last executing test programs:

5.362404644s ago: executing program 3 (id=3818):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'pimreg\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
r15 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r16 = socket$netlink(0x10, 0x3, 0x0)
r17 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r18=>0x0})
sendmsg$nl_route_sched(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r18, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400dd}, 0x4000080)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'})

5.130581469s ago: executing program 3 (id=3822):
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) (async)
splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6b7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6b7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x13, 0xffffff51, 0x0, 0xff, 0x2, r3, 0x9, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3}, 0x50)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000002c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0x9f, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x7a}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044)
r12 = socket$kcm(0x2, 0x5, 0x84)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r12, 0x84, 0x7c, &(0x7f0000000000)=r13, 0x62) (async)
setsockopt$sock_attach_bpf(r12, 0x84, 0x7c, &(0x7f0000000000)=r13, 0x62)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0x1, <r14=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @jmp={0x5, 0x0, 0x1, 0x0, 0x6, 0xfffffffffffffffe, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0xb8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x6}, 0x10, r9, r5, 0x0, &(0x7f0000000a80)=[r10, r13, r14], 0x0, 0x10, 0x63e3}, 0x94)
socket$packet(0x11, 0x2, 0x300) (async)
r15 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r16=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x1, 0x9}, 0x10, 0x30d33, r5, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r10}, 0x8) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r10}, 0x8)

4.327187256s ago: executing program 2 (id=3830):
socket(0x2, 0x80805, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x40000000015, 0x2, 0x400)
socket$inet_smc(0x2b, 0x1, 0x0)
socket(0x28, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x200000, 0x0, 0xff, 0x1, 0x7fff, 0x80}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x200000, 0x2, 0x0, 0xc, 0x81, 0x3}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001100))
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = epoll_create1(0x80000)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d})
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)={0x10000000})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xa8002014})
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x3fd, @empty}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
unshare(0x22020400)
r7 = socket(0xa, 0x3, 0x87)
sendto(r7, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
poll(&(0x7f0000000000)=[{r7}], 0x1, 0x0)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0)

3.306294347s ago: executing program 2 (id=3836):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r2}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000002440), 0x400, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r6=>0x0})
sendmsg$can_bcm(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x2710}, {0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "318b1312eceb5c92"}}, 0x48}}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.986784199s ago: executing program 2 (id=3839):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004, 0x2406}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x730d8}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f4020000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x5}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", '\x00', "bff2a81527ae4190"}, 0x38) (async)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", '\x00', "bff2a81527ae4190"}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000600)={0x0, @xdp={0x2c, 0x2, r4, 0x4}, @qipcrtr={0x2a, 0x2, 0x3fff}, @xdp={0x2c, 0x0, 0x0, 0x10}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)='erspan0\x00', 0xc2, 0x3e04, 0xd2})
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
sendfile(r6, r7, 0x0, 0x20000000002)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000004c0)={0x5, {{0xa, 0x4e21, 0x0, @private0, 0x5}}, {{0xa, 0x4e23, 0x7, @private0, 0x7}}}, 0x108)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000080)=0xa0, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(rfc4106(gcm(aes)))\x00'}, 0x58) (async)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(rfc4106(gcm(aes)))\x00'}, 0x58)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f0000000400)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffd8c}}], 0x1, 0x20000084) (async)
sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f0000000400)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffd8c}}], 0x1, 0x20000084)
r10 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r11, 0x0, 0x10001}, 0xc) (async)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r11, 0x0, 0x10001}, 0xc)
syz_emit_ethernet(0x2a, &(0x7f0000001ec0)=ANY=[@ANYBLOB="aaaaaaaaaaaa4aa468739f8508060001080006040001bbbbbabbbbbb0a010100bbbbbbbbbbbbac1414ff"], 0x0)

2.688128495s ago: executing program 0 (id=3846):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="0892387c99109b0c2fadef5711c93853938d5bde29dc3fff1606a5599133c5fab7e03a5628820cae9ca593e95706b4cc150f66bf7c4e966fe0e13936271fa3a7a11a5ae1f37f8575285b0dfdb9ea7bb4bc40ec4bc1efed", @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f0000003020000004000000", @ANYRES32=0x0, @ANYBLOB="3f0fbd80663a", @ANYRES64=0x0], 0x20)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x20004011}, 0x40800)

2.49457931s ago: executing program 0 (id=3848):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={<r2=>0x0, 0x41, "29864f8743104db4040703bc5af2c274a4b5a49adeab4bdd197806cdb73dec4c44373f074d60a0fedaba91d14e816e901a192a6cf064b8abe68a2d0fa86303c426"}, &(0x7f0000000280)=0x49)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={r2, 0x1edf8cbe}, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r4 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0xffeffffe}, {0x16, 0x0, 0x0, 0x40000000}]}, 0x10)
sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x408d6, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x2, 0xfffffffd, {{0x5, 0x4, 0x2, 0xc, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @local, @broadcast}}}})
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r8], 0x30}}, 0x0)
r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r9, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="010000000000fcffffff100000001800018014000200776c616e30000000000000000000000008000700000000000800080040000000"], 0x3c}}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3)
recvfrom$inet6(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)

2.303857359s ago: executing program 0 (id=3850):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r4=>0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r8 = socket$kcm(0x1e, 0x0, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffd6, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4], 0x1458}, 0x20048811)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008666dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}, 0x1, 0x0, 0x0, 0x2004c850}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r10 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xd9}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

2.221510292s ago: executing program 4 (id=3852):
r0 = socket$netlink(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="12000000030000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd63, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = socket(0x1d, 0x2, 0x6)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r7=>0x0})
bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r7, 0x3, {0x0, 0x1}, 0x1}, 0x18) (async)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000200)=0x1, 0x4)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000300)={@private=0xe1010203, @empty, 0x1}, 0xc) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r10, &(0x7f0000000000)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, &(0x7f0000000100)=@nl, 0xc) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf25250000000e0001006e6574feffffff696e6d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)

2.05243488s ago: executing program 3 (id=3854):
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x3, 0x2, 0x2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0xaa, 0x9, 0x8, 0xa00, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0xa8, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x58, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0x40, 0x6, 0x1, 0x9, 0x7}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0xfa7, 0xa9, &(0x7f0000000200)=""/169, 0x0, 0x21, '\x00', r2, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x2, 0x2, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000740)=[{0x3, 0x4, 0x4, 0x6}, {0x0, 0x4, 0x8, 0x4}, {0x5, 0x4, 0xd, 0x7}, {0x4, 0x1, 0xe, 0x7}], 0x10, 0x8000}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000940)={<r6=>r0, &(0x7f0000000840)='\x00', 0x8000, &(0x7f0000000880)={@align=0x29, {0x5, 0x9, 0x6, 0x1ff}}, 0xefa, &(0x7f00000008c0), &(0x7f0000000900)=0x3})
nanosleep(&(0x7f0000000980)={0x0, 0x989680}, &(0x7f00000009c0))
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x6, @private1, 0x8}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000a40)="d8e4273b8d4fa7b4f60a40d2fe5f777c4f80849ca5cb7751da21afe49acc8a5df31e0ee56a79f891a528bb437db30e64060d90a776df7c1ded194a1e15e67e4c1f739589075c6819e5ead3b4fd363a080fc47551b305a9f5df458db85349318a1eb25e291bb112539428c9844d1e7a167e", 0x71}, {&(0x7f0000000ac0)="973beacf36a01ca5e655325d85052dd7db352e724152b3f0b98f454899c729451c6ae4ae2fd978c04ce4a623d5a6e63cbcb07e70bb6e3a90363cb7b44f8ed33c4031f245e3476f55641266fb2137c182d37399512e49ffd2cecaffd4653101cacf51c5556bd32659c6a1c7b35f9319378751cffef9cd0434819f88e0e43231bba348ab08630bb8d4f67db376b05db71ce28591e08874051618adf512fc8a8f6816f44fccfe993a1fb7fb58e7e7c5aad409b3bebb365a679a2f69a67bae", 0xbd}], 0x2}}], 0x1, 0x8000)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000c00)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000c40)={0xa, 0x4e20, 0x3, @mcast1, 0x8}, 0x1c)
ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000c80)={0x9, 0x100, 0x53c})
ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000cc0))
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000d00))
socket$kcm(0x29, 0x7, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000d40)={'batadv0\x00', <r7=>0x0})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000d80)={0x1, 'pimreg\x00', {}, 0x3})
ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000000e00)={{r0}, 0x2, &(0x7f0000000dc0)=[0x1, 0x4], 0x6, 0x4, 0x1})
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000e80)={@empty, r7}, 0x14)
getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000ec0)=""/130, &(0x7f0000000f80)=0x82)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000fc0)={0x67, 0xe, 0x1, 0x3, 0x0, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @local]}, 0x78)
ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000001040)=0xfffffeff)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x5f, 0x30, 0x2e]}}, &(0x7f00000011c0)=""/63, 0x2d, 0x3f, 0x0, 0x1, 0x10000, @value=r6}, 0x28)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000013c0)={<r10=>r4, &(0x7f00000012c0)='/!@-\x00', 0x4200, &(0x7f0000001300)={@_ha_fsid={[0x8, 0x31]}, {0x8, 0x40, 0x6, 0x8}}, 0x716, &(0x7f0000001340), &(0x7f0000001380)=0x8})
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001400)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', r2, r6, 0x0, 0x3, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x2, 0xb, &(0x7f0000001080)=@raw=[@call={0x85, 0x0, 0x0, 0x57}, @generic={0xb8, 0x2, 0xa, 0x3, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6441}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000001100)='syzkaller\x00', 0x7, 0x30, &(0x7f0000001140)=""/48, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, r9, 0x8, &(0x7f0000001240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001280)={0x2, 0x9, 0xfffffff7, 0x9}, 0x10, r3, r4, 0x6, &(0x7f0000001480)=[r10, r11, r6], &(0x7f00000014c0)=[{0x3, 0x3, 0x10, 0x8}, {0x1, 0x3, 0x3, 0x6}, {0x2, 0x2, 0xa, 0xa}, {0x3, 0x1, 0x10, 0x2}, {0x4, 0x1, 0x3, 0x5}, {0x4, 0x3, 0x9, 0x9}], 0x10, 0x7}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)

1.977094055s ago: executing program 2 (id=3855):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100187f3a00000000000cdfffff0b0000000b000000d1177584fb6a000000000000b6e8000000070000000000"], 0x0, 0x2f, 0x0, 0x1}, 0x28) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) (async)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC=r4, @ANYRESOCT, @ANYRES8=0x0], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x8, &(0x7f0000000240)=ANY=[@ANYRESOCT=r5, @ANYRES64=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl(0xffffffffffffffff, 0x8b2d, &(0x7f0000000040)) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r8 = socket(0x1e, 0x1, 0x0) (rerun: 64)
shutdown(r8, 0x2)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008005e00000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000002b7090000000000007b8af8ff00000000e8a200000000000007020000f8ffffffb703000000000000b7a6213c59e2e229439b08e058040000001e5af3725b2e55915cf854f70ac119a1bda45985e1aff3fe9d704fdb05f550691ad11d8fbd47ea9b5e58817b680e2db73ea94f5f3da18f64b4195b20a0", @ANYRES32], 0x0}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r12=>0xffffffffffffffff})
getsockopt$IP_SET_OP_GET_BYNAME(r12, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000100)=0x28) (async, rerun: 64)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
recvmmsg(r13, 0x0, 0x3f, 0x100, 0x0) (async)
sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async)
poll(&(0x7f0000000180)=[{r9, 0x8}, {r12, 0x2a40}, {r11, 0x8280}, {r0, 0x9}, {r13, 0x100}], 0x5, 0x2be) (async)
connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)

1.671784078s ago: executing program 0 (id=3857):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c000}, 0x11) (async)
r4 = socket$tipc(0x1e, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000240)={0x2000}) (async)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={<r5=>0x0, <r6=>0x0, <r7=>0x0}, &(0x7f00000002c0)=0xc)
r8 = syz_open_procfs$namespace(r5, &(0x7f0000000300)='ns/net\x00') (async)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, <r9=>0x0}, &(0x7f00000005c0)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private1}}, &(0x7f0000000700)=0xe8)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r14 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={<r15=>0xffffffffffffffff})
r16 = getuid() (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001080)={<r17=>r1, &(0x7f0000000f80)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x8080, &(0x7f0000000fc0)={@align=0x1, {0x6000, 0x800, 0xff, 0x7fffffffffffffff}}, 0x6, &(0x7f0000001000), &(0x7f0000001040)=0x14ba}) (async)
r18 = accept4$nfc_llcp(r1, &(0x7f00000010c0), &(0x7f0000001140)=0x60, 0x800) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={<r19=>0xffffffffffffffff}) (async, rerun: 32)
r20 = epoll_create1(0x80000) (async)
r21 = socket$inet6_sctp(0xa, 0x5, 0x84)
r22 = accept4$bt_l2cap(r1, &(0x7f0000001ec0)={0x1f, 0x0, @fixed}, &(0x7f0000001f00)=0xe, 0x100800) (async)
r23 = socket$phonet_pipe(0x23, 0x5, 0x2)
r24 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r25 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002100), 0x1, 0x0) (async)
r26 = accept4$packet(r1, 0x0, &(0x7f0000002140), 0x80800)
r27 = openat$cgroup_type(r1, &(0x7f0000002180), 0x2, 0x0) (async)
r28 = socket$rds(0x15, 0x5, 0x0)
sendmmsg$unix(r1, &(0x7f0000002640)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000003c0)="80bccd9a61b4aaecfd6c2ed45ebc733dcfcd0e034421e343d3c3deea2fe45e75664bb960186453706a322bf5f840b160854ea4aa69a48beec76a05c171ee90c45b663a805973b3b2b44573605c439f3b78a1f008fbbda20890a1c2909da18e5ebb64a996eed48b43f70b", 0x6a}, {&(0x7f0000000440)="c93f7780c0c8a5ef33756ac35be29763c74fbb1d579183da9c273ccfdf7d0267cf0f479bfa8c9808278500f922b08528c0a4149fcb5c254b162ac32f28fd523deb78776a1b1ef189291d72efdc937d45d2a5368beda779a366faf72fd6c17cdca0dc14a1396f5bb9f6ca666d22d0a7925a85f7", 0x73}, {&(0x7f00000004c0)="f0fad35c67431e8ad27677e9c2066aebd469622c44e7b591ae20b627d7cd4772c9b3a0f04ede6b74d853672e31114e6b19dca91692a587e64e53977eee40c83ce88f5815873e5672ab4ca31a420ca7bb20e8d0caa170c1c22cd7df95cf1522dcd850102a94deb59a85ceb8f554e125c10f5906eaab3b09007d", 0x79}], 0x3, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r9}}}, @cred={{0x1c, 0x1, 0x2, {r5, r10, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x28, 0x1, 0x1, [r8, r1, r4, r4, r8, r11]}}, @rights={{0x2c, 0x1, 0x1, [r1, r4, r1, r8, r4, r4, r1]}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}], 0x130, 0x4048010}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="cd0ab4b39d4443b1a0116555ea59c4", 0xf}, {&(0x7f00000008c0)="ab63f3d3d499d8782716804a86a6df5cf42ec6b042929e4d7ddbd94904cf8b124a123f175bb0963626666d6ff446040c8b6e3a10c5d1f56004b48299ae6ba552a8ccd114cb1aa264b0538dc6cc305f147dd149aa3e232db6dbbeea47754cd627c8e2", 0x62}, {&(0x7f0000000940)="8316e43a66d8018c5e64a3b27619fdbd9dfe1f76968db6e5cfdd244e030844ed0c654e38c0ccc7c2470c557f08b22d2589f6890b6f72c59ddb432610d65998aef4dbfd6c4a66f034c47dc79bccda96986ffeb831f6b7fc3b091b57f312270148035f6ec5711f17e71fbe0bc419d76b258762c85e35f7e9fd047eea3470", 0x7d}, {&(0x7f00000009c0)="5e227248fdbfd5868917bde733c9fa852c8547d62d4a9b2ff585bda17a8bc629d14fc188cb66a28a3fc870d7efbe614467f7fae0ad74d4b7c09dd9c5c70fe498fa657a3f5de4c8bc11a3f6ade17f7e6d36c42d20ba83db4cf6fff908c7214aee4799a9bcffbeb6b67a2934ba37a960b39eceefa4835973de82365a66c2518066f43d403f68a5634204bc4c3fa36efa72b143ad4262bf247901e1ac57c242", 0x9e}, {&(0x7f0000000a80)="7af3fdfba52efe122c92cb9e9ffbe9ff7fcd638821e107e53bb481b857f9c75e1fe2cf1c58d1f34c00bf55722507ed1653a1f959348ce57bbcfd16321c55c4105439c1f099ae606e5d4b03d0bc16dcc4c5a851ca2dfc3768356490ac57abd000731b134c048bba5962b4547e4152efc47705aa061f35e735483a81eb26b112ef0ae481e3288b7b9e5a3fcf1b8437b3ec491dc65ca6dea5751a", 0x99}, {&(0x7f0000000b40)="a48400e0ee4c5cfa955776c9a5fe78ba88b86c8573a945c002481d6a9ed0d5fb2aa20338723406aa8918ea1900b3aca50c64fb8f59feffa658834f7edcd597ae0b7efa8c16f50625cddf1abedf2b892d7394120542ba1c19b1a932cd16075e7fbac9aa09e76a14afd2b36b7d0e6d1b91d2089b38fa7fa880945399a464d45e9db26b158b633021f04fed1267fab886ca63951df415faa1b963ce1dca74c8a27e", 0xa0}, {&(0x7f0000000c00)="03fb8d07d15bc1ea4a1e6e743030daf3c32fcad04fa67f7e3d92ab4f0b15aa224112fe681e91f04343bdb56c43da7d34c68a7e8b8611a166fd80728bae17ef47cbc1e44f10f654f964fce4065b81bf2111a83bda39e0639597f54e52f71ccc3b125b0e8ee6738dfd6480df2b550bca0c63a84d8154e4925cf4b4da6f414427178ff7bba7059688d1342786", 0x8b}, {&(0x7f0000000cc0)="b0ce887f48625145b90e70d7a22e386c35354b50e1ca6649e3c218efb4c5550f4fe5f186f7a37af985a0b797a5f298110b8e787f811801e16ebad6c4c3e8defe28ff6e360725978a1faa6b7716353cdbc14f34e2b77f67364bcec3d81f0c07fd660ae47a08b37a642d7048c1607bd74bca8a5b355463461da5d2da16b36c10783e53cfb13df0c7f6d4c2ccf67630b6fa73746eb72dc6757da591aad05e4aef06feaaa20e75868a0098d57ef73e6ec43ca1db53a8599ae35705ee67bdd5e4b1b604069b6cba3e849ddcd0b661131723b145cf754b692b74e740d2f3e2f81f0f0df99100baadd8bce2abf533c8118b8201dbca7f7fbc9a", 0xf6}, {&(0x7f0000000dc0)="ecbea90959b09434eb8e95a1c2c63a7dbd1a6ea9712950099fd86c002c8bddc15768afa7bdb37020227f68173e7044ee59dd2a6d5469da102fd33de3f239d16f4f46b510607b517e900222c5411a49fed859a699bf1380016072a33db1afaf7539ab1e24bc42a1d751a933e25ed7ea85caab9870cd1786f7f220da812d815a7eeb50734a8eee6c5ecfcc16526e15f04f73e8e1743326da22473a39c6ecc3", 0x9e}], 0x9, &(0x7f00000011c0)=[@rights={{0x28, 0x1, 0x1, [r13, r1, r14, r8, r8, r15]}}, @cred={{0x1c, 0x1, 0x2, {r5, r16, r7}}}, @rights={{0x38, 0x1, 0x1, [r1, r1, r17, r8, r8, r1, r8, r1, r18, r4]}}, @rights={{0x28, 0x1, 0x1, [r8, r8, r8, r8, r1, r4]}}, @rights={{0x30, 0x1, 0x1, [r19, r1, r8, r0, r4, r0, 0xffffffffffffffff, r0]}}], 0xd8, 0x4000000}}, {{&(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001340)="75a6776b68b16a4f95ebea43cd1699b638b8e765b13fbc214cc1663b45d611acd311aced2b66b3df5df2751ceb48d7c43cfe65f394bb461875b7ec0d0d7ad5e6d88ff7a32a809005566035a2a951d388be6327f6e0e7916cb8bf2795b80a01cd489a568ab9c86d8d96148ac826", 0x6d}, {&(0x7f00000013c0)="ec963f265c0bb7ce965640ec9355e1351e8bfcf81490489c4e5c04ccd16bddd333b04c35baf30d0ded1bd0ebeda2b1f0bb16b8fc718444b16a70437391e3a2bdef5585dc8642080549ee39cd0cbfa0c2b36bb1cc1eb4c88180176c305b49c24bef35e24a802bdcb6e3c0d98e2f6d594bd367e10020d9615a4dc07c8f7dbee57b28bc71a579805b24de0252da65fb2954ec9dccd894c097a00f8278deb997c63a", 0xa0}, {&(0x7f0000001480)="9fe0f44ab0d7bcda0f19125e975b41b628806a11b087ca27056c490acbdc0db5ab0ff7d05f054ca55e5140aed7fade5263fed8686e5f11241d43c4eb75c3d83c6a89dd39ab39381a3517ae43bdfad8ab3a3e1af380df110cde9757e481797b18e481b77a6acfe9ee461de915fb86606e60e695e283fcfa5a6111e6f9849d2c13bac1df68ebb8815de3760920a122bd90073b49eb75ccd22c1d394acb29c7ddb942f9ba2bff5e082a", 0xa8}, {&(0x7f0000001540)="c00928d8ce9e5a82690f007f712e33f05f9abd89bbfffb71034c2ba64f18fbae7b122581b324a9dea3bedbb089c0fe7d511f5a9df6076ce7bd08f228e2931ab4b747e029c1862b244b5e0d38c4838bbb50c639a269128b", 0x57}, {&(0x7f00000015c0)="245f698e7a2a63b4e1c038e6b91b77b9b92cd94065a550190a6e02e22e11a089369718eaee8d553d2faf56cf31bcc3d2e1a93297b54bd2b5b38429", 0x3b}], 0x5, &(0x7f0000001680)=[@rights={{0x14, 0x1, 0x1, [r20]}}, @rights={{0x24, 0x1, 0x1, [r1, r8, r8, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x24, 0x1, 0x1, [r8, r1, r1, r21, r4]}}, @rights={{0x1c, 0x1, 0x1, [r4, r0, r4]}}, @rights={{0x18, 0x1, 0x1, [r8, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xffffffffffffffff}}}], 0xe0, 0x20040000}}, {{&(0x7f0000001780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001800)="71539190c4d83d7653eac30bb81295d25b7993bb09adbff12481ec6e22bc906cee49b32796a9d3097dfaa154cf508ce1a1d534839793dfa0be537f5dbec0948d829cfeec25fef963e2dec3da249a66a4048b713395faaa48c0be2c0abec78cabc30b694bb99bbf74e0c549d1783b1a949c2303a2571a3dcca9304c4f52db849b0d695f054b2dc65b90ab50ff591b73fc1df766233bb578078cb8b184f38be24d96b541d1fe3b", 0xa6}, {&(0x7f00000018c0)="8fdc01ea2986d217ac022fed3a6c937d0d0fc8e4c08c954cf9c1a27cec7d99c3aa387443aff82fc6d30713e92aa37aa46d5279f1b8032db76206cad5c12ed935eaef559321b8b1f630a3d86ccb37c79a7e6b0560c932432913bf7539c1a1c63a8dedea6af8caa1d217a3a98b73544f9bd49de8b596b653ad0b0353b986ffdf4cc177f4db097a985f162b46414a601beaa7", 0x91}, {&(0x7f0000001980)="f39bebefda99b70f53e4a5d960bc92e9e3b1d0b1e1058c664f62ae45a316aa9340111f5e3065b2993b4bc4532ec00e39d06815e15a23543947f0fca3901b180334feed7646569b58a3edf27f2d5a4c4c3e4e9e201bd4c739755f2776caeff51b4d47429341734f6fed1af57c6ff60efeeec7228fdc019285a73fc44fb8f8204c", 0x80}, {&(0x7f0000001a00)="305bb1ddbee2e9bd8c6a6112e5116ee4d03401297e63b950ad587a76af9493b77bb4f70e4834bc8280ed22c367be6ea762aacaeaf210d9439d52526261fb687ac5df00f32f04c2e467027d96af721a32a96a7fc5f84ee61febf40ebd79ae", 0x5e}, {&(0x7f0000001a80)="028ac42c64f503110d8a0b006d82462d5aa87ab669f40c155e5bde808da1a21194b29fbdffbc07b851ad03f1b31d2f3935e06afa3bd0e8d8c3cf44593d8a22234272ca65a3c5b59808af", 0x4a}, {&(0x7f0000001b00)="126c99f1eb6e5f582c70453f9de3cbc93c565e9481bafe0c516ef644e5eb689016a0c2abc9ee2f38", 0x28}, {&(0x7f0000001b40)="ff8b180de1ccd13a1f07fac532d942053aa4149081f14cce0575094a1935dab3a97ab4d58a998a2df927ba2e441b1f8a9889705c66b45d8234fe09f7fbae92eed8bab3ee69", 0x45}, {&(0x7f0000001bc0)="2f3a4d5745be49fbfe57d3922291b1afe1d833c4c03c493b3172154f490b045da47cc92500cc6bd37a543c8ce8cd8026c80eed2e9b9740f176ca62563b07662b6b0dfcb176e8aac92469526d72", 0x4d}, {&(0x7f0000001c40)="521674eed0de9a7064877bc4049a39a933247e3ce54329f605b4ef00383e98d2b56d1e6af4c6568623570ecd24f74643f8aa192b9c010b75c5ae393d24de5d3ac7ecfd3db9f2618a36f16465737cc0789c44a5f55f377931bd3378ec45629b6d8adac3045f283b16b26c65df047b057a5b63d94113de1c0c029274fcbfb17db340ab6d4928e11ee51ce53854a1a14f7d34b70e4495dd880874b7b3843e9f7ae5514e60011e41beb0a5b18ca55b532aa3d8cf57ace4ee2dc0482507f13d08cd9722f673c2b66c3513eaf37220da6525f323304720deb6b9b8313f7004166c9be15e37017065c41c23cb9ba05b4d46fd", 0xef}, {&(0x7f0000001d40)="ccd0175924aa5289af73c420d79b2d948c5f6ac69502439b18e701295882e6605ea8ab535e889327ee3932acfde4741e178e1529e17c486716ea68b30477d3a99c222cd82d5803b90680e756a0b1c3bea36812bbec00848327e74440295fc48b186133bc046f1441f2d1e7baaa1a2017fb0fea6b4dd78d9bb3068ee874301f2997c2c067e08dc4b65e18fc33b53b5bc65d1412fbb6e0db46ebb286e1d5c0250a10110fde79", 0xa5}], 0xa, &(0x7f0000001f40)=[@rights={{0x24, 0x1, 0x1, [r22, 0xffffffffffffffff, r8, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x30, 0x1, 0x1, [r0, r1, r0, r8, r1, r0, r23, r24]}}], 0x70}}, {{&(0x7f0000001fc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000002040)="3d44175b81fc5cd084f3feb8e9d9cc85c1d738ba6dcaa422651042884e820cbfbf6f1950bc841069d6f199c5112f7b76387ae840ce2d68f69006f66c2064de3f9e53e1531461528c7c9bec4427bb299e3d938c8916ed03e4d28382104377aee6", 0x60}], 0x1, &(0x7f0000002500)=[@rights={{0x1c, 0x1, 0x1, [r25, r4, r26]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r8, r1, r27]}}, @rights={{0x20, 0x1, 0x1, [r1, r8, r28, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, r8, r0, r8, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}], 0x140, 0xc000}}], 0x5, 0xc0884)

1.575642999s ago: executing program 3 (id=3858):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x400004f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000180)=0x1f5, 0x1) (async)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000100)=0x4f, &(0x7f0000000140)=0x2)
getsockopt$MRT6(r4, 0x29, 0xce, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

1.574201471s ago: executing program 4 (id=3859):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4) (async)
close(r4)
r5 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0x400, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xe, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24005088}, 0x4880)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0xc) (async)
socket$netlink(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES16=r7, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa2000000000007020000f8ffffffb703000008000000b7040000020007008500aa2056f946a8f2b950b818", @ANYRESOCT=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)

1.404754559s ago: executing program 0 (id=3860):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) (async)
sendmsg$rds(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000240)=""/18, 0x12}], 0x1, 0x0, 0x0, 0x50}, 0x40) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000000c0)={r6, 0xff, 0x2, 'b.'}, 0xa) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r6, 0xfc4b, 0x0, 0x3, 0x1}, &(0x7f0000000280)=0x18) (async)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x64, 0x6, 0x638, 0x3b0, 0x1d0, 0x480, 0x2e0, 0x2e0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0x110, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, [0x0, 0xffff00, 0x7f, 0xffffff00], [0xff000000, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x1, 0x3, 0x2, 0x22}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x24, 0x1, "30605041fffc61e78fb981da5de4dfc3162371358bbf5c1aa6ce7eb2d737fa116ea07f34b89d3841f7d18043fb83c5d42c8f3f2db9345ef15977764f94beac8fda"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x104}}, 0x4c080) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000004000071103c00000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xa4, "d6f5baa3e5158cee4c3406beabbe08e64631ee1b1ef4aca7a94bef3458a5bfcdf05daffab8c5485a278a977db4f7d9b145aa972560f34f166eb9c2992c0f00ba77bb3662f1703cf9810a0d8a9cca8c4ddefe34b393cfee1f0f80b776e5d4b0419a065602e4acadf7cadc3dd306f8f2f3add36a79d55757494aafad9655012ac486d9c73d50e594d0d4633c6628d26087b6e61c99c62465145a3e4da7eea9862daf0dd665"}, &(0x7f00000001c0)=0xac)

1.365772635s ago: executing program 1 (id=3861):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x70bd26, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa088}]}}}]}, 0x3c}}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001800000018001b0004000000020000000100000c02000000000000c073ea2bde77b459374a27eec746343d2e2317f8"], 0x0, 0x34}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000800)='//', 0x2}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x93}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94)

1.142640498s ago: executing program 1 (id=3862):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xd50, 0x5, 0x3, 0x4, r0, 0x0, '\x00', r3, r4, 0x0, 0x4, 0x3, 0xf}, 0x50)

1.10636622s ago: executing program 2 (id=3863):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00@\x00\x00\x00B'], 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x312}], 0x1, 0x10140, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'dvmrp1\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x8, 0x2, [0xfff, 0x9, 0xfffffff7, 0x800, 0x2, 0x3, 0x5]}})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = epoll_create1(0x80000)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000500)={'icmp\x00'}, &(0x7f0000000540)=0x1e)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000002c0)={0x40002001})
syz_emit_ethernet(0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff86dd6000000000383a0120010000000000000000000000000000ff02000000e5ffffff000000000000010300907804000000625fc26a0056320000000000000000000000000000000000fc020000000000000000000000000000987c9302617d3093"], 0x0)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000180), 0x4)
socket(0x400000000010, 0x0, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
getsockopt(r8, 0x111, 0x1, 0x0, &(0x7f0000000080))
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r10 = socket(0x2, 0x5, 0x0)
sendmmsg$inet(r10, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800)

1.026636342s ago: executing program 3 (id=3864):
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x2020600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80)
r2 = socket(0x28, 0x5, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, 0x0, 0x0)
listen(r3, 0x4)
connect$vsock_stream(r2, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xf03a0005)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xf}, 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x2040, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

1.021512299s ago: executing program 0 (id=3865):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x9, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x401}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7f}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f00000002c0)=0x8)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

818.854042ms ago: executing program 4 (id=3866):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) (async)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 64)
listen(r2, 0x8) (async, rerun: 64)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) (async)
bind$can_raw(r1, &(0x7f0000000040), 0x10) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x20001, 0x9684}}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) (async, rerun: 64)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) (async, rerun: 64)
bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x0, 0x2}, 0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48)

818.507226ms ago: executing program 1 (id=3867):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x58, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0)
ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x58, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) (async)
ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async)

671.276425ms ago: executing program 4 (id=3868):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe60a0000000000c5c61f33ad512e9cfc31", 0x20)
recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
getsockopt(r0, 0x10000, 0x6, &(0x7f0000000000)=""/193, &(0x7f0000000100)=0xc1)

643.268424ms ago: executing program 1 (id=3869):
r0 = socket$inet6(0xa, 0x800, 0x7)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @mcast1}, 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @empty, 0x2}, 0x70)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000), 0x0)

538.390325ms ago: executing program 4 (id=3870):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x3}}, @func_proto, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x61, 0x61, 0x0, 0x61]}}, 0x0, 0x4e, 0x0, 0x0, 0x100000}, 0x28)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000340)='&*#[.\x007`9Z:h\x8d\xa7\xdc\xc0\xb3\x84\xa4e\xd8\xaf\xa8rQ\xdcY\x90\xbb!%\xfd\x1e\xf4#\'\xa8WZ\xd6\n\xed\xb0W\xea\xa7\xec\xa1j\xfd\xa4\xbb\xb0T)\xe66,\\q\x91\x0e\xc7\xac`\xab;\xa2\xc1k.\xab\xf4\x8f\\U\x01\xf7\xe5\x1eC\x11\x80\xef\x1d\xad\xfe\xce\xdbO\x0f\xae3\xbf\xb3\xd0O\xe3}\xdc-\xa8-\x13\x80\x04\xf7\a_k\xa4\xb9@\x01!\x86\vAm\xce\xaf\xd6\xe1\xde\xa1\xcc\xc8\xba\xbc\x83\xa3\x14\x91:\xcb\xc9 \x94\n*\x88\x17\x83\xf8\xa4,L\x8c\xb5\xc3\xd4\xfc\xf5L\x02\xbe#\xb5\x1dV\x18W\x8aJ\xfb\x1dM+\xe1?\x91\x19\x9bH\xd6\x003\xd3\x14\xd7\xb4\xcfG;\x8c\xd6\x00\xb0\x96\x1c_\xa2[y\xf6\xce\f\xb4\xcbd\x9e\x92<d5\xca\xa6\xbdB\xf2C%\xdd\xcd\xeb[a\x87Q\x9ad\xf4}K\a\xa7\"\x04,\x98\xfcU%\xf4}', 0x40000, &(0x7f0000000040)={@align=0x3, {0xc6c9, 0x1, 0xfffffff8, 0x1ff}}, 0xff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfffffff7})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0xfffffffffffffffc}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fffffff300000000ffffeb80e500020000000000e500fcff0000000085000000990000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
r2 = socket$kcm(0x2, 0xa, 0x2)
writev(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
pipe(&(0x7f0000000040))
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e26, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, 0x8, 0x9, 0xffffffff, 0x1, 0x28, 0x78, 0x44}, &(0x7f0000000300)=0x9c)

476.056074ms ago: executing program 4 (id=3871):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000e, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r3, 0x8b2a, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="840000004300010027bd7000fcdbdf250a000000080004000100000008000400020000000800020001ffffff0d0001"], 0x84}, 0x1, 0x0, 0x0, 0x48811}, 0x0)

258.676372ms ago: executing program 1 (id=3872):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, 0x0, 0x44)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r5, 0x0)
mmap(&(0x7f00000a3000/0x4000)=nil, 0x4000, 0x100000a, 0x13, r4, 0xdf08e000)
mmap(&(0x7f0000492000/0xf000)=nil, 0xf000, 0x1000002, 0x12, r4, 0x0)
mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
close(r3)
setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4)
socket$packet(0x11, 0x3, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0xffffffff, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '0123456789012345'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x1c, '01234567890123456789'}}]}]}, 0x68}}, 0x0)

1.621294ms ago: executing program 3 (id=3873):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r8, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0)

1.018222ms ago: executing program 1 (id=3874):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000080))
r2 = socket$inet6(0xa, 0x80802, 0x0)
sendmmsg$inet6(r2, &(0x7f0000004bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000004d40)=ANY=[@ANYBLOB="1400000000000000290001003e00000006000000000000fe2300000000000000290000003200"], 0x40}}], 0x1, 0x401c040)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000080000", 0x1c) (async)
write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000080000", 0x1c)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604"], 0x0, 0x37}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604"], 0x0, 0x37}, 0x28)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4040015}, 0xc000)
socket$inet(0x2, 0x3, 0x2) (async)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @empty, @loopback}, 0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000440)={'erspan0\x00', <r7=>0x0, 0x8, 0x40, 0x5, 0xd, {{0x33, 0x4, 0x2, 0x0, 0xcc, 0x65, 0x0, 0x85, 0x4, 0x0, @multicast2, @remote, {[@ssrr={0x89, 0x17, 0xe2, [@private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @ssrr={0x89, 0x17, 0x67, [@empty, @local, @private=0xa010101, @multicast2, @broadcast]}, @ssrr={0x89, 0x27, 0x68, [@broadcast, @multicast2, @private=0xa010100, @remote, @remote, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast2]}, @rr={0x7, 0xb, 0xc7, [@multicast2, @rand_addr=0x64010100]}, @timestamp={0x44, 0xc, 0xbf, 0x0, 0x4, [0xb1, 0x4cb2]}, @end, @timestamp_addr={0x44, 0x1c, 0x2a, 0x1, 0x3, [{@multicast2, 0x8000}, {@local, 0x81}, {@multicast2, 0x4}]}, @timestamp={0x44, 0x2c, 0x6d, 0x0, 0x8, [0x2, 0x4, 0x3, 0x86a5, 0x2, 0x3, 0x18, 0x400, 0x401, 0x2]}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000200)=0x14)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r12, 0x300, 0x2, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5b7, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) (async)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r12, 0x300, 0x2, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5b7, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xfffffc01}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x88}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x9}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x2a24}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x691b}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x10044810)

0s ago: executing program 2 (id=3875):
r0 = socket(0x10, 0x803, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x15)
writev(r2, &(0x7f0000000140), 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0xfff1}, {0xffe7, 0x1}, {0xffff, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r10=>0x0})
sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={<r11=>0x0, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}}}, 0x6, 0x5, 0x9, 0xf, 0x8}, &(0x7f00000001c0)=0x98)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000200)=r11, 0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x3ff, 0x3, {{0x7, 0x4, 0x2, 0x9, 0x1c, 0x67, 0x0, 0x7, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x9, 0x0}, {[@timestamp={0x44, 0x8, 0x49, 0x0, 0x6, [0xe]}]}}}}})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x255fdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_PARMS={0x14, 0x1, {0x4, 0x2000000, 0x9, 0x1a, 0x4, 0x1b, 0x5}}]}}]}, 0x150}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xe, 0x4, 0x9, 0x25, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x40, 0x10, 0x1, 0x6}})
socket$can_bcm(0x1d, 0x2, 0x2)

kernel console output (not intermixed with test programs):

T19160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.820132][T19160] RIP: 0033:0x7f0482d9e159
[  473.820153][T19160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  473.820171][T19160] RSP: 002b:00007f0483c6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  473.820195][T19160] RAX: ffffffffffffffda RBX: 00007f0483025fa0 RCX: 00007f0482d9e159
[  473.820211][T19160] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005
[  473.820224][T19160] RBP: 00007f0483c6b090 R08: 0000000000000000 R09: 0000000000000000
[  473.820237][T19160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  473.820250][T19160] R13: 00007f0483026038 R14: 00007f0483025fa0 R15: 00007fffef312bf8
[  473.820294][T19160]  </TASK>
[  473.933203][T12203] net_ratelimit: 21 callbacks suppressed
[  473.933223][T12203] bond11: (slave dummy0): failed to get link speed/duplex
[  474.041762][T12203] bond11: (slave dummy0): failed to get link speed/duplex
[  474.170726][T12203] bond11: (slave dummy0): failed to get link speed/duplex
[  474.237187][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  474.245587][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  474.246750][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  474.254497][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  474.258711][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  474.282366][T12203] bond11: (slave dummy0): failed to get link speed/duplex
[  474.390079][T12203] bond11: (slave dummy0): failed to get link speed/duplex
[  474.505210][T12215] bond11: (slave dummy0): failed to get link speed/duplex
[  474.614878][T12218] bond11: (slave dummy0): failed to get link speed/duplex
[  474.809537][T19181] syzkaller0: entered promiscuous mode
[  474.816286][T19181] syzkaller0: entered allmulticast mode
[  474.841622][T12163] bond11: (slave dummy0): failed to get link speed/duplex
[  476.370977][ T5614] Bluetooth: hci0: command tx timeout
[  478.281578][T19212] FAULT_INJECTION: forcing a failure.
[  478.281578][T19212] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  478.281729][T19212] CPU: 0 UID: 0 PID: 19212 Comm: syz.0.3126 Not tainted syzkaller #0 PREEMPT(full) 
[  478.281752][T19212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  478.281764][T19212] Call Trace:
[  478.281771][T19212]  <TASK>
[  478.281780][T19212]  dump_stack_lvl+0xe8/0x150
[  478.281814][T19212]  should_fail_ex+0x410/0x560
[  478.281846][T19212]  _copy_from_iter+0x1d3/0x1660
[  478.281880][T19212]  ? _copy_from_iter+0x21b/0x1660
[  478.281909][T19212]  ? __pfx__copy_from_iter+0x10/0x10
[  478.281940][T19212]  ? __pfx__copy_from_iter+0x10/0x10
[  478.281974][T19212]  copy_page_from_iter+0x219/0x2d0
[  478.282004][T19212]  skb_copy_datagram_from_iter+0x2f4/0x720
[  478.282038][T19212]  unix_stream_sendmsg+0x5ce/0xde0
[  478.282078][T19212]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  478.282103][T19212]  ? aa_sock_msg_perm+0x129/0x210
[  478.282128][T19212]  ? apparmor_socket_sendmsg+0x98/0x360
[  478.282157][T19212]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  478.282177][T19212]  sock_sendmsg_nosec+0x13a/0x180
[  478.282203][T19212]  ____sys_sendmsg+0x54e/0x850
[  478.282229][T19212]  ? __pfx_____sys_sendmsg+0x10/0x10
[  478.282265][T19212]  ? import_iovec+0x73/0xa0
[  478.282294][T19212]  ___sys_sendmsg+0x2a5/0x360
[  478.282312][T19212]  ? __lock_acquire+0x6df/0x2e50
[  478.282336][T19212]  ? __pfx____sys_sendmsg+0x10/0x10
[  478.282389][T19212]  ? __fget_files+0x2a/0x420
[  478.282413][T19212]  ? __fget_files+0x3a2/0x420
[  478.282445][T19212]  __x64_sys_sendmsg+0x1b1/0x290
[  478.282468][T19212]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  478.282508][T19212]  do_syscall_64+0x166/0x520
[  478.282534][T19212]  ? trace_irq_disable+0x3b/0x140
[  478.282551][T19212]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.282570][T19212]  ? clear_bhb_loop+0x70/0xc0
[  478.282593][T19212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.282611][T19212] RIP: 0033:0x7fc5f0d9e159
[  478.282630][T19212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  478.282646][T19212] RSP: 002b:00007fc5f1be4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  478.282668][T19212] RAX: ffffffffffffffda RBX: 00007fc5f1025fa0 RCX: 00007fc5f0d9e159
[  478.282682][T19212] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[  478.282694][T19212] RBP: 00007fc5f1be4090 R08: 0000000000000000 R09: 0000000000000000
[  478.282705][T19212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  478.282717][T19212] R13: 00007fc5f1026038 R14: 00007fc5f1025fa0 R15: 00007ffc73365468
[  478.282746][T19212]  </TASK>
[  478.452799][ T5614] Bluetooth: hci0: command tx timeout
[  478.502321][T12191] bond11: (slave dummy0): failed to get link speed/duplex
[  478.539370][T19215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3128'.
[  478.598234][T19215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3128'.
[  478.610975][T12203] bond11: (slave dummy0): failed to get link speed/duplex
[  478.992854][T12203] net_ratelimit: 1 callbacks suppressed
[  478.992906][T12203] bond11: (slave dummy0): failed to get link speed/duplex
[  479.129116][T19242] FAULT_INJECTION: forcing a failure.
[  479.129116][T19242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  479.143837][T19242] CPU: 1 UID: 0 PID: 19242 Comm: syz.4.3136 Not tainted syzkaller #0 PREEMPT(full) 
[  479.143870][T19242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  479.143882][T19242] Call Trace:
[  479.143891][T19242]  <TASK>
[  479.143900][T19242]  dump_stack_lvl+0xe8/0x150
[  479.143936][T19242]  should_fail_ex+0x410/0x560
[  479.143974][T19242]  _copy_from_iter+0x1d3/0x1660
[  479.144014][T19242]  ? _copy_from_iter+0x21b/0x1660
[  479.144045][T19242]  ? __pfx__copy_from_iter+0x10/0x10
[  479.144098][T19242]  ? __pfx__copy_from_iter+0x10/0x10
[  479.144136][T19242]  copy_page_from_iter+0x219/0x2d0
[  479.144171][T19242]  skb_copy_datagram_from_iter+0x2f4/0x720
[  479.144210][T19242]  unix_stream_sendmsg+0x5ce/0xde0
[  479.144255][T19242]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  479.144284][T19242]  ? aa_sock_msg_perm+0x129/0x210
[  479.144312][T19242]  ? apparmor_socket_sendmsg+0x98/0x360
[  479.144345][T19242]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  479.144369][T19242]  sock_sendmsg_nosec+0x13a/0x180
[  479.144400][T19242]  ____sys_sendmsg+0x54e/0x850
[  479.144430][T19242]  ? __pfx_____sys_sendmsg+0x10/0x10
[  479.144462][T19242]  ? import_iovec+0x73/0xa0
[  479.144488][T19242]  ___sys_sendmsg+0x2a5/0x360
[  479.144509][T19242]  ? __lock_acquire+0x6df/0x2e50
[  479.144536][T19242]  ? __pfx____sys_sendmsg+0x10/0x10
[  479.144603][T19242]  ? __fget_files+0x2a/0x420
[  479.144630][T19242]  ? __fget_files+0x3a2/0x420
[  479.144668][T19242]  __x64_sys_sendmsg+0x1b1/0x290
[  479.144695][T19242]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  479.144749][T19242]  do_syscall_64+0x166/0x520
[  479.144779][T19242]  ? trace_irq_disable+0x3b/0x140
[  479.144800][T19242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.144821][T19242]  ? clear_bhb_loop+0x70/0xc0
[  479.144847][T19242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.144868][T19242] RIP: 0033:0x7f47ab79e159
[  479.144889][T19242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.144908][T19242] RSP: 002b:00007f47ac6f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  479.144932][T19242] RAX: ffffffffffffffda RBX: 00007f47aba25fa0 RCX: 00007f47ab79e159
[  479.144948][T19242] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[  479.144961][T19242] RBP: 00007f47ac6f8090 R08: 0000000000000000 R09: 0000000000000000
[  479.144974][T19242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  479.144987][T19242] R13: 00007f47aba26038 R14: 00007f47aba25fa0 R15: 00007ffe767bbde8
[  479.145018][T19242]  </TASK>
[  479.146679][   T79] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[  479.220733][T12135] bond11: (slave dummy0): failed to get link speed/duplex
[  479.333086][T12135] bond11: (slave dummy0): failed to get link speed/duplex
[  479.717269][T12191] IPVS: starting estimator thread 0...
[  479.743767][T19260] IPVS: set_ctl: invalid protocol: 0 0.32.0.0:10496
[  479.801212][T19261] IPVS: using max 33 ests per chain, 79200 per kthread
[  479.840579][T12191] bond11: (slave dummy0): failed to get link speed/duplex
[  480.173992][T19268] netlink: 'syz.4.3137': attribute type 1 has an invalid length.
[  480.401324][T12135] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  480.401419][T12135] bond11: (slave dummy0): failed to get link speed/duplex
[  480.401507][T12135] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  480.401550][T12135] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  480.401591][T12135] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  480.532050][ T5614] Bluetooth: hci0: command tx timeout
[  480.937182][T19287] netlink: 'syz.2.3144': attribute type 1 has an invalid length.
[  480.948146][T19287] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3144'.
[  481.364492][   T79] erspan0 (unregistering): left promiscuous mode
[  481.550915][   T79] batman_adv: batadv0: Removing interface: gretap2
[  481.606955][   T79] bond7 (unregistering): (slave gretap3): Releasing active interface
[  481.796774][   T79] bond4 (unregistering): (slave geneve2): Releasing active interface
[  481.929518][   T79] bond2 (unregistering): (slave bridge3): Releasing backup interface
[  481.968212][T19314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3147'.
[  482.055973][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  482.066879][   T79] bond0 (unregistering): Released all slaves
[  482.077417][   T79] bond1 (unregistering): Released all slaves
[  482.089331][   T79] bond2 (unregistering): Released all slaves
[  482.100860][   T79] bond3 (unregistering): Released all slaves
[  482.114711][   T79] bond4 (unregistering): Released all slaves
[  482.137359][   T79] bond5 (unregistering): Released all slaves
[  482.148769][   T79] bond6 (unregistering): Released all slaves
[  482.165370][   T79] bond7 (unregistering): Released all slaves
[  482.185510][   T79] bond8 (unregistering): Released all slaves
[  482.198364][   T79] bond9 (unregistering): Released all slaves
[  482.209157][   T79] bond10 (unregistering): Released all slaves
[  482.221845][T19284] hsr0: entered promiscuous mode
[  482.222154][T19284] hsr0: left promiscuous mode
[  482.284840][T19298] geneve2: entered promiscuous mode
[  482.403676][   T79] : left promiscuous mode
[  482.583606][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1
[  482.614829][ T5614] Bluetooth: hci0: command tx timeout
[  482.753627][   T79] tipc: Disabling bearer <udp:syz2>
[  482.753944][   T79] tipc: Left network mode
[  482.940737][T12211] bond11: (slave dummy0): failed to get link speed/duplex
[  482.947723][T19329] FAULT_INJECTION: forcing a failure.
[  482.947723][T19329] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  482.947756][T19329] CPU: 0 UID: 0 PID: 19329 Comm: syz.0.3150 Not tainted syzkaller #0 PREEMPT(full) 
[  482.947787][T19329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  482.947798][T19329] Call Trace:
[  482.947805][T19329]  <TASK>
[  482.947814][T19329]  dump_stack_lvl+0xe8/0x150
[  482.947845][T19329]  should_fail_ex+0x410/0x560
[  482.947878][T19329]  _copy_from_iter+0x1d3/0x1660
[  482.947904][T19329]  ? skb_set_owner_w+0x263/0x3d0
[  482.947935][T19329]  ? __pfx__copy_from_iter+0x10/0x10
[  482.947971][T19329]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  482.947995][T19329]  skb_copy_datagram_from_iter+0xe6/0x720
[  482.948020][T19329]  ? __pfx_sock_def_readable+0x10/0x10
[  482.948041][T19329]  ? get_pid+0x52/0x80
[  482.948061][T19329]  ? skb_put+0x112/0x210
[  482.948084][T19329]  unix_stream_sendmsg+0x5ce/0xde0
[  482.948124][T19329]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  482.948151][T19329]  ? aa_sock_msg_perm+0x129/0x210
[  482.948179][T19329]  ? apparmor_socket_sendmsg+0x98/0x360
[  482.948213][T19329]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  482.948237][T19329]  sock_sendmsg_nosec+0x13a/0x180
[  482.948267][T19329]  ____sys_sendmsg+0x54e/0x850
[  482.948295][T19329]  ? __pfx_____sys_sendmsg+0x10/0x10
[  482.948328][T19329]  ? import_iovec+0x73/0xa0
[  482.948354][T19329]  ___sys_sendmsg+0x2a5/0x360
[  482.948376][T19329]  ? __lock_acquire+0x6df/0x2e50
[  482.948407][T19329]  ? __pfx____sys_sendmsg+0x10/0x10
[  482.948468][T19329]  ? __fget_files+0x2a/0x420
[  482.948495][T19329]  ? __fget_files+0x3a2/0x420
[  482.948533][T19329]  __x64_sys_sendmsg+0x1b1/0x290
[  482.948560][T19329]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  482.948606][T19329]  do_syscall_64+0x166/0x520
[  482.948635][T19329]  ? trace_irq_disable+0x3b/0x140
[  482.948654][T19329]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.948675][T19329]  ? clear_bhb_loop+0x70/0xc0
[  482.948700][T19329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.948719][T19329] RIP: 0033:0x7fc5f0d9e159
[  482.948738][T19329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.948755][T19329] RSP: 002b:00007fc5f1be4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  482.948787][T19329] RAX: ffffffffffffffda RBX: 00007fc5f1025fa0 RCX: 00007fc5f0d9e159
[  482.948802][T19329] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005
[  482.948815][T19329] RBP: 00007fc5f1be4090 R08: 0000000000000000 R09: 0000000000000000
[  482.948827][T19329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  482.948839][T19329] R13: 00007fc5f1026038 R14: 00007fc5f1025fa0 R15: 00007ffc73365468
[  482.948873][T19329]  </TASK>
[  483.051569][T12172] bond11: (slave dummy0): failed to get link speed/duplex
[  483.173504][T12191] bond11: (slave dummy0): failed to get link speed/duplex
[  483.283921][T19341] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20001
[  483.454712][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3155'.
[  483.454799][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3155'.
[  483.521348][T12172] bond11: (slave dummy0): failed to get link speed/duplex
[  483.532144][T19343] sctp_setsockopt_delayed_ack: 23 callbacks suppressed
[  483.533997][T19343] sctp: [Deprecated]: syz.4.3154 (pid 19343) Use of struct sctp_assoc_value in delayed_ack socket option.
[  483.533997][T19343] Use struct sctp_sack_info instead
[  483.569356][T19358] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3156'.
[  483.578455][T19358] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3156'.
[  483.592134][T19358] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3156'.
[  483.743369][T19346] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.744144][T19346] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.907792][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3159'.
[  484.096880][T19346] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.114782][T19378] netlink: 564 bytes leftover after parsing attributes in process `syz.0.3161'.
[  484.119652][T19346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  484.273280][T19375] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7
[  484.605225][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2
[  484.702400][T19388] FAULT_INJECTION: forcing a failure.
[  484.702400][T19388] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  484.702467][T19388] CPU: 0 UID: 0 PID: 19388 Comm: syz.3.3162 Not tainted syzkaller #0 PREEMPT(full) 
[  484.702492][T19388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  484.702504][T19388] Call Trace:
[  484.702512][T19388]  <TASK>
[  484.702521][T19388]  dump_stack_lvl+0xe8/0x150
[  484.702552][T19388]  should_fail_ex+0x410/0x560
[  484.702585][T19388]  _copy_from_iter+0x1d3/0x1660
[  484.702764][T19388]  ? _copy_from_iter+0x21b/0x1660
[  484.702795][T19388]  ? __pfx__copy_from_iter+0x10/0x10
[  484.702827][T19388]  ? __pfx__copy_from_iter+0x10/0x10
[  484.702861][T19388]  copy_page_from_iter+0x219/0x2d0
[  484.702892][T19388]  skb_copy_datagram_from_iter+0x2f4/0x720
[  484.702927][T19388]  unix_stream_sendmsg+0x5ce/0xde0
[  484.702967][T19388]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  484.702992][T19388]  ? aa_sock_msg_perm+0x129/0x210
[  484.703018][T19388]  ? apparmor_socket_sendmsg+0x98/0x360
[  484.703046][T19388]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  484.703066][T19388]  sock_sendmsg_nosec+0x13a/0x180
[  484.703094][T19388]  ____sys_sendmsg+0x54e/0x850
[  484.703121][T19388]  ? __pfx_____sys_sendmsg+0x10/0x10
[  484.703151][T19388]  ? import_iovec+0x73/0xa0
[  484.703173][T19388]  ___sys_sendmsg+0x2a5/0x360
[  484.703193][T19388]  ? __lock_acquire+0x6df/0x2e50
[  484.703360][T19388]  ? __pfx____sys_sendmsg+0x10/0x10
[  484.703481][T19388]  ? __fget_files+0x2a/0x420
[  484.703511][T19388]  ? __fget_files+0x3a2/0x420
[  484.703545][T19388]  __x64_sys_sendmsg+0x1b1/0x290
[  484.703571][T19388]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  484.703613][T19388]  do_syscall_64+0x166/0x520
[  484.703642][T19388]  ? trace_irq_disable+0x3b/0x140
[  484.703660][T19388]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.703681][T19388]  ? clear_bhb_loop+0x70/0xc0
[  484.703734][T19388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.703754][T19388] RIP: 0033:0x7fce4679e159
[  484.703775][T19388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  484.703792][T19388] RSP: 002b:00007fce449f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  484.703814][T19388] RAX: ffffffffffffffda RBX: 00007fce46a25fa0 RCX: 00007fce4679e159
[  484.703829][T19388] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005
[  484.703841][T19388] RBP: 00007fce449f6090 R08: 0000000000000000 R09: 0000000000000000
[  484.703853][T19388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  484.703864][T19388] R13: 00007fce46a26038 R14: 00007fce46a25fa0 R15: 00007ffc912d0c78
[  484.703896][T19388]  </TASK>
[  485.151965][T12191] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.152062][T12191] bond11: (slave dummy0): failed to get link speed/duplex
[  485.152553][T12191] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.152590][T12191] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.152623][T12191] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.368018][T19170] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.368241][T19170] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.368400][T19170] bridge_slave_0: entered allmulticast mode
[  485.377194][T19170] bridge_slave_0: entered promiscuous mode
[  485.386027][T19170] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.390944][T19170] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.391115][T19170] bridge_slave_1: entered allmulticast mode
[  485.400700][T19170] bridge_slave_1: entered promiscuous mode
[  485.689148][T19170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.742643][T19411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3170'.
[  485.748293][T19170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.750502][T12172] bond11: (slave dummy0): failed to get link speed/duplex
[  485.771416][T19411] openvswitch: netlink: Flow key attr not present in new flow.
[  485.950347][T19414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3167'.
[  486.063888][T12135] bond11: (slave dummy0): failed to get link speed/duplex
[  486.078928][T19170] team0: Port device team_slave_0 added
[  486.170231][T12135] bond11: (slave dummy0): failed to get link speed/duplex
[  486.284520][T19170] team0: Port device team_slave_1 added
[  486.284723][T12215] bond11: (slave dummy0): failed to get link speed/duplex
[  486.351476][T19445] netlink: 'syz.4.3173': attribute type 2 has an invalid length.
[  486.451713][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  486.594804][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3
[  486.595582][T12135] bond11: (slave dummy0): failed to get link speed/duplex
[  486.618536][T19170] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.618580][T19170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.618632][T19170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  486.678262][T19170] batman_adv: batadv0: Adding interface: batadv_slave_1
[  486.678308][T19170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.678337][T19170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.731856][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  486.737986][T19454] netlink: 'syz.4.3176': attribute type 1 has an invalid length.
[  487.190063][T12215] bond11: (slave dummy0): failed to get link speed/duplex
[  487.209185][T19455] gretap1: entered allmulticast mode
[  487.385769][T19461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3179'.
[  487.451397][T12215] bond11: (slave dummy0): failed to get link speed/duplex
[  487.490562][T19467] FAULT_INJECTION: forcing a failure.
[  487.490562][T19467] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  487.505210][T19467] CPU: 1 UID: 0 PID: 19467 Comm: syz.3.3181 Not tainted syzkaller #0 PREEMPT(full) 
[  487.505241][T19467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  487.505253][T19467] Call Trace:
[  487.505262][T19467]  <TASK>
[  487.505270][T19467]  dump_stack_lvl+0xe8/0x150
[  487.505304][T19467]  should_fail_ex+0x410/0x560
[  487.505338][T19467]  _copy_from_iter+0x1d3/0x1660
[  487.505375][T19467]  ? _copy_from_iter+0x21b/0x1660
[  487.505407][T19467]  ? __pfx__copy_from_iter+0x10/0x10
[  487.505443][T19467]  ? __pfx__copy_from_iter+0x10/0x10
[  487.505482][T19467]  copy_page_from_iter+0x219/0x2d0
[  487.505516][T19467]  skb_copy_datagram_from_iter+0x2f4/0x720
[  487.505560][T19467]  unix_stream_sendmsg+0x5ce/0xde0
[  487.505602][T19467]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  487.505630][T19467]  ? aa_sock_msg_perm+0x129/0x210
[  487.505658][T19467]  ? apparmor_socket_sendmsg+0x98/0x360
[  487.505700][T19467]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  487.505724][T19467]  sock_sendmsg_nosec+0x13a/0x180
[  487.505754][T19467]  ____sys_sendmsg+0x54e/0x850
[  487.505782][T19467]  ? __pfx_____sys_sendmsg+0x10/0x10
[  487.505815][T19467]  ? import_iovec+0x73/0xa0
[  487.505840][T19467]  ___sys_sendmsg+0x2a5/0x360
[  487.505861][T19467]  ? __lock_acquire+0x6df/0x2e50
[  487.505887][T19467]  ? __pfx____sys_sendmsg+0x10/0x10
[  487.505946][T19467]  ? __fget_files+0x2a/0x420
[  487.505972][T19467]  ? __fget_files+0x3a2/0x420
[  487.506008][T19467]  __x64_sys_sendmsg+0x1b1/0x290
[  487.506035][T19467]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  487.506076][T19467]  do_syscall_64+0x166/0x520
[  487.506104][T19467]  ? trace_irq_disable+0x3b/0x140
[  487.506122][T19467]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.506141][T19467]  ? clear_bhb_loop+0x70/0xc0
[  487.506165][T19467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.506184][T19467] RIP: 0033:0x7fce4679e159
[  487.506205][T19467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.506223][T19467] RSP: 002b:00007fce449f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  487.506247][T19467] RAX: ffffffffffffffda RBX: 00007fce46a25fa0 RCX: 00007fce4679e159
[  487.506261][T19467] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005
[  487.506275][T19467] RBP: 00007fce449f6090 R08: 0000000000000000 R09: 0000000000000000
[  487.506287][T19467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  487.506300][T19467] R13: 00007fce46a26038 R14: 00007fce46a25fa0 R15: 00007ffc912d0c78
[  487.506333][T19467]  </TASK>
[  487.507014][T19170] hsr_slave_0: entered promiscuous mode
[  487.523806][T19170] hsr_slave_1: entered promiscuous mode
[  487.531135][T19170] debugfs: 'hsr0' already exists in 'hsr'
[  487.531161][T19170] Cannot create hsr debugfs directory
[  487.704493][T12191] bond11: (slave dummy0): failed to get link speed/duplex
[  487.904985][T19476] netlink: 'syz.4.3180': attribute type 1 has an invalid length.
[  487.905032][T19476] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3180'.
[  487.969320][T19489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3184'.
[  488.097658][   T79] IPVS: stop unused estimator thread 0...
[  488.115668][T19494] netlink: 'syz.3.3183': attribute type 23 has an invalid length.
[  488.662212][T19512] netlink: 'syz.3.3185': attribute type 12 has an invalid length.
[  488.662267][T19512] netlink: 'syz.3.3185': attribute type 29 has an invalid length.
[  488.662298][T19512] __nla_validate_parse: 2 callbacks suppressed
[  488.662313][T19512] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3185'.
[  488.662335][T19512] netlink: 'syz.3.3185': attribute type 1 has an invalid length.
[  488.662350][T19512] netlink: 47 bytes leftover after parsing attributes in process `syz.3.3185'.
[  489.112647][T19170] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.207598][T19532] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3188'.
[  489.207685][T19532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3188'.
[  489.313274][T19534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3189'.
[  489.453092][T19170] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.533969][T19537] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  489.727120][T19170] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.033961][T19170] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.152259][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3197'.
[  490.163373][T19570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3197'.
[  490.173289][T19570] netlink: 'syz.4.3197': attribute type 6 has an invalid length.
[  490.185575][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3197'.
[  490.185625][T19570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3197'.
[  490.185651][T19570] netlink: 'syz.4.3197': attribute type 6 has an invalid length.
[  490.190968][T19568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3196'.
[  490.287797][T19568] vlan2: entered allmulticast mode
[  490.296994][T19568] bridge9: entered allmulticast mode
[  490.310254][T19568] nbd: couldn't find a device at index 0
[  490.322185][T12215] net_ratelimit: 9 callbacks suppressed
[  490.322243][T12215] bond11: (slave dummy0): failed to get link speed/duplex
[  490.490222][T12215] bond11: (slave dummy0): failed to get link speed/duplex
[  490.700447][T12191] bond11: (slave dummy0): failed to get link speed/duplex
[  491.784435][T19170] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  491.797128][T19170] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  491.801200][T19170] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  491.857081][T19170] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  491.931487][T12172] bond11: (slave dummy0): failed to get link speed/duplex
[  491.937543][T19170] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  491.948640][T19170] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  491.988353][T19170] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  492.025896][T19170] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  492.081037][   T79] bond11: (slave dummy0): failed to get link speed/duplex
[  492.384007][T12135] bond11: (slave dummy0): failed to get link speed/duplex
[  492.704438][T19644] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8
[  492.993379][T19170] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.149777][T12203] bond11: (slave dummy0): failed to get link speed/duplex
[  493.165264][T19170] 8021q: adding VLAN 0 to HW filter on device team0
[  493.187554][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.187693][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.225930][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.227496][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.281060][T12172] bond11: (slave dummy0): failed to get link speed/duplex
[  493.387528][T19655] pimreg: entered allmulticast mode
[  493.394621][T19654] pimreg: left allmulticast mode
[  493.622021][T12135] bond11: (slave dummy0): failed to get link speed/duplex
[  493.731021][T12135] bond11: (slave dummy0): failed to get link speed/duplex
[  493.754897][T19663] __nla_validate_parse: 1 callbacks suppressed
[  493.754963][T19663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'.
[  493.766914][T19668] FAULT_INJECTION: forcing a failure.
[  493.766914][T19668] name failslab, interval 1, probability 0, space 0, times 0
[  493.766948][T19668] CPU: 1 UID: 0 PID: 19668 Comm: syz.4.3210 Not tainted syzkaller #0 PREEMPT(full) 
[  493.766970][T19668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  493.766981][T19668] Call Trace:
[  493.766989][T19668]  <TASK>
[  493.766996][T19668]  dump_stack_lvl+0xe8/0x150
[  493.767026][T19668]  should_fail_ex+0x410/0x560
[  493.767057][T19668]  ? __alloc_skb+0x1db/0x7a0
[  493.767083][T19668]  should_failslab+0xa8/0x100
[  493.767105][T19668]  ? __alloc_skb+0x1db/0x7a0
[  493.767137][T19668]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  493.767164][T19668]  ? __alloc_skb+0x18d/0x7a0
[  493.767189][T19668]  ? __alloc_skb+0x1db/0x7a0
[  493.767221][T19668]  __alloc_skb+0x1db/0x7a0
[  493.767255][T19668]  alloc_skb_with_frags+0xc6/0x760
[  493.767284][T19668]  sock_alloc_send_pskb+0x878/0x990
[  493.767323][T19668]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  493.767348][T19668]  ? sk_psock_verdict_data_ready+0xad/0x690
[  493.767439][T19668]  ? __pfx_sock_def_readable+0x10/0x10
[  493.767461][T19668]  ? sk_psock_verdict_data_ready+0xad/0x690
[  493.767481][T19668]  ? sk_psock_verdict_data_ready+0x4e7/0x690
[  493.767504][T19668]  unix_stream_sendmsg+0x4ba/0xde0
[  493.767544][T19668]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  493.767568][T19668]  ? aa_sock_msg_perm+0x129/0x210
[  493.767593][T19668]  ? apparmor_socket_sendmsg+0x98/0x360
[  493.767621][T19668]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  493.767642][T19668]  sock_sendmsg_nosec+0x13a/0x180
[  493.767669][T19668]  ____sys_sendmsg+0x54e/0x850
[  493.767694][T19668]  ? __pfx_____sys_sendmsg+0x10/0x10
[  493.767722][T19668]  ? import_iovec+0x73/0xa0
[  493.767745][T19668]  ___sys_sendmsg+0x2a5/0x360
[  493.767764][T19668]  ? __lock_acquire+0x6df/0x2e50
[  493.767787][T19668]  ? __pfx____sys_sendmsg+0x10/0x10
[  493.767839][T19668]  ? __fget_files+0x2a/0x420
[  493.767862][T19668]  ? __fget_files+0x3a2/0x420
[  493.767893][T19668]  __x64_sys_sendmsg+0x1b1/0x290
[  493.767915][T19668]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  493.767955][T19668]  do_syscall_64+0x166/0x520
[  493.767980][T19668]  ? trace_irq_disable+0x3b/0x140
[  493.767997][T19668]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.768016][T19668]  ? clear_bhb_loop+0x70/0xc0
[  493.768038][T19668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.768056][T19668] RIP: 0033:0x7f47ab79e159
[  493.768074][T19668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.768090][T19668] RSP: 002b:00007f47ac6f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  493.768110][T19668] RAX: ffffffffffffffda RBX: 00007f47aba25fa0 RCX: 00007f47ab79e159
[  493.768124][T19668] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[  493.768143][T19668] RBP: 00007f47ac6f8090 R08: 0000000000000000 R09: 0000000000000000
[  493.768155][T19668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  493.768166][T19668] R13: 00007f47aba26038 R14: 00007f47aba25fa0 R15: 00007ffe767bbde8
[  493.768195][T19668]  </TASK>
[  493.815081][T19667] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  494.150485][T19673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3211'.
[  494.175813][T19673] team_slave_0: entered promiscuous mode
[  494.178382][T19673] gretap0: entered promiscuous mode
[  494.184204][T19673] debugfs: 'hsr0' already exists in 'hsr'
[  494.184228][T19673] Cannot create hsr debugfs directory
[  494.184244][T19673] hsr0: entered promiscuous mode
[  494.671462][T19682] syzkaller1: entered promiscuous mode
[  494.678443][T19682] syzkaller1: entered allmulticast mode
[  494.979650][T19692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3214'.
[  495.477018][T19703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  495.490149][T12211] net_ratelimit: 5 callbacks suppressed
[  495.490174][T12211] bond11: (slave dummy0): failed to get link speed/duplex
[  495.600746][   T79] bond11: (slave dummy0): failed to get link speed/duplex
[  495.710529][T12193] bond11: (slave dummy0): failed to get link speed/duplex
[  495.820034][T12197] bond11: (slave dummy0): failed to get link speed/duplex
[  495.931347][T12214] bond11: (slave dummy0): failed to get link speed/duplex
[  495.974319][T19726] syzkaller0: entered promiscuous mode
[  495.974378][T19726] syzkaller0: entered allmulticast mode
[  495.995656][T19170] 8021q: adding VLAN 0 to HW filter on device batadv0
[  496.050211][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  496.170098][T12155] bond11: (slave dummy0): failed to get link speed/duplex
[  496.292728][T12155] bond11: (slave dummy0): failed to get link speed/duplex
[  496.364091][T19170] veth0_vlan: entered promiscuous mode
[  496.431349][T19170] veth1_vlan: entered promiscuous mode
[  496.440997][T12184] bond11: (slave dummy0): failed to get link speed/duplex
[  496.551040][T12155] bond11: (slave dummy0): failed to get link speed/duplex
[  496.562922][T19170] veth0_macvtap: entered promiscuous mode
[  496.579029][T19170] veth1_macvtap: entered promiscuous mode
[  496.663677][T19170] batman_adv: batadv0: Interface activated: batadv_slave_0
[  496.700118][T12155] bond11: (slave dummy0): failed to get link speed/duplex
[  496.706101][T19759] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3226'.
[  496.709627][T19170] batman_adv: batadv0: Interface activated: batadv_slave_1
[  496.882122][T12133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.882283][T12155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.882328][T12155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.882392][T12155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.106224][T12133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.106274][T12133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.191648][T12133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.191691][T12133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.155511][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  498.172257][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  498.182051][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  498.192506][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  498.203096][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  498.259779][T19805] caif0: tun_chr_ioctl cmd 2147767507
[  498.284333][T19805] netlink: 'syz.2.3237': attribute type 10 has an invalid length.
[  498.284626][T19805] vlan0: entered allmulticast mode
[  498.284666][T19805] veth0_vlan: entered allmulticast mode
[  498.387111][T19805] team0: Port device vlan0 added
[  498.436617][T19819] 8021q: adding VLAN 0 to HW filter on device bond0
[  498.448974][T19819] 8021q: adding VLAN 0 to HW filter on device team0
[  498.465305][T19819] 8021q: adding VLAN 0 to HW filter on device batadv0
[  498.575889][T19819] batman_adv: batadv0: Interface activated: batadv_slave_0
[  498.585684][T19819] batman_adv: batadv0: Interface activated: batadv_slave_1
[  498.635064][T19819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  498.635133][T19819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  498.704855][T19819] veth1_vlan: left promiscuous mode
[  498.715289][T19819] veth0_vlan: left promiscuous mode
[  498.730360][T19819] veth0_vlan: entered promiscuous mode
[  498.751160][T19819] veth1_vlan: entered promiscuous mode
[  498.779503][T19819] veth1_macvtap: left promiscuous mode
[  498.787125][T19819] veth0_macvtap: left promiscuous mode
[  498.793268][T19819] veth0_macvtap: entered promiscuous mode
[  498.804644][T19819] veth1_macvtap: entered promiscuous mode
[  498.846823][T19819] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  498.852287][T19819] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  498.858229][T19819] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  498.868264][T19819] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  498.911891][T12184] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.912010][T12184] bridge0: port 1(bridge_slave_0) entered forwarding state
[  498.937499][T12184] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.937668][T12184] bridge0: port 2(bridge_slave_1) entered forwarding state
[  499.510912][T12165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.511022][T12165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.511080][T12165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.521778][T12182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.540934][T19823] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  499.816569][ T5632] bond9: (slave syz_tun): Removing an active aggregator
[  499.834017][ T5632] bond9: (slave syz_tun): Releasing backup interface
[  499.951542][T19872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3245'.
[  499.998693][T19867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3244'.
[  500.291097][ T5614] Bluetooth: hci2: command tx timeout
[  500.620017][T12198] net_ratelimit: 17 callbacks suppressed
[  500.620073][T12198] bond11: (slave dummy0): failed to get link speed/duplex
[  500.673656][T19886] syzkaller1: entered promiscuous mode
[  500.679570][T19886] syzkaller1: entered allmulticast mode
[  500.724005][T19889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3249'.
[  500.822080][T19891] FAULT_INJECTION: forcing a failure.
[  500.822080][T19891] name failslab, interval 1, probability 0, space 0, times 0
[  500.843175][T19891] CPU: 0 UID: 0 PID: 19891 Comm: syz.1.3250 Not tainted syzkaller #0 PREEMPT(full) 
[  500.843208][T19891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  500.843221][T19891] Call Trace:
[  500.843229][T19891]  <TASK>
[  500.843238][T19891]  dump_stack_lvl+0xe8/0x150
[  500.843274][T19891]  should_fail_ex+0x410/0x560
[  500.843309][T19891]  ? __alloc_skb+0x1db/0x7a0
[  500.843339][T19891]  should_failslab+0xa8/0x100
[  500.843365][T19891]  ? __alloc_skb+0x1db/0x7a0
[  500.843393][T19891]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  500.843422][T19891]  ? __alloc_skb+0x18d/0x7a0
[  500.843451][T19891]  ? __alloc_skb+0x1db/0x7a0
[  500.843487][T19891]  __alloc_skb+0x1db/0x7a0
[  500.843519][T19891]  alloc_skb_with_frags+0xc6/0x760
[  500.843553][T19891]  sock_alloc_send_pskb+0x878/0x990
[  500.843596][T19891]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  500.843624][T19891]  ? sk_psock_verdict_data_ready+0xad/0x690
[  500.843648][T19891]  ? __pfx_sock_def_readable+0x10/0x10
[  500.843673][T19891]  ? sk_psock_verdict_data_ready+0xad/0x690
[  500.843708][T19891]  ? sk_psock_verdict_data_ready+0x4e7/0x690
[  500.843735][T19891]  unix_stream_sendmsg+0x4ba/0xde0
[  500.843786][T19891]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  500.843814][T19891]  ? aa_sock_msg_perm+0x129/0x210
[  500.843840][T19891]  ? apparmor_socket_sendmsg+0x98/0x360
[  500.843873][T19891]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  500.843897][T19891]  sock_sendmsg_nosec+0x13a/0x180
[  500.843947][T19891]  ____sys_sendmsg+0x54e/0x850
[  500.843977][T19891]  ? __pfx_____sys_sendmsg+0x10/0x10
[  500.844020][T19891]  ? import_iovec+0x73/0xa0
[  500.844047][T19891]  ___sys_sendmsg+0x2a5/0x360
[  500.844069][T19891]  ? __lock_acquire+0x6df/0x2e50
[  500.844096][T19891]  ? __pfx____sys_sendmsg+0x10/0x10
[  500.844157][T19891]  ? __fget_files+0x2a/0x420
[  500.844184][T19891]  ? __fget_files+0x3a2/0x420
[  500.844221][T19891]  __x64_sys_sendmsg+0x1b1/0x290
[  500.844247][T19891]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  500.844293][T19891]  do_syscall_64+0x166/0x520
[  500.844323][T19891]  ? trace_irq_disable+0x3b/0x140
[  500.844343][T19891]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.844365][T19891]  ? clear_bhb_loop+0x70/0xc0
[  500.844391][T19891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.844412][T19891] RIP: 0033:0x7f1dd459e159
[  500.844435][T19891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.844453][T19891] RSP: 002b:00007f1dd5415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  500.844477][T19891] RAX: ffffffffffffffda RBX: 00007f1dd4825fa0 RCX: 00007f1dd459e159
[  500.844492][T19891] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005
[  500.844506][T19891] RBP: 00007f1dd5415090 R08: 0000000000000000 R09: 0000000000000000
[  500.844518][T19891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  500.844531][T19891] R13: 00007f1dd4826038 R14: 00007f1dd4825fa0 R15: 00007ffed61b22d8
[  500.844565][T19891]  </TASK>
[  501.151232][T19902] netlink: 'syz.3.3254': attribute type 1 has an invalid length.
[  501.224492][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'.
[  501.234185][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3254'.
[  501.362661][T19902] 8021q: adding VLAN 0 to HW filter on device bond1
[  501.421729][T12133] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  501.421804][T12133] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  501.421839][T12133] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  501.421906][T12133] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  501.498210][T12155] bond11: (slave dummy0): failed to get link speed/duplex
[  501.576672][T19902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3254'.
[  501.635852][T19902] bond1: entered promiscuous mode
[  501.715001][T19908] bond1: (slave dummy0): making interface the new active one
[  501.715054][T19908] dummy0: entered promiscuous mode
[  501.732008][T19908] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  501.751476][T12155] bond11: (slave dummy0): failed to get link speed/duplex
[  501.838256][T19924] netlink: 756 bytes leftover after parsing attributes in process `syz.0.3259'.
[  501.921759][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  502.001792][T19935] openvswitch: netlink: Duplicate key (type 0).
[  502.198302][T19811] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.200292][T19811] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.200446][T19811] bridge_slave_0: entered allmulticast mode
[  502.204959][T19811] bridge_slave_0: entered promiscuous mode
[  502.208602][T19811] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.210281][T19811] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.210418][T19811] bridge_slave_1: entered allmulticast mode
[  502.212262][T19811] bridge_slave_1: entered promiscuous mode
[  502.260114][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  502.321193][T19811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.337855][T19811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.370403][ T5614] Bluetooth: hci2: command tx timeout
[  502.570286][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  502.662912][T19811] team0: Port device team_slave_0 added
[  502.689280][T19811] team0: Port device team_slave_1 added
[  502.786975][T19953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  502.829964][T12182] bond11: (slave dummy0): failed to get link speed/duplex
[  502.836121][T19811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  502.836139][T19811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  502.836193][T19811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  502.847684][T19811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  502.847702][T19811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  502.847727][T19811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.026017][T19956] geneve2: entered promiscuous mode
[  503.063197][T12189] bond11: (slave dummy0): failed to get link speed/duplex
[  503.269329][T19811] hsr_slave_0: entered promiscuous mode
[  503.272789][T19811] hsr_slave_1: entered promiscuous mode
[  503.275644][T19811] debugfs: 'hsr0' already exists in 'hsr'
[  503.276104][T19811] Cannot create hsr debugfs directory
[  503.775968][T19975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3267'.
[  504.243195][T19811] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.264480][T19811] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.451691][ T5614] Bluetooth: hci2: command tx timeout
[  504.504956][T19998] syzkaller0: entered promiscuous mode
[  504.512347][T19998] syzkaller0: entered allmulticast mode
[  506.534963][ T5614] Bluetooth: hci2: command tx timeout
[  507.229094][T19933] net_ratelimit: 5 callbacks suppressed
[  507.229165][T19933] Set syz1 is full, maxelem 65536 reached
[  509.183260][T19811] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  509.183304][T19811] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.220601][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  509.303320][T19811] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  509.321702][T19811] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.345342][T20033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3279'.
[  509.356758][T20033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3279'.
[  509.457725][T20039] block nbd3: NBD_DISCONNECT
[  509.463315][T20039] block nbd3: Send disconnect failed -101
[  509.473446][T20039] block nbd3: shutting down sockets
[  509.536477][T19811] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  509.536555][T19811] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.646957][T20044] ip_tables: iptables: counters copy to user failed while replacing table
[  509.670101][T12198] bond11: (slave dummy0): failed to get link speed/duplex
[  509.785515][T12198] bond11: (slave dummy0): failed to get link speed/duplex
[  509.972413][T12198] bond11: (slave dummy0): failed to get link speed/duplex
[  509.974552][T20048] syzkaller0: entered promiscuous mode
[  509.974574][T20048] syzkaller0: entered allmulticast mode
[  510.233853][T20052] syzkaller0: entered promiscuous mode
[  510.240278][T20052] syzkaller0: entered allmulticast mode
[  510.257472][T19811] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  510.262052][T20056] Bluetooth: MGMT ver 1.23
[  510.280995][T19811] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  510.291801][T19811] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  510.307598][T19811] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  510.313177][T19811] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  510.328433][T19811] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  510.331040][T19811] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  510.358124][T19811] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  510.616699][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  510.696248][T19811] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.737773][T19811] 8021q: adding VLAN 0 to HW filter on device team0
[  510.777686][T12182] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.778962][T12182] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.817149][T12133] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.817278][T12133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  510.824846][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  510.867175][T20076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3291'.
[  511.111836][T12189] bond11: (slave dummy0): failed to get link speed/duplex
[  511.210892][T20092] netlink: 'syz.0.3293': attribute type 1 has an invalid length.
[  511.567992][T20092] bridge10: entered promiscuous mode
[  511.568032][T20092] bridge10: entered allmulticast mode
[  511.632246][T20092] bond16: (slave bridge10): making interface the new active one
[  511.643391][T20092] bond16: (slave bridge10): Enslaving as an active interface with an up link
[  511.671361][T20117] bridge11: entered promiscuous mode
[  511.671482][T20117] bridge11: entered allmulticast mode
[  511.682886][T20117] bond16: (slave bridge11): Enslaving as a backup interface with an up link
[  511.690121][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  511.748976][T20124] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3298'.
[  511.857510][T20124] xt_TPROXY: Can be used only with -p tcp or -p udp
[  511.886505][T20124] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3298'.
[  511.886585][T20124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3298'.
[  511.886602][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3298'.
[  512.292390][ T5614] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  512.324122][T19811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  512.340777][T12165] net_ratelimit: 4 callbacks suppressed
[  512.340833][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  512.486442][T20146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'.
[  512.541228][T12167] bond11: (slave dummy0): failed to get link speed/duplex
[  512.650571][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  512.713068][T20156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3305'.
[  512.713137][T20156] netlink: 'syz.0.3305': attribute type 7 has an invalid length.
[  512.713151][T20156] netlink: 'syz.0.3305': attribute type 8 has an invalid length.
[  512.713164][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3305'.
[  512.716994][T20151] netlink: 'syz.0.3305': attribute type 1 has an invalid length.
[  512.810105][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  512.818548][T20161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  512.834664][T20164] x_tables: ip_tables: icmp match: only valid for protocol 1
[  512.839009][T20164] netlink: 'syz.3.3307': attribute type 61 has an invalid length.
[  512.839034][T20164] netlink: 'syz.3.3307': attribute type 62 has an invalid length.
[  512.926568][T12155] bond11: (slave dummy0): failed to get link speed/duplex
[  513.040405][T12198] bond11: (slave dummy0): failed to get link speed/duplex
[  513.185375][T19811] veth0_vlan: entered promiscuous mode
[  513.199542][T20173] veth1_macvtap: left promiscuous mode
[  513.199596][T20173] macsec0: entered allmulticast mode
[  513.218900][T20173] veth1_macvtap: entered promiscuous mode
[  513.220154][T20173] veth1_macvtap: entered allmulticast mode
[  513.225176][T20173] macsec0: left allmulticast mode
[  513.225199][T20173] veth1_macvtap: left allmulticast mode
[  513.294679][T19811] veth1_vlan: entered promiscuous mode
[  513.310666][T12188] bond11: (slave dummy0): failed to get link speed/duplex
[  513.362197][T19811] veth0_macvtap: entered promiscuous mode
[  513.383747][T19811] veth1_macvtap: entered promiscuous mode
[  513.423162][T20175] macsec1: entered promiscuous mode
[  513.430561][T12188] bond11: (slave dummy0): failed to get link speed/duplex
[  513.575827][T19811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  513.600626][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  513.624211][T19811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  513.701308][T12155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.702422][T12155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.702460][T12155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.702491][T12155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.207677][T12137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.219305][T12137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.392735][T12188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.392783][T12188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.616440][T20225] __nla_validate_parse: 6 callbacks suppressed
[  514.616496][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'.
[  514.774029][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3323'.
[  514.896058][T20245] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3325'.
[  514.917709][T20246] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3325'.
[  515.146821][T20247] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  515.492892][T20264] netlink: 'syz.1.3330': attribute type 1 has an invalid length.
[  515.528552][T20264] 8021q: adding VLAN 0 to HW filter on device bond1
[  515.572388][T20264] bond1: (slave geneve3): making interface the new active one
[  515.581379][T20264] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  515.586491][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  515.596821][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  515.601460][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  515.628308][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  515.638627][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  515.830400][T20272] siw: device registration error -23
[  516.478982][T20290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3335'.
[  516.668989][T20290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3335'.
[  517.122851][T20317] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3339'.
[  517.122957][T20317] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3339'.
[  517.221148][T20320] netlink: 'syz.1.3341': attribute type 2 has an invalid length.
[  517.229174][T20320] netlink: 'syz.1.3341': attribute type 8 has an invalid length.
[  517.229197][T20320] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3341'.
[  517.510891][T20320] pim6reg1: entered promiscuous mode
[  517.510953][T20320] pim6reg1: entered allmulticast mode
[  517.700013][T12159] net_ratelimit: 18 callbacks suppressed
[  517.700071][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  517.730194][ T5614] Bluetooth: hci4: command tx timeout
[  517.778277][T20337] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.3347'.
[  517.836667][T12155] bond11: (slave dummy0): failed to get link speed/duplex
[  518.040081][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  518.136596][T20356] netlink: 'syz.1.3350': attribute type 13 has an invalid length.
[  518.421439][T12188] bond11: (slave dummy0): failed to get link speed/duplex
[  518.534720][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  518.913494][T20267] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.915246][T20267] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.915672][T20267] bridge_slave_0: entered allmulticast mode
[  518.919486][T20267] bridge_slave_0: entered promiscuous mode
[  518.936788][T20267] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.936899][T20267] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.937049][T20267] bridge_slave_1: entered allmulticast mode
[  518.939741][T20267] bridge_slave_1: entered promiscuous mode
[  519.237216][T20267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.256616][T20267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.376069][T20267] team0: Port device team_slave_0 added
[  519.388281][T20267] team0: Port device team_slave_1 added
[  519.544901][T20400] netlink: 'syz.3.3357': attribute type 21 has an invalid length.
[  519.591666][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  519.605623][T20400] netlink: 'syz.3.3357': attribute type 5 has an invalid length.
[  519.605682][T20400] netlink: 'syz.3.3357': attribute type 6 has an invalid length.
[  519.624686][T20267] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.633389][T20267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  519.633465][T20267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.676209][T20267] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.685591][T20267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  519.685643][T20267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.810516][ T5614] Bluetooth: hci4: command tx timeout
[  519.959417][T20267] hsr_slave_0: entered promiscuous mode
[  519.964164][T20267] hsr_slave_1: entered promiscuous mode
[  519.964872][T20267] debugfs: 'hsr0' already exists in 'hsr'
[  519.964900][T20267] Cannot create hsr debugfs directory
[  520.108784][T20414] __nla_validate_parse: 5 callbacks suppressed
[  520.108847][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'.
[  520.273993][T20416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3362'.
[  520.274063][T20416] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3362'.
[  520.605195][T20435] ip_tables: iptables: counters copy to user failed while replacing table
[  520.727816][T20423] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.728656][T20423] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.047634][T20423] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  521.070676][T20423] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.420235][T20423] geneve2: left promiscuous mode
[  521.433222][T20423] bond1: left promiscuous mode
[  521.433257][T20423] dummy0: left promiscuous mode
[  521.564532][T12137] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  521.564598][T12137] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.564680][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  521.564710][T12137] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  521.564734][T12137] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.564765][T12137] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  521.566738][T12137] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.566779][T12137] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  521.566802][T12137] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.677651][T12188] bond11: (slave dummy0): failed to get link speed/duplex
[  521.777538][T20445] tipc: Started in network mode
[  521.777594][T20445] tipc: Node identity 1, cluster identity 4711
[  521.777609][T20445] tipc: Node number set to 1
[  521.792322][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  521.890063][ T5614] Bluetooth: hci4: command tx timeout
[  521.975421][T20267] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  521.986874][T20267] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.195985][T20267] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  522.196053][T20267] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.370602][T20267] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  522.382139][T20267] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.595672][T20267] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  522.612453][T20267] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.624468][T12196] IPVS: starting estimator thread 0...
[  522.729427][T20475] IPVS: using max 26 ests per chain, 62400 per kthread
[  522.847912][T12137] net_ratelimit: 2 callbacks suppressed
[  522.847972][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  523.001983][T20489] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3378'.
[  523.014796][T20490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3378'.
[  523.221563][T12196] bond11: (slave dummy0): failed to get link speed/duplex
[  523.470792][T20500] ipvlan2: entered promiscuous mode
[  523.480020][T20500] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  523.493642][T20500] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  523.493846][T20500] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  523.691743][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'.
[  523.970075][ T5614] Bluetooth: hci4: command tx timeout
[  524.400094][T12155] bond11: (slave dummy0): failed to get link speed/duplex
[  524.510779][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  524.646361][T20267] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  524.667150][T20267] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  524.669703][T20267] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  524.698821][T20267] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  524.712864][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  524.716129][T20267] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  524.741572][T20267] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  524.745821][T20267] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  524.763302][T20267] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  524.813212][T20530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3390'.
[  524.818421][T20530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3390'.
[  524.818447][T20530] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  524.824646][T20538] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  524.939025][T12196] bond11: (slave dummy0): failed to get link speed/duplex
[  525.253529][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  525.400151][T12155] bond11: (slave dummy0): failed to get link speed/duplex
[  525.670815][T20267] 8021q: adding VLAN 0 to HW filter on device bond0
[  525.678663][T12196] bond11: (slave dummy0): failed to get link speed/duplex
[  526.007921][T20572] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3400'.
[  526.081714][T20267] 8021q: adding VLAN 0 to HW filter on device team0
[  526.177378][T12165] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.177533][T12165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  526.318684][T12188] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.318823][T12188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  526.426469][T20586] FAULT_INJECTION: forcing a failure.
[  526.426469][T20586] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  526.426542][T20586] CPU: 1 UID: 0 PID: 20586 Comm: syz.1.3403 Not tainted syzkaller #0 PREEMPT(full) 
[  526.426567][T20586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  526.426578][T20586] Call Trace:
[  526.426587][T20586]  <TASK>
[  526.426595][T20586]  dump_stack_lvl+0xe8/0x150
[  526.426631][T20586]  should_fail_ex+0x410/0x560
[  526.426667][T20586]  _copy_from_iter+0x1d3/0x1660
[  526.426702][T20586]  ? _copy_from_iter+0x21b/0x1660
[  526.426730][T20586]  ? __pfx__copy_from_iter+0x10/0x10
[  526.426761][T20586]  ? __pfx__copy_from_iter+0x10/0x10
[  526.426795][T20586]  copy_page_from_iter+0x219/0x2d0
[  526.426826][T20586]  skb_copy_datagram_from_iter+0x2f4/0x720
[  526.426862][T20586]  unix_stream_sendmsg+0x5ce/0xde0
[  526.426886][T20586]  ? __dequeue_task+0x2130/0x26d0
[  526.426957][T20586]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  526.426982][T20586]  ? aa_sock_msg_perm+0x129/0x210
[  526.427010][T20586]  ? apparmor_socket_sendmsg+0x98/0x360
[  526.427042][T20586]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  526.427062][T20586]  sock_sendmsg_nosec+0x13a/0x180
[  526.427089][T20586]  ____sys_sendmsg+0x54e/0x850
[  526.427114][T20586]  ? __pfx_____sys_sendmsg+0x10/0x10
[  526.427141][T20586]  ? import_iovec+0x73/0xa0
[  526.427164][T20586]  ___sys_sendmsg+0x2a5/0x360
[  526.427182][T20586]  ? __lock_acquire+0x6df/0x2e50
[  526.427205][T20586]  ? __pfx____sys_sendmsg+0x10/0x10
[  526.427256][T20586]  ? __fget_files+0x2a/0x420
[  526.427281][T20586]  ? __fget_files+0x3a2/0x420
[  526.427313][T20586]  __x64_sys_sendmsg+0x1b1/0x290
[  526.427336][T20586]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  526.427374][T20586]  do_syscall_64+0x166/0x520
[  526.427409][T20586]  ? trace_irq_disable+0x3b/0x140
[  526.427428][T20586]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.427449][T20586]  ? clear_bhb_loop+0x70/0xc0
[  526.427471][T20586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.427489][T20586] RIP: 0033:0x7f1dd459e159
[  526.427507][T20586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  526.427523][T20586] RSP: 002b:00007f1dd5415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  526.427543][T20586] RAX: ffffffffffffffda RBX: 00007f1dd4825fa0 RCX: 00007f1dd459e159
[  526.427558][T20586] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005
[  526.427570][T20586] RBP: 00007f1dd5415090 R08: 0000000000000000 R09: 0000000000000000
[  526.427581][T20586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  526.427592][T20586] R13: 00007f1dd4826038 R14: 00007f1dd4825fa0 R15: 00007ffed61b22d8
[  526.427622][T20586]  </TASK>
[  526.868153][T20598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3405'.
[  527.264616][T20608] can: request_module (can-proto-4) failed.
[  527.644363][T20624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3410'.
[  527.749443][T20632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3411'.
[  527.900928][T12155] net_ratelimit: 11 callbacks suppressed
[  527.900985][T12155] bond11: (slave dummy0): failed to get link speed/duplex
[  528.011993][T12199] bond11: (slave dummy0): failed to get link speed/duplex
[  528.116668][T20653] lo speed is unknown, defaulting to 1000
[  528.134244][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  528.145512][T20653] lo speed is unknown, defaulting to 1000
[  528.146476][T20653] lo speed is unknown, defaulting to 1000
[  528.238444][T20653] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  528.238518][T20653] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  528.238580][T20653] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  528.263303][T20653] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22
[  528.304026][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  528.373503][T20653] lo speed is unknown, defaulting to 1000
[  528.388888][T20653] lo speed is unknown, defaulting to 1000
[  528.404443][T20653] lo speed is unknown, defaulting to 1000
[  528.420266][T12199] bond11: (slave dummy0): failed to get link speed/duplex
[  528.442348][T20653] lo speed is unknown, defaulting to 1000
[  528.453694][T20653] lo speed is unknown, defaulting to 1000
[  528.462741][T20653] lo speed is unknown, defaulting to 1000
[  528.478824][T20653] lo speed is unknown, defaulting to 1000
[  528.488774][T20653] lo speed is unknown, defaulting to 1000
[  528.498753][T20653] lo speed is unknown, defaulting to 1000
[  528.533157][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  528.560707][T20661] FAULT_INJECTION: forcing a failure.
[  528.560707][T20661] name failslab, interval 1, probability 0, space 0, times 0
[  528.574655][T20661] CPU: 0 UID: 0 PID: 20661 Comm: syz.1.3415 Not tainted syzkaller #0 PREEMPT(full) 
[  528.574684][T20661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  528.574697][T20661] Call Trace:
[  528.574706][T20661]  <TASK>
[  528.574714][T20661]  dump_stack_lvl+0xe8/0x150
[  528.574750][T20661]  should_fail_ex+0x410/0x560
[  528.574785][T20661]  ? __alloc_skb+0x1db/0x7a0
[  528.574816][T20661]  should_failslab+0xa8/0x100
[  528.574843][T20661]  ? __alloc_skb+0x1db/0x7a0
[  528.574871][T20661]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  528.574910][T20661]  ? __alloc_skb+0x18d/0x7a0
[  528.574941][T20661]  ? __alloc_skb+0x1db/0x7a0
[  528.574976][T20661]  __alloc_skb+0x1db/0x7a0
[  528.575011][T20661]  alloc_skb_with_frags+0xc6/0x760
[  528.575045][T20661]  sock_alloc_send_pskb+0x878/0x990
[  528.575087][T20661]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  528.575115][T20661]  ? sk_psock_verdict_data_ready+0xad/0x690
[  528.575142][T20661]  ? __pfx_sock_def_readable+0x10/0x10
[  528.575167][T20661]  ? sk_psock_verdict_data_ready+0xad/0x690
[  528.575191][T20661]  ? sk_psock_verdict_data_ready+0x4e7/0x690
[  528.575216][T20661]  unix_stream_sendmsg+0x4ba/0xde0
[  528.575260][T20661]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  528.575287][T20661]  ? aa_sock_msg_perm+0x129/0x210
[  528.575317][T20661]  ? apparmor_socket_sendmsg+0x98/0x360
[  528.575350][T20661]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  528.575374][T20661]  sock_sendmsg_nosec+0x13a/0x180
[  528.575404][T20661]  ____sys_sendmsg+0x54e/0x850
[  528.575433][T20661]  ? __pfx_____sys_sendmsg+0x10/0x10
[  528.575466][T20661]  ? import_iovec+0x73/0xa0
[  528.575492][T20661]  ___sys_sendmsg+0x2a5/0x360
[  528.575514][T20661]  ? __lock_acquire+0x6df/0x2e50
[  528.575541][T20661]  ? __pfx____sys_sendmsg+0x10/0x10
[  528.575606][T20661]  ? __fget_files+0x2a/0x420
[  528.575632][T20661]  ? __fget_files+0x3a2/0x420
[  528.575668][T20661]  __x64_sys_sendmsg+0x1b1/0x290
[  528.575693][T20661]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  528.575737][T20661]  do_syscall_64+0x166/0x520
[  528.575765][T20661]  ? trace_irq_disable+0x3b/0x140
[  528.575784][T20661]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.575804][T20661]  ? clear_bhb_loop+0x70/0xc0
[  528.575830][T20661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.575851][T20661] RIP: 0033:0x7f1dd459e159
[  528.575871][T20661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.575898][T20661] RSP: 002b:00007f1dd5415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  528.575922][T20661] RAX: ffffffffffffffda RBX: 00007f1dd4825fa0 RCX: 00007f1dd459e159
[  528.575938][T20661] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005
[  528.575951][T20661] RBP: 00007f1dd5415090 R08: 0000000000000000 R09: 0000000000000000
[  528.575964][T20661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  528.575976][T20661] R13: 00007f1dd4826038 R14: 00007f1dd4825fa0 R15: 00007ffed61b22d8
[  528.576009][T20661]  </TASK>
[  528.650275][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  528.656044][T20664] batadv_slave_1: entered promiscuous mode
[  528.660537][T20664] netlink: 'syz.3.3414': attribute type 1 has an invalid length.
[  528.809119][T20664] bond3: entered promiscuous mode
[  528.811324][T20664] 8021q: adding VLAN 0 to HW filter on device bond3
[  528.843243][T12155] bond11: (slave dummy0): failed to get link speed/duplex
[  528.873877][T20267] 8021q: adding VLAN 0 to HW filter on device batadv0
[  528.902132][T20663] batadv_slave_1: left promiscuous mode
[  529.000474][T12182] bond11: (slave dummy0): failed to get link speed/duplex
[  529.133363][T20267] veth0_vlan: entered promiscuous mode
[  529.166888][T20679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3420'.
[  529.199309][T20267] veth1_vlan: entered promiscuous mode
[  529.231811][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  529.260731][T20678] netlink: 'syz.3.3419': attribute type 23 has an invalid length.
[  529.277265][T20267] veth0_macvtap: entered promiscuous mode
[  529.298305][T20678] syzkaller0: entered promiscuous mode
[  529.298365][T20678] syzkaller0: entered allmulticast mode
[  529.307694][T20267] veth1_macvtap: entered promiscuous mode
[  529.502863][T20267] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.507657][T20267] batman_adv: batadv0: Interface activated: batadv_slave_1
[  529.533741][T20684] netlink: 'syz.1.3421': attribute type 13 has an invalid length.
[  529.667489][T12155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.669125][T12155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.669224][T12155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.691572][T12137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  529.897042][T12165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.897095][T12165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.983544][T10226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.983683][T10226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.242465][T20700] x_tables: duplicate underflow at hook 2
[  530.972378][T20716] bond4: option tlb_dynamic_lb: invalid value (128)
[  530.985254][T20716] bond4 (unregistering): Released all slaves
[  531.029693][T20725] netlink: 'syz.3.3430': attribute type 1 has an invalid length.
[  531.238232][T20743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  531.660149][ T5614] Bluetooth: hci4: command tx timeout
[  532.483398][T20794] vcan0: tx address claim with dest, not broadcast
[  532.559329][T20784] syzkaller0: entered promiscuous mode
[  532.559384][T20784] syzkaller0: entered allmulticast mode
[  532.596420][T20797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3449'.
[  532.806656][T19223] block nbd64: NBD_DISCONNECT
[  532.817821][T20802] netlink: 'syz.4.3448': attribute type 23 has an invalid length.
[  532.817865][T20802] netlink: 'syz.4.3448': attribute type 11 has an invalid length.
[  533.138482][T19223] udevd[19223]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  536.340055][T10226] net_ratelimit: 20 callbacks suppressed
[  536.340105][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  536.450365][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  536.566862][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  536.680007][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  536.794883][T12199] bond11: (slave dummy0): failed to get link speed/duplex
[  536.809793][T20837] ip6tnl0: Caught tx_queue_len zero misconfig
[  536.825892][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3452'.
[  536.910178][T12155] bond11: (slave dummy0): failed to get link speed/duplex
[  537.071925][T12199] bond11: (slave dummy0): failed to get link speed/duplex
[  537.139184][T20839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3455'.
[  537.139254][T20839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3455'.
[  537.139501][T20839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3455'.
[  537.139517][T20839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3455'.
[  537.181154][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  537.370964][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  537.437948][T20851] syzkaller0: entered promiscuous mode
[  537.438009][T20851] syzkaller0: entered allmulticast mode
[  537.654797][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  537.756106][T20882] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  537.781758][T20882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3460'.
[  537.786420][T20886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3461'.
[  538.370836][T20904] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  538.889697][T20926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3469'.
[  538.949513][T20937] FAULT_INJECTION: forcing a failure.
[  538.949513][T20937] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  538.963378][T20937] CPU: 0 UID: 0 PID: 20937 Comm: syz.1.3471 Not tainted syzkaller #0 PREEMPT(full) 
[  538.963407][T20937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  538.963419][T20937] Call Trace:
[  538.963428][T20937]  <TASK>
[  538.963437][T20937]  dump_stack_lvl+0xe8/0x150
[  538.963471][T20937]  should_fail_ex+0x410/0x560
[  538.963506][T20937]  _copy_from_iter+0x1d3/0x1660
[  538.963543][T20937]  ? _copy_from_iter+0x21b/0x1660
[  538.963571][T20937]  ? __pfx__copy_from_iter+0x10/0x10
[  538.963603][T20937]  ? __pfx__copy_from_iter+0x10/0x10
[  538.963639][T20937]  copy_page_from_iter+0x219/0x2d0
[  538.963692][T20937]  skb_copy_datagram_from_iter+0x2f4/0x720
[  538.963726][T20937]  unix_stream_sendmsg+0x5ce/0xde0
[  538.963769][T20937]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  538.963798][T20937]  ? aa_sock_msg_perm+0x129/0x210
[  538.963834][T20937]  ? apparmor_socket_sendmsg+0x98/0x360
[  538.963866][T20937]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  538.963890][T20937]  sock_sendmsg_nosec+0x13a/0x180
[  538.963921][T20937]  ____sys_sendmsg+0x54e/0x850
[  538.963950][T20937]  ? __pfx_____sys_sendmsg+0x10/0x10
[  538.963982][T20937]  ? import_iovec+0x73/0xa0
[  538.964008][T20937]  ___sys_sendmsg+0x2a5/0x360
[  538.964029][T20937]  ? __lock_acquire+0x6df/0x2e50
[  538.964055][T20937]  ? __pfx____sys_sendmsg+0x10/0x10
[  538.964115][T20937]  ? __fget_files+0x2a/0x420
[  538.964142][T20937]  ? __fget_files+0x3a2/0x420
[  538.964179][T20937]  __x64_sys_sendmsg+0x1b1/0x290
[  538.964205][T20937]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  538.964250][T20937]  do_syscall_64+0x166/0x520
[  538.964284][T20937]  ? trace_irq_disable+0x3b/0x140
[  538.964304][T20937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.964324][T20937]  ? clear_bhb_loop+0x70/0xc0
[  538.964350][T20937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.964370][T20937] RIP: 0033:0x7f1dd459e159
[  538.964391][T20937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  538.964409][T20937] RSP: 002b:00007f1dd5415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  538.964433][T20937] RAX: ffffffffffffffda RBX: 00007f1dd4825fa0 RCX: 00007f1dd459e159
[  538.964448][T20937] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005
[  538.964461][T20937] RBP: 00007f1dd5415090 R08: 0000000000000000 R09: 0000000000000000
[  538.964474][T20937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  538.964487][T20937] R13: 00007f1dd4826038 R14: 00007f1dd4825fa0 R15: 00007ffed61b22d8
[  538.964520][T20937]  </TASK>
[  540.270853][T20959] syzkaller0: entered promiscuous mode
[  540.279775][T20959] syzkaller0: entered allmulticast mode
[  541.023664][T20993] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3482'.
[  541.788099][T21000] can: request_module (can-proto-5) failed.
[  544.080003][T12165] net_ratelimit: 14 callbacks suppressed
[  544.080056][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  544.190092][T12182] bond11: (slave dummy0): failed to get link speed/duplex
[  544.281559][T21010] FAULT_INJECTION: forcing a failure.
[  544.281559][T21010] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  544.281629][T21010] CPU: 1 UID: 0 PID: 21010 Comm: syz.3.3485 Not tainted syzkaller #0 PREEMPT(full) 
[  544.281654][T21010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  544.281667][T21010] Call Trace:
[  544.281675][T21010]  <TASK>
[  544.281684][T21010]  dump_stack_lvl+0xe8/0x150
[  544.281719][T21010]  should_fail_ex+0x410/0x560
[  544.281752][T21010]  _copy_from_iter+0x1d3/0x1660
[  544.281795][T21010]  ? _copy_from_iter+0x21b/0x1660
[  544.281824][T21010]  ? __pfx__copy_from_iter+0x10/0x10
[  544.281856][T21010]  ? __pfx__copy_from_iter+0x10/0x10
[  544.281889][T21010]  copy_page_from_iter+0x219/0x2d0
[  544.281920][T21010]  skb_copy_datagram_from_iter+0x2f4/0x720
[  544.281955][T21010]  unix_stream_sendmsg+0x5ce/0xde0
[  544.282001][T21010]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  544.282027][T21010]  ? aa_sock_msg_perm+0x129/0x210
[  544.282052][T21010]  ? apparmor_socket_sendmsg+0x98/0x360
[  544.282080][T21010]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  544.282107][T21010]  sock_sendmsg_nosec+0x13a/0x180
[  544.282135][T21010]  ____sys_sendmsg+0x54e/0x850
[  544.282161][T21010]  ? __pfx_____sys_sendmsg+0x10/0x10
[  544.282190][T21010]  ? import_iovec+0x73/0xa0
[  544.282212][T21010]  ___sys_sendmsg+0x2a5/0x360
[  544.282231][T21010]  ? __lock_acquire+0x6df/0x2e50
[  544.282254][T21010]  ? __pfx____sys_sendmsg+0x10/0x10
[  544.282307][T21010]  ? __fget_files+0x2a/0x420
[  544.282331][T21010]  ? __fget_files+0x3a2/0x420
[  544.282363][T21010]  __x64_sys_sendmsg+0x1b1/0x290
[  544.282386][T21010]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  544.282427][T21010]  do_syscall_64+0x166/0x520
[  544.282452][T21010]  ? trace_irq_disable+0x3b/0x140
[  544.282469][T21010]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.282488][T21010]  ? clear_bhb_loop+0x70/0xc0
[  544.282511][T21010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.282530][T21010] RIP: 0033:0x7fce4679e159
[  544.282549][T21010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.282565][T21010] RSP: 002b:00007fce449f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  544.282587][T21010] RAX: ffffffffffffffda RBX: 00007fce46a25fa0 RCX: 00007fce4679e159
[  544.282601][T21010] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005
[  544.282614][T21010] RBP: 00007fce449f6090 R08: 0000000000000000 R09: 0000000000000000
[  544.282625][T21010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  544.282636][T21010] R13: 00007fce46a26038 R14: 00007fce46a25fa0 R15: 00007ffc912d0c78
[  544.282666][T21010]  </TASK>
[  544.311340][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  544.437344][T21019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3487'.
[  544.448210][T21006] bridge_slave_0: left allmulticast mode
[  544.448239][T21006] bridge_slave_0: left promiscuous mode
[  544.448454][T21006] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.475327][T21019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3487'.
[  544.547058][T21009] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3486'.
[  544.547084][T21009] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3486'.
[  544.591103][T21006] bridge_slave_1: left allmulticast mode
[  544.591132][T21006] bridge_slave_1: left promiscuous mode
[  544.598804][T21006] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.664413][T21006] bond0: (slave bond_slave_0): Releasing backup interface
[  544.742178][T21006] bond0: (slave bond_slave_1): Releasing backup interface
[  544.877207][T21006] team0: Port device team_slave_0 removed
[  544.924545][T21006] team0: Port device team_slave_1 removed
[  544.932852][T21006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  544.941815][T21006] batman_adv: batadv0: Removing interface: batadv_slave_0
[  545.007464][T21006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  545.007518][T21006] batman_adv: batadv0: Removing interface: batadv_slave_1
[  545.038552][T21006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  545.240454][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  545.288431][T21051] netlink: 'syz.3.3490': attribute type 1 has an invalid length.
[  545.288485][T21051] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3490'.
[  545.288503][T21051] netlink: 'syz.3.3490': attribute type 1 has an invalid length.
[  545.288517][T21051] netlink: 29 bytes leftover after parsing attributes in process `syz.3.3490'.
[  545.304768][T21049] IPVS: Unknown mcast interface: vcan0
[  545.350728][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  545.482239][T21056] lo speed is unknown, defaulting to 1000
[  545.493260][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  545.588472][T21061] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) !
[  545.589537][T21064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3494'.
[  545.589756][T21064] sch_tbf: peakrate 78 is lower than or equals to rate 3850 !
[  545.642423][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  545.831341][T21070] team0: Device vlan3 is already an upper device of the team interface
[  545.951944][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  546.118218][T21083] FAULT_INJECTION: forcing a failure.
[  546.118218][T21083] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  546.118279][T21083] CPU: 1 UID: 0 PID: 21083 Comm: syz.2.3499 Not tainted syzkaller #0 PREEMPT(full) 
[  546.118304][T21083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  546.118315][T21083] Call Trace:
[  546.118322][T21083]  <TASK>
[  546.118329][T21083]  dump_stack_lvl+0xe8/0x150
[  546.118368][T21083]  should_fail_ex+0x410/0x560
[  546.118406][T21083]  _copy_from_iter+0x1d3/0x1660
[  546.118439][T21083]  ? _copy_from_iter+0x21b/0x1660
[  546.118468][T21083]  ? __pfx__copy_from_iter+0x10/0x10
[  546.118500][T21083]  ? __pfx__copy_from_iter+0x10/0x10
[  546.118535][T21083]  copy_page_from_iter+0x219/0x2d0
[  546.118565][T21083]  skb_copy_datagram_from_iter+0x2f4/0x720
[  546.118600][T21083]  unix_stream_sendmsg+0x5ce/0xde0
[  546.118640][T21083]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  546.118664][T21083]  ? aa_sock_msg_perm+0x129/0x210
[  546.118689][T21083]  ? apparmor_socket_sendmsg+0x98/0x360
[  546.118717][T21083]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  546.118736][T21083]  sock_sendmsg_nosec+0x13a/0x180
[  546.118763][T21083]  ____sys_sendmsg+0x54e/0x850
[  546.118796][T21083]  ? __pfx_____sys_sendmsg+0x10/0x10
[  546.118824][T21083]  ? import_iovec+0x73/0xa0
[  546.118847][T21083]  ___sys_sendmsg+0x2a5/0x360
[  546.118866][T21083]  ? __lock_acquire+0x6df/0x2e50
[  546.118889][T21083]  ? __pfx____sys_sendmsg+0x10/0x10
[  546.118942][T21083]  ? __fget_files+0x2a/0x420
[  546.118965][T21083]  ? __fget_files+0x3a2/0x420
[  546.118997][T21083]  __x64_sys_sendmsg+0x1b1/0x290
[  546.119019][T21083]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  546.119058][T21083]  do_syscall_64+0x166/0x520
[  546.119084][T21083]  ? trace_irq_disable+0x3b/0x140
[  546.119101][T21083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.119120][T21083]  ? clear_bhb_loop+0x70/0xc0
[  546.119143][T21083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.119161][T21083] RIP: 0033:0x7f0482d9e159
[  546.119180][T21083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.119195][T21083] RSP: 002b:00007f0483c6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  546.119217][T21083] RAX: ffffffffffffffda RBX: 00007f0483025fa0 RCX: 00007f0482d9e159
[  546.119230][T21083] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005
[  546.119242][T21083] RBP: 00007f0483c6b090 R08: 0000000000000000 R09: 0000000000000000
[  546.119254][T21083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  546.119265][T21083] R13: 00007f0483026038 R14: 00007f0483025fa0 R15: 00007fffef312bf8
[  546.119294][T21083]  </TASK>
[  546.332286][T21085] geneve0: entered promiscuous mode
[  546.639476][T21110] netlink: 'syz.1.3502': attribute type 11 has an invalid length.
[  546.706048][T21113] netlink: 'syz.1.3502': attribute type 11 has an invalid length.
[  546.706094][T21113] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3502'.
[  546.803482][T21107] vxcan1: entered allmulticast mode
[  546.820879][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  546.828397][T21111] netlink: 'syz.3.3504': attribute type 21 has an invalid length.
[  546.828426][T21111] IPv6: NLM_F_CREATE should be specified when creating new route
[  546.854042][T21111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3504'.
[  546.908549][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3504'.
[  548.075443][T21177] syzkaller0: entered promiscuous mode
[  548.083469][T21177] syzkaller0: entered allmulticast mode
[  548.383427][T21185] syzkaller0: entered promiscuous mode
[  548.391811][T21185] syzkaller0: entered allmulticast mode
[  549.341066][T21207] 8021q: adding VLAN 0 to HW filter on device bond0
[  549.359375][T21207] 8021q: adding VLAN 0 to HW filter on device team0
[  549.390762][T21207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  549.479279][T21207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  549.493364][T21207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  549.510755][T21207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  549.522801][T21207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  549.535388][T21207] 8021q: adding VLAN 0 to HW filter on device hsr0
[  549.550533][T21207] veth1_vlan: left promiscuous mode
[  549.560671][T21207] veth0_vlan: left promiscuous mode
[  549.569270][T21207] veth0_vlan: entered promiscuous mode
[  549.584408][T21207] veth1_vlan: entered promiscuous mode
[  549.597332][T21207] veth1_macvtap: left promiscuous mode
[  549.606607][T21207] veth0_macvtap: left promiscuous mode
[  549.626417][T21207] veth0_macvtap: entered promiscuous mode
[  549.628001][T21207] veth1_macvtap: entered promiscuous mode
[  549.652953][T21207] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  549.656106][T21207] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  549.663189][T21207] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  549.668224][T21207] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  549.699362][T21207] 8021q: adding VLAN 0 to HW filter on device bond1
[  549.715475][T21207] 8021q: adding VLAN 0 to HW filter on device bond2
[  549.750715][T21207] bond3: left promiscuous mode
[  549.757404][T12159] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  549.757455][T12159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.767163][T12159] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  549.767201][T12159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.767250][T12159] net_ratelimit: 15 callbacks suppressed
[  549.767264][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  549.767300][T12159] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  549.767327][T12159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  549.809290][T21214] __nla_validate_parse: 17 callbacks suppressed
[  549.809309][T21214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3525'.
[  549.823497][T12182] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  549.823552][T12182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.846328][T12133] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.846444][T12133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  549.860884][T12133] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.860992][T12133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  550.192982][T21227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3527'.
[  550.223017][T21246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3530'.
[  550.290568][T12199] bond11: (slave dummy0): failed to get link speed/duplex
[  550.359347][T21246] ipvlan2: entered allmulticast mode
[  550.365494][T21246] syz_tun: entered allmulticast mode
[  550.471468][T12182] bond11: (slave dummy0): failed to get link speed/duplex
[  550.581076][T12199] bond11: (slave dummy0): failed to get link speed/duplex
[  550.673865][T21259] netlink: 'syz.3.3532': attribute type 4 has an invalid length.
[  550.674096][T21261] netlink: 'syz.3.3532': attribute type 4 has an invalid length.
[  551.713854][T21245] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.767206][T21290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3533'.
[  551.780365][T12182] bond11: (slave dummy0): failed to get link speed/duplex
[  552.107783][T21296] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3534'.
[  552.134981][T21245] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.224308][T21296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3534'.
[  553.824545][T21124] Set syz1 is full, maxelem 65536 reached
[  556.297415][T21245] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.374597][T21336] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received
[  556.377390][T21315] batadv_slave_1: entered promiscuous mode
[  556.379140][T21310] netlink: 'syz.4.3537': attribute type 34 has an invalid length.
[  556.448683][T21338] netlink: 'syz.3.3541': attribute type 39 has an invalid length.
[  556.606876][T21347] netlink: 'syz.0.3543': attribute type 1 has an invalid length.
[  556.625367][T21245] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.741925][T21347] 8021q: adding VLAN 0 to HW filter on device bond2
[  556.757491][T12214] bond11: (slave dummy0): failed to get link speed/duplex
[  556.871950][T21355] bond2: (slave geneve2): making interface the new active one
[  556.879640][T21355] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  557.044198][T21368] tipc: Started in network mode
[  557.049745][T21368] tipc: Node identity ac14140f, cluster identity 4711
[  557.057711][T21368] tipc: New replicast peer: 255.255.255.255
[  557.067790][T21368] tipc: Enabled bearer <udp:syz2>, priority 10
[  557.080394][T21368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3550'.
[  557.202517][T21374] netlink: 564 bytes leftover after parsing attributes in process `syz.0.3550'.
[  557.311480][T10226] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  557.311571][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  557.333031][T12137] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  557.376071][T12137] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  557.383337][T21370] lo: Caught tx_queue_len zero misconfig
[  557.400299][T12137] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  557.422646][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  557.530784][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  557.645023][T12199] bond11: (slave dummy0): failed to get link speed/duplex
[  557.750844][T12214] bond11: (slave dummy0): failed to get link speed/duplex
[  558.074436][T21411] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3561'.
[  558.111442][T21422] xt_TPROXY: Can be used only with -p tcp or -p udp
[  558.119162][T21422] netlink: 'syz.2.3565': attribute type 1 has an invalid length.
[  558.130458][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  558.601318][T21417] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.602001][T21417] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.685905][T21417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  558.697632][T21417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  558.798433][T17738] tipc: Node number set to 2886997007
[  558.801776][T12137] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  558.801833][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  558.801867][T12137] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  558.801901][T12137] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  558.801935][T12137] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  558.812346][T21434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3566'.
[  558.812373][T21434] bridge: RTM_NEWNEIGH with invalid state 0x0
[  558.915459][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  559.020987][T12182] bond11: (slave dummy0): failed to get link speed/duplex
[  559.263666][T21458] Cannot find set identified by id 0 to match
[  559.301942][T21460] netlink: 'syz.1.3574': attribute type 1 has an invalid length.
[  559.487821][T21460] bond2: entered promiscuous mode
[  559.497045][T21460] 8021q: adding VLAN 0 to HW filter on device bond2
[  559.520260][T12137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  559.833970][T21482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3579'.
[  561.035108][T21503] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  561.273840][ T5276] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  561.402184][T12159] net_ratelimit: 15 callbacks suppressed
[  561.409620][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  561.522623][T12199] bond11: (slave dummy0): failed to get link speed/duplex
[  561.670111][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  561.780018][T12182] bond11: (slave dummy0): failed to get link speed/duplex
[  561.914904][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  561.944466][T21555] sit1: entered promiscuous mode
[  562.021465][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  562.064040][T21560] Bluetooth: hci0: unsupported parameter 5135
[  562.070626][T21560] Bluetooth: hci0: unsupported parameter 8192
[  562.077005][T21560] Bluetooth: hci0: unsupported parameter 5135
[  562.083572][T21560] Bluetooth: hci0: unsupported parameter 8192
[  562.131979][T12199] bond11: (slave dummy0): failed to get link speed/duplex
[  562.186989][T21563] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3593'.
[  562.242482][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  562.299397][T12199] IPVS: starting estimator thread 0...
[  562.312332][T21575] IPVS: lc: FWM 3 0x00000003 - no destination available
[  562.351546][T12199] bond11: (slave dummy0): failed to get link speed/duplex
[  562.381193][T21581] IPVS: using max 28 ests per chain, 67200 per kthread
[  562.497977][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3598'.
[  562.604632][T21587] pimreg: entered allmulticast mode
[  562.688164][T21589] Cannot find set identified by id 0 to match
[  562.821984][T21589] 8021q: adding VLAN 0 to HW filter on device bond1
[  562.836453][T21589] team0: Port device bond1 added
[  562.878916][T21599] netlink: 'syz.3.3602': attribute type 1 has an invalid length.
[  562.941107][T21599] 8021q: adding VLAN 0 to HW filter on device bond5
[  562.985365][T21599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3602'.
[  562.996690][T21607] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3604'.
[  563.022387][T21607] netlink: 'syz.0.3604': attribute type 1 has an invalid length.
[  563.024660][T21606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3605'.
[  563.024681][T21606] netlink: 'syz.4.3605': attribute type 1 has an invalid length.
[  563.049385][T21603] dvmrp0: entered allmulticast mode
[  563.087601][T21599] bond5: (slave geneve3): making interface the new active one
[  563.120799][T21599] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  563.123793][T21603] dvmrp0: left allmulticast mode
[  563.163431][T21609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3604'.
[  563.191659][T21608] Cannot find add_set index 2 as target
[  563.542732][T21633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3611'.
[  563.576027][T21628] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3610'.
[  563.587845][T21633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3611'.
[  564.186025][T21671] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3620'.
[  564.344442][T21675] x_tables: ip6_tables: REDIRECT target: only valid in nat table, not €

[  564.478393][   T31] audit: type=1804 audit(1788683311.817:8): pid=21685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3625" name="/newroot/38/cgroup.controllers" dev="tmpfs" ino=209 res=1 errno=0
[  564.478491][   T31] audit: type=1800 audit(1788683311.817:9): pid=21685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3625" name="cgroup.controllers" dev="tmpfs" ino=209 res=0 errno=0
[  565.545131][T21701] macsec1: entered promiscuous mode
[  565.672329][T21711] syzkaller1: entered promiscuous mode
[  565.672376][T21711] syzkaller1: entered allmulticast mode
[  565.916378][T21726] netlink: 'syz.2.3636': attribute type 15 has an invalid length.
[  566.287479][T21737] bond2: entered allmulticast mode
[  566.332505][T21741] wireguard0: entered promiscuous mode
[  566.332551][T21741] wireguard0: entered allmulticast mode
[  566.338982][T21741] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  566.361746][T21741] bond2: (slave wireguard0): Error -95 calling set_mac_address
[  566.693730][T21761] net_ratelimit: 23 callbacks suppressed
[  566.693789][T21761] openvswitch: netlink: Message has 8 unknown bytes.
[  566.693824][T21761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.697845][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  566.807701][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  566.939979][T12199] bond11: (slave dummy0): failed to get link speed/duplex
[  567.098849][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  567.117503][T21783] syzkaller0: entered promiscuous mode
[  567.117546][T21783] syzkaller0: entered allmulticast mode
[  567.166834][T21783] syzkaller0: left promiscuous mode
[  567.166888][T21783] syzkaller0: left allmulticast mode
[  567.203697][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  567.404097][T21797] netlink: 'syz.1.3649': attribute type 38 has an invalid length.
[  567.412644][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  567.540030][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  567.651636][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  567.740555][T21815] hsr0: entered allmulticast mode
[  567.740607][T21815] hsr_slave_0: entered allmulticast mode
[  567.740626][T21815] hsr_slave_1: entered allmulticast mode
[  567.749695][T21815] __nla_validate_parse: 5 callbacks suppressed
[  567.749715][T21815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3652'.
[  567.781980][T21815] hsr_slave_0: left promiscuous mode
[  567.807716][T21815] hsr_slave_1: left promiscuous mode
[  567.849345][T21815] hsr0 (unregistering): left allmulticast mode
[  567.871871][T21817] wg2: Caught tx_queue_len zero misconfig
[  568.188887][T21833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3654'.
[  568.189718][T21833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3654'.
[  568.225081][T21833] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  568.370218][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  568.599098][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3660'.
[  568.756105][T21865] §: renamed from sit0 (while UP)
[  569.152318][T21887] netlink: 'syz.4.3663': attribute type 1 has an invalid length.
[  569.161371][T21887] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3663'.
[  569.375670][T21892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3664'.
[  569.472581][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3666'.
[  569.878608][T21908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3665'.
[  569.931835][T21908] batman_adv: batadv0: Removing interface: batadv_slave_0
[  569.949609][T21908] batman_adv: batadv0: Removing interface: batadv_slave_1
[  570.137482][T21925] netlink: 'syz.3.3669': attribute type 1 has an invalid length.
[  570.154942][T21910] syzkaller0: entered promiscuous mode
[  570.154987][T21910] syzkaller0: entered allmulticast mode
[  570.235575][T21935] Cannot find set identified by id 0 to match
[  570.291155][T21925] 8021q: adding VLAN 0 to HW filter on device bond6
[  570.318115][T21930] bond6: (slave geneve4): making interface the new active one
[  570.337509][T21930] bond6: (slave geneve4): Enslaving as an active interface with an up link
[  570.345505][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3670'.
[  570.345532][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3670'.
[  570.461220][ T5614] Bluetooth: hci5: command 0x0406 tx timeout
[  570.540556][T21935] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.541213][T21935] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.625198][T21935] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  570.632101][T21935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  570.811265][T12214] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  570.876785][T21938] netlink: 'syz.2.3672': attribute type 4 has an invalid length.
[  570.946477][T21941] netlink: 'syz.2.3672': attribute type 4 has an invalid length.
[  570.994544][T12165] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  570.995991][T12165] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  570.996036][T12165] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  571.208861][T21967] tc_dump_action: action bad kind
[  571.222478][ T5721] lo speed is unknown, defaulting to 1000
[  571.237288][ T5705] lo speed is unknown, defaulting to 1000
[  571.632155][T21979] sctp: [Deprecated]: syz.1.3680 (pid 21979) Use of struct sctp_assoc_value in delayed_ack socket option.
[  571.632155][T21979] Use struct sctp_sack_info instead
[  571.684507][T21979] xt_addrtype: ipv6 does not support BROADCAST matching
[  571.811259][T12165] net_ratelimit: 526 callbacks suppressed
[  571.811725][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  571.928926][T12182] bond11: (slave dummy0): failed to get link speed/duplex
[  572.030517][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  572.140469][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  572.221935][T21994] syzkaller0: entered promiscuous mode
[  572.221980][T21994] syzkaller0: entered allmulticast mode
[  572.278824][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  572.309137][T22001] netlink: 'syz.2.3688': attribute type 1 has an invalid length.
[  572.634489][T22006] netlink: 'syz.4.3689': attribute type 49 has an invalid length.
[  572.705686][T22015] ipvlan2: entered allmulticast mode
[  572.705739][T22015] syz_tun: entered allmulticast mode
[  572.829229][T22027] __nla_validate_parse: 7 callbacks suppressed
[  572.840119][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  572.861315][T22027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3693'.
[  572.965409][T22031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3694'.
[  572.975950][T22031] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  573.100466][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  573.173662][T22041] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  573.210492][T12214] bond11: (slave dummy0): failed to get link speed/duplex
[  573.326327][T12182] bond11: (slave dummy0): failed to get link speed/duplex
[  573.425708][T22058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3701'.
[  573.612637][T22064] syzkaller0: entered promiscuous mode
[  573.612681][T22064] syzkaller0: entered allmulticast mode
[  573.817124][T22073] ipvlan2: entered allmulticast mode
[  573.817169][T22073] macvlan1: entered allmulticast mode
[  573.823519][T22073] batman_adv: batadv0: Adding interface: ipvlan2
[  573.823538][T22073] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  573.823570][T22073] batman_adv: batadv0: Interface activated: ipvlan2
[  574.017622][T22045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  574.240205][T22080] syzkaller0: entered promiscuous mode
[  574.240251][T22080] syzkaller0: entered allmulticast mode
[  574.252147][T22080] tipc: Started in network mode
[  574.252178][T22080] tipc: Node identity e29d5a3563aa, cluster identity 4711
[  574.252454][T22080] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  574.275809][T22079] tipc: Resetting bearer <eth:syzkaller0>
[  574.354169][T22079] tipc: Disabling bearer <eth:syzkaller0>
[  574.380862][T22088] syzkaller0: entered promiscuous mode
[  574.386654][T22088] syzkaller0: entered allmulticast mode
[  575.006951][T22092] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.007636][T22092] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.376968][T22092] bridge_slave_0: left allmulticast mode
[  575.377022][T22092] bridge_slave_0: left promiscuous mode
[  575.377239][T22092] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.439110][T22092] bridge_slave_1: left allmulticast mode
[  575.439158][T22092] bridge_slave_1: left promiscuous mode
[  575.439400][T22092] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.548938][T22092] bond0: (slave bond_slave_0): Releasing backup interface
[  575.606710][T22092] bond0: (slave bond_slave_1): Releasing backup interface
[  575.663717][T22092] team0: Port device team_slave_0 removed
[  575.692719][T22092] team0: Port device team_slave_1 removed
[  575.704820][T22092] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  575.737166][T22092] batman_adv: batadv0: Removing interface: batadv_slave_0
[  575.776730][T22092] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  575.805774][T22092] batman_adv: batadv0: Removing interface: batadv_slave_1
[  575.889471][ T5721] lo speed is unknown, defaulting to 1000
[  575.889518][ T5721] syz_device_name_32_chars_1234567: Port: 1 Link DOWN
[  576.275822][T22156] sctp: [Deprecated]: syz.0.3727 (pid 22156) Use of int in maxseg socket option.
[  576.275822][T22156] Use struct sctp_assoc_value instead
[  576.810449][T22180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3731'.
[  576.893840][T10226] net_ratelimit: 19 callbacks suppressed
[  576.893899][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  577.001001][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  577.110862][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  577.121929][T22192] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3734'.
[  577.216624][T22186] netlink: 'syz.3.3733': attribute type 15 has an invalid length.
[  577.220344][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  577.234465][T22192] netlink: 'syz.4.3734': attribute type 9 has an invalid length.
[  577.343853][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  577.452807][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  577.561812][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  577.672294][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  577.694474][T22211] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3740'.
[  577.780103][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  577.837426][T22226] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3742'.
[  577.859608][T22229] netlink: 'syz.3.3743': attribute type 1 has an invalid length.
[  577.896599][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  577.916056][T22229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3743'.
[  577.916108][T22229] netlink: 'syz.3.3743': attribute type 1 has an invalid length.
[  577.916138][T22229] netlink: 'syz.3.3743': attribute type 2 has an invalid length.
[  577.916743][T22230] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3743'.
[  577.986213][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3743'.
[  578.134908][T22242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3746'.
[  578.316158][T22247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3747'.
[  578.316221][T22247] netlink: 'syz.1.3747': attribute type 5 has an invalid length.
[  578.316237][T22247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3747'.
[  578.430869][T10226] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  578.431391][T10226] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  578.431502][T10226] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  578.431536][T10226] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  578.477814][T22259] netlink: 'syz.0.3748': attribute type 4 has an invalid length.
[  578.673731][T22265] digital: digital_start_poll: Unknown protocol
[  579.540115][T22306] syzkaller1: entered promiscuous mode
[  579.540167][T22306] syzkaller1: entered allmulticast mode
[  579.636726][T22315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3763'.
[  579.636759][T22315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3763'.
[  580.371926][T22356] netlink: 'syz.0.3774': attribute type 1 has an invalid length.
[  580.410258][T22358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3774'.
[  580.432691][T22357] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  580.444883][T22358] 8021q: adding VLAN 0 to HW filter on device bond3
[  580.606828][T22367] bond4: option resend_igmp: invalid value (2878)
[  580.606881][T22367] bond4: option resend_igmp: allowed values 0 - 255
[  580.625375][T22367] bond4 (unregistering): Released all slaves
[  580.950424][T22382] x_tables: duplicate underflow at hook 1
[  581.648221][T22410] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) !
[  581.692407][T22410] sch_tbf: peakrate 78 is lower than or equals to rate 3850 !
[  581.825140][T22419] xfrm0: entered allmulticast mode
[  581.999960][T12159] net_ratelimit: 38 callbacks suppressed
[  582.000012][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  582.123216][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  582.230386][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  582.340005][T12214] bond11: (slave dummy0): failed to get link speed/duplex
[  582.454734][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  582.560347][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  582.996066][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  583.112424][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  583.363870][T22479] syzkaller1: entered promiscuous mode
[  583.370104][T22479] syzkaller1: entered allmulticast mode
[  583.391215][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  583.754791][T22497] __nla_validate_parse: 7 callbacks suppressed
[  583.761490][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  583.769118][T22497] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3808'.
[  583.780365][T22497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3808'.
[  584.143403][T22508] syzkaller0: entered promiscuous mode
[  584.143454][T22508] syzkaller0: entered allmulticast mode
[  584.152613][T22521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3817'.
[  584.175464][T12214] tipc: Subscription rejected, illegal request
[  584.271840][T22528] xt_nfacct: accounting object `syz0' does not exist
[  584.342922][T22530] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3818'.
[  584.353248][T22530] netlink: 'syz.3.3818': attribute type 1 has an invalid length.
[  584.879593][T22554] netlink: 'syz.2.3824': attribute type 1 has an invalid length.
[  584.881829][T22554] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3824'.
[  584.881881][T22554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3824'.
[  584.932046][T22554] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  585.098786][T22559] syzkaller0: entered promiscuous mode
[  585.098831][T22559] syzkaller0: entered allmulticast mode
[  585.114559][T22559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  585.124799][T22558] tipc: Resetting bearer <eth:syzkaller0>
[  585.240658][T22562] x_tables: duplicate entry at hook 2
[  585.247482][T22558] tipc: Disabling bearer <eth:syzkaller0>
[  585.459204][T22580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3831'.
[  585.810993][ T5618] Bluetooth: hci3: command 0x0406 tx timeout
[  586.253310][T22596] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  586.645223][T22608] syzkaller0: entered promiscuous mode
[  586.654351][T22608] syzkaller0: entered allmulticast mode
[  586.851147][T22619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3841'.
[  587.017023][T12159] net_ratelimit: 25 callbacks suppressed
[  587.017078][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  587.120654][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  587.230456][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  587.345379][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  587.450869][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  587.476746][T22647] openvswitch: netlink: Actions may not be safe on all matching packets
[  587.571766][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  587.628838][T22655] netlink: 'syz.1.3853': attribute type 2 has an invalid length.
[  587.652447][T22649] nbd0: detected capacity change from 0 to 63
[  587.691437][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  587.695250][T22659] block nbd0: NBD_DISCONNECT
[  587.801102][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  587.802489][T22659] block nbd0: Disconnected due to user request.
[  587.837097][T22659] block nbd0: shutting down sockets
[  587.849091][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  587.849332][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  587.882916][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  587.883082][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  587.883150][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  587.883210][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  587.883259][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  587.883317][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  587.884131][ T1950] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  587.884162][ T1950] Buffer I/O error on dev nbd0, logical block 0, async page read
[  587.884313][ T1950] Buffer I/O error on dev nbd0, logical block 1, async page read
[  587.884328][ T1950] Buffer I/O error on dev nbd0, logical block 2, async page read
[  587.884342][ T1950] Buffer I/O error on dev nbd0, logical block 3, async page read
[  587.887326][ T1950] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  587.887357][ T1950] Buffer I/O error on dev nbd0, logical block 0, async page read
[  587.887373][ T1950] Buffer I/O error on dev nbd0, logical block 1, async page read
[  587.887494][ T1950] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  587.887597][ T1950] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  587.887698][ T1950] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  587.887800][ T1950] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  587.894471][T21544] ldm_validate_partition_table(): Disk read failed.
[  587.906171][T21544] Dev nbd0: unable to read RDB block 0
[  587.916678][T21544]  nbd0: unable to read partition table
[  587.920458][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  588.099382][T21544] ldm_validate_partition_table(): Disk read failed.
[  588.145132][T21544] Dev nbd0: unable to read RDB block 0
[  588.148423][T21544]  nbd0: unable to read partition table
[  588.168444][T22672] IPVS: set_ctl: invalid protocol: 32 2.20.1.0:10429
[  588.435357][T22691] gretap0: entered promiscuous mode
[  588.436632][T22691] vlan3: entered promiscuous mode
[  588.441140][T22698] netlink: 'syz.1.3861': attribute type 8 has an invalid length.
[  588.458091][T22699] xt_TPROXY: Can be used only with -p tcp or -p udp
[  588.516747][T22700] syzkaller0: entered promiscuous mode
[  588.516788][T22700] syzkaller0: entered allmulticast mode
[  588.737547][T22709] syzkaller0: entered promiscuous mode
[  588.745944][T22709] syzkaller0: entered allmulticast mode
[  589.036586][T22713] lo speed is unknown, defaulting to 1000
[  589.097239][T22713] lo speed is unknown, defaulting to 1000
[  589.144207][T22713] lo speed is unknown, defaulting to 1000
[  589.398742][T22742] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3871'.
[  589.835950][T22751] bridge0: entered allmulticast mode
[  589.849050][T22752] bridge1: entered allmulticast mode
[  589.927909][T22713] infiniband s
z1: set down
[  589.933294][T22713] infiniband s
z1: added lo
[  589.943939][T22713] 
[  589.946330][T22713] ======================================================
[  589.953715][T22713] WARNING: possible circular locking dependency detected
[  589.960789][T22713] syzkaller #0 Not tainted
[  589.965321][T22713] ------------------------------------------------------
[  589.968981][T22750] syzkaller0: entered promiscuous mode
[  589.969032][T22750] syzkaller0: entered allmulticast mode
[  589.983478][T22713] syz.0.3865/22713 is trying to acquire lock:
[  589.989609][T22713] ffffffff8ee8f980 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720
[  589.998434][T22713] 
[  589.998434][T22713] but task is already holding lock:
[  590.006001][T22713] ffffffff8ebf9040 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0
[  590.015351][T22713] 
[  590.015351][T22713] which lock already depends on the new lock.
[  590.015351][T22713] 
[  590.026298][T22713] 
[  590.026298][T22713] the existing dependency chain (in reverse order) is:
[  590.035860][T22713] 
[  590.035860][T22713] -> #9 (wq_pool_mutex){+.+.}-{4:4}:
[  590.043382][T22713]        __mutex_lock+0x19d/0x1550
[  590.049517][T22713]        __alloc_workqueue+0xa4f/0x1fe0
[  590.055531][T22713]        alloc_workqueue_noprof+0xe3/0x210
[  590.061362][T22713]        padata_alloc+0xbe/0x360
[  590.066340][T22713]        pcrypt_init_padata+0x27/0x100
[  590.071883][T22713]        pcrypt_init+0x60/0xc0
[  590.076765][T22713]        do_one_initcall+0x250/0x870
[  590.082161][T22713]        do_initcall_level+0x10a/0x1a0
[  590.087660][T22713]        do_initcalls+0x59/0xa0
[  590.092519][T22713]        kernel_init_freeable+0x29d/0x3e0
[  590.098263][T22713]        kernel_init+0x22/0x1d0
[  590.103669][T22713]        ret_from_fork+0x514/0xb70
[  590.108846][T22713]        ret_from_fork_asm+0x1a/0x30
[  590.114337][T22713] 
[  590.114337][T22713] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  590.122447][T22713]        cpus_read_lock+0x42/0x160
[  590.127678][T22713]        static_key_slow_inc+0x12/0x30
[  590.133149][T22713]        ipv6_flowlabel_opt+0x1cb1/0x2ae0
[  590.139447][T22713]        do_ipv6_setsockopt+0xdff/0x3180
[  590.145292][T22713]        ipv6_setsockopt+0x59/0x170
[  590.150709][T22713]        do_sock_setsockopt+0x17c/0x1b0
[  590.156387][T22713]        __x64_sys_setsockopt+0x13d/0x1b0
[  590.162588][T22713]        do_syscall_64+0x166/0x520
[  590.167924][T22713]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.174381][T22713] 
[  590.174381][T22713] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  590.182127][T22713]        lock_sock_nested+0x41/0x100
[  590.187606][T22713]        tls_sw_sendmsg+0x15f/0x2b50
[  590.192955][T22713]        sock_sendmsg_nosec+0x90/0x180
[  590.198526][T22713]        sock_sendmsg+0x1ca/0x2d0
[  590.203685][T22713]        splice_to_socket+0xb5e/0x12a0
[  590.209183][T22713]        direct_splice_actor+0x101/0x160
[  590.214837][T22713]        splice_direct_to_actor+0x57b/0xcb0
[  590.220740][T22713]        do_splice_direct+0x195/0x290
[  590.226144][T22713]        do_sendfile+0x52e/0x7c0
[  590.231118][T22713]        __se_sys_sendfile64+0x144/0x1a0
[  590.236841][T22713]        do_syscall_64+0x166/0x520
[  590.241963][T22713]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.249088][T22713] 
[  590.249088][T22713] -> #6 (&ctx->tx_lock){+.+.}-{4:4}:
[  590.257046][T22713]        __mutex_lock+0x19d/0x1550
[  590.262727][T22713]        tls_sw_sendmsg+0x13a/0x2b50
[  590.268068][T22713]        sock_sendmsg_nosec+0x90/0x180
[  590.273815][T22713]        sock_sendmsg+0x1ca/0x2d0
[  590.279220][T22713]        __sock_xmit+0x245/0x4f0
[  590.284540][T22713]        nbd_disconnect+0x3ad/0x560
[  590.289817][T22713]        nbd_disconnect_and_put+0x32/0x280
[  590.295656][T22713]        nbd_genl_disconnect+0x4af/0x590
[  590.301462][T22713]        genl_family_rcv_msg_doit+0x233/0x340
[  590.307837][T22713]        genl_rcv_msg+0x614/0x7a0
[  590.312895][T22713]        netlink_rcv_skb+0x226/0x4a0
[  590.318220][T22713]        genl_rcv+0x28/0x40
[  590.322748][T22713]        netlink_unicast+0x7bd/0x940
[  590.328524][T22713]        netlink_sendmsg+0x813/0xb40
[  590.333973][T22713]        sock_sendmsg_nosec+0x13a/0x180
[  590.339593][T22713]        ____sys_sendmsg+0x54e/0x850
[  590.344918][T22713]        ___sys_sendmsg+0x2a5/0x360
[  590.350217][T22713]        __x64_sys_sendmsg+0x1b1/0x290
[  590.355708][T22713]        do_syscall_64+0x166/0x520
[  590.360838][T22713]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.367395][T22713] 
[  590.367395][T22713] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  590.375241][T22713]        __mutex_lock+0x19d/0x1550
[  590.380486][T22713]        nbd_queue_rq+0x373/0xff0
[  590.385550][T22713]        blk_mq_dispatch_rq_list+0x499/0x1990
[  590.391747][T22713]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  590.398772][T22713]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  590.405370][T22713]        blk_mq_run_work_fn+0x16c/0x300
[  590.411018][T22713]        process_scheduled_works+0xc3d/0x1630
[  590.417265][T22713]        worker_thread+0xa47/0xfb0
[  590.422587][T22713]        kthread+0x38b/0x480
[  590.427384][T22713]        ret_from_fork+0x514/0xb70
[  590.432516][T22713]        ret_from_fork_asm+0x1a/0x30
[  590.437814][T22713] 
[  590.437814][T22713] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  590.445045][T22713]        __mutex_lock+0x19d/0x1550
[  590.450175][T22713]        nbd_queue_rq+0xc1/0xff0
[  590.455310][T22713]        blk_mq_dispatch_rq_list+0x499/0x1990
[  590.461598][T22713]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  590.468568][T22713]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  590.475179][T22713]        blk_mq_run_work_fn+0x16c/0x300
[  590.480755][T22713]        process_scheduled_works+0xc3d/0x1630
[  590.486849][T22713]        worker_thread+0xa47/0xfb0
[  590.492047][T22713]        kthread+0x38b/0x480
[  590.496664][T22713]        ret_from_fork+0x514/0xb70
[  590.501789][T22713]        ret_from_fork_asm+0x1a/0x30
[  590.507111][T22713] 
[  590.507111][T22713] -> #3 (set->srcu){.+.+}-{0:0}:
[  590.514608][T22713]        __synchronize_srcu+0xc9/0x2f0
[  590.520095][T22713]        elevator_switch+0x1e8/0x7b0
[  590.525522][T22713]        elevator_change+0x2fa/0x480
[  590.530919][T22713]        elevator_set_default+0x375/0x440
[  590.536657][T22713]        blk_register_queue+0x3f3/0x4e0
[  590.542354][T22713]        __add_disk+0x6cb/0xe30
[  590.547563][T22713]        add_disk_fwnode+0x100/0x3a0
[  590.552936][T22713]        nbd_dev_add+0x733/0xb60
[  590.557879][T22713]        nbd_init+0x168/0x1f0
[  590.562566][T22713]        do_one_initcall+0x250/0x870
[  590.567860][T22713]        do_initcall_level+0x10a/0x1a0
[  590.573323][T22713]        do_initcalls+0x59/0xa0
[  590.578272][T22713]        kernel_init_freeable+0x29d/0x3e0
[  590.584083][T22713]        kernel_init+0x22/0x1d0
[  590.589038][T22713]        ret_from_fork+0x514/0xb70
[  590.594196][T22713]        ret_from_fork_asm+0x1a/0x30
[  590.599513][T22713] 
[  590.599513][T22713] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  590.607520][T22713]        __mutex_lock+0x19d/0x1550
[  590.612646][T22713]        elevator_change+0x1af/0x480
[  590.617942][T22713]        elevator_set_none+0xb5/0x140
[  590.623328][T22713]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  590.629687][T22713]        nbd_start_device+0x189/0xb30
[  590.635157][T22713]        nbd_genl_connect+0x167d/0x1cd0
[  590.640898][T22713]        genl_family_rcv_msg_doit+0x233/0x340
[  590.647008][T22713]        genl_rcv_msg+0x614/0x7a0
[  590.652137][T22713]        netlink_rcv_skb+0x226/0x4a0
[  590.657534][T22713]        genl_rcv+0x28/0x40
[  590.662223][T22713]        netlink_unicast+0x7bd/0x940
[  590.667913][T22713]        netlink_sendmsg+0x813/0xb40
[  590.673302][T22713]        sock_sendmsg_nosec+0x13a/0x180
[  590.678886][T22713]        ____sys_sendmsg+0x54e/0x850
[  590.684173][T22713]        ___sys_sendmsg+0x2a5/0x360
[  590.689554][T22713]        __x64_sys_sendmsg+0x1b1/0x290
[  590.695025][T22713]        do_syscall_64+0x166/0x520
[  590.700171][T22713]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.706715][T22713] 
[  590.706715][T22713] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  590.715348][T22713]        blk_alloc_queue+0x544/0x690
[  590.720675][T22713]        __blk_mq_alloc_disk+0x194/0x390
[  590.726596][T22713]        nbd_dev_add+0x494/0xb60
[  590.731550][T22713]        nbd_init+0x168/0x1f0
[  590.736586][T22713]        do_one_initcall+0x250/0x870
[  590.742511][T22713]        do_initcall_level+0x10a/0x1a0
[  590.747991][T22713]        do_initcalls+0x59/0xa0
[  590.753018][T22713]        kernel_init_freeable+0x29d/0x3e0
[  590.758868][T22713]        kernel_init+0x22/0x1d0
[  590.763736][T22713]        ret_from_fork+0x514/0xb70
[  590.769024][T22713]        ret_from_fork_asm+0x1a/0x30
[  590.774421][T22713] 
[  590.774421][T22713] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  590.781732][T22713]        __lock_acquire+0x15ff/0x2e50
[  590.787370][T22713]        lock_acquire+0x115/0x350
[  590.792484][T22713]        fs_reclaim_acquire+0x71/0x100
[  590.798129][T22713]        __kmalloc_noprof+0xbc/0x720
[  590.803518][T22713]        apply_wqattrs_prepare+0xee/0xdc0
[  590.809433][T22713]        __alloc_workqueue+0x11be/0x1fe0
[  590.815341][T22713]        alloc_workqueue_noprof+0xe3/0x210
[  590.821157][T22713]        ib_mad_init_device+0x993/0x2150
[  590.826926][T22713]        add_client_context+0x37c/0x7b0
[  590.832865][T22713]        enable_device_and_get+0x19c/0x3e0
[  590.838792][T22713]        ib_register_device+0xdc8/0x1080
[  590.844431][T22713]        rxe_register_device+0x1e3/0x350
[  590.850144][T22713]        rxe_net_add+0x81/0x110
[  590.855119][T22713]        rxe_newlink+0xf4/0x1c0
[  590.859981][T22713]        nldev_newlink+0x5be/0x650
[  590.865373][T22713]        rdma_nl_rcv+0x6ef/0xa40
[  590.871124][T22713]        netlink_unicast+0x7bd/0x940
[  590.876526][T22713]        netlink_sendmsg+0x813/0xb40
[  590.881930][T22713]        sock_sendmsg_nosec+0x13a/0x180
[  590.887491][T22713]        ____sys_sendmsg+0x54e/0x850
[  590.892793][T22713]        ___sys_sendmsg+0x2a5/0x360
[  590.897999][T22713]        __x64_sys_sendmsg+0x1b1/0x290
[  590.903560][T22713]        do_syscall_64+0x166/0x520
[  590.908767][T22713]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.915191][T22713] 
[  590.915191][T22713] other info that might help us debug this:
[  590.915191][T22713] 
[  590.925606][T22713] Chain exists of:
[  590.925606][T22713]   fs_reclaim --> cpu_hotplug_lock --> wq_pool_mutex
[  590.925606][T22713] 
[  590.938146][T22713]  Possible unsafe locking scenario:
[  590.938146][T22713] 
[  590.945703][T22713]        CPU0                    CPU1
[  590.951082][T22713]        ----                    ----
[  590.956646][T22713]   lock(wq_pool_mutex);
[  590.960904][T22713]                                lock(cpu_hotplug_lock);
[  590.968015][T22713]                                lock(wq_pool_mutex);
[  590.974874][T22713]   lock(fs_reclaim);
[  590.978864][T22713] 
[  590.978864][T22713]  *** DEADLOCK ***
[  590.978864][T22713] 
[  590.987523][T22713] locks held by syz.0.3865/22713: 6, last CPU#0:
[  590.993853][T22713]  #0: ffffffff9ad80a28 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40
[  591.003879][T22713]  #1: ffffffff8ffac968 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42b/0x650
[  591.013319][T22713]  #2: ffffffff8ff9da88 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0
[  591.023441][T22713]  #3: ffffffff8ff9dd88 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0
[  591.033599][T22713]  #4: ffff888053814658 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33e/0x7b0
[  591.044588][T22713]  #5: ffffffff8ebf9040 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0
[  591.054615][T22713] 
[  591.054615][T22713] stack backtrace:
[  591.060691][T22713] CPU: 0 UID: 0 PID: 22713 Comm: syz.0.3865 Not tainted syzkaller #0 PREEMPT(full) 
[  591.070157][T22713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  591.081011][T22713] Call Trace:
[  591.084487][T22713]  <TASK>
[  591.087521][T22713]  dump_stack_lvl+0xe8/0x150
[  591.092131][T22713]  print_circular_bug+0x2e2/0x300
[  591.097438][T22713]  check_noncircular+0x12f/0x150
[  591.102580][T22713]  __lock_acquire+0x15ff/0x2e50
[  591.107438][T22713]  ? check_path+0x21/0x40
[  591.111804][T22713]  ? check_noncircular+0xdb/0x150
[  591.116926][T22713]  ? lockdep_unlock+0x5c/0xd0
[  591.121621][T22713]  lock_acquire+0x115/0x350
[  591.126141][T22713]  ? __kmalloc_noprof+0xbc/0x720
[  591.131094][T22713]  ? pcpu_alloc_noprof+0xde2/0x1900
[  591.136802][T22713]  ? apply_wqattrs_prepare+0xee/0xdc0
[  591.142366][T22713]  fs_reclaim_acquire+0x71/0x100
[  591.147417][T22713]  ? __kmalloc_noprof+0xbc/0x720
[  591.152375][T22713]  __kmalloc_noprof+0xbc/0x720
[  591.157337][T22713]  ? apply_wqattrs_prepare+0xee/0xdc0
[  591.162819][T22713]  ? apply_wqattrs_prepare+0xee/0xdc0
[  591.168228][T22713]  apply_wqattrs_prepare+0xee/0xdc0
[  591.173462][T22713]  ? pcpu_memcg_post_alloc_hook+0x8c/0x630
[  591.179314][T22713]  ? pcpu_alloc_noprof+0x100f/0x1900
[  591.184608][T22713]  ? pcpu_alloc_noprof+0x1036/0x1900
[  591.189918][T22713]  __alloc_workqueue+0x11be/0x1fe0
[  591.195057][T22713]  alloc_workqueue_noprof+0xe3/0x210
[  591.200349][T22713]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  591.206421][T22713]  ? __ib_alloc_pd+0x451/0x5c0
[  591.211440][T22713]  ib_mad_init_device+0x993/0x2150
[  591.216670][T22713]  ? __pfx_ib_mad_init_device+0x10/0x10
[  591.222409][T22713]  ? do_raw_spin_unlock+0xf5/0x200
[  591.227783][T22713]  ? _raw_spin_unlock+0x28/0x50
[  591.232826][T22713]  add_client_context+0x37c/0x7b0
[  591.237885][T22713]  ? __pfx_add_client_context+0x10/0x10
[  591.243643][T22713]  ? xa_find+0x25b/0x2b0
[  591.247921][T22713]  enable_device_and_get+0x19c/0x3e0
[  591.253330][T22713]  ? __pfx_enable_device_and_get+0x10/0x10
[  591.259685][T22713]  ? device_add+0x6f6/0xb80
[  591.264326][T22713]  ib_register_device+0xdc8/0x1080
[  591.269659][T22713]  ? __pfx_ib_register_device+0x10/0x10
[  591.275219][T22713]  ? ib_device_set_netdev+0x5c9/0x6d0
[  591.280619][T22713]  rxe_register_device+0x1e3/0x350
[  591.285951][T22713]  rxe_net_add+0x81/0x110
[  591.290377][T22713]  rxe_newlink+0xf4/0x1c0
[  591.294757][T22713]  nldev_newlink+0x5be/0x650
[  591.299467][T22713]  ? __lock_acquire+0x6df/0x2e50
[  591.304447][T22713]  ? __pfx_nldev_newlink+0x10/0x10
[  591.309722][T22713]  ? apparmor_capable+0x126/0x170
[  591.314872][T22713]  ? security_capable+0x7e/0x2c0
[  591.319994][T22713]  ? __pfx_nldev_newlink+0x10/0x10
[  591.325121][T22713]  rdma_nl_rcv+0x6ef/0xa40
[  591.329644][T22713]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  591.334608][T22713]  ? netlink_deliver_tap+0x2e/0x1b0
[  591.339864][T22713]  ? netlink_deliver_tap+0x2e/0x1b0
[  591.345270][T22713]  netlink_unicast+0x7bd/0x940
[  591.350239][T22713]  netlink_sendmsg+0x813/0xb40
[  591.355042][T22713]  ? __pfx_netlink_sendmsg+0x10/0x10
[  591.360376][T22713]  ? apparmor_socket_sendmsg+0x98/0x360
[  591.365967][T22713]  ? __pfx_netlink_sendmsg+0x10/0x10
[  591.371359][T22713]  sock_sendmsg_nosec+0x13a/0x180
[  591.376597][T22713]  ____sys_sendmsg+0x54e/0x850
[  591.381457][T22713]  ? __pfx_____sys_sendmsg+0x10/0x10
[  591.386773][T22713]  ? import_iovec+0x73/0xa0
[  591.391428][T22713]  ___sys_sendmsg+0x2a5/0x360
[  591.396152][T22713]  ? __lock_acquire+0x6df/0x2e50
[  591.401189][T22713]  ? __pfx____sys_sendmsg+0x10/0x10
[  591.406402][T22713]  ? futex_wait+0x2a2/0x390
[  591.410965][T22713]  ? __fget_files+0x2a/0x420
[  591.416010][T22713]  ? __fget_files+0x3a2/0x420
[  591.420884][T22713]  __x64_sys_sendmsg+0x1b1/0x290
[  591.425953][T22713]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  591.431613][T22713]  do_syscall_64+0x166/0x520
[  591.436233][T22713]  ? trace_irq_disable+0x3b/0x140
[  591.441294][T22713]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.447674][T22713]  ? clear_bhb_loop+0x70/0xc0
[  591.452472][T22713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.458461][T22713] RIP: 0033:0x7f323379e159
[  591.462887][T22713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  591.482812][T22713] RSP: 002b:00007f32346ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  591.491352][T22713] RAX: ffffffffffffffda RBX: 00007f3233a25fa0 RCX: 00007f323379e159
[  591.499357][T22713] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000004
[  591.507366][T22713] RBP: 00007f3233835024 R08: 0000000000000000 R09: 0000000000000000
[  591.515369][T22713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  591.523379][T22713] R13: 00007f3233a26038 R14: 00007f3233a25fa0 R15: 00007ffe3c997f18
[  591.531439][T22713]  </TASK>
[  591.537109][T17739] lo speed is unknown, defaulting to 1000
[  591.565377][T22713] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  591.566695][T22713] infiniband s
z1: Couldn't open port 1
[  591.582091][T22713] smbdirect: ib_dev[s
z1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  591.597426][T22713] smbdirect: ib_dev[s
z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  591.615792][T22713] smbdirect: ib_dev[s
z1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  591.710043][T22713] RDS/IB: s
z1: added
[  591.710101][T22713] smc: adding ib device s
z1 with port count 1
[  591.710443][T22713] smc:    ib device s
z1 port 1 has no pnetid
[  591.747689][ T5795] lo speed is unknown, defaulting to 1000
[  591.754488][T22762] tipc: Started in network mode
[  591.760279][T22762] tipc: Node identity 5a2986e09aae, cluster identity 4711
[  591.768096][T22762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  591.775447][T22713] lo speed is unknown, defaulting to 1000
[  591.835637][T22762] netlink: 'syz.3.3873': attribute type 11 has an invalid length.
[  591.843940][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3873'.
[  591.876039][T22764] syzkaller0: entered promiscuous mode
[  591.876072][T22764] syzkaller0: entered allmulticast mode
[  591.878113][T22764] tipc: Resetting bearer <eth:syzkaller0>
[  591.946064][T22713] lo speed is unknown, defaulting to 1000
[  592.071187][T22713] lo speed is unknown, defaulting to 1000
[  592.090579][T12159] net_ratelimit: 20 callbacks suppressed
[  592.090634][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  592.200486][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  592.215663][T22713] lo speed is unknown, defaulting to 1000
[  592.310222][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  592.347541][T22713] lo speed is unknown, defaulting to 1000
[  592.420508][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  592.441182][T22758] tipc: Resetting bearer <eth:syzkaller0>
[  592.501727][T22758] tipc: Disabling bearer <eth:syzkaller0>
[  592.512011][T22713] lo speed is unknown, defaulting to 1000
[  592.531628][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  592.642564][T22713] lo speed is unknown, defaulting to 1000
[  592.642910][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  592.715434][T22713] lo speed is unknown, defaulting to 1000
[  592.752524][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  592.780493][T22713] lo speed is unknown, defaulting to 1000
[  592.871095][T12137] bond11: (slave dummy0): failed to get link speed/duplex
[  592.980042][T10226] bond11: (slave dummy0): failed to get link speed/duplex
[  593.090822][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  597.131179][T12214] net_ratelimit: 35 callbacks suppressed
[  597.131226][T12214] bond11: (slave dummy0): failed to get link speed/duplex
[  597.240733][T12133] bond11: (slave dummy0): failed to get link speed/duplex
[  597.350509][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  597.460861][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  597.580724][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  597.690183][T12165] bond11: (slave dummy0): failed to get link speed/duplex
[  597.800469][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  597.910565][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  598.020586][T12159] bond11: (slave dummy0): failed to get link speed/duplex
[  598.130323][T12214] bond11: (slave dummy0): failed to get link speed/duplex