  655.186830][T28519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5979'.
[  655.258048][T28531] netlink: 'syz.1.5981': attribute type 1 has an invalid length.
[  655.295142][T28238] 8021q: adding VLAN 0 to HW filter on device bond0
[  655.364534][T28238] 8021q: adding VLAN 0 to HW filter on device team0
[  655.370605][T28533] nbd: nbd2 already in use
[  655.380583][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.387865][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[  655.413472][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.420695][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  655.463034][T28496] ip6_vti0 speed is unknown, defaulting to 1000
[  656.042649][T28522] ip6_vti0 speed is unknown, defaulting to 1000
[  656.055663][T28238] 8021q: adding VLAN 0 to HW filter on device batadv0
[  656.254358][T28238] veth0_vlan: entered promiscuous mode
[  656.287130][T28238] veth1_vlan: entered promiscuous mode
[  656.352920][T28238] veth0_macvtap: entered promiscuous mode
[  656.372413][T28238] veth1_macvtap: entered promiscuous mode
[  656.387462][T28529] ip6_vti0 speed is unknown, defaulting to 1000
[  656.470547][T28238] batman_adv: batadv0: Interface activated: batadv_slave_0
[  656.491387][T28551] netlink: 'syz.2.5986': attribute type 4 has an invalid length.
[  656.494717][T28238] batman_adv: batadv0: Interface activated: batadv_slave_1
[  656.508125][T28551] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5986'.
[  656.542964][T28551] .`: renamed from bond0
[  656.561884][ T6968] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  656.579885][ T6968] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  656.608938][ T6968] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  656.638035][ T6968] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  656.664734][T28553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5987'.
[  656.769543][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  656.777672][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.006864][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.038980][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.439588][T28561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5898'.
[  657.495045][T28562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5898'.
[  657.677172][T28567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  658.038863][T28580] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  658.182231][T28587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5997'.
[  658.217959][T28584] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  658.232151][T28584] bond0 (unregistering): Released all slaves
[  658.260527][T28586] tipc: Resetting bearer <eth:syzkaller0>
[  658.312984][T28594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5999'.
[  658.380878][T28597] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  658.665097][T28618] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6003'.
[  658.786530][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  658.863010][T28634] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  659.018674][T28640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6010'.
[  659.061041][T28644] syzkaller0: entered promiscuous mode
[  659.079053][T28644] syzkaller0: entered allmulticast mode
[  659.115864][T28613] ip6_vti0 speed is unknown, defaulting to 1000
[  659.736935][T28615] ip6_vti0 speed is unknown, defaulting to 1000
[  660.202791][T28679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  660.210182][T28679] IPv6: NLM_F_CREATE should be set when creating new route
[  660.251154][T28679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  660.258459][T28679] IPv6: NLM_F_CREATE should be set when creating new route
[  660.747328][T28687] veth5: entered promiscuous mode
[  660.752830][T28691] tipc: Resetting bearer <eth:syzkaller0>
[  661.347592][T28715] siw: device registration error -23
[  661.541763][T28693] tipc: Resetting bearer <eth:syzkaller0>
[  661.564981][T28721] FAULT_INJECTION: forcing a failure.
[  661.564981][T28721] name failslab, interval 1, probability 0, space 0, times 0
[  661.592380][T28721] CPU: 0 UID: 0 PID: 28721 Comm: syz.4.6033 Not tainted syzkaller #0 PREEMPT(full) 
[  661.592408][T28721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  661.592421][T28721] Call Trace:
[  661.592428][T28721]  <TASK>
[  661.592436][T28721]  dump_stack_lvl+0xe8/0x150
[  661.592465][T28721]  should_fail_ex+0x412/0x560
[  661.592490][T28721]  should_failslab+0xa8/0x100
[  661.592514][T28721]  __kmalloc_node_track_caller_noprof+0xe1/0x7f0
[  661.592535][T28721]  ? kobject_set_name_vargs+0x61/0x110
[  661.592565][T28721]  kstrdup+0x42/0x100
[  661.592589][T28721]  kobject_set_name_vargs+0x61/0x110
[  661.592615][T28721]  dev_set_name+0xe2/0x140
[  661.592644][T28721]  ? __pfx_dev_set_name+0x10/0x10
[  661.592675][T28721]  ? device_initialize+0x24b/0x440
[  661.592703][T28721]  netdev_register_kobject+0xb7/0x310
[  661.592734][T28721]  register_netdevice+0x12c0/0x1cf0
[  661.592776][T28721]  ? __pfx_register_netdevice+0x10/0x10
[  661.592798][T28721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.592836][T28721]  macsec_newlink+0x6f9/0x1200
[  661.592882][T28721]  ? __pfx_macsec_newlink+0x10/0x10
[  661.592909][T28721]  ? rcu_is_watching+0x15/0xb0
[  661.592928][T28721]  ? trace_kmalloc+0x1f/0xb0
[  661.592939][T28721]  ? __kvmalloc_node_noprof+0x5ba/0x8d0
[  661.592965][T28721]  ? alloc_netdev_mqs+0xc89/0x11b0
[  661.592987][T28721]  ? alloc_netdev_mqs+0xbf8/0x11b0
[  661.593019][T28721]  ? validate_linkmsg+0x765/0x950
[  661.593058][T28721]  ? __pfx_macsec_newlink+0x10/0x10
[  661.593085][T28721]  rtnl_newlink_create+0x329/0xb70
[  661.593114][T28721]  ? __mutex_lock+0x5ac/0x1300
[  661.593142][T28721]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  661.593169][T28721]  ? __pfx___mutex_lock+0x10/0x10
[  661.593201][T28721]  ? ns_capable+0x89/0xe0
[  661.593231][T28721]  rtnl_newlink+0x1666/0x1be0
[  661.593269][T28721]  ? __pfx_rtnl_newlink+0x10/0x10
[  661.593288][T28721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.593340][T28721]  ? kasan_quarantine_put+0xbb/0x1f0
[  661.593364][T28721]  ? lockdep_hardirqs_on+0x7a/0x110
[  661.593387][T28721]  ? kmem_cache_free+0x195/0x610
[  661.593403][T28721]  ? nlmon_xmit+0xb0/0x100
[  661.593433][T28721]  ? __lock_acquire+0x6b5/0x2cf0
[  661.593467][T28721]  ? __local_bh_enable_ip+0xd0/0x130
[  661.593483][T28721]  ? lockdep_hardirqs_on+0x7a/0x110
[  661.593501][T28721]  ? __dev_queue_xmit+0x274/0x3850
[  661.593522][T28721]  ? __local_bh_enable_ip+0xd0/0x130
[  661.593536][T28721]  ? __dev_queue_xmit+0x274/0x3850
[  661.593565][T28721]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  661.593600][T28721]  ? __pfx_rtnl_newlink+0x10/0x10
[  661.593619][T28721]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  661.593642][T28721]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  661.593661][T28721]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  661.593679][T28721]  ? ref_tracker_free+0x693/0x840
[  661.593700][T28721]  ? __copy_skb_header+0xa3/0x4a0
[  661.593726][T28721]  ? __pfx_ref_tracker_free+0x10/0x10
[  661.593759][T28721]  netlink_rcv_skb+0x232/0x4b0
[  661.593782][T28721]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  661.593804][T28721]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  661.593835][T28721]  ? netlink_deliver_tap+0x2e/0x1b0
[  661.593863][T28721]  netlink_unicast+0x80f/0x9b0
[  661.593890][T28721]  ? __pfx_netlink_unicast+0x10/0x10
[  661.593911][T28721]  ? netlink_sendmsg+0x650/0xb40
[  661.593929][T28721]  ? skb_put+0x11b/0x210
[  661.593963][T28721]  netlink_sendmsg+0x813/0xb40
[  661.593993][T28721]  ? __pfx_netlink_sendmsg+0x10/0x10
[  661.594016][T28721]  ? aa_sock_msg_perm+0xf1/0x1b0
[  661.594040][T28721]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  661.594062][T28721]  ? __pfx_netlink_sendmsg+0x10/0x10
[  661.594081][T28721]  ____sys_sendmsg+0xa68/0xad0
[  661.594105][T28721]  ? __might_fault+0xaf/0x130
[  661.594139][T28721]  ? __pfx_____sys_sendmsg+0x10/0x10
[  661.594173][T28721]  ? import_iovec+0x73/0xa0
[  661.594202][T28721]  ___sys_sendmsg+0x2a5/0x360
[  661.594224][T28721]  ? __lock_acquire+0x6b5/0x2cf0
[  661.594254][T28721]  ? __pfx____sys_sendmsg+0x10/0x10
[  661.594310][T28721]  ? __fget_files+0x2a/0x420
[  661.594329][T28721]  ? __fget_files+0x3a0/0x420
[  661.594357][T28721]  __x64_sys_sendmsg+0x1bd/0x2a0
[  661.594383][T28721]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  661.594415][T28721]  ? __pfx_ksys_write+0x10/0x10
[  661.594451][T28721]  do_syscall_64+0xe2/0xf80
[  661.594472][T28721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.594489][T28721]  ? trace_irq_disable+0x37/0x100
[  661.594506][T28721]  ? clear_bhb_loop+0x60/0xb0
[  661.594529][T28721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.594546][T28721] RIP: 0033:0x7ff88259aeb9
[  661.594563][T28721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  661.594578][T28721] RSP: 002b:00007ff8834d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  661.594598][T28721] RAX: ffffffffffffffda RBX: 00007ff882815fa0 RCX: 00007ff88259aeb9
[  661.594611][T28721] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003
[  661.594622][T28721] RBP: 00007ff8834d8090 R08: 0000000000000000 R09: 0000000000000000
[  661.594634][T28721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  661.594643][T28721] R13: 00007ff882816038 R14: 00007ff882815fa0 R15: 00007ffce7bfb5a8
[  661.594673][T28721]  </TASK>
[  662.215713][  T148] tipc: Resetting bearer <eth:syzkaller0>
[  662.339243][T28736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  662.382239][T28736] syzkaller0: entered promiscuous mode
[  662.388724][T28736] syzkaller0: entered allmulticast mode
[  662.421319][T28736] tipc: Resetting bearer <eth:syzkaller0>
[  662.451348][T28735] tipc: Resetting bearer <eth:syzkaller0>
[  662.515063][T28735] tipc: Disabling bearer <eth:syzkaller0>
[  662.525493][T28753] __nla_validate_parse: 2 callbacks suppressed
[  662.525509][T28753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6043'.
[  662.769616][T28761] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  662.814280][T28761] bond0 (unregistering): Released all slaves
[  663.027232][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  663.038982][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  663.066934][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  663.075754][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  663.084654][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  663.214018][   T48] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.262197][   T48] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.461129][T28771] ip6_vti0 speed is unknown, defaulting to 1000
[  663.539513][   T48] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.586524][   T48] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.618532][T28796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6057'.
[  663.668257][   T48] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.678409][   T48] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.767715][   T48] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.816315][   T48] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.873286][T28811] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20000
[  664.050166][T28847] netlink: 'syz.1.6068': attribute type 11 has an invalid length.
[  664.171016][T28861] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6069'.
[  664.225344][T28861] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6069'.
[  664.261341][T28861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6069'.
[  664.463876][T28771] chnl_net:caif_netlink_parms(): no params data found
[  664.860508][   T48] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface
[  665.126098][   T48] bond4 (unregistering): (slave gretap1): Releasing active interface
[  665.192403][ T5832] Bluetooth: hci3: command tx timeout
[  665.758573][   T48] bond5 (unregistering): (slave bridge8): Releasing backup interface
[  665.807100][   T48] bond6 (unregistering): (slave bridge9): Releasing active interface
[  666.218325][   T48] bond0 (unregistering): Released all slaves
[  666.219956][T28852] smc: removing ib device syz0
[  666.339866][   T48] bond1 (unregistering): Released all slaves
[  666.351656][   T48] bond2 (unregistering): Released all slaves
[  666.462531][   T48] bond3 (unregistering): Released all slaves
[  666.581694][   T48] bond4 (unregistering): Released all slaves
[  666.593444][   T48] bond5 (unregistering): Released all slaves
[  666.605873][   T48] bond6 (unregistering): Released all slaves
[  666.716693][   T48] bond7 (unregistering): Released all slaves
[  666.828184][   T48] bond8 (unregistering): (slave batadv1): Releasing active interface
[  666.838187][   T48] bond8 (unregistering): Released all slaves
[  666.850260][   T48] bond9 (unregistering): Released all slaves
[  666.959730][   T48] bond10 (unregistering): (slave wireguard0): Releasing backup interface
[  666.968628][   T48] wireguard0: left promiscuous mode
[  666.975287][   T48] bond10 (unregistering): Released all slaves
[  667.006520][T28901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6078'.
[  667.171995][T28894] ip6_vti0 speed is unknown, defaulting to 1000
[  667.186412][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  667.267406][ T5832] Bluetooth: hci3: command tx timeout
[  667.404291][T28771] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.424117][T28771] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.454894][T28771] bridge_slave_0: entered allmulticast mode
[  667.495155][T28771] bridge_slave_0: entered promiscuous mode
[  667.541648][T28771] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.551324][T28945] netlink: 'syz.0.6086': attribute type 1 has an invalid length.
[  667.575334][T28771] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.586408][T28945] netlink: 'syz.0.6086': attribute type 4 has an invalid length.
[  667.600130][T28771] bridge_slave_1: entered allmulticast mode
[  667.602320][T28948] netlink: 'syz.0.6086': attribute type 1 has an invalid length.
[  667.612818][T28945] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6086'.
[  667.646715][T28948] netlink: 'syz.0.6086': attribute type 4 has an invalid length.
[  667.673860][T28771] bridge_slave_1: entered promiscuous mode
[  667.695823][T28948] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6086'.
[  667.846457][   T11] block nbd3: Possible stuck request ffff8880258c8000: control (read@0,1024B). Runtime 180 seconds
[  667.857372][   T11] block nbd3: Possible stuck request ffff8880258c8200: control (read@1024,1024B). Runtime 180 seconds
[  667.868713][   T11] block nbd3: Possible stuck request ffff8880258c8400: control (read@2048,1024B). Runtime 180 seconds
[  667.887252][   T11] block nbd3: Possible stuck request ffff8880258c8600: control (read@3072,1024B). Runtime 180 seconds
[  667.990866][T28771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  668.063629][T28771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  668.084672][T28956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6090'.
[  668.240941][T28958] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  668.271580][T28958] bond0 (unregistering): Released all slaves
[  668.513495][T28771] team0: Port device team_slave_0 added
[  668.588237][T28771] team0: Port device team_slave_1 added
[  668.601296][T28970] netlink: 'syz.2.6092': attribute type 11 has an invalid length.
[  668.794907][T28771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  668.815959][T28771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.845239][T28976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.892456][T28771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  669.146931][T28771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  669.170657][T28771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.254825][T28771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  669.351822][ T5832] Bluetooth: hci3: command tx timeout
[  669.483463][T28999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6101'.
[  669.516148][T29001] netlink: 'syz.0.6102': attribute type 11 has an invalid length.
[  670.015254][T28771] hsr_slave_0: entered promiscuous mode
[  670.047506][T28771] hsr_slave_1: entered promiscuous mode
[  670.057798][T28771] debugfs: 'hsr0' already exists in 'hsr'
[  670.063645][T28771] Cannot create hsr debugfs directory
[  670.088613][T29017] tipc: Started in network mode
[  670.093518][T29017] tipc: Node identity 8af23226889b, cluster identity 4711
[  670.128464][T29017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  670.211592][T29018] syzkaller0: entered promiscuous mode
[  670.218507][T29018] syzkaller0: entered allmulticast mode
[  670.246555][T29014] tipc: Resetting bearer <eth:syzkaller0>
[  670.324803][T29014] tipc: Disabling bearer <eth:syzkaller0>
[  670.331403][T29028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6109'.
[  670.365576][T29025] netlink: 'syz.3.6108': attribute type 29 has an invalid length.
[  670.506116][   T48] tipc: Left network mode
[  670.565247][T29028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6109'.
[  670.612280][   T48] IPVS: stopping backup sync thread 28051 ...
[  670.632893][T29039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6111'.
[  670.989762][T29057] netlink: 'syz.2.6114': attribute type 8 has an invalid length.
[  671.068675][T29060] FAULT_INJECTION: forcing a failure.
[  671.068675][T29060] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  671.104987][T29060] CPU: 1 UID: 0 PID: 29060 Comm: syz.0.6115 Not tainted syzkaller #0 PREEMPT(full) 
[  671.105013][T29060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  671.105024][T29060] Call Trace:
[  671.105031][T29060]  <TASK>
[  671.105038][T29060]  dump_stack_lvl+0xe8/0x150
[  671.105066][T29060]  should_fail_ex+0x412/0x560
[  671.105094][T29060]  _copy_from_user+0x2d/0xb0
[  671.105121][T29060]  __copy_msghdr+0x3c5/0x5b0
[  671.105151][T29060]  ___sys_sendmsg+0x213/0x360
[  671.105173][T29060]  ? __lock_acquire+0x6b5/0x2cf0
[  671.105203][T29060]  ? __pfx____sys_sendmsg+0x10/0x10
[  671.105259][T29060]  ? __fget_files+0x2a/0x420
[  671.105278][T29060]  ? __fget_files+0x3a0/0x420
[  671.105331][T29060]  __x64_sys_sendmsg+0x1bd/0x2a0
[  671.105357][T29060]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  671.105387][T29060]  ? __pfx_ksys_write+0x10/0x10
[  671.105423][T29060]  do_syscall_64+0xe2/0xf80
[  671.105444][T29060]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.105462][T29060]  ? trace_irq_disable+0x37/0x100
[  671.105478][T29060]  ? clear_bhb_loop+0x60/0xb0
[  671.105500][T29060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.105518][T29060] RIP: 0033:0x7f406919aeb9
[  671.105536][T29060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.105551][T29060] RSP: 002b:00007f406a035028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  671.105570][T29060] RAX: ffffffffffffffda RBX: 00007f4069415fa0 RCX: 00007f406919aeb9
[  671.105584][T29060] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004
[  671.105597][T29060] RBP: 00007f406a035090 R08: 0000000000000000 R09: 0000000000000000
[  671.105608][T29060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  671.105618][T29060] R13: 00007f4069416038 R14: 00007f4069415fa0 R15: 00007ffc571c52a8
[  671.105646][T29060]  </TASK>
[  671.320526][T29057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6114'.
[  671.441315][ T5832] Bluetooth: hci3: command tx timeout
[  671.517135][T29068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6117'.
[  671.711107][T29078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6119'.
[  671.747393][T29064] ip6_vti0 speed is unknown, defaulting to 1000
[  671.871972][T29089] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  671.968570][T29088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  672.115782][T29095] syzkaller0: entered promiscuous mode
[  672.130801][T29095] syzkaller0: entered allmulticast mode
[  672.194180][T29082] tipc: Resetting bearer <eth:syzkaller0>
[  672.294127][T29082] tipc: Disabling bearer <eth:syzkaller0>
[  672.406950][T29111] .`: (slave bridge0): Releasing backup interface
[  672.437100][T29111] bond5: (slave dummy0): Releasing active interface
[  672.455397][T29111] .`: (slave bridge_slave_1): Releasing backup interface
[  672.474980][T29111] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  672.704581][   T48] hsr_slave_0: left promiscuous mode
[  672.718202][   T48] hsr_slave_1: left promiscuous mode
[  672.749992][   T48] veth1_macvtap: left promiscuous mode
[  672.764293][   T48] veth0_macvtap: left promiscuous mode
[  672.776066][   T48] veth1_vlan: left promiscuous mode
[  672.789817][   T48] veth0_vlan: left promiscuous mode
[  672.917047][T29147] netlink: 'syz.1.6130': attribute type 1 has an invalid length.
[  674.324082][T29147] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  674.345019][T29164] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  674.430200][T29200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6137'.
[  674.524556][T28771] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  674.586819][T28771] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  674.644596][T28771] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  674.838794][T29207] 8021q: adding VLAN 0 to HW filter on device bond5
[  674.859292][T28771] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  675.107311][   T48] IPVS: stop unused estimator thread 0...
[  675.178211][T28771] 8021q: adding VLAN 0 to HW filter on device bond0
[  675.202951][T29212] infiniband syz0: set active
[  675.210236][T29212] infiniband syz0: added bond0
[  675.234012][T29220] tipc: Resetting bearer <eth:syzkaller0>
[  675.254701][T28771] 8021q: adding VLAN 0 to HW filter on device team0
[  675.265132][T29212] RDS/IB: syz0: added
[  675.269793][T29212] smc: adding ib device syz0 with port count 1
[  675.276157][T29212] smc:    ib device syz0 port 1 has no pnetid
[  675.310541][T28821] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.317871][T28821] bridge0: port 1(bridge_slave_0) entered forwarding state
[  675.346450][T29220] tipc: Resetting bearer <eth:syzkaller0>
[  675.362190][T28821] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.369568][T28821] bridge0: port 2(bridge_slave_1) entered forwarding state
[  675.381950][T28821] tipc: Resetting bearer <eth:syzkaller0>
[  675.425271][T29226] ip6_vti0 speed is unknown, defaulting to 1000
[  675.845625][T29240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  675.915510][T29240] syzkaller0: entered promiscuous mode
[  675.931411][T29240] syzkaller0: entered allmulticast mode
[  675.951082][T28771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  675.959793][T29240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6145'.
[  676.006809][T29240] nbd: illegal input index -1113835520
[  676.036870][T29240] tipc: Resetting bearer <eth:syzkaller0>
[  676.056757][T29247] ip6_vti0 speed is unknown, defaulting to 1000
[  676.141265][T29239] tipc: Resetting bearer <eth:syzkaller0>
[  676.269220][T29239] tipc: Disabling bearer <eth:syzkaller0>
[  676.452736][T28771] veth0_vlan: entered promiscuous mode
[  676.466164][T28771] veth1_vlan: entered promiscuous mode
[  676.525938][T28771] veth0_macvtap: entered promiscuous mode
[  676.538877][T28771] veth1_macvtap: entered promiscuous mode
[  676.624245][T29259] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  676.638681][T29259] syzkaller0: entered promiscuous mode
[  676.644269][T29259] syzkaller0: entered allmulticast mode
[  676.733900][T29259] tipc: Resetting bearer <eth:syzkaller0>
[  676.747206][T28771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  676.759573][T29258] tipc: Resetting bearer <eth:syzkaller0>
[  676.785244][T29258] tipc: Disabling bearer <eth:syzkaller0>
[  676.803499][T28771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  676.857733][T28838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  676.889691][T28838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  676.909164][T28838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  676.919777][T28838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  677.051752][T29261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  677.063633][T29261] syzkaller0: entered promiscuous mode
[  677.069665][T29261] syzkaller0: entered allmulticast mode
[  677.084552][T28850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  677.121385][T28850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  677.153862][T29261] FAULT_INJECTION: forcing a failure.
[  677.153862][T29261] name failslab, interval 1, probability 0, space 0, times 0
[  677.189490][T29261] CPU: 0 UID: 0 PID: 29261 Comm: syz.2.6149 Not tainted syzkaller #0 PREEMPT(full) 
[  677.189516][T29261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  677.189528][T29261] Call Trace:
[  677.189536][T29261]  <TASK>
[  677.189545][T29261]  dump_stack_lvl+0xe8/0x150
[  677.189574][T29261]  should_fail_ex+0x412/0x560
[  677.189602][T29261]  should_failslab+0xa8/0x100
[  677.189625][T29261]  __kmalloc_noprof+0xde/0x7e0
[  677.189643][T29261]  ? kfree+0x4d/0x650
[  677.189664][T29261]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  677.189695][T29261]  tomoyo_realpath_from_path+0xe3/0x5d0
[  677.189721][T29261]  ? tomoyo_domain+0xd7/0x130
[  677.189750][T29261]  ? tomoyo_path_number_perm+0x219/0x630
[  677.189771][T29261]  tomoyo_path_number_perm+0x246/0x630
[  677.189795][T29261]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  677.189814][T29261]  ? __lock_acquire+0x6b5/0x2cf0
[  677.189854][T29261]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  677.189898][T29261]  ? __fget_files+0x2a/0x420
[  677.189921][T29261]  ? __fget_files+0x2a/0x420
[  677.189940][T29261]  ? __fget_files+0x3a0/0x420
[  677.189959][T29261]  ? __fget_files+0x2a/0x420
[  677.189982][T29261]  security_file_ioctl+0xc3/0x2a0
[  677.190004][T29261]  __se_sys_ioctl+0x47/0x170
[  677.190032][T29261]  do_syscall_64+0xe2/0xf80
[  677.190053][T29261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.190071][T29261]  ? trace_irq_disable+0x37/0x100
[  677.190088][T29261]  ? clear_bhb_loop+0x60/0xb0
[  677.190111][T29261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.190130][T29261] RIP: 0033:0x7f380f79aeb9
[  677.190147][T29261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  677.190164][T29261] RSP: 002b:00007f3810703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  677.190184][T29261] RAX: ffffffffffffffda RBX: 00007f380fa15fa0 RCX: 00007f380f79aeb9
[  677.190198][T29261] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005
[  677.190210][T29261] RBP: 00007f3810703090 R08: 0000000000000000 R09: 0000000000000000
[  677.190222][T29261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  677.190233][T29261] R13: 00007f380fa16038 R14: 00007f380fa15fa0 R15: 00007ffc0fa32758
[  677.190265][T29261]  </TASK>
[  677.190288][T29261] ERROR: Out of memory at tomoyo_realpath_from_path.
[  677.248503][T28838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  677.301220][T29261] tipc: Resetting bearer <eth:syzkaller0>
[  677.324873][T28838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  677.447138][T29260] tipc: Resetting bearer <eth:syzkaller0>
[  677.467673][T29260] tipc: Disabling bearer <eth:syzkaller0>
[  677.839292][T29269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6152'.
[  677.880467][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  677.892547][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  677.901807][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  677.926861][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  677.958814][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  678.010414][   T48] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.091400][   T48] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.175068][   T48] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.253865][   T48] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.402047][T29280] bond0: (slave bond_slave_1): Releasing backup interface
[  678.963921][T29298] FAULT_INJECTION: forcing a failure.
[  678.963921][T29298] name failslab, interval 1, probability 0, space 0, times 0
[  678.978987][T29298] CPU: 1 UID: 0 PID: 29298 Comm: syz.1.6158 Not tainted syzkaller #0 PREEMPT(full) 
[  678.979012][T29298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  678.979024][T29298] Call Trace:
[  678.979031][T29298]  <TASK>
[  678.979040][T29298]  dump_stack_lvl+0xe8/0x150
[  678.979070][T29298]  should_fail_ex+0x412/0x560
[  678.979098][T29298]  should_failslab+0xa8/0x100
[  678.979121][T29298]  kmem_cache_alloc_noprof+0x87/0x6e0
[  678.979150][T29298]  ? __inet_hash_connect+0xd48/0x2440
[  678.979184][T29298]  __inet_hash_connect+0xd48/0x2440
[  678.979209][T29298]  ? __pfx___inet6_check_established+0x10/0x10
[  678.979241][T29298]  ? __inet_hash_connect+0x4cf/0x2440
[  678.979268][T29298]  ? __pfx___inet_hash_connect+0x10/0x10
[  678.979296][T29298]  ? inet6_hash_connect+0xd8/0x170
[  678.979320][T29298]  tcp_v6_connect+0xf9a/0x1920
[  678.979356][T29298]  ? __pfx_tcp_v6_connect+0x10/0x10
[  678.979372][T29298]  ? tcp_sendmsg+0x2f/0x50
[  678.979397][T29298]  ? do_syscall_64+0xe2/0xf80
[  678.979417][T29298]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  678.979462][T29298]  __inet_stream_connect+0x25a/0xdd0
[  678.979501][T29298]  ? __pfx___inet_stream_connect+0x10/0x10
[  678.979528][T29298]  ? __kasan_kmalloc+0x93/0xb0
[  678.979548][T29298]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  678.979567][T29298]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  678.979598][T29298]  tcp_sendmsg_fastopen+0x3a7/0x5e0
[  678.979631][T29298]  tcp_sendmsg_locked+0x4b59/0x5430
[  678.979661][T29298]  ? tcp_sendmsg_locked+0x2d1/0x5430
[  678.979686][T29298]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  678.979708][T29298]  ? look_up_lock_class+0x57/0x110
[  678.979729][T29298]  ? register_lock_class+0x31/0x2e0
[  678.979759][T29298]  ? __lock_acquire+0x6b5/0x2cf0
[  678.979804][T29298]  ? aa_sk_perm+0x15a/0x960
[  678.979832][T29298]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  678.979871][T29298]  ? __local_bh_enable_ip+0xd0/0x130
[  678.979894][T29298]  tcp_sendmsg+0x2f/0x50
[  678.979920][T29298]  __sys_sendto+0x4a7/0x7a0
[  678.979945][T29298]  ? __pfx___sys_sendto+0x10/0x10
[  678.979963][T29298]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  678.979997][T29298]  ? __fget_files+0x3a0/0x420
[  678.980028][T29298]  ? ksys_write+0x242/0x270
[  678.980056][T29298]  ? __pfx_ksys_write+0x10/0x10
[  678.980088][T29298]  __x64_sys_sendto+0xde/0x100
[  678.980114][T29298]  do_syscall_64+0xe2/0xf80
[  678.980134][T29298]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  678.980152][T29298]  ? trace_irq_disable+0x37/0x100
[  678.980170][T29298]  ? clear_bhb_loop+0x60/0xb0
[  678.980200][T29298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  678.980219][T29298] RIP: 0033:0x7f5a5259aeb9
[  678.980237][T29298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  678.980254][T29298] RSP: 002b:00007f5a53430028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  678.980274][T29298] RAX: ffffffffffffffda RBX: 00007f5a52815fa0 RCX: 00007f5a5259aeb9
[  678.980289][T29298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  678.980301][T29298] RBP: 00007f5a53430090 R08: 0000200000005740 R09: 000000000000001c
[  678.980314][T29298] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  678.980326][T29298] R13: 00007f5a52816038 R14: 00007f5a52815fa0 R15: 00007ffef1021da8
[  678.980360][T29298]  </TASK>
[  679.934108][T29312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6161'.
[  679.994856][ T5832] Bluetooth: hci5: command tx timeout
[  680.968925][   T48] .` (unregistering): Released all slaves
[  681.076045][   T48] bond1 (unregistering): Released all slaves
[  681.181794][   T48] bond2 (unregistering): Released all slaves
[  681.289511][   T48] bond3 (unregistering): Released all slaves
[  681.400412][   T48] bond4 (unregistering): Released all slaves
[  681.516602][   T48] bond5 (unregistering): Released all slaves
[  681.528547][   T48] bond6 (unregistering): Released all slaves
[  681.642265][   T48] bond7 (unregistering): Released all slaves
[  681.745455][   T48] bond8 (unregistering): Released all slaves
[  681.758040][T29270] ip6_vti0 speed is unknown, defaulting to 1000
[  681.947258][   T48] tipc: Disabling bearer <eth:ipvlan1>
[  681.966294][   T48] tipc: Left network mode
[  681.987645][T29316] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  682.037215][   T48] IPVS: stopping backup sync thread 23147 ...
[  682.066951][ T5832] Bluetooth: hci5: command tx timeout
[  682.546678][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  682.735757][T29344] ip6gretap1: entered allmulticast mode
[  682.806378][T29337] ip6_vti0 speed is unknown, defaulting to 1000
[  682.951908][T29354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6172'.
[  683.111912][T29364] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  683.180191][T29370] xt_TCPMSS: Only works on TCP SYN packets
[  683.191654][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6177'.
[  683.255121][T29373] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6178'.
[  683.283610][T29370] : entered promiscuous mode
[  683.621943][T29386] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6183'.
[  683.650922][T29390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6184'.
[  683.685084][T29390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6184'.
[  683.712175][T29390] netlink: 'syz.0.6184': attribute type 3 has an invalid length.
[  683.739669][T29270] chnl_net:caif_netlink_parms(): no params data found
[  683.835595][ T9667] block nbd5: Possible stuck request ffff8880259b0000: control (read@0,1024B). Runtime 60 seconds
[  683.847171][ T9667] block nbd5: Possible stuck request ffff8880259b0200: control (read@1024,1024B). Runtime 60 seconds
[  683.859180][ T9667] block nbd5: Possible stuck request ffff8880259b0400: control (read@2048,1024B). Runtime 60 seconds
[  683.870701][ T9667] block nbd5: Possible stuck request ffff8880259b0600: control (read@3072,1024B). Runtime 60 seconds
[  683.917022][T29403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6189'.
[  683.929190][T29405] geneve2: entered promiscuous mode
[  684.147444][ T5832] Bluetooth: hci5: command tx timeout
[  684.752939][T29412] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  684.899946][T29431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6192'.
[  684.972482][T29270] bridge0: port 1(bridge_slave_0) entered blocking state
[  685.003223][T29270] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.056666][T29270] bridge_slave_0: entered allmulticast mode
[  685.073180][T29270] bridge_slave_0: entered promiscuous mode
[  685.090276][T29270] bridge0: port 2(bridge_slave_1) entered blocking state
[  685.120266][T29270] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.134694][T29270] bridge_slave_1: entered allmulticast mode
[  685.161278][T29270] bridge_slave_1: entered promiscuous mode
[  685.237581][T29412] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.301125][   T48] hsr_slave_0: left promiscuous mode
[  685.418167][T29448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6194'.
[  685.540605][T29452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6194'.
[  685.756115][ T1304] lec:lec_start_xmit: lec0:No lecd attached
[  686.226558][ T5832] Bluetooth: hci5: command tx timeout
[  686.283009][T29412] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.304407][T29448] macvtap1: entered promiscuous mode
[  686.311097][T29448] mac80211_hwsim hwsim103 wlan1: entered promiscuous mode
[  686.362037][T29270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  686.480244][T29412] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.516605][T29270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  686.542198][T29458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6196'.
[  686.676032][T29270] team0: Port device team_slave_0 added
[  686.709474][T29270] team0: Port device team_slave_1 added
[  686.825250][T28839] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  686.835581][T29270] batman_adv: batadv0: Adding interface: batadv_slave_0
[  686.843944][T29270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  686.870308][T29270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  686.887600][T28839] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  686.905772][   T48] IPVS: stop unused estimator thread 0...
[  686.908726][T29461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  686.921154][T29270] batman_adv: batadv0: Adding interface: batadv_slave_1
[  686.929614][T29270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  686.996313][T29270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  687.026102][T29462] syzkaller0: entered promiscuous mode
[  687.044171][T29462] syzkaller0: entered allmulticast mode
[  687.133685][T29468] No such timeout policy "syz0"
[  687.144475][T28839] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  687.158400][T29461] tipc: Resetting bearer <eth:syzkaller0>
[  687.185798][   T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  687.209268][T29460] tipc: Resetting bearer <eth:syzkaller0>
[  687.244649][T29472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6198'.
[  687.258403][T29460] tipc: Disabling bearer <eth:syzkaller0>
[  687.310884][T29270] hsr_slave_0: entered promiscuous mode
[  687.379046][T29270] hsr_slave_1: entered promiscuous mode
[  687.400461][T29270] debugfs: 'hsr0' already exists in 'hsr'
[  687.420859][T29270] Cannot create hsr debugfs directory
[  687.694834][T29492] ip6_vti0 speed is unknown, defaulting to 1000
[  687.736752][T29502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6204'.
[  687.838860][T29502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  687.846129][T29502] IPv6: NLM_F_CREATE should be set when creating new route
[  687.892317][T29509] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6207'.
[  687.901958][T29512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  687.909258][T29512] IPv6: NLM_F_CREATE should be set when creating new route
[  688.309196][T29521] netlink: 'syz.3.6210': attribute type 1 has an invalid length.
[  688.336372][T29521] netlink: 'syz.3.6210': attribute type 1 has an invalid length.
[  688.345414][T29521] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.6210'.
[  688.438091][T29525] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6211'.
[  688.647467][T29531] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  689.165548][T29554] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5
[  689.318112][T29558] x_tables: duplicate underflow at hook 1
[  689.342396][T29270] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  689.359451][T29562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6220'.
[  689.405197][T29270] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  689.443871][T29270] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  689.466674][T29270] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  689.590895][T29577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6223'.
[  689.605273][T29577] netlink: 'syz.0.6223': attribute type 8 has an invalid length.
[  689.631531][T29577] geneve2: entered promiscuous mode
[  689.655522][T29577] geneve2: entered allmulticast mode
[  689.954904][T29270] 8021q: adding VLAN 0 to HW filter on device bond0
[  689.995848][T29270] 8021q: adding VLAN 0 to HW filter on device team0
[  690.024699][T28855] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.031893][T28855] bridge0: port 1(bridge_slave_0) entered forwarding state
[  690.139403][T28855] bridge0: port 2(bridge_slave_1) entered blocking state
[  690.146617][T28855] bridge0: port 2(bridge_slave_1) entered forwarding state
[  690.808100][T29637] netlink: 'syz.3.6234': attribute type 1 has an invalid length.
[  690.823516][T29637] __nla_validate_parse: 1 callbacks suppressed
[  690.823536][T29637] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6234'.
[  690.867540][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms
[  690.875634][    C0] lec:lec_tx_timeout: lec0
[  690.905710][T29270] 8021q: adding VLAN 0 to HW filter on device batadv0
[  691.036810][T29270] veth0_vlan: entered promiscuous mode
[  691.068115][T29270] veth1_vlan: entered promiscuous mode
[  691.074045][T29646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6236'.
[  691.127708][T29647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  691.134959][T29647] IPv6: NLM_F_CREATE should be set when creating new route
[  691.176375][T29646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  691.183666][T29646] IPv6: NLM_F_CREATE should be set when creating new route
[  691.251181][T29270] veth0_macvtap: entered promiscuous mode
[  691.297795][T29270] veth1_macvtap: entered promiscuous mode
[  691.342190][T29270] batman_adv: batadv0: Interface activated: batadv_slave_0
[  691.377874][T29270] batman_adv: batadv0: Interface activated: batadv_slave_1
[  691.457766][T28850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  691.493452][T28850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  691.533500][T28850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  691.563296][T28850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  691.739853][T28821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  691.771872][T28821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.838315][T28839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  691.858772][T28839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.901201][T29676] syz_tun: entered allmulticast mode
[  691.941120][T29676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6242'.
[  692.090400][T29676] syz_tun (unregistering): left allmulticast mode
[  692.712307][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  692.725164][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  692.733879][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  692.741929][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  692.750071][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  692.927771][T29729] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1
[  692.983608][T29716] ip6_vti0 speed is unknown, defaulting to 1000
[  693.222531][T29744] batadv_slave_0: entered promiscuous mode
[  693.533948][T29749] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  693.625031][T29742] batadv_slave_0: left promiscuous mode
[  693.640047][T29748] ip6_vti0 speed is unknown, defaulting to 1000
[  694.581268][T29717] ip6_vti0 speed is unknown, defaulting to 1000
[  694.724944][T29786] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  694.786419][ T5832] Bluetooth: hci0: command tx timeout
[  694.840744][T29736] ip6_vti0 speed is unknown, defaulting to 1000
[  694.904180][T29796] tipc: Resetting bearer <eth:syzkaller0>
[  694.921875][T29789] tipc: Resetting bearer <eth:syzkaller0>
[  694.976119][T28850] tipc: Resetting bearer <eth:syzkaller0>
[  695.336628][T29815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6266'.
[  695.796691][T29824] netlink: 'syz.3.6269': attribute type 1 has an invalid length.
[  695.848136][T29824] 8021q: adding VLAN 0 to HW filter on device bond7
[  695.869847][T29824] vlan0: entered promiscuous mode
[  695.875021][T29824] bond7: entered promiscuous mode
[  695.880668][T29824] vlan0: entered allmulticast mode
[  695.885866][T29824] bond7: entered allmulticast mode
[  696.867365][ T5832] Bluetooth: hci0: command tx timeout
[  696.890978][T29832] netlink: 'syz.3.6270': attribute type 29 has an invalid length.
[  696.900319][T29832] netlink: 'syz.3.6270': attribute type 21 has an invalid length.
[  696.944152][T29717] chnl_net:caif_netlink_parms(): no params data found
[  696.992253][T29836] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  697.155971][T29842] tipc: Resetting bearer <eth:syzkaller0>
[  697.200437][T29717] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.220365][T29717] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.230675][T29717] bridge_slave_0: entered allmulticast mode
[  697.239056][T29717] bridge_slave_0: entered promiscuous mode
[  697.254834][T29837] tipc: Resetting bearer <eth:syzkaller0>
[  697.260676][T29851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6273'.
[  697.260698][T29851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6273'.
[  697.291592][T29717] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.299173][T29717] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.306962][T29717] bridge_slave_1: entered allmulticast mode
[  697.314820][T29717] bridge_slave_1: entered promiscuous mode
[  697.394808][T29717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  697.490694][T29717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  697.608119][T29717] team0: Port device team_slave_0 added
[  697.631660][T29717] team0: Port device team_slave_1 added
[  697.723125][T29717] batman_adv: batadv0: Adding interface: batadv_slave_0
[  697.745014][T29717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  697.906868][   T11] block nbd3: Possible stuck request ffff8880258c8000: control (read@0,1024B). Runtime 210 seconds
[  697.918215][   T11] block nbd3: Possible stuck request ffff8880258c8200: control (read@1024,1024B). Runtime 210 seconds
[  697.933197][   T11] block nbd3: Possible stuck request ffff8880258c8400: control (read@2048,1024B). Runtime 210 seconds
[  697.945940][   T11] block nbd3: Possible stuck request ffff8880258c8600: control (read@3072,1024B). Runtime 210 seconds
[  697.976468][T29717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  698.031591][T29717] batman_adv: batadv0: Adding interface: batadv_slave_1
[  698.042469][T29717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  698.069042][T29717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  698.092360][T28821] tipc: Resetting bearer <eth:syzkaller0>
[  698.122254][T29884] xt_TCPMSS: Only works on TCP SYN packets
[  698.133477][T29886] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  698.143817][T29884] netlink: 'syz.3.6282': attribute type 1 has an invalid length.
[  698.241294][T29717] hsr_slave_0: entered promiscuous mode
[  698.262348][T29892] netlink: 'syz.4.6285': attribute type 11 has an invalid length.
[  698.275788][T29717] hsr_slave_1: entered promiscuous mode
[  698.283603][T29717] debugfs: 'hsr0' already exists in 'hsr'
[  698.291609][T29717] Cannot create hsr debugfs directory
[  698.319522][T29884] veth9: entered promiscuous mode
[  698.424400][T29900] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6288'.
[  698.434101][T29901] tipc: Resetting bearer <eth:syzkaller0>
[  698.466633][T29899] tipc: Resetting bearer <eth:syzkaller0>
[  698.492298][T29896] netlink: 'syz.0.6287': attribute type 29 has an invalid length.
[  698.502108][T29896] netlink: 'syz.0.6287': attribute type 21 has an invalid length.
[  698.552082][T29904] netlink: 'syz.2.6290': attribute type 1 has an invalid length.
[  698.561549][T29904] netlink: 'syz.2.6290': attribute type 2 has an invalid length.
[  698.764660][T29922] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6294'.
[  698.808523][T29717] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  698.827751][T29717] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.839339][T29717] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  698.898132][T29922] xt_CT: You must specify a L4 protocol and not use inversions on it
[  698.946833][ T5832] Bluetooth: hci0: command tx timeout
[  699.149760][T28850] tipc: Resetting bearer <eth:syzkaller0>
[  699.173833][T29938] xt_connbytes: Forcing CT accounting to be enabled
[  699.198159][T29938] batadv_slave_0: entered promiscuous mode
[  699.274602][T29717] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  699.284473][T29943] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6300'.
[  699.290958][T29717] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.310486][T29717] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  699.338477][T29937] batadv_slave_0: left promiscuous mode
[  699.341399][T29946] netlink: 'syz.4.6303': attribute type 83 has an invalid length.
[  699.439969][T29717] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  699.444713][T29951] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6305'.
[  699.450542][T29717] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.471285][T29717] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  699.576000][T29717] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  699.590993][T29717] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.608364][T29717] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  699.657714][T29954] ip6_vti0 speed is unknown, defaulting to 1000
[  699.678028][T29951] syzkaller0: entered promiscuous mode
[  699.686365][T29951] syzkaller0: entered allmulticast mode
[  699.960104][T29972] 8021q: adding VLAN 0 to HW filter on device batadv1
[  699.984925][T29972] bond1: (slave batadv1): making interface the new active one
[  700.007754][T29972] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  700.057999][T29949] ip6_vti0 speed is unknown, defaulting to 1000
[  700.101224][T29717] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  700.178878][T29717] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  700.202410][T29717] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  700.244861][T29717] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  700.395197][T29717] 8021q: adding VLAN 0 to HW filter on device bond0
[  700.438858][T29717] 8021q: adding VLAN 0 to HW filter on device team0
[  700.460105][T28839] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.467322][T28839] bridge0: port 1(bridge_slave_0) entered forwarding state
[  700.541744][T28852] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.548948][T28852] bridge0: port 2(bridge_slave_1) entered forwarding state
[  700.728141][T29968] ip6_vti0 speed is unknown, defaulting to 1000
[  700.883909][T30008] netlink: 71 bytes leftover after parsing attributes in process `syz.0.6318'.
[  701.026579][ T5832] Bluetooth: hci0: command tx timeout
[  701.124849][T30016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6320'.
[  701.185379][T30017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6320'.
[  701.270439][T30016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6320'.
[  701.288691][T29717] 8021q: adding VLAN 0 to HW filter on device batadv0
[  701.361377][T30016] 8021q: adding VLAN 0 to HW filter on device bond2
[  701.650956][T29717] veth0_vlan: entered promiscuous mode
[  701.690243][T29717] veth1_vlan: entered promiscuous mode
[  701.748606][T29717] veth0_macvtap: entered promiscuous mode
[  701.778792][T29717] veth1_macvtap: entered promiscuous mode
[  701.814998][T29717] batman_adv: batadv0: Interface activated: batadv_slave_0
[  701.851431][T29717] batman_adv: batadv0: Interface activated: batadv_slave_1
[  701.889549][ T3942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  701.930937][ T3942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  701.940854][ T3942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  701.995947][ T3942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  702.107198][T30041] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  702.687682][T30059] validate_nla: 3 callbacks suppressed
[  702.687701][T30059] netlink: 'syz.2.6333': attribute type 29 has an invalid length.
[  702.727106][T30056] netlink: 'syz.2.6333': attribute type 21 has an invalid length.
[  702.743776][ T3942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  702.754789][ T3942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  702.911506][T30064] syzkaller0: entered promiscuous mode
[  702.918494][T30064] syzkaller0: entered allmulticast mode
[  702.964252][T28838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  702.972464][T28838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  703.106873][ T5832] Bluetooth: hci0: command tx timeout
[  703.253091][T30071] syz_tun: entered promiscuous mode
[  703.274776][T30071] syz_tun: refused to change device tx_queue_len
[  703.288521][T30071] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  703.577101][T30082] tipc: Started in network mode
[  703.582167][T30082] tipc: Node identity e2164bea5968, cluster identity 4711
[  703.600197][T30082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  703.634630][T30083] tipc: Resetting bearer <eth:syzkaller0>
[  703.673729][T30081] tipc: Disabling bearer <eth:syzkaller0>
[  703.813449][T30095] netlink: 'syz.4.6345': attribute type 29 has an invalid length.
[  703.855370][T30095] netlink: 'syz.4.6345': attribute type 21 has an invalid length.
[  703.916948][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  703.930602][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  703.940229][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  703.950425][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  703.958379][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  704.004137][T30100] ip6_vti0 speed is unknown, defaulting to 1000
[  704.206628][T30110] netlink: 'syz.0.6349': attribute type 8 has an invalid length.
[  704.342484][T30114] Bluetooth: MGMT ver 1.23
[  704.636550][T30110] __nla_validate_parse: 1 callbacks suppressed
[  704.636570][T30110] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6349'.
[  704.778092][T30127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6354'.
[  704.922473][T30133] netlink: 324 bytes leftover after parsing attributes in process `syz.2.6354'.
[  704.965357][T30129] can: request_module (can-proto-0) failed.
[  704.982579][T30133] netlink: 'syz.2.6354': attribute type 29 has an invalid length.
[  704.984206][T30137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6356'.
[  705.017366][T30133] netlink: 'syz.2.6354': attribute type 21 has an invalid length.
[  705.091656][T30100] chnl_net:caif_netlink_parms(): no params data found
[  705.164556][T30122] infiniband syû: set active
[  705.169427][T30122] infiniband syû: added bond_slave_0
[  705.204208][T30122] RDS/IB: syû: added
[  705.220590][T30122] smc: adding ib device syû with port count 1
[  705.227250][T30122] smc:    ib device syû port 1 has no pnetid
[  705.227291][T30146] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6358'.
[  705.259408][T30142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6357'.
[  705.269461][T30142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6357'.
[  705.279576][T30142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6357'.
[  705.310882][T30142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6357'.
[  705.388768][T30149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6358'.
[  705.402362][T30100] bridge0: port 1(bridge_slave_0) entered blocking state
[  705.442737][T30100] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.466779][T30100] bridge_slave_0: entered allmulticast mode
[  705.483283][T30100] bridge_slave_0: entered promiscuous mode
[  705.501298][T30100] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.521516][T30100] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.533615][T30100] bridge_slave_1: entered allmulticast mode
[  705.548699][T30100] bridge_slave_1: entered promiscuous mode
[  705.701205][T30100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  705.724643][T30100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  705.848101][T30100] team0: Port device team_slave_0 added
[  705.859611][T30100] team0: Port device team_slave_1 added
[  705.935257][T30100] batman_adv: batadv0: Adding interface: batadv_slave_0
[  705.948964][T30100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  705.980141][T30100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  705.991859][ T5832] Bluetooth: hci4: command tx timeout
[  706.007805][T30100] batman_adv: batadv0: Adding interface: batadv_slave_1
[  706.016332][T30100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  706.043940][T30100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  706.062695][T30172] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  706.145069][T30100] hsr_slave_0: entered promiscuous mode
[  706.167479][T30100] hsr_slave_1: entered promiscuous mode
[  706.174829][T30100] debugfs: 'hsr0' already exists in 'hsr'
[  706.180688][T30100] Cannot create hsr debugfs directory
[  706.389391][T30100] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  706.406732][T30100] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  706.426293][T30100] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  706.543104][T30100] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  706.553216][T30100] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  706.566549][T30100] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  706.659057][T30100] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  706.669136][T30100] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  706.695431][T30100] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  706.786656][T30100] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  706.816483][T30100] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  706.836338][T30100] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  707.199070][T30100] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  707.437418][T30203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  707.446421][T30100] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  707.698173][T30206] tipc: Resetting bearer <eth:syzkaller0>
[  707.728960][T30100] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  707.893641][T30202] tipc: Resetting bearer <eth:syzkaller0>
[  708.066329][ T5832] Bluetooth: hci4: command tx timeout
[  709.557740][T30202] tipc: Disabling bearer <eth:syzkaller0>
[  709.571182][T30100] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  709.631691][ T5911] tipc: Node number set to 3145616362
[  709.838880][T30225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  709.857291][T30100] 8021q: adding VLAN 0 to HW filter on device bond0
[  709.922991][T30225] syzkaller0: entered promiscuous mode
[  709.930030][T30227] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  709.943734][T30225] syzkaller0: entered allmulticast mode
[  709.944435][T30225] tipc: Resetting bearer <eth:syzkaller0>
[  709.975319][T30100] 8021q: adding VLAN 0 to HW filter on device team0
[  709.998264][T30231] tipc: Resetting bearer <eth:syzkaller0>
[  710.156267][ T5832] Bluetooth: hci4: command tx timeout
[  710.196367][ T5199] udevd[5199]: worker [20477] /devices/virtual/block/nbd3 timeout; kill it
[  710.205139][ T5199] udevd[5199]: seq 28486 '/devices/virtual/block/nbd3' killed
[  710.213277][ T5199] udevd[5199]: worker [22921] /devices/virtual/block/nbd5 is taking a long time
[  710.266391][T30240] __nla_validate_parse: 2 callbacks suppressed
[  710.266411][T30240] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6384'.
[  710.882230][T30257] netlink: 308 bytes leftover after parsing attributes in process `syz.1.6388'.
[  711.144079][T16468] lec:lec_start_xmit: lec0:No lecd attached
[  711.986725][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  712.168958][T30231] tipc: Disabling bearer <eth:syzkaller0>
[  712.188483][T30253] : entered promiscuous mode
[  712.196497][T28840] bridge0: port 1(bridge_slave_0) entered blocking state
[  712.203725][T28840] bridge0: port 1(bridge_slave_0) entered forwarding state
[  712.218393][  T106] tipc: Node number set to 40448550
[  712.229965][ T5832] Bluetooth: hci4: command tx timeout
[  712.261257][T28840] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.268493][T28840] bridge0: port 2(bridge_slave_1) entered forwarding state
[  712.345876][T30263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6391'.
[  712.362672][T30260] ip6_vti0 speed is unknown, defaulting to 1000
[  712.371258][T30264] syzkaller0: entered promiscuous mode
[  712.380798][T30264] syzkaller0: entered allmulticast mode
[  712.682941][T30277] syzkaller0: entered promiscuous mode
[  712.691304][T30277] syzkaller0: entered allmulticast mode
[  712.729414][T30281] netlink: 'syz.0.6394': attribute type 1 has an invalid length.
[  712.798678][T30100] 8021q: adding VLAN 0 to HW filter on device batadv0
[  712.885244][T30100] veth0_vlan: entered promiscuous mode
[  712.919679][T30100] veth1_vlan: entered promiscuous mode
[  713.018424][T30100] veth0_macvtap: entered promiscuous mode
[  713.025867][T30290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6396'.
[  713.056085][T30100] veth1_macvtap: entered promiscuous mode
[  713.100168][T30266] netlink: 'syz.4.6389': attribute type 4 has an invalid length.
[  713.105580][T30100] batman_adv: batadv0: Interface activated: batadv_slave_0
[  713.130760][T30274] ip6_vti0 speed is unknown, defaulting to 1000
[  713.142921][T30100] batman_adv: batadv0: Interface activated: batadv_slave_1
[  713.175172][T28850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  713.206726][T28850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  713.232404][T28850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  713.254160][T28850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  713.517707][ T3942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  713.536421][ T3942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  713.611846][ T3942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  713.636703][ T3942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  713.678156][T30298] netlink: 'syz.2.6399': attribute type 1 has an invalid length.
[  713.761898][T30298] bond1: entered promiscuous mode
[  713.774865][T30298] 8021q: adding VLAN 0 to HW filter on device bond1
[  713.920706][T30304] netlink: 'syz.3.6400': attribute type 1 has an invalid length.
[  713.930543][ T9667] block nbd5: Possible stuck request ffff8880259b0000: control (read@0,1024B). Runtime 90 seconds
[  713.941694][ T9667] block nbd5: Possible stuck request ffff8880259b0200: control (read@1024,1024B). Runtime 90 seconds
[  713.953521][ T9667] block nbd5: Possible stuck request ffff8880259b0400: control (read@2048,1024B). Runtime 90 seconds
[  713.965622][ T9667] block nbd5: Possible stuck request ffff8880259b0600: control (read@3072,1024B). Runtime 90 seconds
[  713.967999][T30304] netlink: 264 bytes leftover after parsing attributes in process `syz.3.6400'.
[  714.000667][T30304] netlink: 'syz.3.6400': attribute type 1 has an invalid length.
[  714.008639][T30304] netlink: 264 bytes leftover after parsing attributes in process `syz.3.6400'.
[  714.095408][T30313] sit0: entered promiscuous mode
[  714.105392][T30313] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6403'.
[  714.161522][T30306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6401'.
[  714.284128][T30322] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6405'.
[  714.386034][T30322] ip6_vti0 speed is unknown, defaulting to 1000
[  714.852604][T30323] ip6_vti0 speed is unknown, defaulting to 1000
[  715.439165][T30349] netlink: 'syz.0.6409': attribute type 29 has an invalid length.
[  715.448401][T30349] netlink: 'syz.0.6409': attribute type 21 has an invalid length.
[  715.639130][T30355] bond3: option all_slaves_active: invalid value (13)
[  715.649965][T30355] bond3 (unregistering): Released all slaves
[  716.493527][T30369] ip6_vti0 speed is unknown, defaulting to 1000
[  716.866301][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms
[  716.874391][    C0] lec:lec_tx_timeout: lec0
[  717.528711][T30402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6415'.
[  718.702687][T30428] 8021q: adding VLAN 0 to HW filter on device team0
[  718.774690][T30428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  719.767677][T30451] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6424'.
[  720.373014][T30457] bond1 (unregistering): Released all slaves
[  720.884524][T30474] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  721.238537][T30488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6432'.
[  721.254826][T30500] netlink: 'syz.1.6435': attribute type 2 has an invalid length.
[  721.281380][T30500] : entered promiscuous mode
[  721.315748][T30500] netlink: 'syz.1.6435': attribute type 2 has an invalid length.
[  721.343480][T30500] : left promiscuous mode
[  721.719743][T30504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  721.807877][T30509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  722.037628][T30520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  722.048488][T30518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6440'.
[  722.081253][T30520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6441'.
[  722.164827][T30530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6444'.
[  722.200083][T30525] tipc: Failed to remove unknown binding: 66,1,1/40448550:2636912661/2636912663
[  722.241632][T30525] tipc: Failed to remove unknown binding: 66,1,1/40448550:2636912661/2636912663
[  722.263828][T30525] tipc: Failed to remove unknown binding: 66,1,1/40448550:2636912661/2636912663
[  722.276012][T30535] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.6444'.
[  722.475377][T30543] ip6_vti0 speed is unknown, defaulting to 1000
[  722.560878][T30539] netlink: 171776 bytes leftover after parsing attributes in process `syz.1.6447'.
[  722.818191][T30549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6450'.
[  722.867349][T30549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6450'.
[  723.406746][T30573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6455'.
[  723.450348][T30576] geneve2: entered promiscuous mode
[  723.553200][T30584] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6457'.
[  723.626464][T30585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6460'.
[  723.633049][T30578] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  723.650377][T30594] netlink: 'syz.0.6459': attribute type 1 has an invalid length.
[  723.751669][T30588] syzkaller1: entered promiscuous mode
[  723.766239][T30588] syzkaller1: entered allmulticast mode
[  723.770698][T30580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6459'.
[  723.914510][T30578] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  723.974045][T30600] syzkaller0: entered promiscuous mode
[  723.993768][T30600] syzkaller0: entered allmulticast mode
[  724.072489][T30578] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  724.129392][T30600] tipc: Started in network mode
[  724.138923][T30600] tipc: Node identity , cluster identity 4711
[  724.152172][T30600] tipc: Failed to obtain node identity
[  724.161350][T30600] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  724.243089][T30578] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  724.292721][T30611] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  724.313580][T30612] syzkaller0: entered promiscuous mode
[  724.333239][T30612] syzkaller0: entered allmulticast mode
[  724.430819][T30613] tipc: Resetting bearer <eth:syzkaller0>
[  724.491084][T30613] tipc: Disabling bearer <eth:syzkaller0>
[  724.717939][ T3942] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  724.765283][ T3942] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  724.797224][T30619] netlink: 324 bytes leftover after parsing attributes in process `syz.0.6466'.
[  724.878211][ T3942] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  724.892592][ T3942] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  725.078843][T30630] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6468'.
[  726.010065][T30642] ip6_vti0 speed is unknown, defaulting to 1000
[  726.073000][T30644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6474'.
[  726.099794][T30644] ip6gre1: entered promiscuous mode
[  726.460908][T30663] ip6tnl0: Caught tx_queue_len zero misconfig
[  726.724526][T30656] ip6_vti0 speed is unknown, defaulting to 1000
[  727.022583][T30675] 8021q: adding VLAN 0 to HW filter on device bond2
[  727.050995][T30675] bond0: (slave bond2): Enslaving as an active interface with an up link
[  727.411299][T30684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  727.418589][T30684] IPv6: NLM_F_CREATE should be set when creating new route
[  727.446597][T30684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  727.453836][T30684] IPv6: NLM_F_CREATE should be set when creating new route
[  728.246825][   T11] block nbd3: Possible stuck request ffff8880258c8000: control (read@0,1024B). Runtime 240 seconds
[  728.276446][   T11] block nbd3: Possible stuck request ffff8880258c8200: control (read@1024,1024B). Runtime 240 seconds
[  728.287674][   T11] block nbd3: Possible stuck request ffff8880258c8400: control (read@2048,1024B). Runtime 240 seconds
[  728.299753][   T11] block nbd3: Possible stuck request ffff8880258c8600: control (read@3072,1024B). Runtime 240 seconds
[  728.935022][T30717] __nla_validate_parse: 5 callbacks suppressed
[  728.935043][T30717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6489'.
[  728.963405][T30704] ip6_vti0 speed is unknown, defaulting to 1000
[  729.081806][T30721] netlink: 'syz.1.6491': attribute type 29 has an invalid length.
[  729.125108][T30721] netlink: 'syz.1.6491': attribute type 21 has an invalid length.
[  729.301807][T30728] netlink: 'syz.1.6493': attribute type 10 has an invalid length.
[  729.393730][T30728] veth0_vlan: left promiscuous mode
[  729.404903][T30728] veth0_vlan: entered promiscuous mode
[  729.440009][T30728] team0: Device veth0_vlan failed to register rx_handler
[  729.785734][T30746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6498'.
[  729.812839][T30746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6498'.
[  730.690319][T30773] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6504'.
[  730.709759][T30773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6504'.
[  730.989854][T30779] netlink: 'syz.4.6506': attribute type 13 has an invalid length.
[  731.201999][T30787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6510'.
[  731.290861][T30791] netlink: 'syz.1.6511': attribute type 4 has an invalid length.
[  731.482361][T30796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  732.170888][T30810] Bluetooth: MGMT ver 1.23
[  732.407153][T30814] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6518'.
[  732.487084][T30815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6518'.
[  732.845320][T30825] sctp: [Deprecated]: syz.1.6521 (pid 30825) Use of int in maxseg socket option.
[  732.845320][T30825] Use struct sctp_assoc_value instead
[  733.191442][T30841] ip6_vti0 speed is unknown, defaulting to 1000
[  733.723817][T30863] ip6t_REJECT: ECHOREPLY is not supported
[  733.731562][T30863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6533'.
[  733.978741][T30871] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6534'.
[  733.999659][T30871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6534'.
[  734.081331][T30851] wg1 speed is unknown, defaulting to 1000
[  734.086444][T30866] ip6_vti0 speed is unknown, defaulting to 1000
[  734.097240][T30851] wg1 speed is unknown, defaulting to 1000
[  734.112380][T30851] wg1 speed is unknown, defaulting to 1000
[  734.328764][T30878] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6537'.
[  734.355651][T30860] ip6_vti0 speed is unknown, defaulting to 1000
[  735.663553][T30918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6547'.
[  736.172915][T30851] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  736.197368][T30851] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98
[  736.288342][T30851] wg1 speed is unknown, defaulting to 1000
[  736.298404][T30851] wg1 speed is unknown, defaulting to 1000
[  736.305325][T30851] wg1 speed is unknown, defaulting to 1000
[  736.315513][T30851] wg1 speed is unknown, defaulting to 1000
[  736.335337][T30851] wg1 speed is unknown, defaulting to 1000
[  736.343931][T30851] wg1 speed is unknown, defaulting to 1000
[  736.352336][T30851] wg1 speed is unknown, defaulting to 1000
[  736.360976][T30851] wg1 speed is unknown, defaulting to 1000
[  736.373222][T30851] wg1 speed is unknown, defaulting to 1000
[  736.385142][T30851] wg1 speed is unknown, defaulting to 1000
[  736.393159][T30851] wg1 speed is unknown, defaulting to 1000
[  736.402088][T30851] wg1 speed is unknown, defaulting to 1000
[  736.411101][T30906] rdma_rxe: rxe_newlink: failed to add lo
[  736.734216][T30952] ip6_vti0 speed is unknown, defaulting to 1000
[  736.755466][T30942] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  736.781260][T30954] netlink: 'syz.3.6553': attribute type 5 has an invalid length.
[  736.924208][T30963] netlink: 'syz.0.6552': attribute type 1 has an invalid length.
[  738.153036][T30971] syzkaller1: entered promiscuous mode
[  738.160382][T30971] syzkaller1: entered allmulticast mode
[  738.190068][T30970] 
[  738.192430][T30970] ======================================================
[  738.199447][T30970] WARNING: possible circular locking dependency detected
[  738.206476][T30970] syzkaller #0 Not tainted
[  738.210890][T30970] ------------------------------------------------------
[  738.217896][T30970] syz.3.6558/30970 is trying to acquire lock:
[  738.223953][T30970] ffffffff8fb27678 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860
[  738.233457][T30970] 
[  738.233457][T30970] but task is already holding lock:
[  738.240819][T30970] ffffffff8fb27618 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860
[  738.250387][T30970] 
[  738.250387][T30970] which lock already depends on the new lock.
[  738.250387][T30970] 
[  738.260777][T30970] 
[  738.260777][T30970] the existing dependency chain (in reverse order) is:
[  738.269791][T30970] 
[  738.269791][T30970] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  738.277687][T30970]        _raw_spin_lock_bh+0x36/0x50
[  738.282960][T30970]        nr_rt_ioctl+0x40c/0xf90
[  738.287886][T30970]        sock_do_ioctl+0x101/0x320
[  738.292980][T30970]        sock_ioctl+0x5c6/0x7f0
[  738.297818][T30970]        __se_sys_ioctl+0xfc/0x170
[  738.302920][T30970]        do_syscall_64+0xe2/0xf80
[  738.307930][T30970]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.314331][T30970] 
[  738.314331][T30970] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  738.322308][T30970]        _raw_spin_lock_bh+0x36/0x50
[  738.327579][T30970]        nr_rt_ioctl+0x215/0xf90
[  738.332508][T30970]        sock_do_ioctl+0x101/0x320
[  738.337603][T30970]        sock_ioctl+0x5c6/0x7f0
[  738.342445][T30970]        __se_sys_ioctl+0xfc/0x170
[  738.347549][T30970]        do_syscall_64+0xe2/0xf80
[  738.352563][T30970]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.358963][T30970] 
[  738.358963][T30970] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  738.366769][T30970]        __lock_acquire+0x15a5/0x2cf0
[  738.372133][T30970]        lock_acquire+0x106/0x330
[  738.377147][T30970]        _raw_spin_lock_bh+0x36/0x50
[  738.382423][T30970]        nr_rt_device_down+0xbe/0x860
[  738.387784][T30970]        nr_device_event+0x137/0x150
[  738.393058][T30970]        notifier_call_chain+0x19d/0x3a0
[  738.398676][T30970]        __dev_notify_flags+0x16d/0x310
[  738.404308][T30970]        netif_change_flags+0xe8/0x1a0
[  738.409761][T30970]        dev_change_flags+0x130/0x260
[  738.415130][T30970]        dev_ioctl+0x7b4/0x1150
[  738.419966][T30970]        sock_do_ioctl+0x23e/0x320
[  738.425072][T30970]        sock_ioctl+0x5c6/0x7f0
[  738.429918][T30970]        __se_sys_ioctl+0xfc/0x170
[  738.435025][T30970]        do_syscall_64+0xe2/0xf80
[  738.440037][T30970]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.446441][T30970] 
[  738.446441][T30970] other info that might help us debug this:
[  738.446441][T30970] 
[  738.456700][T30970] Chain exists of:
[  738.456700][T30970]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  738.456700][T30970] 
[  738.470530][T30970]  Possible unsafe locking scenario:
[  738.470530][T30970] 
[  738.477967][T30970]        CPU0                    CPU1
[  738.483315][T30970]        ----                    ----
[  738.488660][T30970]   lock(nr_neigh_list_lock);
[  738.493325][T30970]                                lock(&nr_node->node_lock);
[  738.500592][T30970]                                lock(nr_neigh_list_lock);
[  738.507774][T30970]   lock(nr_node_list_lock);
[  738.512349][T30970] 
[  738.512349][T30970]  *** DEADLOCK ***
[  738.512349][T30970] 
[  738.520480][T30970] 2 locks held by syz.3.6558/30970:
[  738.525746][T30970]  #0: ffffffff8f9aae88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  738.534529][T30970]  #1: ffffffff8fb27618 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860
[  738.544528][T30970] 
[  738.544528][T30970] stack backtrace:
[  738.550405][T30970] CPU: 0 UID: 0 PID: 30970 Comm: syz.3.6558 Not tainted syzkaller #0 PREEMPT(full) 
[  738.550424][T30970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  738.550434][T30970] Call Trace:
[  738.550441][T30970]  <TASK>
[  738.550447][T30970]  dump_stack_lvl+0xe8/0x150
[  738.550469][T30970]  print_circular_bug+0x2e1/0x300
[  738.550487][T30970]  check_noncircular+0x12e/0x150
[  738.550505][T30970]  __lock_acquire+0x15a5/0x2cf0
[  738.550529][T30970]  ? __lock_acquire+0x6b5/0x2cf0
[  738.550551][T30970]  ? nr_rt_device_down+0xbe/0x860
[  738.550571][T30970]  lock_acquire+0x106/0x330
[  738.550589][T30970]  ? nr_rt_device_down+0xbe/0x860
[  738.550609][T30970]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  738.550628][T30970]  ? nr_rt_device_down+0xbe/0x860
[  738.550647][T30970]  _raw_spin_lock_bh+0x36/0x50
[  738.550661][T30970]  ? nr_rt_device_down+0xbe/0x860
[  738.550680][T30970]  nr_rt_device_down+0xbe/0x860
[  738.550699][T30970]  ? nr_device_event+0x12f/0x150
[  738.550721][T30970]  nr_device_event+0x137/0x150
[  738.550740][T30970]  notifier_call_chain+0x19d/0x3a0
[  738.550758][T30970]  __dev_notify_flags+0x16d/0x310
[  738.550778][T30970]  ? __pfx___dev_notify_flags+0x10/0x10
[  738.550795][T30970]  ? __dev_change_flags+0x4c6/0x690
[  738.550815][T30970]  ? __pfx___dev_change_flags+0x10/0x10
[  738.550834][T30970]  ? full_name_hash+0x92/0xe0
[  738.550852][T30970]  netif_change_flags+0xe8/0x1a0
[  738.550872][T30970]  dev_change_flags+0x130/0x260
[  738.550891][T30970]  dev_ioctl+0x7b4/0x1150
[  738.550908][T30970]  sock_do_ioctl+0x23e/0x320
[  738.550924][T30970]  ? __pfx_sock_do_ioctl+0x10/0x10
[  738.550936][T30970]  ? do_futex+0x333/0x420
[  738.550961][T30970]  sock_ioctl+0x5c6/0x7f0
[  738.550983][T30970]  ? __pfx_sock_ioctl+0x10/0x10
[  738.551003][T30970]  ? __fget_files+0x2a/0x420
[  738.551019][T30970]  ? __fget_files+0x3a0/0x420
[  738.551034][T30970]  ? __fget_files+0x2a/0x420
[  738.551050][T30970]  ? bpf_lsm_file_ioctl+0x9/0x20
[  738.551068][T30970]  ? __pfx_sock_ioctl+0x10/0x10
[  738.551088][T30970]  __se_sys_ioctl+0xfc/0x170
[  738.551109][T30970]  do_syscall_64+0xe2/0xf80
[  738.551126][T30970]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.551141][T30970]  ? trace_irq_disable+0x37/0x100
[  738.551155][T30970]  ? clear_bhb_loop+0x60/0xb0
[  738.551172][T30970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.551192][T30970] RIP: 0033:0x7efdb919aeb9
[  738.551207][T30970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.551221][T30970] RSP: 002b:00007efdba0a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  738.551237][T30970] RAX: ffffffffffffffda RBX: 00007efdb9415fa0 RCX: 00007efdb919aeb9
[  738.551249][T30970] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004
[  738.551263][T30970] RBP: 00007efdb9208c1f R08: 0000000000000000 R09: 0000000000000000
[  738.551274][T30970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  738.551283][T30970] R13: 00007efdb9416038 R14: 00007efdb9415fa0 R15: 00007ffd7f88ad58
[  738.551301][T30970]  </TASK>
[  739.053560][T30952] wg1 speed is unknown, defaulting to 1000
[  743.988171][ T9667] block nbd5: Possible stuck request ffff8880259b0000: control (read@0,1024B). Runtime 120 seconds
[  743.999029][ T9667] block nbd5: Possible stuck request ffff8880259b0200: control (read@1024,1024B). Runtime 120 seconds
[  744.010050][ T9667] block nbd5: Possible stuck request ffff8880259b0400: control (read@2048,1024B). Runtime 120 seconds
[  744.021054][ T9667] block nbd5: Possible stuck request ffff8880259b0600: control (read@3072,1024B). Runtime 120 seconds
[  747.191700][ T1304] lec:lec_start_xmit: lec0:No lecd attached