last executing test programs:

2.950339961s ago: executing program 4 (id=2177):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100a000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x120c000, 0x1000, 0x0, 0x7}, 0x20)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x50, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:lib_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44085}, 0x10)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000740)={&(0x7f0000000540), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x937}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x886}, 0x4000010)

2.751356667s ago: executing program 4 (id=2178):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x6c, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0xce24}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000004)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4)
setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r4, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10)
recvmmsg(r5, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}, 0x94}], 0x1, 0x40000160, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0xffffffffffffffff}, 0x94)

2.625216169s ago: executing program 2 (id=2181):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5000000}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000004580)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@broadcast, @broadcast, 0xff, 0xffffff00, 'team0\x00', 'veth0\x00', {}, {0xff}, 0x11, 0x2, 0x8ec61fc4e1c84de5}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x5, 0xa, [0x2, 0xc, 0x3e, 0x2a, 0x24, 0x18, 0x3d, 0x38, 0xc, 0xf, 0x33, 0x2d, 0x0, 0x29, 0x3f, 0x27], 0x2, 0x2, 0x9}}}, {{@ip={@empty, @empty, 0xff000000, 0xff, 'ip6gretap0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x21, 0x2, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x1, 0x5, 0x3, 'syz0\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001040)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x54, 0x7, 0x6, 0x300, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd82}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x51}, 0x44) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000)
r3 = socket(0x8, 0x3, 0x0)
accept4$nfc_llcp(r3, 0x0, 0x0, 0x800) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c000280080001"], 0x4c}}, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=<r4=>0x0)
sendmmsg(r0, &(0x7f0000000e80)=[{{&(0x7f0000000080)=@l2={0x1f, 0x1, @none}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="7d269046d7119dcdbc7d6e8300715399ee1a989986aabc47852a4e15501f", 0x1e}], 0x1, &(0x7f0000000200)=[{0x98, 0x109, 0x2, "357c4ab9cd622ca4470c1a5be4177e472c0e64e5003714cc05fd3ce3345ebaafd33829738068ca027a4a47329dd6d2a658de9ab75964987b4d0a7a09dc6f5b61e3c99f5ab508a50b41263182b9a4ba2f91e323a44209ccae1e9297189d790fd4620a11a9f8f59a0cf24ef2edc0a26d8124d9bf905c3d97486b62948e8d2bfb0022"}], 0x98}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)="314d4c71ca0127876a1a42a56f5f6af4b9e9273dedabfcdf79580dea3b0d1215d6648e6d342f4d1fbe7cc2c5ceb04f9e8e63d14e73fa7cde0c80173ec40cd2a9c9f69896a7ac2c19548959a2c1573e9ea59b2d0656b52fbc2e8e998b32f19539aa843e18c7a5a967624dbf1f18ea6973336aabafe5f3b5df753041734f29a5ac6ed9", 0x82}], 0x1, 0x0, 0xfffffffffffffe7e}}, {{&(0x7f0000000580)=@nfc_llcp={0x27, r4, 0xc, 0x7, 0x2, 0x68, "131fc58462bde0a8769fb0c326179749d78b9a74923e59c412fb8f586a64c640962780842fd1609e0bd28b95f7aad11fee985e9865a44d8986a94e87882fdc", 0x14}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000f40)="0be2747589e0e6476c5b80fbbbbf", 0xe}, {&(0x7f00000006c0)="80c681", 0x3}, {&(0x7f0000000700)="fc335c5ad3209ff0d830ee13a117e1a944788402733cab63f87196e030f87b496dce34440c9211a1dd3d763afe018cec66faa7f366bf502b8727719e9d54f09290d9d9a57b820133aecdeaea08d418dc59b63e9bc92e304effaeff127a401e7cc718c314d3df674b3b3a0f3f9c0e17516657884f58cebe936dde8effcede993b4974388dc05d8d168196fd20808be5cf07306bd5cfba93ad89ddc1b07ee2e4984e524fca9998ded0c958cf17538d9849149ab2ddb431ac", 0xb7}, {&(0x7f00000007c0)="b89e0e590cef1ca90f891292742734a0777e2224aea6c8b13e36469e42e7579bf4e7b4534d520d6b9dcec00aef745001d3760ec2200f829965f1ebb5aea64b5b165c7e52f93b482a36fbdbb0c3646acc2ab1483b5772e78d1780ff15296b9ff7c2862c3f91f17ea68296ac6c324670ebbf89cef19be8ca91a7f4d468cfa8e949a00ac98c2c87ed893e889abd98d25dd574e2699e7c77fcab1b7f14dbedf6ed97f528d7b4d0f755b2c328d7d7414524643c6d46a98d3e3b44da89e2842e05d99f0c5db3968bf55e", 0xc7}, {&(0x7f00000008c0)="1464a1675c647624a77b0bb28fd2cddb4e189b2bbc1cc4047636baa2fd95caf607c150cd580e1bda78238c4bfb9b116ee28401520434037efc464378bf44db252cded7592041728dc0757dc6fbcd7360536595b3b34041317c33bdfc866b0ada4cce98d9d1f77c0a0ecf321ba267b19cbe763baebebe9818892d87a4713f7a0d688a6572cc63f3603309ed6ecd8683fb0dd6401ccfce936a4870bcdca1b9eeb58bd2a0bf6249c8e175c59d295622f40c1c55bab9cf9fc7e4d30accdc6f22c5033ee239deb4cbbe", 0xc7}, {&(0x7f00000009c0)="7373f448093943591c23d6de9bf696215679ab5905ef9fb3cbc526dcab9640b95d1570d9b43665833a39b7bb456d65c1f3fa0c7088e71bf3250c4350d90a5f4083f1ef05dad5866490288fce021479970d9b8b6977485d4f4c49f9a606ccd98e1214583b319325380f507b5820951a96a05364bfb0e44e4ad03d8c1474a08d1397a9cf489434f3ea714437af41406b59b0c63a335a34bde07c164ab160c2bc6203c42df140d994e07c", 0xa9}, {&(0x7f0000000a80)="a8fbecf268816df2314b349d4705068dd5eba522779c3e231c2e3f143ccd39850201ba3ff90918dc0f968d82fd75bc464cb58ff716848ddfef3554cdb9f85b57307d34c217ab95f3f1b4160bca0bbba216d6a7f3194f76d414b0b8ed888539ca283c688ee4bb9e2b44e4ea07be87f0008fe431ed933d06c2d90504c91f6abce862d7d5d1aadcbcf36f60a297c9aa257644145e", 0x93}, {&(0x7f0000000b40)="8bb4655c50eb9c0e55e35ba3978bc8707b2e8e74921e36eefd03b06cb2f60f0a46a7e88b234a4539e1eecfde81aa8668c61b63086a667d34b5b8c5673fa8d4dc973f4992697c4faadc987227361809f5903d0fa8999552cea9add3e8bb770c3f98070fa94c580c38330eb5d7f97704005af7e8489ae5add530d26d201e793e641c7f6014d036f04c390a0cd232e89b36e01948490d166d5d0fac12c2763706f4d78b3c63fb2335b1b6fe78c9e84cf39def97ba3b04eca78befd7613f4d67", 0xbe}], 0x8, &(0x7f0000000c80)=[{0xd0, 0x10c, 0x2, "a0032e978a8ef0e27c3b1d5f55e92d2b5b4655fcb242222651ba2b238d55836bd854eeca34f7f57864d7a58881b485cad89c73fb01ffb0ff8cb65d51984aec5b171e2bdd1ae050b7a33e89ca50da14f9ef4c0affbcb98468d1cdaf420dcc99f9478d096fba634c97873fef106b158c850f98dec0f6417b52c98ba5a034effa252b2933a2e14d1f2665868e8892fab6a3d168b90af9fb6a12950c29bde19cacc14d80c91298a80f4f6cf898a206df3adb8f650b8b5d3b8b8b0d80a9"}, {0xc0, 0xff, 0xcfdc, "5ea0737d60adaa9ae5ca926a7e744d3c347f5ba50d51ed7e1c27fd402832bffa447839806216c0342ceb11208f30704e1c800e5e1e97d24e32b6e84cac4392c44d7357c0169e3f61c37acbd5adab1f219178eb99daeb2fe59b405e148f51b8b3d3b8a1e0d4a238fad06b725714e62acc32919ee3d9e402ff9bb41e90f5f065169881680d3b61c2020b387a54eef5016f91c70f031b0250617d31c59ee7fd6852d98b37320e5c7d2b342047757c3d52"}, {0x70, 0x99, 0x546, "3b5c302a852789dea5b34318bae44d1874438fd3593f919b73b73ed283f4ae195c39ec7352789f94f574feddeae1f4b8a8308b9b64e26d5fcd2bae4b4f15d2d5e0b2efbf23a88d1de6d2864d0452e03aa9f52866954737db0c"}], 0x200}}], 0x3, 0x4000094)

2.614533308s ago: executing program 1 (id=2182):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8) (async, rerun: 32)
r1 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 32)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000002008500000087000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0xfffffcb1, 0x1, {{0x9, 0x1, 0x30000009, 0xa5f, 0xfff}, @remote, @loopback, 0xff000000, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='wlan0\x00', 0x10)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f00000002c0)={{<r7=>r6, &(0x7f0000000040)='![\x00', 0xa0000, &(0x7f0000000080)={@_ha_fsid={[0x1, 0x7f]}, {0x4, 0x4490, 0xe12, 0x200}}, 0xb, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x6}, {[0x1, 0xb00, 0x0, 0x7fffffff]}, 0x1, 0xe7, &(0x7f0000000140)=""/231})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r6], 0x68}, 0x1, 0x0, 0x0, 0x4044800}, 0xc4040)

2.449506982s ago: executing program 1 (id=2184):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="e6", 0x1}], 0x1}, 0x2404c001)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)
close(r1)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20)
recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18edff1293ceb0f8477167004bc31116ec8500000075000000850000000800000095a7228e0d495edb44e1ace653ff2f54251c0eefbe6c43b57b4b76daf5117512b922cbf39715ca08a0897402f317ca61e571445d8bcc1ab730de7ec83ab29a6c31a911a41bebd6bb2ee5c8ee999494bd88cfbbbd5db0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$tipc(0x1e, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0)

2.448585454s ago: executing program 2 (id=2185):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x10020, 0x0, 0x0)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRESHEX=r1], 0x48)
r3 = socket(0x1e, 0x1, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x10f, 0x19, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={<r4=>0x0, @remote, @local}, &(0x7f00000004c0)=0xc)
bind$xdp(r3, &(0x7f0000000500)={0x2c, 0x3, r4, 0x26}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007b40)=[{{&(0x7f0000000540)=@nfc_llcp, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/70, 0x46}, {&(0x7f00000017c0)=""/242, 0xf2}], 0x4, &(0x7f0000001940)=""/86, 0x56}, 0xd0a8}, {{&(0x7f00000019c0)=@ieee802154, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001a40)=""/160, 0xa0}, {&(0x7f0000001b00)=""/80, 0x50}, {&(0x7f0000001c80)=""/207, 0xcf}], 0x3, &(0x7f0000001dc0)=""/170, 0xaa}, 0xb}, {{&(0x7f0000001e80)=@l2tp, 0x80, &(0x7f0000003440)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/166, 0xa6}, {&(0x7f0000002fc0)=""/152, 0x98}, {&(0x7f0000003080)=""/64, 0x40}, {&(0x7f00000030c0)=""/168, 0xa8}, {&(0x7f0000003180)=""/105, 0x69}, {&(0x7f0000003200)=""/203, 0xcb}, {&(0x7f0000003300)=""/112, 0x70}, {&(0x7f0000003380)=""/162, 0xa2}], 0x9, &(0x7f0000003500)=""/81, 0x51}, 0x100}, {{&(0x7f0000003580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000003600)=""/92, 0x5c}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/31, 0x1f}], 0x3}, 0x7}, {{&(0x7f0000004700)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004780)=""/16, 0x10}], 0x1}, 0xfe}, {{&(0x7f0000004800)=@caif=@util, 0x80, &(0x7f00000079c0)=[{&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/125, 0x7d}, {&(0x7f0000005900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000006940)=""/92, 0x5c}, {&(0x7f00000069c0)=""/4096, 0x1000}], 0x6, &(0x7f0000007a40)=""/219, 0xdb}, 0x9}], 0x6, 0x40, &(0x7f0000007cc0)={0x77359400})
mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x2000003, 0x6011, r2, 0xffffc000)
socket$kcm(0x10, 0x2, 0x4)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r6, &(0x7f00000004c0), 0x0}, 0x20)
r7 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x210, 0x178, 0x178, 0x210, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x140, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x8, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x7, 0x0, 0x2, 0x0, 0x8], 0x4, 0x5}, {0x1, [0xb, 0x4, 0x4, 0x4, 0x1, 0x2], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x2a, 0x0, 0x0, 0x7ff}, 0x28)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x2, {0x9, 0x6, "c76b72", 0x5, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, [], "96b24e2389907a94"}}}}}}}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x4, 0xe, 0x2, @vifc_lcl_addr=@loopback, @multicast2}, 0x10)

2.433531662s ago: executing program 0 (id=2186):
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x4, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4015)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events.local\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6_vti0\x00', <r2=>0x0, 0x0, 0x9b, 0x10, 0xa05, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x7, 0x7, 0x6, 0x1ff}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040082}, 0xc054)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r3, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000640)={<r5=>r1, 0xffffffff, 0xffffffff, 0x888})
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r6, 0x809, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004819)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r7 = accept4(r5, &(0x7f0000000a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000a80)=0x80, 0x0)
r8 = socket$kcm(0x29, 0x2, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r7)
sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xac, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x1)
sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000000cc0)={0x444, 0x3f4, 0x8, 0x70bd29, 0x25dfdbfe, {0x2, 0x2, 0x15, [0x4, 0xbb, 0x2, 0x9, 0x8000, 0x6, 0x2, 0x4, 0x9, 0xee7, 0x1, 0x5, 0x5, 0x7f, 0x10000, 0x2, 0x4, 0x0, 0x0, 0x1, 0x7c7, 0x0, 0x5, 0x101, 0x8001, 0x3, 0x2, 0x3, 0x7fff, 0x3, 0x4, 0x2, 0x0, 0xfcfd, 0x4, 0x947, 0x1ff, 0x1a3a, 0x4, 0x80000001, 0x5, 0x7, 0x9, 0xa42, 0xa95b, 0x4, 0x9, 0x1, 0x1, 0x101, 0x3ff, 0x9e, 0x7, 0x10000, 0x5, 0x2, 0x9, 0x401, 0x0, 0xf, 0xfff, 0x4, 0x9, 0xffffffff], [0x1, 0xe, 0x8, 0x80000000, 0x2981, 0x4, 0x5, 0x4, 0x6, 0x6, 0xfffffff8, 0x7ff, 0x942f, 0x5, 0x6, 0x26, 0x4, 0xff, 0xcb, 0x82, 0x9, 0x4, 0x80000001, 0x6, 0x7, 0x1, 0x8, 0xb, 0x7, 0x6, 0x7, 0x4, 0x4, 0x8, 0xeec, 0x6, 0x81, 0xa, 0x6, 0x4, 0x400, 0x9, 0x1, 0x2, 0xa, 0x80, 0x4, 0x3f6, 0x5, 0x0, 0x9, 0x5, 0x4, 0x8f, 0xfffffffc, 0x5, 0xb8, 0x7, 0x1, 0xfff, 0x7fffffff, 0x8, 0xf, 0x81], [0x8, 0x95, 0x7, 0xfffffff9, 0x8, 0xffff0000, 0x5287, 0x4bf, 0x0, 0x1, 0x4, 0x85, 0x7ff, 0x8001, 0x100, 0xfb, 0x0, 0x0, 0x81, 0xf9d4, 0x1, 0x7fffffff, 0x96c, 0xc, 0xa2c4, 0x0, 0x3, 0xb, 0xb, 0x1ff, 0x8, 0x7, 0x1, 0x8000, 0x8, 0x1000, 0x3c2, 0x4, 0x4, 0xffffffff, 0x7, 0x71, 0x6, 0x4, 0x0, 0x8, 0x3, 0x401, 0x4, 0x9, 0xbe, 0x4, 0x3, 0x6, 0x4, 0x1, 0x7, 0x6, 0x401, 0xc, 0x6e, 0x0, 0x0, 0xa], [0x8000, 0xf6, 0x3, 0x3a7, 0x9, 0xffffffc0, 0xfffffffb, 0x5, 0x8e39, 0x1ff, 0x8, 0x2, 0x6, 0x6, 0x9, 0xa19, 0x8, 0x3, 0x7, 0xa, 0x9, 0x9, 0x1ff, 0x0, 0xce, 0x3, 0xbe1, 0x0, 0xffffffff, 0x8075, 0x6, 0x8, 0x767, 0x6, 0x100, 0x2cd, 0xfffffffd, 0xea, 0xfb, 0x2, 0xd820, 0x3ff, 0xd70, 0x4, 0x6, 0x0, 0x6, 0x10001, 0x1, 0x7, 0x3, 0x6, 0x3, 0x0, 0x9, 0x6, 0x6, 0x1, 0x2, 0xbf2c, 0x0, 0x9, 0x8, 0x7], 0x21, ['netdevsim', '0000:00:10.0\x00', 'netdevsim', '/\x00']}, ["", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x64, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x74}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8}]}, 0x64}}, 0x4000000)
write(r5, &(0x7f0000001300)="f889de14f49f9f465dddecd6d93e34c855303f2f1a5eab130c642145122547c19960a6ca45b7cb12a94a5c5d235bd56d41f62e32b3ea6c096228e2693c27d1129fd87002334d675a25e033863e28802c5529864647410b010c876ebc108469d67485fa30225b749ed088c9a49f21fac18bf6a12fce564cdd64ca40d9ab5c772737492e886378211d1b5d638b504d4c3aadd438002cba1a0cd2dff530b969f9255d146ea8e901c2d6e76e3ebbc78efa48c2dbc731cf457a5c5249e62ed83c09d3f36765737b1b5b0ab453b800a79d9ad10a7ef11589c98ed878c604504098228e9bbdfc7cd5fd45dae778ea2057d622174ff8a761bb0132f6", 0xf8)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x40, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xe5, 0x3f}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001500), 0x840400, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000001700)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x62, 0x6, "a91e0299d958a8b7b248cc4651e48096704d10d7ef0803e62d54558eabec2f5c5f8688b14ff1686d1e320b7afa4eda0c561798ed6a35d1b8299a70088e730be87a2a507db5368224064129defb38150c826a74f66845772fdaa230289d8e"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}]}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001740)={'wlan1\x00'})
syz_emit_ethernet(0x48, &(0x7f0000001780)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@llc={0x4, {@snap={0xab, 0x0, "cf", "324cac", 0x200, "6830a4851c7c88a5f2ae5ba8cdb97c993a682a21028bb8e1dff939690a34be88dd0a0c7540fe273b336348ff6a6b8540d76c"}}}}}, &(0x7f0000001800)={0x1, 0x3, [0x215, 0xa7c, 0xaba, 0xd4e]})
sendmsg$inet(r1, &(0x7f0000002c80)={&(0x7f0000001840)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000002b00)=[{&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="ef61db9e7b80c5ef8758dcd1fabe0f75d384133cd8397e3d400046546d5d5612769b8fd512ef21c8aa7add306c38b67a7c4a8513bffcc23c49c320d08e6735e38e7913fe8d3c84cbbae1a627e43dc9497392e20038112d4c7fad06cf7ab259be", 0x60}, {&(0x7f0000002900)="136ec151bed7fa309b0b44f98a2db3a8c1280d959a46abc4fe0524f119e01d90baa346fb9440f258d258761eb9dc9fdbb90dce279934fd72da5af18953153c70e1037acb9b29b1d58e30d73e9af118c8a712f82935172a86ae17d557001fb7a8e9baf928a81b18d7", 0x68}, {&(0x7f0000002980)="bc1d60c5fa5475b2d1efdde51215dd9be0cc8fcdd566f1cb67d7", 0x1a}, {&(0x7f00000029c0)="08e252098a34620a804b916f1b14f122bffa40bc074e1c21bfdec955f7f717d13cc1b283c0f6c8510a45dfb6361ad82f741fe078ae1f673d3a8ae1d299c7362e5d9a5a2dda85857ef0f9b5cca9a5e526628629a57e212a2bcb97ebda5c7a9212590eb83884084d47e27eed3ff02b6fa229578c2375cf668986305c", 0x7b}, {&(0x7f0000002a40)="42ad9cf9bad1a1f82942ce771731a11eecd18918d5103366eb72e1c695e52108dbd243bc715dc4505636fc593cbb391221233c00935bce38bf63730efbf9bf9050c68367ab81239057441bdf1dd657b798e8ac44d8a0659c66ad0c04b5267510dae08724bc921b7b56368ad6f3fffb4cbcc2eab8588d40b78adff4b5e9e7e89985f6c7e46e21870ca31bbe1357d0d00589bcd200ea14cfc95b21b0180e54fe8a03", 0xa1}], 0x6, &(0x7f0000002b80)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x96, [@local, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100]}]}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xbd, 0x3, 0xc, [{@local, 0x4}, {@multicast1, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0xcb, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@multicast2, 0xfffffff0}]}, @timestamp_addr={0x44, 0x3c, 0xe0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xd}, {@rand_addr=0x64010101, 0xfca}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xa}]}, @cipso={0x86, 0x10, 0x0, [{0x1, 0xa, "eea48f1b61d71169"}]}, @end, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5f629a0b}}], 0xd0}, 0x20000000)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000003040)={&(0x7f0000002d00)={0x334, r0, 0x400, 0x70bd29, 0x1752, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ecf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x128, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x240000}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2943}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffeff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x53}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x30000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff0000}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcd2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffcc61}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0xffb17000)

2.344121038s ago: executing program 0 (id=2187):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:'], 0xa)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f6985302c53799b0dce392bd259a63a52e936b7d73acf5710831fbf8e1a1d4e47e1b11e60872894ac6cea97f6f008974ada83486547e1d48a46655a513767b168874d53810b1b70ff6b7a847a6b876d1", 0xa9}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

2.253724714s ago: executing program 1 (id=2189):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e0000000120009050081adf6430000000810bb0000000000c500008008000000", @ANYRES32=0x0, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac517a485a23d0c3da32ce8f9b19fe043d3a672b0601c63c4f9c0bf2dc42c77065f2eea68a0190e2cbaa0de269676787c764635889ca6c747973691886e2c92540eed6d8ba6c451bf6e1d4cdc30726ae5a7f3a3d9fc406dbc9c8d216ac9ae9b81cb1baa6d1e6e2f8dd400c916908e496e03feb756cdbc348afc03a961da8975d58b1e97d5e66c11404751fc6a7d0664394eea973826bf10000000"], 0xe0}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.041259878s ago: executing program 1 (id=2191):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r6=>0x0})
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x60)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', r6, 0x2f, 0x6, 0x10, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0xa5b1, 0x1ff}})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r9=>0x0})
gettid()
r10 = getpid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x1, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_PID={0x8, 0x52, r10}]}, 0x24}}, 0xc0)

2.040154575s ago: executing program 3 (id=2192):
r0 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80002000})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0)

2.03951297s ago: executing program 0 (id=2193):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0xaa74304a58906390, 0x67, 0x0, 0x9, 0x6, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x2a)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, <r2=>0xffffffffffffffff}, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x913e0000) (async)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x913e0000)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x1000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, <r5=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r6=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x20, 0x40, 0xfd, r9}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pI4   \x00'}, 0x20)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r11, &(0x7f0000000000)="0c000000010001", 0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x2c, &(0x7f0000000240)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x8, 0xf, 0xb, 0x0, 0x1}, @exit, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000003c0)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0x2, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0xb, 0x9, 0xb}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[r10], &(0x7f0000000540)=[{0x1, 0x3, 0x8, 0xb}, {0x5, 0x2, 0x9, 0x7}, {0x1, 0x2, 0x4, 0x3922204a9c84c230}, {0x3, 0x1, 0x1, 0x1}, {0x0, 0x5, 0xc, 0x3}], 0x10, 0x8}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x2c, &(0x7f0000000240)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x8, 0xf, 0xb, 0x0, 0x1}, @exit, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000003c0)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0x2, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0xb, 0x9, 0xb}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[r10], &(0x7f0000000540)=[{0x1, 0x3, 0x8, 0xb}, {0x5, 0x2, 0x9, 0x7}, {0x1, 0x2, 0x4, 0x3922204a9c84c230}, {0x3, 0x1, 0x1, 0x1}, {0x0, 0x5, 0xc, 0x3}], 0x10, 0x8}, 0x94)

1.983316178s ago: executing program 3 (id=2194):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0xc6db, @dev={0xfe, 0x80, '\x00', 0x37}, 0x2}], 0x2c)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x2)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @aes128, 0x0, @desc4})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x8801)

1.754507882s ago: executing program 4 (id=2195):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast1, 0x7daa}, 0x1c) (async, rerun: 64)
r3 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sendmmsg$alg(r1, &(0x7f0000003280)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000000600)="82037611", 0x4}], 0x2, 0x0, 0x0, 0x40800}], 0x1, 0x40000)

1.59306679s ago: executing program 3 (id=2196):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000100001040000000000b70c0000002900", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c0002800800010008000000a3fd0500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x884)

1.538535132s ago: executing program 4 (id=2197):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004f0001002ae5104822ce021348d4"], 0x14}}, 0x20008040) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3, 0x10}, 0xc) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000001480), r5) (async)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async)
sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)
sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0xff80)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) (async)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000008c0)={{0x2, 0x4e1c, @remote}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x4c, {0x2, 0x4e26, @multicast2}}) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x8001, <r9=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r9, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x84004) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a0102000000000000000000000008140000001100010000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000)

1.49278727s ago: executing program 2 (id=2198):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x20, 0x82, 0x0, 0x2, 0xfd, 0x1}}, 0x1c}}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000007c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x10, 0x0, [{0x0, 0x4, "b29a"}, {0x0, 0x6, "ff8f5896"}]}, @generic={0x44, 0x11, "77bf39dad417f1bc03a7c2d4017b8a"}, @cipso={0x86, 0x8, 0x2, [{0x6, 0x2}]}]}}}}}}}, 0x0)
r1 = socket$inet6(0xa, 0x800, 0x20000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400400002100000426bd7000fedbdf2502142000050000081400000008000200ffffffff08000d400400000008000200e00000020c000c3fffffffffe0"], 0x40}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x20, 0x70bc22, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0xe, 0xf}, {0x1, 0xc}}, [{0x8, 0xb, 0xc0e}, {0x8, 0xb, 0x89}, {0x8, 0xb, 0x5}]}, 0x3c}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x38}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0x8}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x6f7, 0x9, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={<r7=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r7, 0x4}, 0x8)
sendto$l2tp6(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x4, @mcast1, 0x2}, 0x20)

1.181215166s ago: executing program 0 (id=2199):
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
r2 = socket$kcm(0x29, 0x7, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000023c0)={r0, 0x20, &(0x7f0000002380)={&(0x7f0000000380)=""/4096, 0x1000, <r3=>0x0, &(0x7f0000001380)=""/4096, 0x1000}}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002400)=@bloom_filter={0x1e, 0x1, 0x772, 0x0, 0x20, 0x1, 0xaa82, '\x00', r1, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x4, 0x1b, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8d2}, @generic={0x2, 0x7, 0x0, 0x4, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x100, 0x9e, &(0x7f0000000240)=""/158, 0x0, 0x10, '\x00', r1, @fallback=0x31, r0, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x1, 0xff, 0xfff}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000002480)=[r0, r0, r4, r0, r0, r0, r0], 0x0, 0x10, 0xcecf}, 0x94)
getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000002580), &(0x7f00000025c0)=0x10)
r5 = accept4$nfc_llcp(r0, &(0x7f0000002600), &(0x7f0000002680)=0x60, 0x800)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f00000026c0)={0x6, 'bond0\x00', {0x1}, 0x8})
getsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000002700), &(0x7f0000002740)=0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002980)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000002900), &(0x7f0000002940)=r0}, 0x20)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a40)={0x9, 0x13, &(0x7f0000002780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xc, 0x5, 0x9, 0x0, 0x3}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002840)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002880)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000028c0)={0x5, 0x2, 0x400, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000029c0)=[0x1, r4, r0, r4, r6, r4, r4, r0, r4], &(0x7f0000002a00)=[{0x2, 0x4, 0x6}, {0x3, 0x5, 0x8, 0x3}], 0x10, 0x7}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000002b00))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002c40)={@ifindex=r1, 0x2f, 0x1, 0x400, &(0x7f0000002b40)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000002b80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002c00)=[0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002c80)={@fallback=r9, r7, 0x4, 0x0, r7, @void, @value=r7, @void, @void, r8}, 0x20)
getsockname(r2, &(0x7f0000002cc0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000002d40)=0x80)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, r0, 0x2, 0x0, 0x5}, 0x50)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002e00)={0x1, 'dummy0\x00', {}, 0x3})
r11 = accept$unix(r0, &(0x7f0000002e40), &(0x7f0000002ec0)=0x6e)
accept4$unix(r11, &(0x7f0000002f00), &(0x7f0000002f80)=0x6e, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r10, 0x40046f01, &(0x7f0000002fc0)=0x9)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$FS_IOC_SETVERSION(r12, 0x40087602, &(0x7f0000003000)=0x6)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000003040)={<r13=>r9, 0x37, 0xa00, 0x2})
r14 = syz_genetlink_get_family_id$ipvs(&(0x7f00000030c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r13, &(0x7f0000003240)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003200)={&(0x7f0000003100)={0xe8, r14, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb132}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf1}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000011}, 0x44810)
ioctl$sock_netdev_private(r2, 0x89fe, &(0x7f0000003280)="d3afbb23affa9aaf15e5980ff1dcda7be471f8a9fd049204473926d2659cddae7df4f05f942a814ebca39ce1e5e7ac95a4d7d42d759e700c34af20bcffce56e14c9b51fbe6204de159ecdc6cd79c939254d68f7308d429f1597148843e0d4d5faf8c61829753")

1.056903396s ago: executing program 4 (id=2200):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r1 = socket(0x10, 0x1, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x1406, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffee1, 0x1, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffd71, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000004)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xc8, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f00000000c0), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r7, 0xf5f)
accept(r7, 0x0, 0x0)
r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
shutdown(r10, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@bridge_getlink={0x54, 0x12, 0x10, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r11, 0x6210c, 0x1040}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_PHYS_SWITCH_ID={0x1e, 0x24, "d56c2b51af97af41e87c64173e0409de5a1ec4ebb6c60c2856ec"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008084}, 0x20000000)

908.327601ms ago: executing program 0 (id=2201):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendfile(r2, r3, 0x0, 0x6)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r4, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x35}, @void, @val={0xc, 0x99, {0x9e, 0x5e}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8805}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x64, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x64}}, 0x20000000)

833.351207ms ago: executing program 3 (id=2202):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8)
sendmmsg$sock(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x800000000}}], 0x18}}], 0x1, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x99}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

823.764296ms ago: executing program 2 (id=2203):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28c21}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x3c, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x5, 0x3}, {0x8, 0x1, 0x0, 0x0, 0x9}, {0x8, 0x5, 0x0, 0x0, 0xb}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)

716.985871ms ago: executing program 1 (id=2204):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef7036", 0x58}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
unshare(0x600)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c8, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x300}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528)

653.103042ms ago: executing program 3 (id=2205):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100a000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x120c000, 0x1000, 0x0, 0x7}, 0x20)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x50, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:lib_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44085}, 0x10)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000740)={&(0x7f0000000540), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x937}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x886}, 0x4000010)

651.923269ms ago: executing program 2 (id=2206):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x1e, &(0x7f0000000600)={@random="f5db9b3ab670", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@can={0xc, {{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "39b735aff73f31af"}}}}, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r1)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002d453b43eb20a9ebb5ce039363bd7000fdffff05150000000899002f01", @ANYRES32=0x0, @ANYBLOB="080006001d0000002fc31226144e127574a38264638701c322efa94db6b17dad33de083e78af81571746d2585ce2af56fc29a004befba5c1ab79c04435fc943fb66c83e47cf51de5659c8ecc789f528178a7e976c5a033b5da164ea20a7a18c139b4c27083b218e9daf79d"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000004)
sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x20000040, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000000)={'vlan0\x00'})
sendto$inet6(r0, &(0x7f0000000240)="900000001d001f4d154a81739327040000000000000000000404840014000100ac1414bb05da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed401010000000000006436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390b9842d5397edd64ce3a6b9367340514e194000818981022b5cc565b4076a79550808e639dde15ce96624e2589e6a4d", 0xb4, 0x0, 0x0, 0x0)

563.941584ms ago: executing program 1 (id=2207):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x9, 0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000002c0)={r7, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000080)={r7, 0x1, 0x6, @broadcast}, 0x10)
r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r9, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1)
setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000000), 0x4)
sendfile(r8, 0xffffffffffffffff, 0x0, 0x3050)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, 0x0, 0x20008004)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4e, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

286.802835ms ago: executing program 2 (id=2208):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000004c0)={<r2=>r0, &(0x7f00000002c0)='\x00', 0x502, &(0x7f0000000300)={@align=0x2, {0x6, 0x8, 0x4, 0x10000000}}, 0x8, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000480)=0x6})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x305)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r2, 0x26, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x0, 0x2}, {0x28, 0x0, 0x81, 0x1}, {0xb1, 0x0, 0x28, 0x7}, {0x16, 0xfc, 0x23, 0xffffffff}]})
listen(r0, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r4, @ANYBLOB="0000000000000000850095a8e2230000260000009500000010000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20)
r7 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_qrtr_TIOCOUTQ(r7, 0x8905, &(0x7f0000000000))
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e21, @broadcast}})
recvfrom$inet(r0, 0x0, 0x0, 0x40000020, 0x0, 0x64)

145.329023ms ago: executing program 0 (id=2209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000640)={0x0, r1, r1, 0x6, 0xfff, '\x00', {0x955, 0x1, 0xfff, 0x7f, 0x1, 0x200, 0x1, 0x5f, {0xfffffffffffffffd, 0x1}, {0x2, 0x47dbf3a6}, {0x1000, 0x10001}, 0xd, 0x400, 0x3ff, 0x5, 0x7fffffff, 0x8, 0xff, 0xe00, 0x4, 0x4, '\x00', 0x6, 0x4, 0x80, 0xffff}})
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="b8fb848bcf8b242953e1db50a85cef81", 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
recvmsg$can_raw(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000400)=""/89, 0x59}], 0x2}, 0x40010042)
unshare(0x20040600)
pwritev(r4, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0)

143.633766ms ago: executing program 3 (id=2210):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000000)="dd65f6ebb122400135c2f6f6e70cd8fdbf027e304bb3caaea0db8c137d11b65fe9ce2afbca5ad78a2c4b63ba82e6ef9754", &(0x7f0000000080)=@udp=r1, 0x4}, 0x20)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10400, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000055}, 0x24044804)

0s ago: executing program 4 (id=2211):
unshare(0x58000700)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000009c0)=0x2, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000039072e6c000400000000000000000000000000000000001000"], 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="800000001000010400"/20, @ANYRES32=r6, @ANYBLOB="000000000000000060001280080001007674690054000280080006000d000000220001"], 0x80}}, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$cgroup_devices(r8, &(0x7f0000000040)=ANY=[], 0x9)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%-5lx  \x00'}, 0x20)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000004c0)={<r11=>0xffffffffffffffff})
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000780)={<r15=>r0, &(0x7f00000005c0)='\x00', 0x8002, &(0x7f00000006c0)={@_ha_fsid={[0x9]}, {0x1cc, 0x7f2, 0x1, 0x10}}, 0x4, &(0x7f0000000700), &(0x7f0000000740)=0x8})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000001700"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r17, <r18=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r16}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r17}, &(0x7f0000000580)=0x2, &(0x7f0000000080)=r16}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r18}, &(0x7f0000000240), &(0x7f0000000280)=r16}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @ldst={0x2, 0x3, 0x4, 0x8baeea7cb60735b0, 0x75279b40d75dac4e, 0x6, 0xfffffffffffffffc}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000200)='syzkaller\x00', 0x34, 0x6, &(0x7f0000000240)=""/6, 0x41100, 0x58, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x7, 0x97b8, 0xfffffff9}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r8, r9, r10, r0, r11, r12, 0xffffffffffffffff, r13, r15, r18], &(0x7f0000000800)=[{0x3, 0x5, 0x3}, {0x5, 0x2, 0x9, 0x8}, {0x3, 0x3, 0xb, 0xb}, {0x3, 0x2, 0x4, 0x1}], 0x10, 0x5}, 0x94)
getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f00000002c0))

kernel console output (not intermixed with test programs):

 Resetting bearer <eth:syzkaller0>
[  261.079723][ T7803] tipc: Disabling bearer <eth:syzkaller0>
[  261.273049][ T7834] Bluetooth: MGMT ver 1.23
[  262.314252][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'.
[  262.593556][ T7851] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  262.601416][ T7855] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  262.602455][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.453'.
[  262.640357][ T7854] xt_hashlimit: size too large, truncated to 1048576
[  262.647393][ T7854] xt_hashlimit: overflow, try lower: 0/0
[  262.776928][ T7861] netlink: 428 bytes leftover after parsing attributes in process `syz.3.454'.
[  262.790129][ T7861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.454'.
[  262.828948][ T7854] can: request_module (can-proto-0) failed.
[  263.092700][ T7868] lo speed is unknown, defaulting to 1000
[  263.294244][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'.
[  263.379737][ T7891] netlink: 29332 bytes leftover after parsing attributes in process `syz.2.462'.
[  263.515733][ T7900] x_tables: ip6_tables: udplite match: only valid for protocol 136
[  263.537068][ T7900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.465'.
[  263.537302][ T7902] netlink: 40 bytes leftover after parsing attributes in process `syz.4.465'.
[  263.556474][ T7900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.465'.
[  263.710132][ T7912] netlink: 60 bytes leftover after parsing attributes in process `syz.4.466'.
[  264.205470][ T7941] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  266.165413][ T8051] netlink: 'syz.3.499': attribute type 1 has an invalid length.
[  266.327572][ T8050] netlink: 'syz.3.499': attribute type 1 has an invalid length.
[  266.369261][ T8056] netlink: 'syz.0.500': attribute type 11 has an invalid length.
[  266.382600][ T8056] netlink: 'syz.0.500': attribute type 4 has an invalid length.
[  266.459858][ T8065] netlink: 'syz.2.503': attribute type 4 has an invalid length.
[  266.861496][ T8081] lo speed is unknown, defaulting to 1000
[  267.567398][ T8119] sctp: [Deprecated]: syz.0.514 (pid 8119) Use of int in max_burst socket option.
[  267.567398][ T8119] Use struct sctp_assoc_value instead
[  267.671503][ T8125] __nla_validate_parse: 42 callbacks suppressed
[  267.671522][ T8125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.515'.
[  267.787185][ T8125] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  267.837952][ T8125] bond2 (unregistering): Released all slaves
[  267.895919][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'.
[  267.925277][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'.
[  267.925277][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'.
[  268.020548][ T8147] pim6reg: tun_chr_ioctl cmd 1074812117
[  268.107611][ T8151] netlink: 'syz.3.521': attribute type 1 has an invalid length.
[  268.159680][ T8151] 8021q: adding VLAN 0 to HW filter on device bond2
[  268.233646][ T8151] netlink: 'syz.3.521': attribute type 61 has an invalid length.
[  268.241606][ T8151] netlink: 'syz.3.521': attribute type 62 has an invalid length.
[  268.256055][ T8157] bond2: entered allmulticast mode
[  268.284163][ T8159] netlink: 52 bytes leftover after parsing attributes in process `syz.3.521'.
[  268.520437][ T8169] netlink: 19 bytes leftover after parsing attributes in process `syz.3.526'.
[  268.533436][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.527'.
[  268.554175][ T8175] netlink: 19 bytes leftover after parsing attributes in process `syz.3.526'.
[  268.573550][ T8172] gre1: entered allmulticast mode
[  268.636061][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'.
[  268.674873][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.528'.
[  268.693968][ T8181] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  270.459274][ T8251] lo speed is unknown, defaulting to 1000
[  270.481833][ T8251] lo speed is unknown, defaulting to 1000
[  270.488355][ T8252] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  270.504970][ T8251] lo speed is unknown, defaulting to 1000
[  270.679102][ T8257] lo speed is unknown, defaulting to 1000
[  271.044508][ T8277] netlink: 'syz.2.553': attribute type 13 has an invalid length.
[  271.242596][ T8251] infiniband sqz0: set down
[  271.266703][ T8251] infiniband sqz0: added lo
[  271.374974][ T8277] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  271.411751][ T8251] RDS/IB: sqz0: added
[  271.434448][ T8251] smc: adding ib device sqz0 with port count 1
[  271.470202][ T8251] smc:    ib device sqz0 port 1 has no pnetid
[  271.542228][ T5925] lo speed is unknown, defaulting to 1000
[  271.549225][ T8251] lo speed is unknown, defaulting to 1000
[  271.587591][ T8290] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.641871][ T6466] lo speed is unknown, defaulting to 1000
[  271.645372][ T8281] tipc: Resetting bearer <eth:syzkaller0>
[  271.720423][ T8291] syzkaller0: entered promiscuous mode
[  271.780179][ T8291] syzkaller0: entered allmulticast mode
[  271.905808][ T8279] tipc: Resetting bearer <eth:syzkaller0>
[  271.970936][ T8279] tipc: Disabling bearer <eth:syzkaller0>
[  272.333492][ T8325] netlink: 'syz.4.564': attribute type 11 has an invalid length.
[  272.423852][ T8251] lo speed is unknown, defaulting to 1000
[  273.002656][ T8251] lo speed is unknown, defaulting to 1000
[  273.433687][ T8351] __nla_validate_parse: 13 callbacks suppressed
[  273.433709][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'.
[  273.449740][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'.
[  273.534556][ T8251] lo speed is unknown, defaulting to 1000
[  273.627351][ T8352] netlink: 'syz.1.573': attribute type 1 has an invalid length.
[  273.645878][ T8352] netlink: 'syz.1.573': attribute type 6 has an invalid length.
[  273.662052][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'.
[  273.667865][ T8352] netlink: 'syz.1.573': attribute type 3 has an invalid length.
[  274.065265][ T8251] lo speed is unknown, defaulting to 1000
[  274.203846][ T8380] netlink: 'syz.2.579': attribute type 1 has an invalid length.
[  274.216307][ T8380] netlink: 96 bytes leftover after parsing attributes in process `syz.2.579'.
[  274.225684][ T8380] netlink: 'syz.2.579': attribute type 1 has an invalid length.
[  274.234177][ T8380] netlink: 'syz.2.579': attribute type 8 has an invalid length.
[  274.242917][ T8380] netlink: 606 bytes leftover after parsing attributes in process `syz.2.579'.
[  274.335948][ T8251] lo speed is unknown, defaulting to 1000
[  274.441524][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'.
[  274.598371][ T8251] lo speed is unknown, defaulting to 1000
[  274.614040][ T8388] netlink: 'syz.2.581': attribute type 10 has an invalid length.
[  274.627604][ T8388] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  274.637174][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'.
[  274.646431][ T8388] macsec0: left allmulticast mode
[  274.652461][ T8388] macsec0: left promiscuous mode
[  274.657671][ T8388] bridge0: port 3(macsec0) entered disabled state
[  274.667553][ T8388] bridge_slave_1: left allmulticast mode
[  274.673480][ T8388] bridge_slave_1: left promiscuous mode
[  274.679441][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.690932][ T8388] bridge_slave_0: left allmulticast mode
[  274.696946][ T8388] bridge_slave_0: left promiscuous mode
[  274.703675][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.719836][ T8388] bond0: (slave bridge0): Releasing backup interface
[  274.843092][ T8251] lo speed is unknown, defaulting to 1000
[  275.062194][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'.
[  275.134875][ T8370] lo speed is unknown, defaulting to 1000
[  275.144044][ T8392] delete_channel: no stack
[  275.212320][ T8333] lo speed is unknown, defaulting to 1000
[  275.548441][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'.
[  275.569604][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'.
[  275.994684][ T8426] veth3: left promiscuous mode
[  276.003693][ T8426] gre1: left allmulticast mode
[  276.184173][ T8437] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  276.599530][ T8452] lo speed is unknown, defaulting to 1000
[  276.622840][ T8452] lo speed is unknown, defaulting to 1000
[  277.147487][ T8483] netlink: 'syz.4.606': attribute type 22 has an invalid length.
[  277.175734][ T8483] netlink: 'syz.4.606': attribute type 22 has an invalid length.
[  277.272536][ T8486] lo speed is unknown, defaulting to 1000
[  277.306805][ T8491] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  277.377625][ T8487] lo speed is unknown, defaulting to 1000
[  277.484555][ T8486] lo speed is unknown, defaulting to 1000
[  277.900342][ T8505] netlink: 'syz.1.611': attribute type 13 has an invalid length.
[  278.762877][ T8487] lo speed is unknown, defaulting to 1000
[  278.768801][ T8501] lo speed is unknown, defaulting to 1000
[  278.871709][ T8511] netlink: 'syz.1.614': attribute type 1 has an invalid length.
[  278.879638][ T8511] netlink: 'syz.1.614': attribute type 1 has an invalid length.
[  279.016471][ T8516] __nla_validate_parse: 10 callbacks suppressed
[  279.016493][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'.
[  279.032341][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'.
[  279.042098][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'.
[  279.131674][ T8512] lo speed is unknown, defaulting to 1000
[  279.138007][ T8501] lo speed is unknown, defaulting to 1000
[  279.147904][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.616'.
[  279.159444][ T8513] lo speed is unknown, defaulting to 1000
[  279.417900][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'.
[  279.466102][ T8512] lo speed is unknown, defaulting to 1000
[  279.676948][ T8529] netlink: 68 bytes leftover after parsing attributes in process `syz.3.619'.
[  279.912866][ T8513] lo speed is unknown, defaulting to 1000
[  280.193084][ T8533] lo speed is unknown, defaulting to 1000
[  280.287515][ T8533] lo speed is unknown, defaulting to 1000
[  281.131048][ T8539] lo speed is unknown, defaulting to 1000
[  281.371049][ T8539] lo speed is unknown, defaulting to 1000
[  281.681576][ T8559] xt_bpf: check failed: parse error
[  281.768705][ T8561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.628'.
[  282.957174][ T8601] netlink: 830 bytes leftover after parsing attributes in process `syz.3.641'.
[  283.163119][ T8614] netlink: 56 bytes leftover after parsing attributes in process `syz.2.643'.
[  283.416082][ T8625] 8021q: VLANs not supported on ip6_vti0
[  283.512040][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'.
[  283.840304][ T8646] lo speed is unknown, defaulting to 1000
[  283.894797][ T8646] lo speed is unknown, defaulting to 1000
[  283.952205][ T8655] sctp: [Deprecated]: syz.2.653 (pid 8655) Use of int in maxseg socket option.
[  283.952205][ T8655] Use struct sctp_assoc_value instead
[  283.994032][ T8649] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  284.115651][ T8649] netlink: 516 bytes leftover after parsing attributes in process `syz.0.652'.
[  284.559107][ T8678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.657'.
[  284.642071][ T8675] lo speed is unknown, defaulting to 1000
[  284.649868][ T8675] lo speed is unknown, defaulting to 1000
[  284.693259][ T8678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.657'.
[  284.746703][ T8688] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20001
[  284.786788][ T8678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.657'.
[  284.820902][ T8678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.657'.
[  284.871528][ T8678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.657'.
[  284.882318][ T8678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.657'.
[  284.892935][ T8678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.657'.
[  284.905212][ T8678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.657'.
[  284.945109][ T8678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.657'.
[  285.106136][ T8696] tunl0: Caught tx_queue_len zero misconfig
[  285.823902][ T8718] lo: Caught tx_queue_len zero misconfig
[  285.960856][ T7652] IPVS: starting estimator thread 0...
[  285.970602][ T8721] syzkaller0: entered promiscuous mode
[  285.976218][ T8721] syzkaller0: entered allmulticast mode
[  286.060194][ T8725] IPVS: using max 29 ests per chain, 69600 per kthread
[  287.367710][ T8749] tunl0: Caught tx_queue_len zero misconfig
[  287.417812][ T8751] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  287.532832][ T8755] netlink: 'syz.3.676': attribute type 1 has an invalid length.
[  287.702417][ T8768] netlink: 'syz.2.681': attribute type 1 has an invalid length.
[  287.811926][ T8768] 8021q: adding VLAN 0 to HW filter on device bond5
[  287.832282][ T8756] ip6tnl0: Caught tx_queue_len zero misconfig
[  287.860315][ T8769] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  287.940960][ T8766] vlan2: entered promiscuous mode
[  287.946309][ T8766] bond5: entered promiscuous mode
[  287.952867][ T8766] vlan2: entered allmulticast mode
[  287.958221][ T8766] bond5: entered allmulticast mode
[  288.053784][ T8768] bond5: (slave bridge0): making interface the new active one
[  288.103627][ T8768] bridge0: entered promiscuous mode
[  288.111672][ T8768] bridge0: entered allmulticast mode
[  288.119047][ T8768] bond5: (slave bridge0): Enslaving as an active interface with an up link
[  288.511556][ T8796] netlink: 'syz.1.690': attribute type 1 has an invalid length.
[  288.875002][ T8816] netlink: 'syz.0.695': attribute type 1 has an invalid length.
[  289.183805][ T8840] __nla_validate_parse: 40 callbacks suppressed
[  289.183827][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'.
[  289.420402][ T8848] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.837815][ T8840] bond2: entered promiscuous mode
[  289.843577][ T8840] 8021q: adding VLAN 0 to HW filter on device bond2
[  289.861733][ T8842] 8021q: adding VLAN 0 to HW filter on device bond2
[  289.869038][ T8842] bond2: (slave ip6tnl3): The slave device specified does not support setting the MAC address
[  289.880885][ T8842] bond2: (slave ip6tnl3): Error -95 calling set_mac_address
[  289.909111][ T8845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.701'.
[  289.934417][ T8838] lo speed is unknown, defaulting to 1000
[  289.952393][ T8838] lo speed is unknown, defaulting to 1000
[  290.224325][ T8871] netlink: 56 bytes leftover after parsing attributes in process `syz.2.704'.
[  290.443785][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'.
[  290.453923][ T8879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.709'.
[  290.694267][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'.
[  290.799110][ T8892] ip6gretap0: entered promiscuous mode
[  290.833163][ T8892] ip6gretap0: left promiscuous mode
[  291.127015][ T8908] netlink: 52 bytes leftover after parsing attributes in process `syz.1.715'.
[  291.488005][ T8915] bond0: entered promiscuous mode
[  291.493758][ T8915] bond_slave_0: entered promiscuous mode
[  291.499759][ T8915] bond_slave_1: entered promiscuous mode
[  291.509787][ T8915] batadv0: entered promiscuous mode
[  291.516513][ T8915] debugfs: 'hsr1' already exists in 'hsr'
[  291.522578][ T8915] Cannot create hsr debugfs directory
[  291.642051][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'.
[  291.651037][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.717'.
[  291.690245][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'.
[  291.699322][ T7997] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  291.709791][ T7997] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  291.735366][ T7997] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  291.752974][ T7997] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.011350][ T8935] lo speed is unknown, defaulting to 1000
[  293.020119][ T8935] lo speed is unknown, defaulting to 1000
[  293.564362][ T8887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  294.012105][ T8959] lo speed is unknown, defaulting to 1000
[  294.026967][ T8959] lo speed is unknown, defaulting to 1000
[  294.205047][ T8973] __nla_validate_parse: 1 callbacks suppressed
[  294.205080][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'.
[  294.232599][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'.
[  294.255298][ T8973] netlink: 'syz.3.729': attribute type 2 has an invalid length.
[  294.413941][ T8976] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[  294.510678][ T8978] SET target dimension over the limit!
[  294.574245][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'.
[  294.614554][ T8982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.733'.
[  294.635876][ T8982] netlink: 'syz.1.733': attribute type 1 has an invalid length.
[  294.651937][ T8978] netlink: 1 bytes leftover after parsing attributes in process `syz.3.731'.
[  294.686340][ T8982] netlink: 96 bytes leftover after parsing attributes in process `syz.1.733'.
[  294.700689][ T8982] netlink: 658 bytes leftover after parsing attributes in process `syz.1.733'.
[  294.709775][ T8982] netlink: 1 bytes leftover after parsing attributes in process `syz.1.733'.
[  294.817714][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.734'.
[  294.965562][ T9002] netlink: 92 bytes leftover after parsing attributes in process `syz.2.734'.
[  295.633979][ T9019] syzkaller0: entered promiscuous mode
[  296.197835][ T9052] netlink: 'syz.2.750': attribute type 2 has an invalid length.
[  296.355255][ T9055] syzkaller0: entered promiscuous mode
[  296.377141][ T9055] syzkaller0: entered allmulticast mode
[  296.642327][ T9076] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  296.663277][ T9070] netlink: 'syz.4.753': attribute type 1 has an invalid length.
[  296.748737][ T9070] bond2: entered promiscuous mode
[  296.810895][ T9070] 8021q: adding VLAN 0 to HW filter on device bond2
[  296.918809][ T9074] bond2: (slave bridge3): making interface the new active one
[  296.953341][ T9074] bridge3: entered promiscuous mode
[  296.975010][ T9074] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  297.038155][ T9074] netlink: 'syz.4.753': attribute type 1 has an invalid length.
[  297.610311][ T9111] tipc: Resetting bearer <eth:vlan0>
[  297.892507][ T9132] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  297.929303][ T9128] lo speed is unknown, defaulting to 1000
[  297.955456][ T9128] lo speed is unknown, defaulting to 1000
[  298.527776][ T9155] lo speed is unknown, defaulting to 1000
[  298.635357][ T9155] lo speed is unknown, defaulting to 1000
[  299.389781][ T9178] __nla_validate_parse: 9 callbacks suppressed
[  299.389802][ T9178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.781'.
[  299.405503][ T5145] Bluetooth: hci4: command 0x0406 tx timeout
[  299.992673][ T9187] lo speed is unknown, defaulting to 1000
[  300.007817][ T9187] lo speed is unknown, defaulting to 1000
[  300.139646][ T9192] tipc: Enabled bearer <eth:ipvlan0>, priority 4
[  300.177267][ T9194] netlink: 'syz.4.786': attribute type 1 has an invalid length.
[  300.200629][ T9194] netlink: 'syz.4.786': attribute type 22 has an invalid length.
[  300.220514][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'.
[  300.229383][ T9195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.418591][ T9209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.431634][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.790'.
[  300.460899][ T9209] netlink: 'syz.3.790': attribute type 2 has an invalid length.
[  300.477599][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'.
[  300.507220][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.790'.
[  300.528680][ T9203] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  300.551948][ T9206] syzkaller0: entered promiscuous mode
[  300.561294][ T9214] syzkaller0: entered promiscuous mode
[  300.566920][ T9214] syzkaller0: entered allmulticast mode
[  300.632418][ T9212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.791'.
[  300.717962][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.792'.
[  300.873034][ T9224] syzkaller0: tun_chr_ioctl cmd 1074025677
[  300.879236][ T9224] syzkaller0: linktype set to 769
[  301.208113][ T9229] dvmrp0: entered allmulticast mode
[  301.251267][ T9229] netlink: 'syz.4.795': attribute type 1 has an invalid length.
[  301.274012][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'.
[  301.358430][ T9236] openvswitch: netlink: Message has 496 unknown bytes.
[  301.367045][ T9236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.474374][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'.
[  301.516092][ T9236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'.
[  301.543042][ T9236] netlink: 'syz.1.798': attribute type 4 has an invalid length.
[  301.704945][ T9239] syzkaller0: entered promiscuous mode
[  301.712764][ T9239] syzkaller0: entered allmulticast mode
[  302.459335][ T9287] netlink: 'syz.4.808': attribute type 1 has an invalid length.
[  303.462791][ T9287] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  304.049935][ T9326] xt_hashlimit: size too large, truncated to 1048576
[  304.066375][ T9326] xt_hashlimit: invalid interval
[  304.399358][ T9335] __nla_validate_parse: 9 callbacks suppressed
[  304.399375][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'.
[  304.423063][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'.
[  304.432825][ T9336] netlink: 'syz.2.821': attribute type 30 has an invalid length.
[  304.441424][ T9335] netlink: 'syz.2.821': attribute type 30 has an invalid length.
[  304.772770][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'.
[  305.058007][ T9362] lo speed is unknown, defaulting to 1000
[  305.105547][ T9362] lo speed is unknown, defaulting to 1000
[  305.114310][ T9358] lo speed is unknown, defaulting to 1000
[  305.407551][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'.
[  305.416777][ T9384] vxcan0: Master is either lo or non-ether device
[  305.491510][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'.
[  305.557873][ T9382] lo speed is unknown, defaulting to 1000
[  305.575562][ T9387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.832'.
[  305.809612][ T9358] lo speed is unknown, defaulting to 1000
[  306.324921][ T9382] lo speed is unknown, defaulting to 1000
[  306.725584][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'.
[  307.454256][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'.
[  307.649909][ T9426] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  307.662996][ T9426] bond6 (unregistering): Released all slaves
[  308.217949][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'.
[  308.328891][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'.
[  308.502153][ T9452] tipc: Enabled bearer <eth:vlan0>, priority 0
[  308.716403][ T9465] lo speed is unknown, defaulting to 1000
[  308.724292][ T9465] lo speed is unknown, defaulting to 1000
[  309.190701][ T9489] sctp: [Deprecated]: syz.2.864 (pid 9489) Use of int in maxseg socket option.
[  309.190701][ T9489] Use struct sctp_assoc_value instead
[  309.487553][ T9494] __nla_validate_parse: 2 callbacks suppressed
[  309.487576][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'.
[  309.618912][ T9498] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  309.682118][ T9498] bond3 (unregistering): Released all slaves
[  309.732387][ T6466] tipc: Node number set to 3493006068
[  309.738208][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'.
[  309.759663][ T9501] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  310.104499][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'.
[  310.114771][ T9510] xt_CT: You must specify a L4 protocol and not use inversions on it
[  310.160616][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'.
[  310.250984][ T9510] xt_hashlimit: size too large, truncated to 1048576
[  310.257806][ T9510] xt_hashlimit: invalid interval
[  310.289065][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.870'.
[  310.322400][ T9503] vlan0: entered promiscuous mode
[  310.583008][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'.
[  310.637373][ T9525] ip6gretap0: entered promiscuous mode
[  310.672284][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.877'.
[  310.692524][ T9525] ip6gretap0: left promiscuous mode
[  310.732584][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'.
[  310.742758][ T9531] netlink: 'syz.2.877': attribute type 2 has an invalid length.
[  310.794468][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'.
[  310.837444][ T9531] !©�9: entered promiscuous mode
[  310.952593][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'.
[  310.961788][ T9538] lo speed is unknown, defaulting to 1000
[  310.973948][ T9548] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  310.982934][ T9538] lo speed is unknown, defaulting to 1000
[  311.366375][   T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.497303][   T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.554918][   T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.571715][   T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.885067][ T9587] macvtap0: entered promiscuous mode
[  311.945703][ T9587] veth0_macvtap: left promiscuous mode
[  312.143025][ T9587] macvtap0 (unregistering): left promiscuous mode
[  312.174091][ T9570] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  312.566901][ T9603] lo speed is unknown, defaulting to 1000
[  312.595821][ T9603] lo speed is unknown, defaulting to 1000
[  312.844163][ T9613] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  313.327918][ T9625] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  313.550302][ T9634] veth1: entered promiscuous mode
[  313.555691][ T9634] macsec1: entered allmulticast mode
[  313.576994][ T9634] veth1: entered allmulticast mode
[  313.594702][ T9640] SET target dimension over the limit!
[  314.341290][ T9665] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  314.393094][ T9670] netlink: 'syz.4.913': attribute type 1 has an invalid length.
[  314.403056][ T9670] netlink: 'syz.4.913': attribute type 1 has an invalid length.
[  314.472240][ T9670] lo speed is unknown, defaulting to 1000
[  314.484194][ T9670] lo speed is unknown, defaulting to 1000
[  314.746207][ T9685] __nla_validate_parse: 8 callbacks suppressed
[  314.746226][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.916'.
[  314.785038][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'.
[  314.917131][ T9685] 8021q: adding VLAN 0 to HW filter on device bond3
[  314.941887][ T9688] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  314.951015][ T9688] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  315.111100][ T9697] netlink: 41 bytes leftover after parsing attributes in process `syz.1.918'.
[  315.170668][ T9697] netlink: 92 bytes leftover after parsing attributes in process `syz.1.918'.
[  315.179610][ T9697] netlink: 41 bytes leftover after parsing attributes in process `syz.1.918'.
[  315.265425][ T9705] lo speed is unknown, defaulting to 1000
[  315.273262][ T9707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.921'.
[  315.437501][ T9705] lo speed is unknown, defaulting to 1000
[  315.598568][ T9708] netlink: 64 bytes leftover after parsing attributes in process `syz.2.921'.
[  316.037482][ T9714] netlink: 40 bytes leftover after parsing attributes in process `syz.3.924'.
[  316.204357][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'.
[  316.222423][ T9727] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  316.295166][ T9724] netlink: 'syz.2.926': attribute type 4 has an invalid length.
[  316.335845][ T9724] netlink: 'syz.2.926': attribute type 4 has an invalid length.
[  316.472377][ T9724] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  316.493236][ T9730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.928'.
[  316.569178][ T9730] team0: entered promiscuous mode
[  316.610670][ T9730] team_slave_0: entered promiscuous mode
[  316.649168][ T9730] team_slave_1: entered promiscuous mode
[  316.691818][ T9730] bond0: entered promiscuous mode
[  316.696944][ T9730] bond_slave_0: entered promiscuous mode
[  316.712671][ T9730] bond_slave_1: entered promiscuous mode
[  316.722119][ T9730] 8021q: adding VLAN 0 to HW filter on device hsr0
[  317.144134][ T9723] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.172241][ T9723] 8021q: adding VLAN 0 to HW filter on device team0
[  317.200371][ T9723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  317.254911][ T7652] lo speed is unknown, defaulting to 1000
[  317.262225][ T9741] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  317.269921][ T6466] syz1: Port: 1 Link ACTIVE
[  317.299306][ T7652] syz2: Port: 1 Link ACTIVE
[  317.336079][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  317.946549][ T9764] sctp: [Deprecated]: syz.0.937 (pid 9764) Use of int in maxseg socket option.
[  317.946549][ T9764] Use struct sctp_assoc_value instead
[  318.667243][ T9806] geneve3: entered promiscuous mode
[  318.673175][ T9806] geneve3: entered allmulticast mode
[  319.015184][ T9824] syzkaller1: entered promiscuous mode
[  319.037452][ T9824] syzkaller1: entered allmulticast mode
[  319.191786][ T9829] lo speed is unknown, defaulting to 1000
[  319.228473][ T9829] lo speed is unknown, defaulting to 1000
[  319.613059][ T9833] siw: device registration error -23
[  320.216191][ T9869] __nla_validate_parse: 16 callbacks suppressed
[  320.216211][ T9869] netlink: 1708 bytes leftover after parsing attributes in process `syz.4.966'.
[  320.308225][ T9870] lo speed is unknown, defaulting to 1000
[  320.319077][ T9870] lo speed is unknown, defaulting to 1000
[  320.329160][ T9866] lo speed is unknown, defaulting to 1000
[  320.652574][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.969'.
[  320.844328][ T9866] lo speed is unknown, defaulting to 1000
[  321.286100][ T9874] lo speed is unknown, defaulting to 1000
[  321.397985][ T9874] lo speed is unknown, defaulting to 1000
[  321.629174][ T9907] vlan0: entered promiscuous mode
[  321.638907][ T9907] dummy0: entered promiscuous mode
[  322.086139][ T9921] netlink: 'syz.3.977': attribute type 89 has an invalid length.
[  322.275957][ T9926] netlink: 88 bytes leftover after parsing attributes in process `syz.3.977'.
[  322.480941][ T9927] netlink: 'syz.4.978': attribute type 1 has an invalid length.
[  322.530236][ T9927] netlink: 174 bytes leftover after parsing attributes in process `syz.4.978'.
[  323.127754][ T9951] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  323.341104][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'.
[  323.394512][ T9962] netlink: 1708 bytes leftover after parsing attributes in process `syz.3.982'.
[  323.655590][ T9954] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  323.663234][ T9954] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  323.683112][ T9954] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  323.690538][ T9954] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  323.716277][ T9954] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  323.741948][ T9954] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  323.775983][ T9954] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  323.795898][ T9954] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  324.437495][T10006] netlink: 'syz.4.991': attribute type 3 has an invalid length.
[  324.494917][T10003] netlink: 'syz.4.991': attribute type 3 has an invalid length.
[  324.555544][T10006] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  325.536919][T10063] lo speed is unknown, defaulting to 1000
[  325.563481][T10063] lo speed is unknown, defaulting to 1000
[  327.337708][T10074] lo speed is unknown, defaulting to 1000
[  327.531413][T10074] lo speed is unknown, defaulting to 1000
[  327.540711][T10071] lo speed is unknown, defaulting to 1000
[  327.724456][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1007'.
[  327.949552][ T5907] IPVS: starting estimator thread 0...
[  328.040167][T10116] IPVS: using max 27 ests per chain, 64800 per kthread
[  328.321206][T10130] gretap3: entered promiscuous mode
[  328.327632][T10130] batman_adv: batadv0: Adding interface: gretap3
[  328.340019][T10130] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  328.410729][T10130] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active
[  328.462804][T10071] lo speed is unknown, defaulting to 1000
[  328.621072][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1016'.
[  329.292796][T10168] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1021'.
[  329.322469][T10168] netlink: ct family unspecified
[  329.332612][T10170] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1021'.
[  329.358330][T10168] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1021'.
[  329.668761][T10178] syz_tun: entered allmulticast mode
[  329.766665][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'.
[  329.767077][T10178] syz_tun: left allmulticast mode
[  329.812411][T10189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'.
[  330.236132][T10207] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1029'.
[  330.260912][T10207] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1029'.
[  330.271806][T10207] netlink: 'syz.3.1029': attribute type 5 has an invalid length.
[  330.279937][T10207] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1029'.
[  330.339389][T10207] openvswitch: netlink: Message has 4 unknown bytes.
[  331.089617][T10236] netlink: 'syz.0.1036': attribute type 1 has an invalid length.
[  331.381973][T10240] bond4: (slave veth6): Enslaving as an active interface with a down link
[  331.451757][T10244] bond4: (slave veth8): Enslaving as an active interface with a down link
[  331.508786][T10247] 8021q: adding VLAN 0 to HW filter on device bond4
[  331.565418][T10249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.593479][T10251] syzkaller0: entered promiscuous mode
[  331.607998][T10251] syzkaller0: entered allmulticast mode
[  331.680674][T10243] lo speed is unknown, defaulting to 1000
[  331.742796][T10243] lo speed is unknown, defaulting to 1000
[  331.929199][T10268] netlink: 'syz.1.1041': attribute type 11 has an invalid length.
[  332.126627][T10271] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  332.204805][T10271] bond5 (unregistering): Released all slaves
[  332.341633][T10246] tipc: Resetting bearer <eth:syzkaller0>
[  332.421632][T10297] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  332.461587][T10246] tipc: Disabling bearer <eth:syzkaller0>
[  332.960923][T10309] __nla_validate_parse: 4 callbacks suppressed
[  332.960946][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'.
[  333.095712][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'.
[  333.130305][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1051'.
[  334.825410][T10360] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  335.072875][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'.
[  335.082124][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1063'.
[  336.070861][T10408] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  336.096025][T10410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  336.103377][T10410] IPv6: NLM_F_CREATE should be set when creating new route
[  336.110737][T10410] IPv6: NLM_F_CREATE should be set when creating new route
[  336.117999][T10410] IPv6: NLM_F_CREATE should be set when creating new route
[  336.775320][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1081'.
[  337.107952][T10455] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1088'.
[  337.139490][T10448] bond6: entered allmulticast mode
[  337.166731][T10459] netlink: 'syz.2.1084': attribute type 4 has an invalid length.
[  337.182490][T10459] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1084'.
[  337.324420][T10448] bridge5: entered promiscuous mode
[  337.333142][T10448] bridge5: entered allmulticast mode
[  337.366559][T10448] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  337.625458][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'.
[  337.670505][T10467] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1089'.
[  337.701471][T10467] nbd: must specify a device to reconfigure
[  337.744326][T10469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  337.854021][T10474] bridge0: entered allmulticast mode
[  338.196216][T10494] openvswitch: netlink: VXLAN extension message has 39 unknown bytes.
[  338.242834][T10497] netlink: 'syz.2.1098': attribute type 1 has an invalid length.
[  338.250909][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'.
[  338.285491][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1098'.
[  338.295802][T10497] netlink: 'syz.2.1098': attribute type 2 has an invalid length.
[  338.367101][T10499] openvswitch: netlink: Key type 237 is out of range max 32
[  338.375544][T10497] netlink: 'syz.2.1098': attribute type 2 has an invalid length.
[  338.389147][T10497] netlink: 'syz.2.1098': attribute type 2 has an invalid length.
[  338.422743][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'.
[  338.433181][T10500] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  338.725783][T10491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1096'.
[  338.745973][T10506] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1101'.
[  338.758310][T10506] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1101'.
[  338.831187][T10508] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1102'.
[  338.857630][T10508] netlink: 'syz.4.1102': attribute type 1 has an invalid length.
[  339.347086][T10528] tipc: Resetting bearer <eth:vlan0>
[  339.439790][T10531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1108'.
[  339.439801][ T7652] lo speed is unknown, defaulting to 1000
[  339.459748][T10531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1108'.
[  339.609163][T10539] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1110'.
[  339.648060][T10539] netlink: 'syz.3.1110': attribute type 10 has an invalid length.
[  339.668451][T10539] bridge0: left allmulticast mode
[  339.695485][T10539] bridge0: entered allmulticast mode
[  339.703440][T10539] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  339.713907][T10540] bridge_slave_1: left allmulticast mode
[  339.719710][T10540] bridge_slave_1: left promiscuous mode
[  339.738084][T10540] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.776207][T10540] bridge_slave_0: left allmulticast mode
[  339.783574][T10540] bridge_slave_0: left promiscuous mode
[  339.789670][T10540] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.066807][T10540] bond0: (slave bridge0): Releasing backup interface
[  340.092419][T10540] bridge0 (unregistering): left allmulticast mode
[  340.173527][T10544] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  340.772961][T10579] netlink: 'syz.2.1120': attribute type 16 has an invalid length.
[  340.841715][T10581] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.861469][T10581] syzkaller0: entered promiscuous mode
[  340.867012][T10581] syzkaller0: entered allmulticast mode
[  340.927441][T10581] tipc: Resetting bearer <eth:syzkaller0>
[  340.945092][T10581] C: renamed from team_slave_0
[  340.966374][T10581] netlink: 'syz.4.1121': attribute type 8 has an invalid length.
[  340.977419][T10581] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  341.030920][T10580] tipc: Resetting bearer <eth:syzkaller0>
[  341.071297][T10580] tipc: Disabling bearer <eth:syzkaller0>
[  341.220342][T10587] netlink: 'syz.0.1124': attribute type 1 has an invalid length.
[  341.334488][T10587] lo speed is unknown, defaulting to 1000
[  341.343357][T10587] lo speed is unknown, defaulting to 1000
[  342.058929][T10608] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  342.867690][T10634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  342.981166][T10643] IPVS: length: 217 != 18456
[  344.229070][T10678] __nla_validate_parse: 13 callbacks suppressed
[  344.229091][T10678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1154'.
[  344.272696][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1155'.
[  344.307074][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1156'.
[  344.324635][T10678] netlink: 62967 bytes leftover after parsing attributes in process `syz.1.1154'.
[  344.341587][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1156'.
[  344.443832][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'.
[  344.668567][T10709] bond3 (unregistering): Released all slaves
[  344.768665][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'.
[  344.782377][T10717] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  344.809366][T10717] FAULT_INJECTION: forcing a failure.
[  344.809366][T10717] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  344.826742][T10717] CPU: 1 UID: 0 PID: 10717 Comm: syz.4.1162 Not tainted syzkaller #0 PREEMPT(full) 
[  344.826778][T10717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  344.826799][T10717] Call Trace:
[  344.826808][T10717]  <TASK>
[  344.826818][T10717]  dump_stack_lvl+0xe8/0x150
[  344.826863][T10717]  should_fail_ex+0x412/0x560
[  344.826898][T10717]  _copy_to_user+0x31/0xb0
[  344.826934][T10717]  simple_read_from_buffer+0xe1/0x170
[  344.826971][T10717]  proc_fail_nth_read+0x1bb/0x230
[  344.827014][T10717]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  344.827055][T10717]  ? rw_verify_area+0x2a6/0x4d0
[  344.827078][T10717]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  344.827110][T10717]  vfs_read+0x20c/0xa70
[  344.827150][T10717]  ? fdget_pos+0x246/0x320
[  344.827196][T10717]  ? __pfx___mutex_lock+0x10/0x10
[  344.827230][T10717]  ? __pfx_vfs_read+0x10/0x10
[  344.827254][T10717]  ? __fget_files+0x2a/0x420
[  344.827289][T10717]  ? __fget_files+0x3a0/0x420
[  344.827318][T10717]  ? __fget_files+0x2a/0x420
[  344.827358][T10717]  ksys_read+0x150/0x270
[  344.827383][T10717]  ? __pfx_ksys_read+0x10/0x10
[  344.827418][T10717]  do_syscall_64+0x14d/0xf80
[  344.827447][T10717]  ? trace_irq_disable+0x3b/0x150
[  344.827477][T10717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.827498][T10717]  ? clear_bhb_loop+0x40/0x90
[  344.827530][T10717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.827551][T10717] RIP: 0033:0x7faea815cfce
[  344.827579][T10717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  344.827599][T10717] RSP: 002b:00007faea63f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  344.827628][T10717] RAX: ffffffffffffffda RBX: 00007faea63f66c0 RCX: 00007faea815cfce
[  344.827644][T10717] RDX: 000000000000000f RSI: 00007faea63f60a0 RDI: 0000000000000008
[  344.827657][T10717] RBP: 00007faea63f6090 R08: 0000000000000000 R09: 0000000000000000
[  344.827669][T10717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.827682][T10717] R13: 00007faea8416038 R14: 00007faea8415fa0 R15: 00007fffdae24358
[  344.827717][T10717]  </TASK>
[  345.205472][T10723] validate_nla: 1 callbacks suppressed
[  345.205493][T10723] netlink: 'syz.0.1165': attribute type 3 has an invalid length.
[  345.295171][T10723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1165'.
[  345.462077][T10730] syz_tun: entered allmulticast mode
[  345.501483][T10728] syz_tun: left allmulticast mode
[  346.257637][T10766] IPVS: set_ctl: invalid protocol: 4 172.30.0.5:20004
[  346.279584][T10768] lo speed is unknown, defaulting to 1000
[  346.302925][T10768] lo speed is unknown, defaulting to 1000
[  346.583612][T10791] bond5: entered promiscuous mode
[  346.608073][T10791] 8021q: adding VLAN 0 to HW filter on device bond5
[  346.676318][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'.
[  346.868882][T10807] lo speed is unknown, defaulting to 1000
[  346.869384][T10813] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  346.903707][T10811] syzkaller0: entered promiscuous mode
[  346.924215][T10811] syzkaller0: entered allmulticast mode
[  347.116787][T10807] lo speed is unknown, defaulting to 1000
[  348.236558][T10853] IPVS: Unknown mcast interface: vcan0
[  348.387499][T10857] geneve1: entered promiscuous mode
[  348.749776][T10872] netlink: 'syz.3.1201': attribute type 1 has an invalid length.
[  348.877793][T10876] bond4: (slave gretap2): making interface the new active one
[  348.918423][T10876] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  348.963282][T10877] lo speed is unknown, defaulting to 1000
[  348.971903][T10877] lo speed is unknown, defaulting to 1000
[  349.153153][T10888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1204'.
[  349.305906][T10896] ipt_ECN: cannot use operation on non-tcp rule
[  349.440992][T10904] netlink: 'syz.0.1210': attribute type 1 has an invalid length.
[  349.448854][T10904] netlink: 'syz.0.1210': attribute type 2 has an invalid length.
[  349.717051][T10919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1216'.
[  349.739044][T10920] netlink: 'syz.2.1214': attribute type 15 has an invalid length.
[  349.752786][T10919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1216'.
[  349.814051][T10925] netlink: 'syz.1.1216': attribute type 6 has an invalid length.
[  349.917795][T10924] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.975996][T10924] 8021q: adding VLAN 0 to HW filter on device team0
[  350.021863][T10924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  350.070725][T10941] ipt_ECN: cannot use operation on non-tcp rule
[  350.636350][T10966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1224'.
[  350.868155][T10974] lo speed is unknown, defaulting to 1000
[  350.882078][T10974] lo speed is unknown, defaulting to 1000
[  351.541584][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  351.550912][T11006] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  351.644525][T11014] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1239'.
[  351.718440][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'.
[  352.569264][T11055] FAULT_INJECTION: forcing a failure.
[  352.569264][T11055] name failslab, interval 1, probability 0, space 0, times 1
[  352.605788][T11055] CPU: 0 UID: 0 PID: 11055 Comm: syz.1.1248 Not tainted syzkaller #0 PREEMPT(full) 
[  352.605818][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  352.605831][T11055] Call Trace:
[  352.605839][T11055]  <TASK>
[  352.605849][T11055]  dump_stack_lvl+0xe8/0x150
[  352.605886][T11055]  should_fail_ex+0x412/0x560
[  352.605921][T11055]  should_failslab+0xa8/0x100
[  352.605948][T11055]  ? skb_clone+0x212/0x3a0
[  352.605970][T11055]  kmem_cache_alloc_noprof+0x87/0x650
[  352.605992][T11055]  ? __netlink_lookup+0xc6/0x8b0
[  352.606032][T11055]  skb_clone+0x212/0x3a0
[  352.606058][T11055]  __netlink_deliver_tap+0x404/0x850
[  352.606102][T11055]  ? netlink_deliver_tap+0x2e/0x1b0
[  352.606134][T11055]  netlink_deliver_tap+0x19c/0x1b0
[  352.606165][T11055]  netlink_unicast+0x7e3/0x9b0
[  352.606202][T11055]  ? __pfx_netlink_unicast+0x10/0x10
[  352.606232][T11055]  ? netlink_sendmsg+0x650/0xb40
[  352.606260][T11055]  ? skb_put+0x11b/0x210
[  352.606296][T11055]  netlink_sendmsg+0x813/0xb40
[  352.606338][T11055]  ? __pfx_netlink_sendmsg+0x10/0x10
[  352.606372][T11055]  ? aa_sock_msg_perm+0xf1/0x1b0
[  352.606403][T11055]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  352.606451][T11055]  ____sys_sendmsg+0x972/0x9f0
[  352.606484][T11055]  ? __pfx_____sys_sendmsg+0x10/0x10
[  352.606517][T11055]  ? import_iovec+0x73/0xa0
[  352.606555][T11055]  ___sys_sendmsg+0x2a5/0x360
[  352.606584][T11055]  ? __pfx____sys_sendmsg+0x10/0x10
[  352.606646][T11055]  ? __fget_files+0x2a/0x420
[  352.606676][T11055]  ? __fget_files+0x3a0/0x420
[  352.606719][T11055]  __x64_sys_sendmsg+0x1bd/0x2a0
[  352.606744][T11055]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  352.606785][T11055]  ? __pfx_ksys_write+0x10/0x10
[  352.606822][T11055]  do_syscall_64+0x14d/0xf80
[  352.606853][T11055]  ? trace_irq_disable+0x3b/0x150
[  352.606883][T11055]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.606905][T11055]  ? clear_bhb_loop+0x40/0x90
[  352.606931][T11055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.606953][T11055] RIP: 0033:0x7f5be979c799
[  352.606973][T11055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  352.606991][T11055] RSP: 002b:00007f5be79f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  352.607013][T11055] RAX: ffffffffffffffda RBX: 00007f5be9a15fa0 RCX: 00007f5be979c799
[  352.607029][T11055] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  352.607042][T11055] RBP: 00007f5be79f6090 R08: 0000000000000000 R09: 0000000000000000
[  352.607055][T11055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.607067][T11055] R13: 00007f5be9a16038 R14: 00007f5be9a15fa0 R15: 00007ffd426bcf18
[  352.607102][T11055]  </TASK>
[  352.607376][T11055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1248'.
[  353.151750][T11072] netlink: 'syz.1.1252': attribute type 2 has an invalid length.
[  353.192233][T11072] netlink: 'syz.1.1252': attribute type 2 has an invalid length.
[  353.325319][T11072] lo speed is unknown, defaulting to 1000
[  353.382339][T11073] lo speed is unknown, defaulting to 1000
[  353.416132][T11073] lo speed is unknown, defaulting to 1000
[  353.708765][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'.
[  353.823375][T11091] netlink: 'syz.4.1260': attribute type 5 has an invalid length.
[  354.099722][T11099] FAULT_INJECTION: forcing a failure.
[  354.099722][T11099] name failslab, interval 1, probability 0, space 0, times 0
[  354.124878][T11099] CPU: 0 UID: 0 PID: 11099 Comm: syz.4.1262 Not tainted syzkaller #0 PREEMPT(full) 
[  354.124907][T11099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  354.124919][T11099] Call Trace:
[  354.124927][T11099]  <TASK>
[  354.124936][T11099]  dump_stack_lvl+0xe8/0x150
[  354.124971][T11099]  should_fail_ex+0x412/0x560
[  354.125003][T11099]  should_failslab+0xa8/0x100
[  354.125031][T11099]  __kmalloc_noprof+0xe8/0x760
[  354.125054][T11099]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  354.125087][T11099]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  354.125121][T11099]  genl_start+0x180/0x6c0
[  354.125142][T11099]  ? netlink_lookup+0x30/0x200
[  354.125178][T11099]  __netlink_dump_start+0x469/0x7e0
[  354.125216][T11099]  genl_family_rcv_msg_dumpit+0x213/0x310
[  354.125254][T11099]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  354.125277][T11099]  ? genl_get_cmd+0x6cb/0x960
[  354.125303][T11099]  ? __pfx_genl_start+0x10/0x10
[  354.125322][T11099]  ? __pfx_genl_dumpit+0x10/0x10
[  354.125342][T11099]  ? __pfx_genl_done+0x10/0x10
[  354.125369][T11099]  ? __dev_queue_xmit+0x28b/0x3870
[  354.125401][T11099]  genl_rcv_msg+0x5e8/0x7a0
[  354.125430][T11099]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.125451][T11099]  ? __pfx_ethnl_default_start+0x10/0x10
[  354.125482][T11099]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[  354.125512][T11099]  ? __pfx_ethnl_default_done+0x10/0x10
[  354.125544][T11099]  ? __lock_acquire+0x6b5/0x2cf0
[  354.125584][T11099]  netlink_rcv_skb+0x232/0x4b0
[  354.125616][T11099]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.125640][T11099]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.125689][T11099]  ? down_read+0x272/0x2e0
[  354.125709][T11099]  ? genl_rcv+0xd/0x40
[  354.125733][T11099]  genl_rcv+0x28/0x40
[  354.125754][T11099]  netlink_unicast+0x80f/0x9b0
[  354.125791][T11099]  ? __pfx_netlink_unicast+0x10/0x10
[  354.125820][T11099]  ? netlink_sendmsg+0x650/0xb40
[  354.125849][T11099]  ? skb_put+0x11b/0x210
[  354.125885][T11099]  netlink_sendmsg+0x813/0xb40
[  354.125926][T11099]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.125962][T11099]  ? aa_sock_msg_perm+0xf1/0x1b0
[  354.125992][T11099]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  354.126020][T11099]  ____sys_sendmsg+0x972/0x9f0
[  354.126052][T11099]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.126084][T11099]  ? import_iovec+0x73/0xa0
[  354.126121][T11099]  ___sys_sendmsg+0x2a5/0x360
[  354.126150][T11099]  ? __pfx____sys_sendmsg+0x10/0x10
[  354.126244][T11099]  ? __fget_files+0x2a/0x420
[  354.126276][T11099]  ? __fget_files+0x3a0/0x420
[  354.126335][T11099]  __x64_sys_sendmsg+0x1bd/0x2a0
[  354.126362][T11099]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  354.126395][T11099]  ? __pfx_ksys_write+0x10/0x10
[  354.126432][T11099]  do_syscall_64+0x14d/0xf80
[  354.126463][T11099]  ? trace_irq_disable+0x3b/0x150
[  354.126493][T11099]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.126515][T11099]  ? clear_bhb_loop+0x40/0x90
[  354.126548][T11099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.126570][T11099] RIP: 0033:0x7faea819c799
[  354.126590][T11099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  354.126608][T11099] RSP: 002b:00007faea63f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.126631][T11099] RAX: ffffffffffffffda RBX: 00007faea8415fa0 RCX: 00007faea819c799
[  354.126646][T11099] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  354.126659][T11099] RBP: 00007faea63f6090 R08: 0000000000000000 R09: 0000000000000000
[  354.126672][T11099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.126685][T11099] R13: 00007faea8416038 R14: 00007faea8415fa0 R15: 00007fffdae24358
[  354.126720][T11099]  </TASK>
[  354.997428][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'.
[  355.043194][T11117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1264'.
[  355.053076][T11123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1267'.
[  355.377864][T11131] x_tables: ip6_tables: udplite match: only valid for protocol 136
[  355.445463][T11131] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1270'.
[  355.494229][T11133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1271'.
[  355.523263][T11139] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  355.545392][T11133] netlink: 'syz.1.1271': attribute type 7 has an invalid length.
[  355.555373][T11139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.564307][T11133] netlink: 'syz.1.1271': attribute type 8 has an invalid length.
[  355.564332][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'.
[  355.583845][T11133] ip6gretap0: entered promiscuous mode
[  355.592460][T11133] gretap0: entered promiscuous mode
[  355.598973][T11133] erspan0: entered promiscuous mode
[  355.612585][T11133] debugfs: 'hsr1' already exists in 'hsr'
[  355.619198][T11133] Cannot create hsr debugfs directory
[  355.754661][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1274'.
[  355.803706][T11143] bridge5: port 1(veth0_to_bond) entered blocking state
[  355.811812][T11143] bridge5: port 1(veth0_to_bond) entered disabled state
[  355.823375][T11143] veth0_to_bond: entered allmulticast mode
[  355.833746][T11143] veth0_to_bond: entered promiscuous mode
[  356.241511][T11164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1279'.
[  356.457500][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'.
[  356.825058][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'.
[  356.860186][T11195] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  357.066878][T11204] ipt_ECN: cannot use operation on non-tcp rule
[  357.220339][T11211] netlink: 'syz.4.1297': attribute type 1 has an invalid length.
[  360.145306][T11241] lo speed is unknown, defaulting to 1000
[  360.160577][T11249] __nla_validate_parse: 3 callbacks suppressed
[  360.160598][T11249] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1305'.
[  360.165749][T11241] lo speed is unknown, defaulting to 1000
[  360.323752][T11257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1307'.
[  360.382795][T11261] ipt_ECN: cannot use operation on non-tcp rule
[  360.883006][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'.
[  360.982277][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'.
[  361.226375][T11284] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.234157][T11284] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.437363][T11284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  361.469084][T11284] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  361.521292][T11284] tipc: Resetting bearer <eth:vlan0>
[  361.587165][T11284] veth1: left allmulticast mode
[  361.618766][ T7994] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  361.628698][ T7994] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.670981][ T7994] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  361.679416][ T7994] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.885941][ T7994] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  361.915263][ T7994] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.941692][ T7994] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  361.962040][ T7994] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  362.153363][T11308] ip6gretap0: entered promiscuous mode
[  362.185657][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'.
[  362.212048][T11306] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  362.257933][T11314] netlink: 'syz.3.1325': attribute type 1 has an invalid length.
[  362.301554][T11314] netlink: 'syz.3.1325': attribute type 83 has an invalid length.
[  362.375946][T11318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1327'.
[  362.392342][T11318] FAULT_INJECTION: forcing a failure.
[  362.392342][T11318] name failslab, interval 1, probability 0, space 0, times 0
[  362.457262][T11318] CPU: 0 UID: 0 PID: 11318 Comm: syz.2.1327 Not tainted syzkaller #0 PREEMPT(full) 
[  362.457292][T11318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  362.457305][T11318] Call Trace:
[  362.457313][T11318]  <TASK>
[  362.457322][T11318]  dump_stack_lvl+0xe8/0x150
[  362.457356][T11318]  should_fail_ex+0x412/0x560
[  362.457507][T11318]  should_failslab+0xa8/0x100
[  362.457549][T11318]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  362.457575][T11318]  ? __alloc_skb+0x1d0/0x7d0
[  362.457605][T11318]  ? __local_bh_enable_ip+0xd0/0x130
[  362.457638][T11318]  __alloc_skb+0x1d0/0x7d0
[  362.457670][T11318]  ? netlink_ack_tlv_len+0x6c/0x210
[  362.457703][T11318]  netlink_ack+0x146/0xa50
[  362.457729][T11318]  ? __pfx_genl_rcv_msg+0x10/0x10
[  362.457751][T11318]  ? __pfx_ethnl_default_start+0x10/0x10
[  362.457783][T11318]  ? __pfx_ethnl_default_done+0x10/0x10
[  362.457846][T11318]  ? __lock_acquire+0x6b5/0x2cf0
[  362.457887][T11318]  netlink_rcv_skb+0x2b6/0x4b0
[  362.457918][T11318]  ? __pfx_genl_rcv_msg+0x10/0x10
[  362.457943][T11318]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  362.457993][T11318]  ? down_read+0x272/0x2e0
[  362.458013][T11318]  ? genl_rcv+0xd/0x40
[  362.458037][T11318]  genl_rcv+0x28/0x40
[  362.458059][T11318]  netlink_unicast+0x80f/0x9b0
[  362.458096][T11318]  ? __pfx_netlink_unicast+0x10/0x10
[  362.458126][T11318]  ? netlink_sendmsg+0x650/0xb40
[  362.458154][T11318]  ? skb_put+0x11b/0x210
[  362.458190][T11318]  netlink_sendmsg+0x813/0xb40
[  362.458231][T11318]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.458266][T11318]  ? aa_sock_msg_perm+0xf1/0x1b0
[  362.458297][T11318]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  362.458324][T11318]  ____sys_sendmsg+0x972/0x9f0
[  362.458357][T11318]  ? __pfx_____sys_sendmsg+0x10/0x10
[  362.458389][T11318]  ? import_iovec+0x73/0xa0
[  362.458426][T11318]  ___sys_sendmsg+0x2a5/0x360
[  362.458455][T11318]  ? __pfx____sys_sendmsg+0x10/0x10
[  362.458518][T11318]  ? __fget_files+0x2a/0x420
[  362.458549][T11318]  ? __fget_files+0x3a0/0x420
[  362.458592][T11318]  __x64_sys_sendmsg+0x1bd/0x2a0
[  362.458619][T11318]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  362.458653][T11318]  ? __pfx_ksys_write+0x10/0x10
[  362.458696][T11318]  do_syscall_64+0x14d/0xf80
[  362.458728][T11318]  ? trace_irq_disable+0x3b/0x150
[  362.458758][T11318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.458786][T11318]  ? clear_bhb_loop+0x40/0x90
[  362.458823][T11318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.458845][T11318] RIP: 0033:0x7f2e0e59c799
[  362.458867][T11318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.458885][T11318] RSP: 002b:00007f2e0f49a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  362.458908][T11318] RAX: ffffffffffffffda RBX: 00007f2e0e815fa0 RCX: 00007f2e0e59c799
[  362.458924][T11318] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  362.458939][T11318] RBP: 00007f2e0f49a090 R08: 0000000000000000 R09: 0000000000000000
[  362.458952][T11318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  362.458966][T11318] R13: 00007f2e0e816038 R14: 00007f2e0e815fa0 R15: 00007ffdd4165658
[  362.459007][T11318]  </TASK>
[  363.397355][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'.
[  363.408893][T11360] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  363.526770][T11367] ipvlan0: entered promiscuous mode
[  363.665929][T11370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1340'.
[  363.685588][T11370] FAULT_INJECTION: forcing a failure.
[  363.685588][T11370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  363.700832][T11370] CPU: 0 UID: 0 PID: 11370 Comm: syz.3.1340 Not tainted syzkaller #0 PREEMPT(full) 
[  363.700861][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  363.700879][T11370] Call Trace:
[  363.700888][T11370]  <TASK>
[  363.700898][T11370]  dump_stack_lvl+0xe8/0x150
[  363.700935][T11370]  should_fail_ex+0x412/0x560
[  363.700970][T11370]  _copy_to_user+0x31/0xb0
[  363.701006][T11370]  simple_read_from_buffer+0xe1/0x170
[  363.701043][T11370]  proc_fail_nth_read+0x1bb/0x230
[  363.701078][T11370]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  363.701113][T11370]  ? rw_verify_area+0x2a6/0x4d0
[  363.701136][T11370]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  363.701169][T11370]  vfs_read+0x20c/0xa70
[  363.701189][T11370]  ? fdget_pos+0x246/0x320
[  363.701227][T11370]  ? __pfx___mutex_lock+0x10/0x10
[  363.701261][T11370]  ? __pfx_vfs_read+0x10/0x10
[  363.701286][T11370]  ? __fget_files+0x2a/0x420
[  363.701323][T11370]  ? __fget_files+0x3a0/0x420
[  363.701353][T11370]  ? __fget_files+0x2a/0x420
[  363.701395][T11370]  ksys_read+0x150/0x270
[  363.701421][T11370]  ? __pfx_ksys_read+0x10/0x10
[  363.701457][T11370]  do_syscall_64+0x14d/0xf80
[  363.701488][T11370]  ? trace_irq_disable+0x3b/0x150
[  363.701519][T11370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.701542][T11370]  ? clear_bhb_loop+0x40/0x90
[  363.701570][T11370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.701596][T11370] RIP: 0033:0x7f8c9c75cfce
[  363.701617][T11370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  363.701636][T11370] RSP: 002b:00007f8c9d673fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  363.701659][T11370] RAX: ffffffffffffffda RBX: 00007f8c9d6746c0 RCX: 00007f8c9c75cfce
[  363.701675][T11370] RDX: 000000000000000f RSI: 00007f8c9d6740a0 RDI: 0000000000000004
[  363.701689][T11370] RBP: 00007f8c9d674090 R08: 0000000000000000 R09: 0000000000000000
[  363.701702][T11370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  363.701722][T11370] R13: 00007f8c9ca16038 R14: 00007f8c9ca15fa0 R15: 00007ffd4fad94f8
[  363.701758][T11370]  </TASK>
[  364.276780][T11399] ip6tnl1: entered allmulticast mode
[  364.295802][T11402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1347'.
[  364.436205][T11411] netlink: 'syz.3.1349': attribute type 1 has an invalid length.
[  364.467490][T11411] 8021q: adding VLAN 0 to HW filter on device bond6
[  364.484962][T11411] bond6: (slave dummy0): making interface the new active one
[  364.496305][T11411] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  364.519028][T11411] bond6 (unregistering): (slave dummy0): Releasing active interface
[  364.556774][T11411] bond6 (unregistering): Released all slaves
[  364.565819][T11416] netlink: 'syz.3.1349': attribute type 3 has an invalid length.
[  364.582227][T11416] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1349'.
[  364.799289][T11425] syzkaller0: entered promiscuous mode
[  364.805358][T11425] syzkaller0: entered allmulticast mode
[  364.830694][ T7984] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  364.843525][ T7984] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  364.853018][ T7984] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  364.881173][ T7984] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  365.056683][T11439] lo speed is unknown, defaulting to 1000
[  365.066669][T11439] lo speed is unknown, defaulting to 1000
[  365.406836][T11449] __nla_validate_parse: 10 callbacks suppressed
[  365.406858][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'.
[  366.171506][T11472] xt_TCPMSS: Only works on TCP SYN packets
[  366.421465][T11472] bond6: entered promiscuous mode
[  366.497696][T11478] macvlan3: entered promiscuous mode
[  366.514846][T11478] macvlan3: entered allmulticast mode
[  366.528094][T11478] bond6: (slave macvlan3): Opening slave failed
[  366.562153][T11477] : renamed from veth0_to_bond
[  366.575366][T11484] can: request_module (can-proto-0) failed.
[  366.788336][T11489] netlink: 1616 bytes leftover after parsing attributes in process `syz.4.1372'.
[  366.890856][T11500] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  367.006649][T11510] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1375'.
[  367.054320][T11510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1375'.
[  367.397009][T11525] lo speed is unknown, defaulting to 1000
[  367.462254][T11525] lo speed is unknown, defaulting to 1000
[  367.693834][T11533] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  367.759712][T11541] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.774603][T11533] bond3 (unregistering): Released all slaves
[  367.828968][T11536] netlink: 'syz.2.1383': attribute type 15 has an invalid length.
[  367.838736][T11536] 8021q: VLANs not supported on ip6gre0
[  368.204477][T11556] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1387'.
[  368.972171][T11577] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1392'.
[  369.014104][T11577] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1392'.
[  369.126727][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'.
[  369.166948][T11583] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  369.266270][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'.
[  369.341003][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1395'.
[  369.483355][T11600] netlink: 'syz.2.1396': attribute type 27 has an invalid length.
[  369.625025][T11600] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  369.652956][T11600] vlan2: left promiscuous mode
[  369.668004][T11600] bond5: left promiscuous mode
[  369.680706][T11600] bridge0: left promiscuous mode
[  369.686038][T11600] vlan2: left allmulticast mode
[  369.710181][T11600] bond5: left allmulticast mode
[  369.720329][T11600] bridge0: left allmulticast mode
[  369.751957][T11600] bond6: left allmulticast mode
[  369.757543][T11600] bridge5: left promiscuous mode
[  369.767630][T11600] bridge5: left allmulticast mode
[  369.786261][ T7645] lo speed is unknown, defaulting to 1000
[  369.792786][ T7645] syz2: Port: 1 Link DOWN
[  369.798988][T11602] vcan1: entered promiscuous mode
[  369.804187][T11602] vcan1: entered allmulticast mode
[  369.841969][ T7642] syz1: Port: 1 Link DOWN
[  370.449429][T11644] __nla_validate_parse: 1 callbacks suppressed
[  370.449450][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'.
[  370.483773][T11644] ip6tnl2: entered allmulticast mode
[  370.978304][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'.
[  371.039027][T11670] netlink: 'syz.2.1413': attribute type 4 has an invalid length.
[  371.085295][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1417'.
[  371.133755][T11678] bond6: entered promiscuous mode
[  371.142336][T11678] 8021q: adding VLAN 0 to HW filter on device bond6
[  371.159341][T11684] 8021q: adding VLAN 0 to HW filter on device bond6
[  371.166769][T11684] bond6: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  371.178202][T11684] bond6: (slave ip6tnl2): Error -95 calling set_mac_address
[  371.203741][T11682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.211433][T11682] syzkaller0: entered promiscuous mode
[  371.217090][T11682] syzkaller0: entered allmulticast mode
[  371.271186][T11682] tipc: Resetting bearer <eth:syzkaller0>
[  371.324831][T11680] tipc: Resetting bearer <eth:syzkaller0>
[  371.412991][T11680] tipc: Disabling bearer <eth:syzkaller0>
[  371.455804][T11693] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1420'.
[  371.493171][T11693] tap0: tun_chr_ioctl cmd 1074025681
[  371.502096][T11692] syzkaller1: entered allmulticast mode
[  371.520783][T11693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1420'.
[  371.664426][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1424'.
[  371.674864][T11701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1420'.
[  371.706511][T11701] nbd: device at index 64 is going down
[  371.805145][T11705] bond4: Invalid ad_actor_system MAC address.
[  371.812642][T11705] bond4: option ad_actor_system: invalid value (7)
[  371.852516][T11705] bond4 (unregistering): Released all slaves
[  371.873391][T11718] ieee802154 phy1 wpan1: encryption failed: -22
[  371.948541][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'.
[  372.019428][T11719] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1427'.
[  372.139265][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'.
[  372.145248][T11731] netlink: 'syz.1.1430': attribute type 10 has an invalid length.
[  372.170187][T11731] dummy0: entered promiscuous mode
[  372.177038][T11731] team0: Port device dummy0 added
[  372.223369][T11731] netlink: 'syz.1.1430': attribute type 10 has an invalid length.
[  372.268200][T11731] dummy0: left promiscuous mode
[  372.304783][T11731] team0: Port device dummy0 removed
[  372.316753][T11731] dummy0: entered promiscuous mode
[  372.326085][T11731] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  372.351220][T11733] syzkaller1: entered promiscuous mode
[  372.359080][T11733] syzkaller1: entered allmulticast mode
[  372.375615][T11736] lo speed is unknown, defaulting to 1000
[  372.383906][T11736] lo speed is unknown, defaulting to 1000
[  372.575293][T11740] netlink: 'syz.1.1433': attribute type 2 has an invalid length.
[  372.786743][T11756] netlink: 'syz.2.1435': attribute type 1 has an invalid length.
[  372.794828][T11756] netlink: 'syz.2.1435': attribute type 1 has an invalid length.
[  372.817984][T11756] netlink: 'syz.2.1435': attribute type 8 has an invalid length.
[  372.944868][T11752] lo speed is unknown, defaulting to 1000
[  373.025458][T11749] lo speed is unknown, defaulting to 1000
[  373.051117][T11770] unsupported nlmsg_type 40
[  373.056139][T11752] lo speed is unknown, defaulting to 1000
[  373.521579][T11749] lo speed is unknown, defaulting to 1000
[  374.546848][T11820] netlink: 'syz.3.1454': attribute type 1 has an invalid length.
[  374.565351][T11804] lo speed is unknown, defaulting to 1000
[  374.593862][T11823] netlink: 'syz.3.1454': attribute type 1 has an invalid length.
[  374.603721][T11804] lo speed is unknown, defaulting to 1000
[  374.621685][T11819] bond0: Caught tx_queue_len zero misconfig
[  374.645763][T11809] openvswitch: netlink: Flow actions attr not present in new flow.
[  374.764975][T11826] netlink: 'syz.3.1455': attribute type 10 has an invalid length.
[  374.878027][T11829] netlink: 'syz.3.1457': attribute type 1 has an invalid length.
[  374.887268][T11829] netlink: 'syz.3.1457': attribute type 2 has an invalid length.
[  375.843811][T11869] __nla_validate_parse: 13 callbacks suppressed
[  375.843858][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'.
[  375.963588][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'.
[  376.196289][T11875] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  376.419504][T11885] netlink: 'syz.2.1474': attribute type 9 has an invalid length.
[  376.465545][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'.
[  376.555907][T11886] lo speed is unknown, defaulting to 1000
[  376.628692][T11885] bridge8: port 1(veth5) entered blocking state
[  376.645385][T11885] bridge8: port 1(veth5) entered disabled state
[  376.652863][T11885] veth5: entered allmulticast mode
[  376.660759][T11885] veth5: entered promiscuous mode
[  376.670648][T11886] lo speed is unknown, defaulting to 1000
[  376.679197][T11889] bridge8: port 2(veth0_to_bond) entered blocking state
[  376.688405][T11889] bridge8: port 2(veth0_to_bond) entered disabled state
[  376.752015][T11889] veth0_to_bond: entered allmulticast mode
[  376.781898][T11889] veth0_to_bond: entered promiscuous mode
[  376.846848][T11901] bridge8: port 3(veth7) entered blocking state
[  376.870430][T11901] bridge8: port 3(veth7) entered disabled state
[  376.887443][T11901] veth7: entered allmulticast mode
[  376.906878][T11901] veth7: entered promiscuous mode
[  377.377965][T11927] sock: sock_timestamping_bind_phc: sock not bind to device
[  378.103962][T11963] bridge0: entered allmulticast mode
[  378.202153][T11959] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1492'.
[  378.234274][T11969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1495'.
[  378.394152][T11972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1496'.
[  378.402712][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1497'.
[  378.503600][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1497'.
[  378.520585][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1497'.
[  378.764762][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  378.952528][T11999] lo speed is unknown, defaulting to 1000
[  378.981477][T11999] lo speed is unknown, defaulting to 1000
[  379.205845][T12011] bridge0: entered allmulticast mode
[  380.375057][T12054] pim6reg1: entered promiscuous mode
[  380.384049][T12054] pim6reg1: entered allmulticast mode
[  380.452033][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1517'.
[  380.572692][T12061] macsec1: entered allmulticast mode
[  380.581545][T12061] macsec0: entered allmulticast mode
[  380.642455][T12061] macsec0: left allmulticast mode
[  381.781036][T12118] tipc: Enabled bearer <ib:veth1_to_team>, priority 10
[  381.939561][T12125] bridge0: entered allmulticast mode
[  382.847298][T12173] bridge0: entered allmulticast mode
[  382.922025][T12171] lo speed is unknown, defaulting to 1000
[  382.944699][T12171] lo speed is unknown, defaulting to 1000
[  383.272862][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'.
[  383.354514][T12191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1554'.
[  383.654983][T12208] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1559'.
[  383.670142][T12205] bond8: entered promiscuous mode
[  383.675360][T12205] bond8: entered allmulticast mode
[  383.681626][T12205] 8021q: adding VLAN 0 to HW filter on device bond8
[  383.714618][T12208] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1559'.
[  383.724495][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1559'.
[  384.111431][T12224] lo speed is unknown, defaulting to 1000
[  384.118893][T12224] lo speed is unknown, defaulting to 1000
[  384.185043][T12229] netlink: 1760 bytes leftover after parsing attributes in process `syz.2.1564'.
[  384.729782][T12246] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  385.095700][T12267] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1574'.
[  385.165721][T12263] netlink: 'syz.0.1572': attribute type 1 has an invalid length.
[  385.174748][T12263] netlink: 'syz.0.1572': attribute type 7 has an invalid length.
[  385.184407][T12263] netlink: 'syz.0.1572': attribute type 8 has an invalid length.
[  385.193303][T12263] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1572'.
[  385.202599][T12263] NCSI netlink: No device for ifindex 1073545264
[  385.596565][T12280] netlink: 'syz.4.1578': attribute type 28 has an invalid length.
[  385.613821][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'.
[  385.641020][T12280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.889316][T12302] netlink: 1672 bytes leftover after parsing attributes in process `syz.0.1583'.
[  386.695254][T12342] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  386.952279][T12351] lo speed is unknown, defaulting to 1000
[  386.979665][T12351] lo speed is unknown, defaulting to 1000
[  387.296207][T12369] netlink: 'syz.0.1599': attribute type 1 has an invalid length.
[  387.445022][T12372] netlink: 'syz.2.1600': attribute type 2 has an invalid length.
[  387.583269][T12386] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  387.640209][T12376] netlink: 'syz.2.1600': attribute type 2 has an invalid length.
[  387.707649][T12358] xt_hashlimit: size too large, truncated to 1048576
[  387.975247][T12397] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  388.072849][T12399] sctp: [Deprecated]: syz.0.1607 (pid 12399) Use of struct sctp_assoc_value in delayed_ack socket option.
[  388.072849][T12399] Use struct sctp_sack_info instead
[  388.470410][T12414] netlink: 'syz.1.1611': attribute type 15 has an invalid length.
[  388.543198][T12417] __nla_validate_parse: 6 callbacks suppressed
[  388.543219][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'.
[  389.127750][T12457] syzkaller0: entered promiscuous mode
[  389.140085][T12457] syzkaller0: entered allmulticast mode
[  389.157220][T12457] tc action pedit offset must be on 32 bit boundaries
[  389.417883][T12483] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1627'.
[  389.747182][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'.
[  389.759087][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'.
[  389.777917][T12497] delete_channel: no stack
[  389.940503][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'.
[  390.229105][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'.
[  390.476189][T12543] netlink: 'syz.0.1646': attribute type 1 has an invalid length.
[  391.333711][T12543] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  391.678983][T12570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1650'.
[  391.719155][T12575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1651'.
[  391.763819][T12575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1651'.
[  391.805475][T12575] netlink: 'syz.0.1651': attribute type 4 has an invalid length.
[  392.404738][T12606] macsec2: entered promiscuous mode
[  392.415111][T12606] bridge0: entered promiscuous mode
[  392.571933][T12625] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1667'.
[  392.584767][T12624] openvswitch: netlink: IPv6 tunnel dst address is zero
[  392.778543][T12639] geneve3: entered promiscuous mode
[  392.785463][T12639] geneve3: entered allmulticast mode
[  392.806223][ T8001] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  392.815189][ T8001] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  392.833736][ T8001] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  392.847430][T12640] sock: sock_timestamping_bind_phc: sock not bind to device
[  392.855877][ T8001] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  393.034799][T12643] netlink: 'syz.3.1673': attribute type 72 has an invalid length.
[  393.436270][T12654] lo speed is unknown, defaulting to 1000
[  393.452654][T12654] lo speed is unknown, defaulting to 1000
[  393.472462][T12664] sit0: Caught tx_queue_len zero misconfig
[  393.616596][T12670] netlink: 'syz.4.1681': attribute type 9 has an invalid length.
[  393.634061][T12672] Cannot find set identified by id 0 to match
[  395.545621][T12730] __nla_validate_parse: 4 callbacks suppressed
[  395.545642][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'.
[  395.712279][T12737] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1697'.
[  396.080714][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1701'.
[  396.092970][T12752] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  396.247868][T12759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.278567][T12759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35641 - 0
[  396.338961][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1705'.
[  396.367253][T12766] netlink: 'syz.0.1705': attribute type 15 has an invalid length.
[  396.379069][T12759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.391170][T12759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35641 - 0
[  396.403712][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1705'.
[  396.632827][T12759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.660659][T12759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35641 - 0
[  396.761697][T12759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.783711][T12759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 35641 - 0
[  396.794930][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'.
[  396.944417][T12798] netlink: 'syz.2.1711': attribute type 10 has an invalid length.
[  397.024112][ T7984] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  397.033232][ T7984] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 35641 - 0
[  397.067029][ T7984] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  397.088380][ T7984] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 35641 - 0
[  397.100487][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'.
[  397.118983][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'.
[  397.148392][ T7997] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  397.164021][ T7997] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 35641 - 0
[  397.190706][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'.
[  397.209697][T12803] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  397.254822][ T8001] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  397.263378][ T8001] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 35641 - 0
[  397.299154][T12808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1717'.
[  397.528098][T12815] FAULT_INJECTION: forcing a failure.
[  397.528098][T12815] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  397.546896][T12812] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  397.547951][ T5900] IPVS: starting estimator thread 0...
[  397.593859][ T5900] IPVS: starting estimator thread 0...
[  397.690121][T12817] IPVS: using max 25 ests per chain, 60000 per kthread
[  397.697196][T12819] IPVS: using max 24 ests per chain, 57600 per kthread
[  397.719538][T12824] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  397.732694][T12815] CPU: 0 UID: 0 PID: 12815 Comm: syz.2.1720 Not tainted syzkaller #0 PREEMPT(full) 
[  397.732723][T12815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  397.732736][T12815] Call Trace:
[  397.732746][T12815]  <TASK>
[  397.732755][T12815]  dump_stack_lvl+0xe8/0x150
[  397.732790][T12815]  should_fail_ex+0x412/0x560
[  397.732824][T12815]  _copy_from_user+0x2d/0xb0
[  397.732859][T12815]  do_ipt_set_ctl+0x6a5/0xe00
[  397.732887][T12815]  ? rcu_is_watching+0x15/0xb0
[  397.732918][T12815]  ? trace_contention_end+0x3d/0x150
[  397.732953][T12815]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  397.732997][T12815]  ? __pfx___mutex_lock+0x10/0x10
[  397.733030][T12815]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  397.733071][T12815]  ? __pfx_aa_sk_perm+0x10/0x10
[  397.733105][T12815]  nf_setsockopt+0x26f/0x290
[  397.733131][T12815]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  397.733162][T12815]  do_sock_setsockopt+0x17c/0x1b0
[  397.733202][T12815]  __x64_sys_setsockopt+0x13d/0x1b0
[  397.733241][T12815]  do_syscall_64+0x14d/0xf80
[  397.733272][T12815]  ? trace_irq_disable+0x3b/0x150
[  397.733302][T12815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.733324][T12815]  ? clear_bhb_loop+0x40/0x90
[  397.733351][T12815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.733382][T12815] RIP: 0033:0x7f2e0e59c799
[  397.733403][T12815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.733422][T12815] RSP: 002b:00007f2e0f49a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  397.733445][T12815] RAX: ffffffffffffffda RBX: 00007f2e0e815fa0 RCX: 00007f2e0e59c799
[  397.733461][T12815] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004
[  397.733475][T12815] RBP: 00007f2e0f49a090 R08: 0000000000000528 R09: 0000000000000000
[  397.733489][T12815] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  397.733503][T12815] R13: 00007f2e0e816038 R14: 00007f2e0e815fa0 R15: 00007ffdd4165658
[  397.733538][T12815]  </TASK>
[  397.989063][T12826] veth5: entered promiscuous mode
[  398.354714][T12857] openvswitch: netlink: Message has 2 unknown bytes.
[  398.443914][T12860] syzkaller0: entered promiscuous mode
[  398.459755][T12860] syzkaller0: entered allmulticast mode
[  398.471572][T12857] syzkaller1: tun_chr_ioctl cmd 35111
[  398.478418][T12857] syzkaller1: tun_chr_ioctl cmd 2148554867
[  398.586343][T12860] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.597415][T12859] tipc: Resetting bearer <eth:syzkaller0>
[  398.689546][T12859] tipc: Disabling bearer <eth:syzkaller0>
[  398.747188][T12885] FAULT_INJECTION: forcing a failure.
[  398.747188][T12885] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  398.825280][T12885] CPU: 1 UID: 0 PID: 12885 Comm: syz.4.1739 Not tainted syzkaller #0 PREEMPT(full) 
[  398.825310][T12885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  398.825324][T12885] Call Trace:
[  398.825333][T12885]  <TASK>
[  398.825341][T12885]  dump_stack_lvl+0xe8/0x150
[  398.825375][T12885]  should_fail_ex+0x412/0x560
[  398.825407][T12885]  _copy_to_user+0x31/0xb0
[  398.825441][T12885]  simple_read_from_buffer+0xe1/0x170
[  398.825477][T12885]  proc_fail_nth_read+0x1bb/0x230
[  398.825511][T12885]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  398.825546][T12885]  ? rw_verify_area+0x2a6/0x4d0
[  398.825568][T12885]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  398.825601][T12885]  vfs_read+0x20c/0xa70
[  398.825630][T12885]  ? __pfx_vfs_read+0x10/0x10
[  398.825652][T12885]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  398.825693][T12885]  ? __pfx_aa_sk_perm+0x10/0x10
[  398.825729][T12885]  ksys_read+0x150/0x270
[  398.825754][T12885]  ? __pfx_ksys_read+0x10/0x10
[  398.825787][T12885]  do_syscall_64+0x14d/0xf80
[  398.825817][T12885]  ? trace_irq_disable+0x3b/0x150
[  398.825847][T12885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.825868][T12885]  ? clear_bhb_loop+0x40/0x90
[  398.825895][T12885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.825916][T12885] RIP: 0033:0x7faea815cfce
[  398.825936][T12885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  398.825955][T12885] RSP: 002b:00007faea63f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  398.825978][T12885] RAX: ffffffffffffffda RBX: 00007faea63f66c0 RCX: 00007faea815cfce
[  398.825994][T12885] RDX: 000000000000000f RSI: 00007faea63f60a0 RDI: 0000000000000005
[  398.826007][T12885] RBP: 00007faea63f6090 R08: 0000000000000000 R09: 0000000000000000
[  398.826020][T12885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  398.826032][T12885] R13: 00007faea8416038 R14: 00007faea8415fa0 R15: 00007fffdae24358
[  398.826067][T12885]  </TASK>
[  399.246449][T12897] netlink: 'syz.0.1742': attribute type 4 has an invalid length.
[  399.255653][T12895] netlink: 'syz.4.1743': attribute type 2 has an invalid length.
[  399.262543][T12897] netlink: 'syz.0.1742': attribute type 4 has an invalid length.
[  399.845841][T12923] netlink: 'syz.1.1749': attribute type 1 has an invalid length.
[  399.962986][T12933] netlink: 'syz.1.1751': attribute type 1 has an invalid length.
[  400.020919][T12933] 8021q: adding VLAN 0 to HW filter on device bond4
[  400.031793][T12929] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  400.454847][T12950] netlink: 'syz.3.1754': attribute type 27 has an invalid length.
[  400.509005][T12950] hsr1: left allmulticast mode
[  400.536621][T12950] batadv0: left allmulticast mode
[  400.546788][T12950] bond0: left allmulticast mode
[  400.557811][T12952] netlink: 'syz.1.1755': attribute type 1 has an invalid length.
[  400.566161][T12950] bond_slave_0: left allmulticast mode
[  400.566187][T12950] bond_slave_1: left allmulticast mode
[  400.567991][T12950] bond2: left allmulticast mode
[  400.652626][ T7994] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.661200][ T7994] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.706673][T12953] bond5: (slave bridge4): Enslaving as a backup interface with an up link
[  400.715690][ T7994] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.724779][ T7994] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.858231][T12965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.868380][T12968] __nla_validate_parse: 12 callbacks suppressed
[  400.868400][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'.
[  400.886498][T12965] syzkaller0: entered promiscuous mode
[  400.895853][T12965] syzkaller0: entered allmulticast mode
[  400.913021][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1760'.
[  400.950655][T12965] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1758'.
[  400.989538][T12965] tipc: Resetting bearer <eth:syzkaller0>
[  401.033441][T12972] lo speed is unknown, defaulting to 1000
[  401.039887][T12964] tipc: Resetting bearer <eth:syzkaller0>
[  401.086062][T12964] tipc: Disabling bearer <eth:syzkaller0>
[  401.099152][T12972] lo speed is unknown, defaulting to 1000
[  402.017519][T13006] netlink: 'syz.2.1770': attribute type 13 has an invalid length.
[  402.089446][T13014] netlink: 'syz.0.1771': attribute type 1 has an invalid length.
[  402.126962][T13006] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  402.175888][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'.
[  402.186879][T13020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'.
[  402.213094][T13014] bond9: entered promiscuous mode
[  402.218599][T13014] 8021q: adding VLAN 0 to HW filter on device bond9
[  402.535506][T13029] lo speed is unknown, defaulting to 1000
[  402.773300][T13043] netlink: 'syz.1.1777': attribute type 1 has an invalid length.
[  402.883575][T13043] bond6: entered promiscuous mode
[  402.889003][T13043] 8021q: adding VLAN 0 to HW filter on device bond6
[  402.930854][T13029] lo speed is unknown, defaulting to 1000
[  403.025032][T13042] bond6: (slave bridge5): making interface the new active one
[  403.050008][T13042] bridge5: entered promiscuous mode
[  403.063620][T13042] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  403.442264][T13067] wg1: Master is either lo or non-ether device
[  403.449158][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'.
[  403.460682][ T7997] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  403.469075][ T7997] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  403.487514][T13063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1784'.
[  403.510048][ T7997] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  403.538890][ T7997] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  403.585826][T13074] netlink: 'syz.4.1788': attribute type 2 has an invalid length.
[  403.602636][T13075] netlink: 'syz.4.1788': attribute type 2 has an invalid length.
[  403.611751][T13074] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1788'.
[  403.640783][T13075] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1788'.
[  403.712326][T13079] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  403.721599][T13079] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  403.916957][T13091] x_tables: duplicate underflow at hook 2
[  403.991162][ T7997] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  403.999597][ T7997] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 35641 - 0
[  404.069020][ T7997] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.086996][ T7997] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 35641 - 0
[  404.098477][ T7997] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.120249][ T7997] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 35641 - 0
[  404.133608][ T7997] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.170352][ T7997] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 35641 - 0
[  404.381611][T13103] syzkaller0: entered promiscuous mode
[  404.387521][T13103] syzkaller0: entered allmulticast mode
[  404.655863][T13116] netlink: 'syz.3.1805': attribute type 4 has an invalid length.
[  405.021823][T13139] tipc: Disabling bearer <eth:vlan0>
[  405.227776][T13145] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1812'.
[  405.303652][T13148] netlink: 'syz.1.1813': attribute type 9 has an invalid length.
[  405.556137][T13159] lo speed is unknown, defaulting to 1000
[  405.573518][T13159] lo speed is unknown, defaulting to 1000
[  405.734705][T13165] geneve3: entered promiscuous mode
[  405.784392][ T7994] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.814904][T13165] netlink: 'syz.4.1819': attribute type 13 has an invalid length.
[  405.829466][ T7994] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.851645][T13165] netlink: 'syz.4.1819': attribute type 17 has an invalid length.
[  405.910029][ T7994] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.002014][ T7994] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.174751][T13184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  406.225175][T13184] syzkaller0: entered promiscuous mode
[  406.253059][T13184] syzkaller0: entered allmulticast mode
[  406.271534][T13190] ipt_REJECT: TCP_RESET invalid for non-tcp
[  406.320589][T13184] tipc: Resetting bearer <eth:syzkaller0>
[  406.329090][T13195] __nla_validate_parse: 5 callbacks suppressed
[  406.329110][T13195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1827'.
[  406.456322][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'.
[  406.509748][T13200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1828'.
[  406.539810][T13182] tipc: Resetting bearer <eth:syzkaller0>
[  406.619801][T13182] tipc: Disabling bearer <eth:syzkaller0>
[  406.749647][T13213] netlink: 'syz.1.1830': attribute type 21 has an invalid length.
[  406.792678][T13213] IPv6: NLM_F_CREATE should be specified when creating new route
[  406.809233][T13213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  406.816577][T13213] IPv6: NLM_F_CREATE should be set when creating new route
[  406.823884][T13213] IPv6: NLM_F_CREATE should be set when creating new route
[  406.831277][T13213] IPv6: NLM_F_CREATE should be set when creating new route
[  406.846558][T13215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1831'.
[  407.123916][T13215] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  407.173923][T13227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.203772][T13215] bond4 (unregistering): Released all slaves
[  407.288905][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1836'.
[  407.306638][T13232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.314517][T13232] syzkaller0: entered allmulticast mode
[  407.338817][T13232] macsec1: entered promiscuous mode
[  407.344321][T13232] syzkaller0: entered promiscuous mode
[  407.358492][T13232] syzkaller0: left promiscuous mode
[  407.409678][T13234] syzkaller1: entered promiscuous mode
[  407.415812][T13234] syzkaller1: entered allmulticast mode
[  407.436890][T13231] tipc: Disabling bearer <eth:syzkaller0>
[  407.458141][T13239] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1838'.
[  407.474661][   T30] audit: type=1804 audit(1773859755.273:5): pid=13239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1838" name="/newroot/370/cgroup.controllers" dev="tmpfs" ino=1907 res=1 errno=0
[  407.499882][   T30] audit: type=1800 audit(1773859755.273:6): pid=13239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1838" name="cgroup.controllers" dev="tmpfs" ino=1907 res=0 errno=0
[  407.595740][T13243] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1839'.
[  407.967188][T13257] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.001941][T13257] 8021q: adding VLAN 0 to HW filter on device team0
[  408.024678][T13257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  408.464402][T13279] netlink: 'syz.2.1849': attribute type 2 has an invalid length.
[  408.633382][T13283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1851'.
[  408.863782][T13293] netlink: 'syz.0.1854': attribute type 1 has an invalid length.
[  408.885313][T13293] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1854'.
[  408.946068][T13296] netlink: 'syz.2.1855': attribute type 153 has an invalid length.
[  408.965744][T13293] netlink: 'syz.0.1854': attribute type 5 has an invalid length.
[  408.983741][T13293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1854'.
[  408.994820][T13293] xt_hashlimit: size too large, truncated to 1048576
[  409.002485][T13293] xt_hashlimit: overflow, try lower: 0/0
[  409.184948][T13314] netlink: 'syz.0.1862': attribute type 10 has an invalid length.
[  409.193606][T13314] bond0: entered promiscuous mode
[  409.198889][T13314] bond_slave_0: entered promiscuous mode
[  409.211093][T13314] bond_slave_1: entered promiscuous mode
[  409.219752][T13314] bridge0: port 3(bond0) entered blocking state
[  409.226775][T13314] bridge0: port 3(bond0) entered disabled state
[  409.234230][T13314] bond0: entered allmulticast mode
[  409.239606][T13314] bond_slave_0: entered allmulticast mode
[  409.246994][T13314] bond_slave_1: entered allmulticast mode
[  409.257076][T13314] bond0: left allmulticast mode
[  409.273593][T13314] bond_slave_0: left allmulticast mode
[  409.284462][T13314] bond_slave_1: left allmulticast mode
[  409.524807][T13334] team0: entered promiscuous mode
[  409.536995][T13334] team_slave_0: entered promiscuous mode
[  409.555478][T13334] team_slave_1: entered promiscuous mode
[  409.588966][T13334] 8021q: adding VLAN 0 to HW filter on device team0
[  409.794718][T13348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.822125][T13348] syzkaller0: entered promiscuous mode
[  409.836038][T13348] syzkaller0: entered allmulticast mode
[  409.876547][T13348] xt_hashlimit: size too large, truncated to 1048576
[  409.970899][T13350] netlink: 'syz.2.1874': attribute type 10 has an invalid length.
[  410.012513][T13350] 8021q: adding VLAN 0 to HW filter on device team0
[  410.033525][T13350] bond0: (slave team0): Enslaving as an active interface with an up link
[  410.347876][T13347] tipc: Resetting bearer <eth:syzkaller0>
[  410.394251][T13347] tipc: Disabling bearer <eth:syzkaller0>
[  410.675820][T13385] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.749499][T13391] dvmrp0: entered allmulticast mode
[  410.911849][T13379] tipc: Disabling bearer <eth:syzkaller0>
[  411.243667][T13410] lo speed is unknown, defaulting to 1000
[  411.258301][T13410] lo speed is unknown, defaulting to 1000
[  412.088851][T13444] pimreg3: entered allmulticast mode
[  412.234853][T13446] netlink: 'syz.0.1903': attribute type 10 has an invalid length.
[  412.243193][T13446] syz_tun: entered promiscuous mode
[  412.273840][T13446] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  412.325257][T13446] syzkaller1: entered promiscuous mode
[  412.333674][T13446] syzkaller1: entered allmulticast mode
[  412.375314][T13448] bond4: invalid ARP target 0.0.0.0 specified for addition
[  412.383288][T13448] bond4: option arp_ip_target: invalid value (0)
[  412.432617][T13448] bond4 (unregistering): Released all slaves
[  413.207073][T13487] xt_connbytes: Forcing CT accounting to be enabled
[  413.240501][T13487] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  413.458294][T13504] __nla_validate_parse: 14 callbacks suppressed
[  413.458319][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1919'.
[  413.785388][T13526] netlink: 'syz.0.1924': attribute type 11 has an invalid length.
[  413.968484][T13537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1928'.
[  414.035560][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1928'.
[  414.092781][T13538] openvswitch: netlink: Message has 2 unknown bytes.
[  414.229363][T13558] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1932'.
[  414.348664][T13562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1934'.
[  414.368821][T13562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1934'.
[  414.383285][T13564] IPVS: set_ctl: invalid protocol: 58 172.30.1.4:20001
[  414.400773][T13559] lo speed is unknown, defaulting to 1000
[  414.419388][T13559] lo speed is unknown, defaulting to 1000
[  414.540886][T13574] netlink: 'syz.0.1938': attribute type 9 has an invalid length.
[  414.559145][T13574] netlink: 'syz.0.1938': attribute type 11 has an invalid length.
[  414.580759][T13574] netlink: 'syz.0.1938': attribute type 12 has an invalid length.
[  414.601843][T13574] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1938'.
[  414.637769][T13580] xt_l2tp: missing protocol rule (udp|l2tpip)
[  414.645125][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'.
[  414.683585][T13581] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1939'.
[  414.854902][T13587] netlink: 'syz.2.1943': attribute type 1 has an invalid length.
[  414.887450][T13587] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1943'.
[  414.923354][T13588] batman_adv: batadv0: Removing interface: batadv_slave_0
[  415.589866][T13621] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  415.627901][T13623] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  415.661049][T13611] lo speed is unknown, defaulting to 1000
[  415.668868][T13611] lo speed is unknown, defaulting to 1000
[  415.879810][T13629] netlink: 'syz.3.1952': attribute type 2 has an invalid length.
[  417.011292][T13685] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  417.374218][T13703] SET target dimension over the limit!
[  417.511912][T13709] netlink: 'syz.4.1971': attribute type 6 has an invalid length.
[  417.520493][T13709] netlink: 'syz.4.1971': attribute type 5 has an invalid length.
[  417.529716][T13709] netlink: 'syz.4.1971': attribute type 6 has an invalid length.
[  417.538486][T13709] netlink: 'syz.4.1971': attribute type 5 has an invalid length.
[  417.697083][T13720] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.762860][T13720] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.853028][T13720] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.900810][T13720] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  418.006009][ T7997] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  418.032717][ T7997] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  418.161482][T13743] bond7: entered promiscuous mode
[  418.166962][T13743] 8021q: adding VLAN 0 to HW filter on device bond7
[  418.176532][ T7997] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  418.198576][ T8001] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  418.285380][T13742] 8021q: adding VLAN 0 to HW filter on device bond7
[  418.296126][T13742] bond7: (slave sit1): The slave device specified does not support setting the MAC address
[  418.307894][T13742] bond7: (slave sit1): Error -95 calling set_mac_address
[  418.496066][T13765] __nla_validate_parse: 22 callbacks suppressed
[  418.496089][T13765] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1986'.
[  418.734327][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'.
[  418.852424][T13789] netlink: 'syz.1.1992': attribute type 10 has an invalid length.
[  418.873149][T13789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1992'.
[  418.895039][T13789] geneve0: entered promiscuous mode
[  418.903074][T13789] team0: Port device geneve0 added
[  418.908617][   T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  418.930082][   T36] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  418.953482][T13792] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1994'.
[  418.962860][   T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  418.965489][T13794] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1995'.
[  418.975420][   T36] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  418.991760][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'.
[  419.078736][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1998'.
[  419.089209][T13796] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  419.396129][T13811] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  419.422849][T13811] bond8 (unregistering): Released all slaves
[  419.507159][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1997'.
[  419.689544][T13823] syzkaller0: entered promiscuous mode
[  419.695212][T13823] syzkaller0: entered allmulticast mode
[  419.773599][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2005'.
[  419.785117][T13825] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  419.795216][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'.
[  419.850377][ T5840] block nbd0: Receive control failed (result -32)
[  419.866656][T13827] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  421.688355][T13923] gre0: entered promiscuous mode
[  421.712804][T13923] gre0: entered allmulticast mode
[  422.362199][T13952] Set syz1 is full, maxelem 0 reached
[  422.851904][T13976] validate_nla: 1 callbacks suppressed
[  422.851928][T13976] netlink: 'syz.2.2031': attribute type 2 has an invalid length.
[  422.886805][T13976] netlink: 'syz.2.2031': attribute type 1 has an invalid length.
[  423.053226][T13985] netlink: 'syz.2.2036': attribute type 3 has an invalid length.
[  423.363646][   T30] audit: type=1800 audit(1773859771.163:7): pid=14001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2040" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2102 res=0 errno=0
[  423.425200][   T30] audit: type=1800 audit(1773859771.193:8): pid=14002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2040" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2102 res=0 errno=0
[  423.678563][T14016] netlink: 'syz.1.2044': attribute type 7 has an invalid length.
[  423.790398][T14016] netlink: 'syz.1.2044': attribute type 5 has an invalid length.
[  423.798195][T14016] __nla_validate_parse: 3 callbacks suppressed
[  423.798214][T14016] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2044'.
[  423.907570][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'.
[  423.933416][T14016] netlink: 'syz.1.2044': attribute type 7 has an invalid length.
[  423.960127][T14016] netlink: 'syz.1.2044': attribute type 5 has an invalid length.
[  423.969316][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2046'.
[  423.980800][T14016] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2044'.
[  423.989195][T14024] netlink: 'syz.4.2046': attribute type 7 has an invalid length.
[  424.000883][T14016] netlink: 'syz.1.2044': attribute type 7 has an invalid length.
[  424.008684][T14016] netlink: 'syz.1.2044': attribute type 5 has an invalid length.
[  424.017904][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'.
[  424.035806][T14016] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2044'.
[  424.048720][T14016] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2044'.
[  424.053721][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2046'.
[  424.064667][T14016] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2044'.
[  424.127680][T14016] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2044'.
[  424.650920][T14051] SET target dimension over the limit!
[  424.907925][T14058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  425.321878][T14084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.437447][T14094] macsec1: entered promiscuous mode
[  425.446062][   T30] audit: type=1800 audit(1773859773.243:9): pid=14092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2065" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2100 res=0 errno=0
[  426.472341][T14117] syz_tun: entered allmulticast mode
[  426.494212][T14115] syz_tun: left allmulticast mode
[  426.571578][T14126] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.913895][T14143] pim6reg: entered allmulticast mode
[  426.930628][T14143] pim6reg: left allmulticast mode
[  427.082960][T14158] openvswitch: netlink: Flow key attr not present in new flow.
[  427.817912][T14195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  428.298748][T14221] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  428.349486][T14222] lo speed is unknown, defaulting to 1000
[  428.359019][T14222] lo speed is unknown, defaulting to 1000
[  428.597049][T14233] syzkaller0: entered promiscuous mode
[  428.608533][T14233] syzkaller0: entered allmulticast mode
[  428.811538][T14239] validate_nla: 61 callbacks suppressed
[  428.811554][T14239] netlink: 'syz.1.2102': attribute type 3 has an invalid length.
[  429.243529][T14261] netlink: 'syz.4.2107': attribute type 1 has an invalid length.
[  429.390152][T14261] __nla_validate_parse: 41 callbacks suppressed
[  429.390175][T14261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2107'.
[  429.468041][T14273] netlink: 'syz.0.2111': attribute type 15 has an invalid length.
[  429.490871][T14274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2107'.
[  429.501906][T14273] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2111'.
[  429.517950][T14277] netlink: 'syz.0.2111': attribute type 15 has an invalid length.
[  429.531091][T14277] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2111'.
[  429.552204][T14261] bond4: (slave bridge7): making interface the new active one
[  429.561678][T14261] bond4: (slave bridge7): Enslaving as an active interface with an up link
[  429.567373][T14278] netlink: 'syz.2.2113': attribute type 1 has an invalid length.
[  429.598721][T14278] netlink: 760 bytes leftover after parsing attributes in process `syz.2.2113'.
[  429.634487][T14278] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2113'.
[  429.654303][T14272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2113'.
[  429.785972][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2114'.
[  429.821439][T14274] 8021q: adding VLAN 0 to HW filter on device bond4
[  429.879203][T14284] lo speed is unknown, defaulting to 1000
[  429.887370][T14284] lo speed is unknown, defaulting to 1000
[  429.915936][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2114'.
[  430.072483][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2114'.
[  430.229764][T14302] IPVS: Unknown mcast interface: vcan0
[  430.755742][T14326] Bluetooth: hci1: Opcode 0x0401 failed: -22
[  430.887131][T14328] netlink: 'syz.2.2125': attribute type 1 has an invalid length.
[  431.392753][T14355] netlink: 'syz.0.2134': attribute type 1 has an invalid length.
[  431.461484][T14355] bond10: entered promiscuous mode
[  431.467500][T14355] 8021q: adding VLAN 0 to HW filter on device bond10
[  431.498559][T14361] netem: incorrect gi model size
[  431.511415][T14361] netem: change failed
[  431.517395][T14363] tipc: New replicast peer: 255.255.255.255
[  431.532964][T14363] tipc: Enabled bearer <udp:syz2>, priority 10
[  431.801165][T14373] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  431.885653][T14378] macsec0: entered promiscuous mode
[  431.912561][T14378] macsec0: left promiscuous mode
[  431.933890][T14378] sctp: [Deprecated]: syz.1.2141 (pid 14378) Use of struct sctp_assoc_value in delayed_ack socket option.
[  431.933890][T14378] Use struct sctp_sack_info instead
[  432.043336][T14384] bridge0: Caught tx_queue_len zero misconfig
[  432.226215][T14395] syzkaller1: entered promiscuous mode
[  432.258932][T14395] syzkaller1: entered allmulticast mode
[  432.707541][T14426] syzkaller0: entered promiscuous mode
[  432.714554][T14426] syzkaller0: entered allmulticast mode
[  433.349074][T14456] netlink: 'syz.4.2163': attribute type 1 has an invalid length.
[  433.419606][T14456] 8021q: adding VLAN 0 to HW filter on device bond5
[  433.768191][T14475] syzkaller1: entered promiscuous mode
[  433.778075][T14475] syzkaller1: entered allmulticast mode
[  434.447012][T14519] netlink: 'syz.2.2179': attribute type 1 has an invalid length.
[  434.455640][T14519] __nla_validate_parse: 50 callbacks suppressed
[  434.455660][T14519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'.
[  434.524050][T14521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  434.880922][T14551] netlink: 'syz.2.2185': attribute type 21 has an invalid length.
[  434.894053][T14551] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2185'.
[  434.914412][T14554] netlink: 'syz.0.2187': attribute type 10 has an invalid length.
[  434.929254][T14551] netlink: 'syz.2.2185': attribute type 4 has an invalid length.
[  434.933715][T14554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2187'.
[  434.971969][T14551] netlink: 'syz.2.2185': attribute type 5 has an invalid length.
[  434.987900][T14551] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2185'.
[  435.003560][T14554] dummy0: entered promiscuous mode
[  435.009666][T14554] bridge0: port 3(dummy0) entered blocking state
[  435.017400][T14554] bridge0: port 3(dummy0) entered disabled state
[  435.026174][T14554] dummy0: entered allmulticast mode
[  435.045647][T14554] bridge0: port 3(dummy0) entered blocking state
[  435.052257][T14554] bridge0: port 3(dummy0) entered forwarding state
[  435.203404][T14568] syzkaller1: entered promiscuous mode
[  435.214298][T14568] syzkaller1: entered allmulticast mode
[  435.262465][T14570] lo speed is unknown, defaulting to 1000
[  435.283346][T14570] lo speed is unknown, defaulting to 1000
[  435.604558][T14587] netlink: 'syz.3.2196': attribute type 1 has an invalid length.
[  435.699291][T14591] netlink: 'syz.4.2197': attribute type 21 has an invalid length.
[  435.709310][T14593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2196'.
[  435.808186][T14599] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2198'.
[  435.921894][T14605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2196'.
[  436.066925][T14593] bond9: (slave bridge0): making interface the new active one
[  436.076526][T14593] bond9: (slave bridge0): Enslaving as an active interface with an up link
[  436.152597][T14598] bond9: (slave bridge2): Enslaving as an active interface with a down link
[  436.191845][T14616] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2200'.
[  436.625918][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'.
[  436.636629][T14635] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2206'.
[  436.710674][T14621] nbd1: detected capacity change from 0 to 63
[  436.722536][   T51] block nbd1: Receive control failed (result -32)
[  436.729458][ T5145] block nbd1: Receive control failed (result -32)
[  436.737685][ T7862] block nbd1: Send control failed (result -32)
[  436.745768][ T5840] block nbd1: Receive control failed (result -32)
[  436.752759][ T5839] block nbd1: Receive control failed (result -32)
[  436.773498][ T7862] block nbd1: Request send failed, requeueing
[  436.796590][ T1766] block nbd1: Dead connection, failed to find a fallback
[  436.809091][ T1766] block nbd1: shutting down sockets
[  436.815880][ T1766] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.827807][ T1766] Buffer I/O error on dev nbd1, logical block 0, async page read
[  436.846832][ T7862] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.858664][ T7862] Buffer I/O error on dev nbd1, logical block 1, async page read
[  436.867616][ T7862] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.879082][ T7862] Buffer I/O error on dev nbd1, logical block 2, async page read
[  436.883036][T14639] vlan2: entered promiscuous mode
[  436.889308][ T7862] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.903824][ T7862] Buffer I/O error on dev nbd1, logical block 3, async page read
[  436.913440][ T7862] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.923997][ T7862] Buffer I/O error on dev nbd1, logical block 0, async page read
[  436.932044][ T7862] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.941740][ T7862] Buffer I/O error on dev nbd1, logical block 1, async page read
[  436.949700][ T7862] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.959429][ T7862] Buffer I/O error on dev nbd1, logical block 2, async page read
[  436.967989][ T7862] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.978761][ T7862] Buffer I/O error on dev nbd1, logical block 3, async page read
[  436.987454][ T7862] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.997877][ T7862] Buffer I/O error on dev nbd1, logical block 0, async page read
[  437.006895][ T7862] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  437.046323][ T7862] Buffer I/O error on dev nbd1, logical block 1, async page read
[  437.061984][ T7862] ldm_validate_partition_table(): Disk read failed.
[  437.101183][ T7862] Dev nbd1: unable to read RDB block 0
[  437.140090][ T7862]  nbd1: unable to read partition table
[  437.203999][T14640] batadv_slave_0: entered promiscuous mode
[  437.212847][ T7862] ldm_validate_partition_table(): Disk read failed.
[  437.239714][ T7862] Dev nbd1: unable to read RDB block 0
[  437.246740][ T7862]  nbd1: unable to read partition table
[  437.268070][T14644] 
[  437.270463][T14644] ======================================================
[  437.277543][T14644] WARNING: possible circular locking dependency detected
[  437.284595][T14644] syzkaller #0 Not tainted
[  437.289029][T14644] ------------------------------------------------------
[  437.296060][T14644] syz.3.2210/14644 is trying to acquire lock:
[  437.302136][T14644] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x46c/0x540
[  437.312614][T14644] 
[  437.312614][T14644] but task is already holding lock:
[  437.319994][T14644] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  437.329438][T14644] 
[  437.329438][T14644] which lock already depends on the new lock.
[  437.329438][T14644] 
[  437.339859][T14644] 
[  437.339859][T14644] the existing dependency chain (in reverse order) is:
[  437.348885][T14644] 
[  437.348885][T14644] -> #10 (&root->kernfs_rwsem){++++}-{4:4}:
[  437.356988][T14644]        down_write+0x96/0x200
[  437.361776][T14644]        kernfs_add_one+0x41/0x5c0
[  437.366921][T14644]        kernfs_create_dir_ns+0xde/0x130
[  437.372568][T14644]        internal_create_group+0x425/0x1180
[  437.378484][T14644]        cpuhp_invoke_callback+0x445/0x860
[  437.384412][T14644]        cpuhp_issue_call+0x430/0x7a0
[  437.389810][T14644]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  437.396443][T14644]        __cpuhp_setup_state+0x3f/0x60
[  437.401943][T14644]        do_one_initcall+0x250/0x8d0
[  437.407265][T14644]        do_initcall_level+0x104/0x190
[  437.412752][T14644]        do_initcalls+0x59/0xa0
[  437.417644][T14644]        kernel_init_freeable+0x2a6/0x3e0
[  437.423388][T14644]        kernel_init+0x1d/0x1d0
[  437.428344][T14644]        ret_from_fork+0x51e/0xb90
[  437.433499][T14644]        ret_from_fork_asm+0x1a/0x30
[  437.438814][T14644] 
[  437.438814][T14644] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}:
[  437.446671][T14644] 
[  437.446671][T14644] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  437.454425][T14644]        cpus_read_lock+0x42/0x160
[  437.459562][T14644]        static_key_slow_inc+0x12/0x30
[  437.465048][T14644]        setup_udp_tunnel_sock+0x343/0x550
[  437.470882][T14644]        l2tp_tunnel_register+0xda0/0x1460
[  437.476713][T14644]        pppol2tp_connect+0x8b7/0x17c0
[  437.482200][T14644]        __sys_connect+0x312/0x450
[  437.487350][T14644]        __x64_sys_connect+0x7a/0x90
[  437.492666][T14644]        do_syscall_64+0x14d/0xf80
[  437.497888][T14644]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.504321][T14644] 
[  437.504321][T14644] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  437.512078][T14644]        lock_sock_nested+0x41/0x100
[  437.517407][T14644]        inet_shutdown+0x6a/0x390
[  437.522462][T14644]        nbd_mark_nsock_dead+0x2e9/0x560
[  437.528127][T14644]        sock_shutdown+0x15e/0x260
[  437.533277][T14644]        nbd_clear_sock+0x24/0x170
[  437.538406][T14644]        nbd_config_put+0x2dd/0x580
[  437.543628][T14644]        nbd_genl_connect+0x19d5/0x1cf0
[  437.549201][T14644]        genl_family_rcv_msg_doit+0x22a/0x330
[  437.555342][T14644]        genl_rcv_msg+0x61c/0x7a0
[  437.560391][T14644]        netlink_rcv_skb+0x232/0x4b0
[  437.565758][T14644]        genl_rcv+0x28/0x40
[  437.570289][T14644]        netlink_unicast+0x80f/0x9b0
[  437.575609][T14644]        netlink_sendmsg+0x813/0xb40
[  437.580924][T14644]        ____sys_sendmsg+0x972/0x9f0
[  437.586229][T14644]        ___sys_sendmsg+0x2a5/0x360
[  437.591445][T14644]        __x64_sys_sendmsg+0x1bd/0x2a0
[  437.596926][T14644]        do_syscall_64+0x14d/0xf80
[  437.602063][T14644]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.608507][T14644] 
[  437.608507][T14644] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  437.616527][T14644]        __mutex_lock+0x19f/0x1300
[  437.621669][T14644]        nbd_queue_rq+0x37b/0x1100
[  437.626818][T14644]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  437.632900][T14644]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  437.639768][T14644]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  437.646290][T14644]        blk_mq_run_hw_queue+0x348/0x4f0
[  437.651949][T14644]        blk_mq_dispatch_list+0xd16/0xe10
[  437.657718][T14644]        blk_mq_flush_plug_list+0x48d/0x570
[  437.663635][T14644]        __blk_flush_plug+0x3ed/0x4d0
[  437.669026][T14644]        __submit_bio+0x28d/0x580
[  437.674065][T14644]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  437.680266][T14644]        block_read_full_folio+0x599/0x830
[  437.686105][T14644]        filemap_read_folio+0x137/0x3b0
[  437.691667][T14644]        do_read_cache_folio+0x358/0x590
[  437.697317][T14644]        read_part_sector+0xb6/0x2b0
[  437.702625][T14644]        adfspart_check_ICS+0xa5/0xa40
[  437.708105][T14644]        bdev_disk_changed+0x7ba/0x1550
[  437.713668][T14644]        blkdev_get_whole+0x380/0x510
[  437.719055][T14644]        bdev_open+0x31e/0xd30
[  437.723836][T14644]        blkdev_open+0x470/0x610
[  437.728824][T14644]        do_dentry_open+0x785/0x14e0
[  437.734138][T14644]        vfs_open+0x3b/0x340
[  437.738748][T14644]        path_openat+0x2e08/0x3860
[  437.743873][T14644]        do_file_open+0x23e/0x4a0
[  437.748916][T14644]        do_sys_openat2+0x113/0x200
[  437.754149][T14644]        __x64_sys_openat+0x138/0x170
[  437.759557][T14644]        do_syscall_64+0x14d/0xf80
[  437.764700][T14644]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.771132][T14644] 
[  437.771132][T14644] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  437.778457][T14644]        __mutex_lock+0x19f/0x1300
[  437.783628][T14644]        nbd_queue_rq+0xc6/0x1100
[  437.788683][T14644]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  437.794768][T14644]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  437.801727][T14644]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  437.808262][T14644]        blk_mq_run_hw_queue+0x348/0x4f0
[  437.813921][T14644]        blk_mq_dispatch_list+0xd16/0xe10
[  437.819656][T14644]        blk_mq_flush_plug_list+0x48d/0x570
[  437.825580][T14644]        __blk_flush_plug+0x3ed/0x4d0
[  437.830989][T14644]        __submit_bio+0x28d/0x580
[  437.836040][T14644]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  437.842219][T14644]        block_read_full_folio+0x599/0x830
[  437.848054][T14644]        filemap_read_folio+0x137/0x3b0
[  437.853624][T14644]        do_read_cache_folio+0x358/0x590
[  437.859311][T14644]        read_part_sector+0xb6/0x2b0
[  437.864616][T14644]        adfspart_check_ICS+0xa5/0xa40
[  437.870104][T14644]        bdev_disk_changed+0x7ba/0x1550
[  437.875666][T14644]        blkdev_get_whole+0x380/0x510
[  437.881063][T14644]        bdev_open+0x31e/0xd30
[  437.885849][T14644]        blkdev_open+0x470/0x610
[  437.890807][T14644]        do_dentry_open+0x785/0x14e0
[  437.896117][T14644]        vfs_open+0x3b/0x340
[  437.900729][T14644]        path_openat+0x2e08/0x3860
[  437.905861][T14644]        do_file_open+0x23e/0x4a0
[  437.910902][T14644]        do_sys_openat2+0x113/0x200
[  437.916128][T14644]        __x64_sys_openat+0x138/0x170
[  437.921559][T14644]        do_syscall_64+0x14d/0xf80
[  437.926713][T14644]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.933146][T14644] 
[  437.933146][T14644] -> #4 (set->srcu){.+.+}-{0:0}:
[  437.940299][T14644]        __synchronize_srcu+0xca/0x3e0
[  437.945781][T14644]        elevator_switch+0x1e8/0x7a0
[  437.951081][T14644]        elevator_change+0x2cc/0x450
[  437.956375][T14644]        elevator_set_default+0x36c/0x430
[  437.962108][T14644]        blk_register_queue+0x366/0x430
[  437.967669][T14644]        __add_disk+0x677/0xd50
[  437.972533][T14644]        add_disk_fwnode+0xfb/0x480
[  437.977748][T14644]        nbd_dev_add+0x72c/0xb50
[  437.982706][T14644]        nbd_init+0x168/0x1f0
[  437.987395][T14644]        do_one_initcall+0x250/0x8d0
[  437.992701][T14644]        do_initcall_level+0x104/0x190
[  437.998209][T14644]        do_initcalls+0x59/0xa0
[  438.003078][T14644]        kernel_init_freeable+0x2a6/0x3e0
[  438.008812][T14644]        kernel_init+0x1d/0x1d0
[  438.013702][T14644]        ret_from_fork+0x51e/0xb90
[  438.018839][T14644]        ret_from_fork_asm+0x1a/0x30
[  438.024148][T14644] 
[  438.024148][T14644] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  438.031988][T14644]        __mutex_lock+0x19f/0x1300
[  438.037125][T14644]        elevator_change+0x1b3/0x450
[  438.042424][T14644]        elevator_set_none+0xb5/0x140
[  438.047809][T14644]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  438.054156][T14644]        nbd_start_device+0x17f/0xb10
[  438.059554][T14644]        nbd_genl_connect+0x165b/0x1cf0
[  438.065131][T14644]        genl_family_rcv_msg_doit+0x22a/0x330
[  438.071214][T14644]        genl_rcv_msg+0x61c/0x7a0
[  438.076255][T14644]        netlink_rcv_skb+0x232/0x4b0
[  438.081564][T14644]        genl_rcv+0x28/0x40
[  438.086090][T14644]        netlink_unicast+0x80f/0x9b0
[  438.091405][T14644]        netlink_sendmsg+0x813/0xb40
[  438.096716][T14644]        ____sys_sendmsg+0x972/0x9f0
[  438.102012][T14644]        ___sys_sendmsg+0x2a5/0x360
[  438.107227][T14644]        __x64_sys_sendmsg+0x1bd/0x2a0
[  438.112700][T14644]        do_syscall_64+0x14d/0xf80
[  438.117836][T14644]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.124263][T14644] 
[  438.124263][T14644] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  438.133069][T14644]        blk_alloc_queue+0x546/0x680
[  438.138383][T14644]        __blk_mq_alloc_disk+0x197/0x390
[  438.144029][T14644]        nbd_dev_add+0x499/0xb50
[  438.148994][T14644]        nbd_init+0x168/0x1f0
[  438.153702][T14644]        do_one_initcall+0x250/0x8d0
[  438.159015][T14644]        do_initcall_level+0x104/0x190
[  438.164493][T14644]        do_initcalls+0x59/0xa0
[  438.169358][T14644]        kernel_init_freeable+0x2a6/0x3e0
[  438.175092][T14644]        kernel_init+0x1d/0x1d0
[  438.179963][T14644]        ret_from_fork+0x51e/0xb90
[  438.185102][T14644]        ret_from_fork_asm+0x1a/0x30
[  438.190410][T14644] 
[  438.190410][T14644] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  438.197640][T14644]        fs_reclaim_acquire+0x71/0x100
[  438.203119][T14644]        kmem_cache_alloc_noprof+0x40/0x650
[  438.209032][T14644]        __kernfs_iattrs+0xdf/0x340
[  438.214266][T14644]        kernfs_iop_setattr+0xea/0x3f0
[  438.219746][T14644]        notify_change+0xc1a/0xf40
[  438.224966][T14644]        do_truncate+0x1c2/0x250
[  438.229924][T14644]        path_openat+0x2f89/0x3860
[  438.235058][T14644]        do_file_open+0x23e/0x4a0
[  438.240100][T14644]        do_sys_openat2+0x113/0x200
[  438.245353][T14644]        __x64_sys_openat+0x138/0x170
[  438.250753][T14644]        do_syscall_64+0x14d/0xf80
[  438.255892][T14644]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.262330][T14644] 
[  438.262330][T14644] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  438.270951][T14644]        __lock_acquire+0x15a5/0x2cf0
[  438.276343][T14644]        lock_acquire+0xf0/0x2e0
[  438.281299][T14644]        down_write+0x96/0x200
[  438.286079][T14644]        kernfs_link_sibling+0x46c/0x540
[  438.291739][T14644]        kernfs_add_one+0x1ca/0x5c0
[  438.296963][T14644]        kernfs_create_dir_ns+0xde/0x130
[  438.302635][T14644]        sysfs_create_dir_ns+0x12f/0x2a0
[  438.308292][T14644]        kobject_add_internal+0x62b/0xd00
[  438.314029][T14644]        kobject_init_and_add+0x12b/0x1a0
[  438.319776][T14644]        sysfs_slab_add+0x75/0x290
[  438.324914][T14644]        do_kmem_cache_create+0x4dd/0x5b0
[  438.330659][T14644]        __kmem_cache_create_args+0x307/0x440
[  438.336766][T14644]        ieee80211_mesh_init_sdata+0x371/0x620
[  438.342962][T14644]        ieee80211_setup_sdata+0x80e/0xb50
[  438.348830][T14644]        ieee80211_if_add+0xc3d/0x13a0
[  438.354417][T14644]        ieee80211_add_iface+0xbb/0x5e0
[  438.360011][T14644]        nl80211_new_interface+0x80a/0x11f0
[  438.366011][T14644]        genl_family_rcv_msg_doit+0x22a/0x330
[  438.372099][T14644]        genl_rcv_msg+0x61c/0x7a0
[  438.377141][T14644]        netlink_rcv_skb+0x232/0x4b0
[  438.382475][T14644]        genl_rcv+0x28/0x40
[  438.386995][T14644]        netlink_unicast+0x80f/0x9b0
[  438.392295][T14644]        netlink_sendmsg+0x813/0xb40
[  438.397693][T14644]        ____sys_sendmsg+0x972/0x9f0
[  438.402995][T14644]        ___sys_sendmsg+0x2a5/0x360
[  438.408206][T14644]        __x64_sys_sendmsg+0x1bd/0x2a0
[  438.413679][T14644]        do_syscall_64+0x14d/0xf80
[  438.418825][T14644]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.425252][T14644] 
[  438.425252][T14644] other info that might help us debug this:
[  438.425252][T14644] 
[  438.435497][T14644] Chain exists of:
[  438.435497][T14644]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  438.435497][T14644] 
[  438.450050][T14644]  Possible unsafe locking scenario:
[  438.450050][T14644] 
[  438.457511][T14644]        CPU0                    CPU1
[  438.462888][T14644]        ----                    ----
[  438.468296][T14644]   lock(&root->kernfs_rwsem);
[  438.473079][T14644]                                lock(cpuhp_state_mutex);
[  438.480208][T14644]                                lock(&root->kernfs_rwsem);
[  438.487505][T14644]   lock(&root->kernfs_iattr_rwsem);
[  438.492804][T14644] 
[  438.492804][T14644]  *** DEADLOCK ***
[  438.492804][T14644] 
[  438.500960][T14644] 5 locks held by syz.3.2210/14644:
[  438.506171][T14644]  #0: ffffffff8fc35450 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  438.514388][T14644]  #1: ffffffff8fbc6fc8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930
[  438.523646][T14644]  #2: ffff888058db0788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_new_interface+0xb9/0x11f0
[  438.533942][T14644]  #3: ffffffff8e8660d0 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x58/0x440
[  438.543890][T14644]  #4: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  438.553859][T14644] 
[  438.553859][T14644] stack backtrace:
[  438.559771][T14644] CPU: 0 UID: 0 PID: 14644 Comm: syz.3.2210 Not tainted syzkaller #0 PREEMPT(full) 
[  438.559794][T14644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  438.559806][T14644] Call Trace:
[  438.559816][T14644]  <TASK>
[  438.559825][T14644]  dump_stack_lvl+0xe8/0x150
[  438.559855][T14644]  print_circular_bug+0x2e1/0x300
[  438.559886][T14644]  check_noncircular+0x12e/0x150
[  438.559918][T14644]  __lock_acquire+0x15a5/0x2cf0
[  438.559948][T14644]  ? __lock_acquire+0x6b5/0x2cf0
[  438.559976][T14644]  lock_acquire+0xf0/0x2e0
[  438.559997][T14644]  ? kernfs_link_sibling+0x46c/0x540
[  438.560031][T14644]  down_write+0x96/0x200
[  438.560049][T14644]  ? kernfs_link_sibling+0x46c/0x540
[  438.560076][T14644]  ? __pfx_down_write+0x10/0x10
[  438.560093][T14644]  ? kernfs_root+0x1c/0x230
[  438.560117][T14644]  ? kernfs_root+0x1c/0x230
[  438.560142][T14644]  ? kernfs_root+0x1ea/0x230
[  438.560168][T14644]  kernfs_link_sibling+0x46c/0x540
[  438.560200][T14644]  kernfs_add_one+0x1ca/0x5c0
[  438.560228][T14644]  kernfs_create_dir_ns+0xde/0x130
[  438.560247][T14644]  sysfs_create_dir_ns+0x12f/0x2a0
[  438.560272][T14644]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  438.560297][T14644]  ? do_raw_spin_unlock+0xf5/0x210
[  438.560317][T14644]  kobject_add_internal+0x62b/0xd00
[  438.560339][T14644]  kobject_init_and_add+0x12b/0x1a0
[  438.560358][T14644]  ? kernfs_remove_by_name_ns+0xe8/0x130
[  438.560376][T14644]  ? __pfx_kobject_init_and_add+0x10/0x10
[  438.560394][T14644]  ? kernfs_find_ns+0x389/0x490
[  438.560425][T14644]  sysfs_slab_add+0x75/0x290
[  438.560449][T14644]  do_kmem_cache_create+0x4dd/0x5b0
[  438.560473][T14644]  __kmem_cache_create_args+0x307/0x440
[  438.560493][T14644]  ieee80211_mesh_init_sdata+0x371/0x620
[  438.560522][T14644]  ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10
[  438.560546][T14644]  ? preempt_schedule_common+0x82/0xd0
[  438.560573][T14644]  ? __raw_spin_lock_init+0x45/0x100
[  438.560592][T14644]  ieee80211_setup_sdata+0x80e/0xb50
[  438.560617][T14644]  ieee80211_if_add+0xc3d/0x13a0
[  438.560644][T14644]  ieee80211_add_iface+0xbb/0x5e0
[  438.560663][T14644]  ? __pfx_ieee80211_add_iface+0x10/0x10
[  438.560683][T14644]  ? __alloc_skb+0x4e5/0x7d0
[  438.560711][T14644]  nl80211_new_interface+0x80a/0x11f0
[  438.560734][T14644]  ? __pfx_nl80211_new_interface+0x10/0x10
[  438.560752][T14644]  ? nl80211_pre_doit+0x4fb/0x930
[  438.560782][T14644]  genl_family_rcv_msg_doit+0x22a/0x330
[  438.560805][T14644]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  438.560830][T14644]  ? bpf_lsm_capable+0x9/0x20
[  438.560855][T14644]  ? security_capable+0x7e/0x2c0
[  438.560880][T14644]  genl_rcv_msg+0x61c/0x7a0
[  438.560901][T14644]  ? __pfx_genl_rcv_msg+0x10/0x10
[  438.560918][T14644]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  438.560944][T14644]  ? __pfx_nl80211_new_interface+0x10/0x10
[  438.560960][T14644]  ? __pfx_nl80211_post_doit+0x10/0x10
[  438.560986][T14644]  ? __lock_acquire+0x6b5/0x2cf0
[  438.561013][T14644]  netlink_rcv_skb+0x232/0x4b0
[  438.561040][T14644]  ? __pfx_genl_rcv_msg+0x10/0x10
[  438.561059][T14644]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  438.561091][T14644]  ? down_read+0x272/0x2e0
[  438.561107][T14644]  ? genl_rcv+0xd/0x40
[  438.561124][T14644]  genl_rcv+0x28/0x40
[  438.561140][T14644]  netlink_unicast+0x80f/0x9b0
[  438.561166][T14644]  ? __pfx_netlink_unicast+0x10/0x10
[  438.561189][T14644]  ? netlink_sendmsg+0x650/0xb40
[  438.561213][T14644]  ? skb_put+0x11b/0x210
[  438.561240][T14644]  netlink_sendmsg+0x813/0xb40
[  438.561270][T14644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  438.561296][T14644]  ? aa_sock_msg_perm+0xf1/0x1b0
[  438.561320][T14644]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  438.561341][T14644]  ____sys_sendmsg+0x972/0x9f0
[  438.561358][T14644]  ? futex_unqueue+0x211/0x240
[  438.561381][T14644]  ? __pfx_____sys_sendmsg+0x10/0x10
[  438.561402][T14644]  ? import_iovec+0x73/0xa0
[  438.561431][T14644]  ___sys_sendmsg+0x2a5/0x360
[  438.561451][T14644]  ? __pfx____sys_sendmsg+0x10/0x10
[  438.561471][T14644]  ? futex_wait+0x29a/0x380
[  438.561508][T14644]  ? __fget_files+0x2a/0x420
[  438.561540][T14644]  ? __fget_files+0x3a0/0x420
[  438.561571][T14644]  __x64_sys_sendmsg+0x1bd/0x2a0
[  438.561589][T14644]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  438.561611][T14644]  ? rcu_is_watching+0x15/0xb0
[  438.561642][T14644]  do_syscall_64+0x14d/0xf80
[  438.561669][T14644]  ? trace_irq_disable+0x3b/0x150
[  438.561695][T14644]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.561713][T14644]  ? clear_bhb_loop+0x40/0x90
[  438.561733][T14644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.561752][T14644] RIP: 0033:0x7f8c9c79c799
[  438.561769][T14644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.561786][T14644] RSP: 002b:00007f8c9d674028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  438.561807][T14644] RAX: ffffffffffffffda RBX: 00007f8c9ca15fa0 RCX: 00007f8c9c79c799
[  438.561821][T14644] RDX: 0000000024044804 RSI: 0000200000000200 RDI: 0000000000000005
[  438.561833][T14644] RBP: 00007f8c9c832c99 R08: 0000000000000000 R09: 0000000000000000
[  438.561844][T14644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  438.561854][T14644] R13: 00007f8c9ca16038 R14: 00007f8c9ca15fa0 R15: 00007ffd4fad94f8
[  438.561875][T14644]  </TASK>
[  439.136651][T14663] netlink: 'syz.4.2211': attribute type 1 has an invalid length.
[  439.327445][T14639] tipc: Disabling bearer <eth:vlan0>
[  439.385918][T14638] batadv_slave_0: left promiscuous mode
[  440.212109][ T1299] ieee802154 phy1 wpan1: encryption failed: -22