last executing test programs:

9.168321931s ago: executing program 0 (id=2931):
r0 = socket(0x40000000015, 0x5, 0x81)
r1 = socket(0xa, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000280))
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10e0)
recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10102)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x11, 0x3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r6 = accept4(r4, 0x0, 0x0, 0x0)
sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xffffffff7ffffffd, 0x0, 0x200, 0x3}, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x9, 0xfffffffffffffffd, 0x0, 0x1}, 0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r7, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="91b882b09a5b", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010100}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)

8.881953153s ago: executing program 0 (id=2937):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x200000000000000, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x58}}, 0x0)

8.701746843s ago: executing program 0 (id=2942):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xba}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000050000000000000009000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000004000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='GPL\x00'}, 0x94)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x28004)
socket$packet(0x11, 0x3, 0x300)
socket$alg(0x26, 0x5, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0d001000eb98e416638736"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48)
r5 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r5, &(0x7f0000004e80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="5b76d5e1af8fa09199700909db80d71ddad794ba6db18295ecf312a3e0dd18589647bcdb557973846fe6dd9ff0ceb62394cfaec10d55cc41a3dd868cb109e5f35b766d9ccaa64181bd0eba3f2233aec334ee9fb0bf2e0128816ec07b9b38d08a6090f2916fec8b356beb320ac832c5cd18f2903fbe777f9ac893d015090eeb95717435541cc5cd77dccd8422118c35afbc71c3754afe0814e3a13021e179d91b92fdd119fe155e129f3b3526311b2957eabd31cfd0e07ad21c45f637d6296c24d783cf3f2764cc480042b647257b97135ba36b2aca8323dbb4fe3cce2b94aa2c814e58776039b7a36336c7c10ba0e0d9359c5f65d92db1", 0xf7}, {&(0x7f0000000140)="afb75ade666dfde167ea6fe0e64d943c0efd18edb71101d68cd8c66f171a03d98cd8b88495e7ce093d03e85b839ab0b017a2c853862d6f5da977ebcb635cce72bc2c264d3206c3", 0x47}], 0x2, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote}}}], 0x68}}, {{&(0x7f0000001740)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a010102ac1414aa00000000b5000000000000000000000007000000441cadc3ffffffff000000090a010100000000046401010200000001000044100d20000004000000000200000007000014000000000000000000000001000000050000000000000010000000000000000000000007000000"], 0x88}}], 0x2, 0x0)

8.393856471s ago: executing program 0 (id=2945):
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000011008188040f46ecdb4db9cca7480ef410000000e3bd6efb9980b4e4e320f574485120994d290009000e000a000d000100ba800000120156e7201eda09dc4e3bb24c9cb050fc06c2efba777fbdce6a4de836b05fea9d3b0732611c57d22a2b6076d84d137b77583af0a1a0fd7fecab084801e1a024120e8a826963fbd4ed688fafe1f3eb709a31a62e4aec95547789", 0x93}], 0x1}, 0x40840)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000004000040000000000d61ad18ab6bd67b0c9903b2254d2b19015f484790f2908235bbca7671303008769216038527240ab2f77b27cdcad7dbc5b765600518acf7f837964d3f51b1f6abf15f76ce1af026b9656c47fe125c708ce6ce39ad619ca29585953f59c5b20be031651720330c2af06b6d3011fe57e358a5311747a6665408363e0b3f4742813", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000000c0)={0x1, 0x3})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa3000000000000070300000080ffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed00ffc30300ff000000003f440000000000007a0a00fe00ffffffc30300ff41000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000cc0)={0x80})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x1b, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_emit_ethernet(0xfffffe9b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)

8.00953732s ago: executing program 0 (id=2950):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c9307000c000000020000000000ff000000000d000000000000aaba0963f274d5137b80571421953f34a95ab66fac34dd"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="1839000001223e114dd5a611db000000"], &(0x7f0000000680)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x2, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x810)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000001340)=@framed={{}, [@printk={@lx, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="611578000000000061133c0000000000bfa000000000000007000000ee0000052d03010000000000250500000000000069163e0000000000bf07200000000000350507000fff0720670500003f000000140300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190de000000003cc3aa39642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a01000000a1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6e15e1417058ba11671295d20ba906d4331ce87573d2472371ac6369744a569da6c90f0e8ecba9ee68be2691922073d177bdffd5f1aa96173286f7d66f6c3e6b5eff01ed91681bbddcc66544b42a3d68c129798f2ae62b0fc690c9df12ef0dee69bdbe446322a18155e6662c13708d73aa49f1d8fd2cf86754065bfed808d0c76caaca1e0fc8a6baf185b58a1541911688f4a055bc49ed73c5bfb556c7c7bb62a8594e0aef56a374f4bf910a60d9cd751c3a14f94a3be70dbc9211d754ca9023e1efeef81c775664c3f348d000000000000000000000076d4b94b8d33469cdf2aba94c6e871fcd122f18409ee01620e45ab01c4af441373c1e6234b631ea4bb41e344"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r4, @ANYBLOB="c304050000f0ffff17fc11800800000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r4, @ANYBLOB="0800020001000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'gretap0\x00', &(0x7f0000000740)={'tunl0\x00', <r5=>0x0, 0x40, 0xa7, 0x7, 0x2, {{0x35, 0x4, 0x0, 0x36, 0xd4, 0x65, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @multicast2, {[@lsrr={0x83, 0xf, 0x96, [@loopback, @private=0xa010100, @loopback]}, @rr={0x7, 0xb, 0x46, [@broadcast, @private=0xa010102]}, @cipso={0x86, 0x28, 0x3, [{0x3, 0x3, "03"}, {0x6, 0x12, "f18e982ac5ec370af0ccc7fa4e7b9967"}, {0x2, 0x3, '{'}, {0x3, 0x7, "8ca3306773"}, {0x6, 0x3, 'R'}]}, @cipso={0x86, 0x1a, 0x0, [{0x6, 0xe, "afee74bb6fa30a57026b68ff"}, {0x2, 0x6, "b5d41395"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x3, [{@local}]}, @end, @timestamp_addr={0x44, 0x34, 0x5a, 0x1, 0x8, [{@local, 0x782a}, {@empty, 0x8}, {@empty, 0x5}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0xf5, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xffffffff}, {@multicast2, 0x9}]}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, <r6=>0x0}, &(0x7f00000008c0)=0x14)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000300), 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f00000001c0)={0x1d, r8}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, <r9=>0x0}, &(0x7f0000000940)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r12)
getsockname$packet(r12, &(0x7f00000002c0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x54, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xae}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)=ANY=[@ANYBLOB="0c020000", @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf250b0000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006c6f00000000000000000000000000008000018014000200627269646765300000000000000000001400020064756d6d7930000000000000000000001400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a6b616c6c65723000000000000008000300010000001400020076657468315f746f5f626f6e640000004c00018008000300010000000800030001000000080003000000000008000300020000001400020076657468305f746f5f7465616d0000001400020076657468305f746f5f626f6e640000003000018008000100", @ANYRES32=r4, @ANYBLOB="080003000300000008000300020000001400020076657468315f746f5f627269646765004c000180140002006970366772657461703000000000000008000100", @ANYRES32=r5, @ANYBLOB="080003000100000008000100", @ANYRES32=r6, @ANYBLOB="140002007663256e3000000000fcffffff00000008000100", @ANYRES32=r8, @ANYBLOB="2800018008000100", @ANYRES32=r9, @ANYBLOB="080003000100000014000200776731000000000000000000000000004400018008000100", @ANYRES32=r13, @ANYBLOB="1400020069703665727370616e300000000000001400020076657468305f6d616376746170000000080003000000000008000300030000002400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000600000008000300030000000800030001000000"], 0x20c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40090)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)

7.75773976s ago: executing program 0 (id=2953):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)

3.437080362s ago: executing program 1 (id=3002):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xd321)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800100006000000010000000300000b0000000000002e"], &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="386d01937f8393c36d96a8eb124f0000002300010325010000001800028014001c0000430000000003f86f161ed927f77f8300"], 0x38}, 0x1, 0x0, 0x0, 0x6040801}, 0xc004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x80, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff2, 0x9}, {0x4, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38)
sendto$inet6(r4, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f428", 0x4000, 0x40, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)

3.222895414s ago: executing program 4 (id=3004):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000008ebc, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
unshare(0x6020400)
socket$pptp(0x18, 0x1, 0x2)
socket$kcm(0x23, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a41, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0xf9ef, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={r6, 0x91c}, &(0x7f00000002c0)=0x8)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x3)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, r8, 0x6484f000)
setsockopt$inet6_tcp_buf(r7, 0x6, 0xe, &(0x7f0000001800)="307a844bb4ceb07ca3d7c7d47459efd8ad186d44c2ac7ebdfdd309ad0699b065d7222340ad3619b6f9c37841a396019367296de09b836070df3d9ee53cfec7a048f3a03be60d0b2cc209cc0500a4fe00f2df499aa4a8f8b375691529c3e160e20720e7b734b230ac960af6752b06a4f352c2c0aede3ac3709541c44c521d05d109749f4ce89917f5d0ffff7a600a2c1021b38049752979b08954c08971cb2e259f4c459606db7eac2fde9a27c14c95327944e071c3c064324f", 0xb9)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0)
accept4(r7, 0x0, &(0x7f0000000040), 0x0)
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0xb2, 0xfffffffffffffffc})

2.860346704s ago: executing program 4 (id=3006):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000043100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

2.811111311s ago: executing program 3 (id=3007):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e00810000000800"], 0x74}}, 0x40000)

2.673816906s ago: executing program 4 (id=3008):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async)
recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000080)=0x4, 0x4)
recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}, 0x9}], 0x2, 0x20, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x2c, 0x41, 0x107, 0xfffff7fe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1, 0x0, 0x0, @binary}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000)

2.648608446s ago: executing program 3 (id=3009):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{0x800, 0xff, 0x10, 0x7fffffff}, {0x400, 0x9, 0x3, 0x80000000}, {0x1, 0xfc, 0x2, 0x2}, {0x7, 0x0, 0x6}, {0x8, 0x4, 0x7b, 0x10000}]}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000100))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0xa, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
r6 = epoll_create1(0x80000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$LINK_DETACH(0x22, &(0x7f0000000240), 0x52)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000002c0)={0x10000018})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000580), 0x0}, 0x20)
r7 = socket(0x10, 0x803, 0x0)
bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r8 = socket(0x10, 0x803, 0x0)
bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'M'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

2.530042773s ago: executing program 3 (id=3010):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001b80)={&(0x7f0000000380)="074c4559f9708e807ed53d5545adf6e45c60d5d9878ea134498bc26f162c9bb13837b4ed1228d91f1420d52e106db35eed558c2efe334615fd91bf12853f9e31dc626ee45d0795b1fd9799559954cd3b79f443ad7bf3319a580f493b3a1e1c568729555148ec1e3b4a08b1e50ca2607ec1875dc87869cce575166262f4a93a6f5d9d133367144a627f5bd5dc252755f48e27085068712b", &(0x7f0000000440)=""/240, &(0x7f0000000b40)="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", &(0x7f0000001b40)="c65d7790b3790fb765d5c52960a6fb3f3c1d34b048d03e526e1154909d9f30177d07ebf2331f6b7681bfa7fb74240c45", 0x5, r3}, 0x38)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48050000003f000008000a00", @ANYRES32=r7, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)

2.376990059s ago: executing program 1 (id=3011):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet(0xffffffffffffffff, &(0x7f0000000340)="983b596b295a308cd079b73e46e0609a0ade49fddb181d0bfeaef1a0701c0322d2", 0x21, 0xba05dd659f03086c, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="04002c011987"], 0x20}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x6, 0x3, "91ab"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x84}}, 0x0)
close(0x3)

2.369306862s ago: executing program 2 (id=3012):
unshare(0x22020600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x20000040)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0xb, 0x6}]}]}, {0x0, [0x30, 0x0]}}, 0x0, 0x30, 0x0, 0x1, 0x1002}, 0x28)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24005000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000)
unshare(0x20000)
mmap(&(0x7f00006bf000/0x3000)=nil, 0x3000, 0x4, 0x1011, r1, 0x0)

2.232637352s ago: executing program 2 (id=3013):
socket$kcm(0xa, 0x5, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
close(0x3)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r2, 0x0)
r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x70, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4048040)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}]}, 0x40}}, 0x0)
socket$kcm(0x2, 0x3, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"})

2.122669377s ago: executing program 1 (id=3014):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r3}, 0xc)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r6, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @random="a214892ec085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @remote, @mcast1}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r0)

2.073821922s ago: executing program 3 (id=3015):
r0 = socket(0x840000000002, 0x3, 0x100)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00), 0x0, 0xf00)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x1405, 0x100, 0x70bd2c, 0x25dfdbfd, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x6, 0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648201426236ae476434d7c6d4dbb49b6af27b75412ff5997", 0x31}, {&(0x7f00000002c0)="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", 0xcd}, {&(0x7f0000000500)="eb1194", 0x3}, {&(0x7f0000000840)="396b0b2d92a081c10b00000001000000015ae169ced3036d77380fdfb4a449f37d3b3b69f6306c0a52aac4d6243e7bbe7f", 0x31}], 0x4}}], 0x400009d, 0x40080)
sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x100080a2, 0x0, 0x0)

1.945622829s ago: executing program 2 (id=3016):
r0 = socket(0x840000000002, 0x3, 0x100)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00), 0x0, 0xf00)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x1405, 0x100, 0x70bd2c, 0x25dfdbfd, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x6, 0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648201426236ae476434d7c6d4dbb49b6af27b75412ff5997", 0x31}, {&(0x7f00000002c0)="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", 0xcd}, {&(0x7f0000000500)="eb1194", 0x3}, {&(0x7f0000000840)="396b0b2d92a081c10b00000001000000015ae169ced3036d77380fdfb4a449f37d3b3b69f6306c0a52aac4d6243e7bbe7f", 0x31}], 0x4}}], 0x400009d, 0x40080)
sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x100080a2, 0x0, 0x0)

1.786978193s ago: executing program 1 (id=3017):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1261}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040))

1.717930941s ago: executing program 4 (id=3018):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x140d, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c052}, 0x4c850)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001114e77d918c700500000000080001000000000008004b001306"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000000)="4f17053e30e35df1e5f74863d78c8c9efc2f790d1b8ccb60afebb059077ff4848bb79d16b1c6627d7094db9a09fda2b8a4658e3d797215d3582c111eccd553db142708dc00bfbc4b7aa5f81b73f545adc223034c1aa5ef157e0a8b2375cf9cddd59860a4cf9721290f0aabe954deec273adefbb2b4e7f1044b8cbb2d1cc85ca81f8a73e9e9dddab6ba9cb583ff4229faaf7b17393a46ebc0e190f95c4a230f85011f2b8332672031264dd57413c8872af19fbefc48417f597261f065900e9ba9f903a224ef12f07fab030c2f372a8f3b9dfd1fe7a71dab1603582dfa34c7bc93b8b9b12b0afb39bfedf1a8d4645f7690f2b503789eae", &(0x7f00000001c0)=""/100, &(0x7f0000000240)="81ba7a93c655c91c9e7a0c1dc4a2973bc9412910459bf949e51afd5e91fbf10e1378850df7b4602434bb339afcb17d487db5548c2f1307545bc7de0e13b59b08f47f09d9ecdc88e216d24dcf194110a529855e1f45d20463e8e3866a876071231946b62ea78359aef7449e120d0f60668c33894e064a", &(0x7f00000002c0)="8e8519bdc8855b59d15edf9f7d718edff0755deb75409441f6420a15a2f28db6f2174cadfb1e0f9352d6d040eddadd2889af54e14745a987", 0x1, r1, 0x4}, 0x38)

1.540887117s ago: executing program 4 (id=3019):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a010100000000000000000100ffff0900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000005f000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000308000b40000000000900010073797a30"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 5)

1.044940312s ago: executing program 3 (id=3020):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000002060108000000100000000005000003"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000480)={<r4=>r2, &(0x7f00000002c0)='l@(,/]+\x00\x00\x00\x00\x00\x00', 0x6f6083, &(0x7f0000000540)={@_ha_fsid={[0x6346, 0xfffeffff]}, {0x8, 0x200, 0x6, 0x800000000000}}, 0x8d1a, &(0x7f00000004c0), &(0x7f0000000440)=0x3})
ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r5, 0x0, 0x200, 0x0)
vmsplice(r7, &(0x7f0000000100)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0x72}, {&(0x7f0000002c40)="9478c03da986c8917ac188d57dfe2d81772faa04b076834e076131c31c48decbb84f4ae61fbdad0adfeebf690cd98e00dc4e09c31e1acd29123eda33867ac2db2b06749b5348c785985c17947b08349d385f1b31c0edce31faf4adc2f1d39ab252210c6b35f7ea67d525044c20326e328fdd28f3d3a04dd3a7e4ad6ec9db6b78cb28dcecadc27f7765ebfcf3214fdef0dd672e4942d2d51365fd1bd724428c2453a82dc24b9b5ea2650267dc772aeed140331e388393821011521cf33cec66130398a2143ee088f0099a460d383c2dfd842e7e5b05fe2fb08f2746aa4183e7d94c7998fa198c30b1d5a156e191be8d194e645c6e1add171913b7e1e9af5d65d618c0da6878cce85538b78cc30b53befbc9c3b746f3b6f1990a512de078a8729cd2916cbede4b48cbdc31d6c4eb0fc384533a4b27b54d1a242bb4b3b0e9ab668915e46a4aedf19c363e6365c935d8a3b3f1d8c4ee8686ad954b62e9a083f9b0cb391d44f6e638b2c3688897fef4a2cceabe2c24540c0816ce7ad05cf3d22822f275c8c5960ccad8a044d6297c810869", 0x18f}], 0x2, 0xa)
sendmsg$NFT_BATCH(r2, &(0x7f00000009c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x334}, 0x1, 0x0, 0x0, 0x20000004}, 0x8084)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r9, @ANYRES16=r3], 0x48}}, 0x0)
sendmmsg$inet(r3, &(0x7f0000000c40), 0x0, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x10010, r3, 0x5ecf8000)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x1, 0xfff1}, {0x0, 0xffff}, {0xffe0, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x0)
accept4$llc(r3, 0x0, 0x0, 0x80000)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200040, 0x0)
ioctl$TUNSETOFFLOAD(r13, 0x400454d0, 0x14)

993.278168ms ago: executing program 4 (id=3021):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r1], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0xad, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000300), 0x8, 0x81, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e002800", 0x24}, {&(0x7f00000000c0)="fda2127ae7", 0x5}], 0x2}, 0x64)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00100000000006000000000400000000000000617dc392e4ca3d6ad03db2be066f16bc12c84806ee7979a7cd7d975180553ee1b1380e3693b61d33b6069ff1d26153569cbc1bbca8ed1b8e586290e310d46ebf3ba008010000000c7740143de540e77e243d7e20fe4223e1b1f33900"/126, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000020000000300"/25], 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
pselect6(0x40, &(0x7f0000000380)={0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x3377, 0x100000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x83, 0xfffffffffffffff9, 0x0, 0x0, 0x7fffffff, 0x8}, 0x0, 0x0)
write$rfkill(r7, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xefffffff, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sock=0x71bef1a7a588568b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f00000000c0)=r8, 0x4)
setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000)=r8, 0x4)

862.8977ms ago: executing program 2 (id=3022):
unshare(0x22020600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x20000040)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0xb, 0x6}]}]}, {0x0, [0x30, 0x0]}}, 0x0, 0x30, 0x0, 0x1, 0x1002}, 0x28)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24005000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000)
unshare(0x20000)
mmap(&(0x7f00006bf000/0x3000)=nil, 0x3000, 0x4, 0x1011, r1, 0x0)

719.835995ms ago: executing program 2 (id=3023):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet(0xffffffffffffffff, &(0x7f0000000340)="983b596b295a308cd079b73e46e0609a0ade49fddb181d0bfeaef1a0701c0322d2", 0x21, 0xba05dd659f03086c, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="04002c011987"], 0x20}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x6, 0x3, "91ab"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x84}}, 0x0)
close(0x3)

281.510569ms ago: executing program 1 (id=3024):
pipe(&(0x7f0000000040))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000410001000000080004000000010000000400cb80140001801000108008000f0005000000040005800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2, @ANYRES8=<r4=>0x0, @ANYRES16=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x103}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0xffff, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400002000000100000008000540efffffff050001000169ffe2a243beef23f74904ca8d156aacae5fb47fbd97f10cba9ad7956d1003b5df406ef1597cd449a6d8948092c6"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00070000000200", @ANYRES16=r9, @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800)

159.96398ms ago: executing program 2 (id=3025):
socket$kcm(0xa, 0x5, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
close(0x3)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r2, 0x0)
r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x70, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4048040)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}]}, 0x40}}, 0x0)
socket$kcm(0x2, 0x3, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"})

51.623193ms ago: executing program 3 (id=3026):
socket$kcm(0xa, 0x5, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
close(0x3)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4048040)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}]}, 0x40}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"})

0s ago: executing program 1 (id=3027):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143942, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
socket$inet(0x2, 0xa, 0x8)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d, 0x97}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

kernel console output (not intermixed with test programs):

[T13082] netlink: 'syz.2.2261': attribute type 4 has an invalid length.
[  371.298794][T13086] IPv6: NLM_F_REPLACE set, but no existing node found!
[  371.544312][T13096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2266'.
[  371.565802][T13099] netlink: 'syz.2.2268': attribute type 10 has an invalid length.
[  371.614951][T13099] bond2: entered allmulticast mode
[  371.633113][T13099] dummy0: left allmulticast mode
[  371.670127][T13105] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2269'.
[  371.681385][T13105] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2269'.
[  371.784144][T13110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.822245][T13098] bond2: left allmulticast mode
[  371.911878][T13117] FAULT_INJECTION: forcing a failure.
[  371.911878][T13117] name failslab, interval 1, probability 0, space 0, times 0
[  371.941250][T13117] CPU: 1 UID: 0 PID: 13117 Comm: syz.2.2272 Not tainted syzkaller #0 PREEMPT(full) 
[  371.941280][T13117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  371.941293][T13117] Call Trace:
[  371.941302][T13117]  <TASK>
[  371.941311][T13117]  dump_stack_lvl+0xe8/0x150
[  371.941348][T13117]  should_fail_ex+0x40c/0x560
[  371.941382][T13117]  should_failslab+0xa8/0x100
[  371.941416][T13117]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  371.941442][T13117]  ? __kmalloc_node_track_caller_noprof+0x2fd/0x730
[  371.941471][T13117]  ? _sctp_make_chunk+0x59/0x290
[  371.941494][T13117]  ? sctp_chunkify+0x5a/0x260
[  371.941516][T13117]  ? sctp_chunkify+0x5a/0x260
[  371.941555][T13117]  sctp_chunkify+0x5a/0x260
[  371.941583][T13117]  _sctp_make_chunk+0x122/0x290
[  371.941611][T13117]  sctp_make_init+0x5e9/0xe20
[  371.941644][T13117]  ? __pfx_sctp_make_init+0x10/0x10
[  371.941689][T13117]  sctp_sf_do_prm_asoc+0xcf/0x3f0
[  371.941724][T13117]  sctp_do_sm+0x239/0x5d50
[  371.941754][T13117]  ? kmem_cache_alloc_noprof+0x308/0x5f0
[  371.941779][T13117]  ? __pfx_sctp_pname+0x10/0x10
[  371.941810][T13117]  ? kmem_cache_alloc_noprof+0x150/0x5f0
[  371.941835][T13117]  ? radix_tree_node_alloc+0x7e/0x3a0
[  371.941869][T13117]  ? radix_tree_node_alloc+0xbc/0x3a0
[  371.941896][T13117]  ? __pfx_sctp_do_sm+0x10/0x10
[  371.941973][T13117]  ? sctp_assoc_set_id+0x1b3/0x350
[  371.942008][T13117]  sctp_primitive_ASSOCIATE+0x95/0xc0
[  371.942044][T13117]  __sctp_connect+0x911/0xdc0
[  371.942094][T13117]  ? __pfx___sctp_connect+0x10/0x10
[  371.942122][T13117]  ? security_sctp_bind_connect+0x7e/0x2c0
[  371.942159][T13117]  ? __sctp_setsockopt_connectx+0xc7/0x190
[  371.942184][T13117]  sctp_getsockopt_connectx3+0x227/0x360
[  371.942206][T13117]  ? lock_sock_nested+0x6a/0x100
[  371.942260][T13117]  ? __pfx_sctp_getsockopt_connectx3+0x10/0x10
[  371.942290][T13117]  ? sctp_getsockopt+0x12f/0xb90
[  371.942321][T13117]  ? __local_bh_enable_ip+0xd0/0x130
[  371.942366][T13117]  sctp_getsockopt+0x984/0xb90
[  371.942394][T13117]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  371.942426][T13117]  do_sock_getsockopt+0x51d/0x7e0
[  371.942465][T13117]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  371.942507][T13117]  ? __fget_files+0x3a2/0x420
[  371.942536][T13117]  ? __fget_files+0x2a/0x420
[  371.942581][T13117]  __x64_sys_getsockopt+0x1a4/0x240
[  371.942612][T13117]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.942636][T13117]  do_syscall_64+0x174/0x580
[  371.942679][T13117]  ? trace_irq_disable+0x3b/0x140
[  371.942709][T13117]  ? clear_bhb_loop+0x40/0x90
[  371.942737][T13117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.942760][T13117] RIP: 0033:0x7f24a199de99
[  371.942781][T13117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  371.942801][T13117] RSP: 002b:00007f24a2858028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  371.942829][T13117] RAX: ffffffffffffffda RBX: 00007f24a1c25fa0 RCX: 00007f24a199de99
[  371.942845][T13117] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003
[  371.942859][T13117] RBP: 00007f24a2858090 R08: 0000200000000100 R09: 0000000000000000
[  371.942875][T13117] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002
[  371.942890][T13117] R13: 00007f24a1c26038 R14: 00007f24a1c25fa0 R15: 00007ffe9588b568
[  371.942926][T13117]  </TASK>
[  372.583692][T13136] syzkaller0: entered promiscuous mode
[  372.589289][T13136] syzkaller0: entered allmulticast mode
[  373.152702][T13129] syzkaller0: entered promiscuous mode
[  373.202244][T13129] syzkaller0: entered allmulticast mode
[  375.276042][T13140] lo speed is unknown, defaulting to 1000
[  375.442991][T13177] FAULT_INJECTION: forcing a failure.
[  375.442991][T13177] name failslab, interval 1, probability 0, space 0, times 0
[  375.482210][T13177] CPU: 0 UID: 0 PID: 13177 Comm: syz.4.2285 Not tainted syzkaller #0 PREEMPT(full) 
[  375.482241][T13177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  375.482256][T13177] Call Trace:
[  375.482265][T13177]  <TASK>
[  375.482274][T13177]  dump_stack_lvl+0xe8/0x150
[  375.482317][T13177]  should_fail_ex+0x40c/0x560
[  375.482348][T13177]  ? xt_alloc_table_info+0x40/0xb0
[  375.482372][T13177]  should_failslab+0xa8/0x100
[  375.482409][T13177]  __kvmalloc_node_noprof+0x176/0x860
[  375.482447][T13177]  ? xt_alloc_table_info+0x40/0xb0
[  375.482475][T13177]  xt_alloc_table_info+0x40/0xb0
[  375.482498][T13177]  do_ipt_set_ctl+0x962/0xe20
[  375.482535][T13177]  ? rcu_is_watching+0x15/0xb0
[  375.482560][T13177]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  375.482604][T13177]  ? __mutex_unlock_slowpath+0x731/0x900
[  375.482636][T13177]  ? aa_sk_perm+0x6d5/0x900
[  375.482662][T13177]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  375.482695][T13177]  ? __pfx_aa_sk_perm+0x10/0x10
[  375.482725][T13177]  nf_setsockopt+0x26f/0x290
[  375.482749][T13177]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  375.482786][T13177]  do_sock_setsockopt+0x17c/0x1b0
[  375.482817][T13177]  __x64_sys_setsockopt+0x13d/0x1b0
[  375.482845][T13177]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.482870][T13177]  do_syscall_64+0x174/0x580
[  375.482897][T13177]  ? trace_irq_disable+0x3b/0x140
[  375.482925][T13177]  ? clear_bhb_loop+0x40/0x90
[  375.482953][T13177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.482976][T13177] RIP: 0033:0x7fc87d39de99
[  375.482997][T13177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.483017][T13177] RSP: 002b:00007fc87e2d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  375.483042][T13177] RAX: ffffffffffffffda RBX: 00007fc87d625fa0 RCX: 00007fc87d39de99
[  375.483059][T13177] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  375.483073][T13177] RBP: 00007fc87e2d3090 R08: 0000000000000490 R09: 0000000000000000
[  375.483087][T13177] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.483102][T13177] R13: 00007fc87d626038 R14: 00007fc87d625fa0 R15: 00007ffc4ddb01e8
[  375.483137][T13177]  </TASK>
[  375.872616][T13190] team0: Device ipvlan2 failed to register rx_handler
[  377.068101][   T50] block nbd31: Receive control failed (result -32)
[  377.075672][ T5626] block nbd31: Receive control failed (result -32)
[  377.404360][T13231] lo speed is unknown, defaulting to 1000
[  377.453525][T13245] netlink: 'syz.3.2307': attribute type 1 has an invalid length.
[  377.607436][T13245] 8021q: adding VLAN 0 to HW filter on device bond3
[  377.752140][T13252] bond3: (slave gretap1): making interface the new active one
[  377.797017][T13252] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  378.078592][T13271] __nla_validate_parse: 3 callbacks suppressed
[  378.078611][T13271] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2314'.
[  378.117935][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2313'.
[  378.143841][T13271] ip6gre0: Master is either lo or non-ether device
[  378.423958][T13285] ipvlan2: entered promiscuous mode
[  378.472950][T13290] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2318'.
[  378.493397][T13288] veth0: entered promiscuous mode
[  378.524974][T13287] bond0: entered promiscuous mode
[  378.550342][T13287] bond_slave_0: entered promiscuous mode
[  378.566780][T13287] bond_slave_1: entered promiscuous mode
[  378.630042][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  378.639733][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  378.696518][T13299] syzkaller0: entered promiscuous mode
[  378.702214][T13299] syzkaller0: entered allmulticast mode
[  378.755944][T13299] bond2: entered promiscuous mode
[  379.136881][T13283] bond0: left promiscuous mode
[  379.141842][T13283] bond_slave_0: left promiscuous mode
[  379.148186][T13283] bond_slave_1: left promiscuous mode
[  379.153940][T13283] veth0: left promiscuous mode
[  381.587133][T13292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  381.695890][T13341] syzkaller0: entered promiscuous mode
[  381.712155][T13341] syzkaller0: entered allmulticast mode
[  381.733976][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2328'.
[  381.749638][T13341] openvswitch: netlink: Flow actions attr not present in new flow.
[  381.839989][T13346] netlink: 'syz.0.2332': attribute type 2 has an invalid length.
[  381.860185][T13346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2332'.
[  381.877271][T13349] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2331'.
[  382.303540][T13364] netlink: 'syz.2.2338': attribute type 10 has an invalid length.
[  382.576645][T13373] netlink: 'syz.2.2340': attribute type 1 has an invalid length.
[  382.608861][T13373] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2340'.
[  382.621853][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2341'.
[  382.633938][T13377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2340'.
[  382.907027][T13385] netlink: 'syz.1.2343': attribute type 2 has an invalid length.
[  382.927448][T13385] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2343'.
[  383.329915][T13405] netlink: 'syz.2.2350': attribute type 1 has an invalid length.
[  383.338480][T13405] __nla_validate_parse: 2 callbacks suppressed
[  383.338498][T13405] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2350'.
[  383.379545][T13406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.389670][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2353'.
[  383.405957][T13409] gre0: Master is either lo or non-ether device
[  383.537741][T13406] syzkaller0: entered promiscuous mode
[  383.551104][T13406] syzkaller0: entered allmulticast mode
[  383.572811][T13406] tipc: Resetting bearer <eth:syzkaller0>
[  383.598186][T13401] lo speed is unknown, defaulting to 1000
[  383.606249][T13417] netlink: 'syz.3.2355': attribute type 2 has an invalid length.
[  383.629110][T13417] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2355'.
[  383.965494][T13429] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2357'.
[  383.981356][  T185] tipc: Resetting bearer <eth:syzkaller0>
[  384.022139][T13431] FAULT_INJECTION: forcing a failure.
[  384.022139][T13431] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  384.059734][T13431] CPU: 0 UID: 0 PID: 13431 Comm: syz.3.2359 Not tainted syzkaller #0 PREEMPT(full) 
[  384.059766][T13431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  384.059780][T13431] Call Trace:
[  384.059789][T13431]  <TASK>
[  384.059799][T13431]  dump_stack_lvl+0xe8/0x150
[  384.059837][T13431]  should_fail_ex+0x40c/0x560
[  384.059872][T13431]  _copy_to_iter+0x404/0x1810
[  384.059903][T13431]  ? arch_stack_walk+0xfb/0x150
[  384.059942][T13431]  ? __pfx__copy_to_iter+0x10/0x10
[  384.059976][T13431]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  384.060002][T13431]  ? lockdep_hardirqs_on+0x7a/0x110
[  384.060029][T13431]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  384.060054][T13431]  ? __skb_try_recv_datagram+0x3de/0x4e0
[  384.060104][T13431]  __skb_datagram_iter+0xf8/0x980
[  384.060134][T13431]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  384.060172][T13431]  skb_copy_datagram_iter+0xb5/0x240
[  384.060204][T13431]  netlink_recvmsg+0x2b9/0xa50
[  384.060242][T13431]  ? __pfx_netlink_recvmsg+0x10/0x10
[  384.060276][T13431]  ? aa_sock_msg_perm+0xf1/0x1b0
[  384.060303][T13431]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  384.060326][T13431]  ? security_socket_recvmsg+0x7e/0x2c0
[  384.060355][T13431]  ? __pfx_netlink_recvmsg+0x10/0x10
[  384.060381][T13431]  sock_recvmsg+0x196/0x1e0
[  384.060415][T13431]  ____sys_recvmsg+0x1e6/0x4a0
[  384.060437][T13431]  ? iovec_from_user+0x87/0x250
[  384.060476][T13431]  ? __pfx_____sys_recvmsg+0x10/0x10
[  384.060519][T13431]  ? import_iovec+0x73/0xa0
[  384.060556][T13431]  ___sys_recvmsg+0x213/0x5a0
[  384.060582][T13431]  ? ktime_get_ts64+0xa9/0x410
[  384.060612][T13431]  ? __pfx____sys_recvmsg+0x10/0x10
[  384.060644][T13431]  ? __fget_files+0x2a/0x420
[  384.060702][T13431]  ? __fget_files+0x3a2/0x420
[  384.060741][T13431]  do_recvmmsg+0x31a/0x7f0
[  384.060777][T13431]  ? __pfx_do_recvmmsg+0x10/0x10
[  384.060817][T13431]  ? get_timespec64+0x119/0x1b0
[  384.060848][T13431]  ? __pfx_get_timespec64+0x10/0x10
[  384.060891][T13431]  __x64_sys_recvmmsg+0x1b7/0x250
[  384.060922][T13431]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  384.060958][T13431]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.060984][T13431]  do_syscall_64+0x174/0x580
[  384.061010][T13431]  ? trace_irq_disable+0x3b/0x140
[  384.061040][T13431]  ? clear_bhb_loop+0x40/0x90
[  384.061068][T13431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.061107][T13431] RIP: 0033:0x7f4c58d9de99
[  384.061127][T13431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  384.061147][T13431] RSP: 002b:00007f4c59d08028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  384.061170][T13431] RAX: ffffffffffffffda RBX: 00007f4c59025fa0 RCX: 00007f4c58d9de99
[  384.061186][T13431] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  384.061202][T13431] RBP: 00007f4c59d08090 R08: 0000200000003700 R09: 0000000000000000
[  384.061217][T13431] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001
[  384.061231][T13431] R13: 00007f4c59026038 R14: 00007f4c59025fa0 R15: 00007ffcbeccd288
[  384.061264][T13431]  </TASK>
[  384.389002][T13399] tipc: Resetting bearer <eth:syzkaller0>
[  384.408534][ T5626] block nbd32: Receive control failed (result -32)
[  384.420053][   T50] block nbd32: Receive control failed (result -32)
[  386.175828][T13399] tipc: Disabling bearer <eth:syzkaller0>
[  386.195201][T13412] lo speed is unknown, defaulting to 1000
[  386.361681][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2364'.
[  386.555617][T13447] lo speed is unknown, defaulting to 1000
[  386.862802][T13458] batadv_slave_0: left allmulticast mode
[  386.885148][T13458] team1: left promiscuous mode
[  386.891974][T13458] team1: left allmulticast mode
[  386.897351][T13458] ip6tnl1: left allmulticast mode
[  386.902733][T13458] ip6gre1: left promiscuous mode
[  386.908495][T13458] ip6gre1: left allmulticast mode
[  386.914048][T13458] ip6erspan0: left allmulticast mode
[  386.994930][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2370'.
[  387.586197][T13488] netlink: 'syz.3.2377': attribute type 1 has an invalid length.
[  387.971296][T13488] 8021q: adding VLAN 0 to HW filter on device bond4
[  388.104478][T13490] veth3: entered allmulticast mode
[  388.193197][T13490] bond4: (slave veth3): Enslaving as an active interface with a down link
[  388.290282][T13487] bond1 (unregistering): Released all slaves
[  388.324588][T13495] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  388.366976][T13485] macvlan3: entered promiscuous mode
[  388.373339][T13485] macvlan3: entered allmulticast mode
[  388.380211][T13485] bond4: entered promiscuous mode
[  388.388225][T13485] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  388.406754][T13485] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  388.431081][T13485] bond4: left promiscuous mode
[  388.533439][T13506] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  388.558670][T13506] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  388.585692][T13506] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  388.613223][T13515] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  388.825230][T13524] netlink: 'syz.0.2385': attribute type 12 has an invalid length.
[  389.250950][T13539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2392'.
[  389.291163][T13539] batman_adv: batadv0: Removing interface: batadv_slave_1
[  389.500901][T13553] xt_hashlimit: size too large, truncated to 1048576
[  389.528358][T13561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  389.649461][T13567] 8021q: adding VLAN 0 to HW filter on device team0
[  390.028527][T13581] netlink: 'syz.0.2403': attribute type 1 has an invalid length.
[  390.058435][T13571] lo speed is unknown, defaulting to 1000
[  390.331985][T13588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2406'.
[  390.350597][T13588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2406'.
[  390.727446][T13613] FAULT_INJECTION: forcing a failure.
[  390.727446][T13613] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  390.743980][T13613] CPU: 0 UID: 0 PID: 13613 Comm: syz.2.2414 Not tainted syzkaller #0 PREEMPT(full) 
[  390.744010][T13613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  390.744024][T13613] Call Trace:
[  390.744032][T13613]  <TASK>
[  390.744041][T13613]  dump_stack_lvl+0xe8/0x150
[  390.744078][T13613]  should_fail_ex+0x40c/0x560
[  390.744111][T13613]  _copy_to_user+0x31/0xb0
[  390.744134][T13613]  bpf_prog_test_run_raw_tp+0x5f0/0x7e0
[  390.744171][T13613]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[  390.744199][T13613]  ? __fget_files+0x2a/0x420
[  390.744234][T13613]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[  390.744260][T13613]  bpf_prog_test_run+0x2c5/0x340
[  390.744295][T13613]  __sys_bpf+0xa22/0xd90
[  390.744332][T13613]  ? __pfx___sys_bpf+0x10/0x10
[  390.744372][T13613]  ? __fget_files+0x2a/0x420
[  390.744418][T13613]  ? ksys_write+0x242/0x270
[  390.744444][T13613]  ? __pfx_ksys_write+0x10/0x10
[  390.744472][T13613]  __x64_sys_bpf+0xba/0xd0
[  390.744500][T13613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.744524][T13613]  do_syscall_64+0x174/0x580
[  390.744563][T13613]  ? trace_irq_disable+0x3b/0x140
[  390.744591][T13613]  ? clear_bhb_loop+0x40/0x90
[  390.744618][T13613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.744641][T13613] RIP: 0033:0x7f24a199de99
[  390.744661][T13613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  390.744679][T13613] RSP: 002b:00007f24a2858028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  390.744702][T13613] RAX: ffffffffffffffda RBX: 00007f24a1c25fa0 RCX: 00007f24a199de99
[  390.744717][T13613] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[  390.744731][T13613] RBP: 00007f24a2858090 R08: 0000000000000000 R09: 0000000000000000
[  390.744744][T13613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  390.744757][T13613] R13: 00007f24a1c26038 R14: 00007f24a1c25fa0 R15: 00007ffe9588b568
[  390.744791][T13613]  </TASK>
[  391.211849][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2415'.
[  391.266890][T13629] FAULT_INJECTION: forcing a failure.
[  391.266890][T13629] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  391.330963][T13629] CPU: 1 UID: 0 PID: 13629 Comm: syz.1.2417 Not tainted syzkaller #0 PREEMPT(full) 
[  391.330994][T13629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  391.331007][T13629] Call Trace:
[  391.331015][T13629]  <TASK>
[  391.331024][T13629]  dump_stack_lvl+0xe8/0x150
[  391.331062][T13629]  should_fail_ex+0x40c/0x560
[  391.331094][T13629]  _copy_from_user+0x2d/0xb0
[  391.331117][T13629]  ___sys_sendmsg+0x1c6/0x360
[  391.331141][T13629]  ? __lock_acquire+0x683/0x2cf0
[  391.331177][T13629]  ? __pfx____sys_sendmsg+0x10/0x10
[  391.331238][T13629]  ? __fget_files+0x2a/0x420
[  391.331267][T13629]  ? __fget_files+0x3a2/0x420
[  391.331307][T13629]  __x64_sys_sendmsg+0x1b1/0x290
[  391.331336][T13629]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  391.331391][T13629]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.331415][T13629]  do_syscall_64+0x174/0x580
[  391.331441][T13629]  ? trace_irq_disable+0x3b/0x140
[  391.331470][T13629]  ? clear_bhb_loop+0x40/0x90
[  391.331497][T13629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.331519][T13629] RIP: 0033:0x7f888439de99
[  391.331538][T13629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  391.331558][T13629] RSP: 002b:00007f88851f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  391.331581][T13629] RAX: ffffffffffffffda RBX: 00007f8884625fa0 RCX: 00007f888439de99
[  391.331597][T13629] RDX: 000000000000001c RSI: 0000200000000140 RDI: 0000000000000003
[  391.331611][T13629] RBP: 00007f88851f7090 R08: 0000000000000000 R09: 0000000000000000
[  391.331625][T13629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  391.331638][T13629] R13: 00007f8884626038 R14: 00007f8884625fa0 R15: 00007ffe019f20a8
[  391.331672][T13629]  </TASK>
[  391.829102][T13638] netlink: 'syz.1.2421': attribute type 2 has an invalid length.
[  391.849116][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2421'.
[  392.280955][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'.
[  392.465959][ T4939] block nbd33: Receive control failed (result -32)
[  392.466691][ T5626] block nbd33: Receive control failed (result -32)
[  392.626461][ T5626] Bluetooth: hci4: command 0x0406 tx timeout
[  392.652630][T13682] lo speed is unknown, defaulting to 1000
[  392.664186][T13686] FAULT_INJECTION: forcing a failure.
[  392.664186][T13686] name failslab, interval 1, probability 0, space 0, times 0
[  392.692141][T13686] CPU: 1 UID: 0 PID: 13686 Comm: syz.2.2437 Not tainted syzkaller #0 PREEMPT(full) 
[  392.692173][T13686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  392.692186][T13686] Call Trace:
[  392.692195][T13686]  <TASK>
[  392.692204][T13686]  dump_stack_lvl+0xe8/0x150
[  392.692242][T13686]  should_fail_ex+0x40c/0x560
[  392.692277][T13686]  should_failslab+0xa8/0x100
[  392.692321][T13686]  __kmalloc_noprof+0xfe/0x720
[  392.692352][T13686]  ? tomoyo_encode+0x2ad/0x570
[  392.692375][T13686]  ? tomoyo_encode+0x2ad/0x570
[  392.692408][T13686]  tomoyo_encode+0x2ad/0x570
[  392.692439][T13686]  tomoyo_realpath_from_path+0x5fa/0x640
[  392.692477][T13686]  ? tomoyo_path_number_perm+0x219/0x5f0
[  392.692513][T13686]  tomoyo_path_number_perm+0x246/0x5f0
[  392.692555][T13686]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  392.692589][T13686]  ? __lock_acquire+0x683/0x2cf0
[  392.692639][T13686]  ? hook_file_ioctl+0x1f0/0x5f0
[  392.692686][T13686]  ? __fget_files+0x2a/0x420
[  392.692721][T13686]  ? __fget_files+0x2a/0x420
[  392.692750][T13686]  ? __fget_files+0x3a2/0x420
[  392.692781][T13686]  ? __fget_files+0x2a/0x420
[  392.692817][T13686]  security_file_ioctl+0xc3/0x2a0
[  392.692854][T13686]  __se_sys_ioctl+0x47/0x170
[  392.692879][T13686]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.692904][T13686]  do_syscall_64+0x174/0x580
[  392.692932][T13686]  ? trace_irq_disable+0x3b/0x140
[  392.692962][T13686]  ? clear_bhb_loop+0x40/0x90
[  392.692991][T13686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.693014][T13686] RIP: 0033:0x7f24a199de99
[  392.693035][T13686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  392.693055][T13686] RSP: 002b:00007f24a2858028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  392.693079][T13686] RAX: ffffffffffffffda RBX: 00007f24a1c25fa0 RCX: 00007f24a199de99
[  392.693096][T13686] RDX: 0000200000000040 RSI: 0000000000008b32 RDI: 0000000000000004
[  392.693111][T13686] RBP: 00007f24a2858090 R08: 0000000000000000 R09: 0000000000000000
[  392.693125][T13686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  392.693148][T13686] R13: 00007f24a1c26038 R14: 00007f24a1c25fa0 R15: 00007ffe9588b568
[  392.693186][T13686]  </TASK>
[  392.693281][T13686] ERROR: Out of memory at tomoyo_realpath_from_path.
[  392.922302][T13691] x_tables: duplicate underflow at hook 2
[  393.265248][T13702] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2442'.
[  393.328807][T13697] lo speed is unknown, defaulting to 1000
[  393.500723][T13711] netlink: 'syz.3.2443': attribute type 4 has an invalid length.
[  393.511411][T13688] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  393.543826][T13711] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2443'.
[  393.823194][T13724] netlink: 'syz.2.2446': attribute type 2 has an invalid length.
[  393.855076][T13724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2446'.
[  393.875443][T13715] syzkaller0: entered promiscuous mode
[  393.884065][T13715] syzkaller0: entered allmulticast mode
[  394.003947][T13734] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2447'.
[  394.932144][T13763] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2454'.
[  394.998361][T13768] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2457'.
[  395.062946][T13770] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  395.080019][T13770] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  395.312215][T13783] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2462'.
[  395.326862][T13783] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2462'.
[  395.390419][T13785] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2463'.
[  395.401762][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2465'.
[  395.537998][T13796] ipt_rpfilter: unknown options
[  395.697371][T13803] ip6tnl1: entered allmulticast mode
[  395.711237][ T3355] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  395.723904][ T3355] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  395.736566][ T3111] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  395.782894][ T3111] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  395.829500][T13806] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2471'.
[  395.986820][ T3111] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  396.043298][T13816] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2476'.
[  396.060231][T13818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2477'.
[  396.093759][T13818] team0: Port device bridge0 added
[  396.114919][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'.
[  396.252184][T13822] lo speed is unknown, defaulting to 1000
[  396.290942][T13822] lo speed is unknown, defaulting to 1000
[  396.315686][T13822] lo speed is unknown, defaulting to 1000
[  396.624400][T13839] vlan3: entered promiscuous mode
[  396.649857][T13839] veth0: entered promiscuous mode
[  397.000091][T13857] ip_tables: iptables: counters copy to user failed while replacing table
[  397.265184][    T9] lo speed is unknown, defaulting to 1000
[  397.271996][T13822] infiniband syz0: set down
[  397.280176][T13822] infiniband syz0: added lo
[  397.352362][T13822] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  397.393636][T13822] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  397.411551][T13822] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  397.465134][T13822] RDS/IB: syz0: added
[  397.473686][T13822] smc: adding ib device syz0 with port count 1
[  397.491895][T13822] smc:    ib device syz0 port 1 has no pnetid
[  397.511043][ T3111] lo speed is unknown, defaulting to 1000
[  397.541383][T13822] lo speed is unknown, defaulting to 1000
[  397.654406][T13880] netlink: 'syz.3.2501': attribute type 16 has an invalid length.
[  397.673085][T13880] netlink: 'syz.3.2501': attribute type 17 has an invalid length.
[  397.800126][T13880] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.819183][T13880] 8021q: adding VLAN 0 to HW filter on device team0
[  397.847634][T13880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.971426][T13880] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  398.054596][T13880] veth1_vlan: left promiscuous mode
[  398.070464][T13880] veth0_vlan: left promiscuous mode
[  398.090301][T13880] veth0_vlan: entered promiscuous mode
[  398.118646][T13880] veth1_vlan: entered promiscuous mode
[  398.151786][T13880] veth1_macvtap: left promiscuous mode
[  398.169208][T13880] veth0_macvtap: left promiscuous mode
[  398.188284][T13880] veth0_macvtap: entered promiscuous mode
[  398.204262][T13880] veth1_macvtap: entered promiscuous mode
[  398.243613][T13880] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  398.268231][T13880] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  398.282028][T13880] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  398.292306][T13880] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  398.310797][T13880] 8021q: adding VLAN 0 to HW filter on device bond1
[  398.320561][T13880] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  398.332377][T13880] 8021q: adding VLAN 0 to HW filter on device team1
[  398.389710][T13880] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network
[  398.406074][T13880] 8021q: adding VLAN 0 to HW filter on device hsr1
[  398.419002][T13880] 8021q: adding VLAN 0 to HW filter on device bond2
[  398.429366][T13880] 8021q: adding VLAN 0 to HW filter on device bond3
[  398.442892][T13880] veth3: left allmulticast mode
[  398.508283][  T185] bond1: (slave macvlan2): failed to get link speed/duplex
[  398.543741][ T3355] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  398.559462][ T3355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.579484][ T3355] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  398.605131][ T3355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.634010][T13822] lo speed is unknown, defaulting to 1000
[  398.659635][ T3355] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  398.689023][ T3355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.751204][T13912] netlink: 'syz.0.2511': attribute type 62 has an invalid length.
[  398.797961][ T3355] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  398.810927][ T3355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.831272][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  398.847858][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  398.857378][ T3111] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  398.877050][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  398.885267][ T3111] openvswitch: cpu_id mismatch with handler threads
[  398.893533][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  399.063050][   T12] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  399.096933][   T12] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  399.130090][   T12] bond4: (slave veth3): making interface the new active one
[  399.177465][   T12] bond4: active interface up!
[  399.216805][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  399.227485][ T3111] openvswitch: cpu_id mismatch with handler threads
[  399.376447][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  399.456058][T13822] lo speed is unknown, defaulting to 1000
[  399.508222][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  399.637106][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  399.766447][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  399.897943][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  400.018731][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  400.146221][T13822] lo speed is unknown, defaulting to 1000
[  400.147679][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  400.296848][ T1013] bond1: (slave macvlan2): failed to get link speed/duplex
[  400.327681][T13946] __nla_validate_parse: 8 callbacks suppressed
[  400.327703][T13946] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2523'.
[  400.347170][T13947] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  400.355380][T13947] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2524'.
[  400.426994][ T1013] bond1: (slave macvlan2): failed to get link speed/duplex
[  400.457846][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'.
[  400.468358][   T60] openvswitch: cpu_id mismatch with handler threads
[  400.468731][   T60] openvswitch: cpu_id mismatch with handler threads
[  400.496442][T13949] netlink: 'syz.3.2525': attribute type 10 has an invalid length.
[  400.537849][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2525'.
[  400.548075][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  400.634789][T13953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2527'.
[  400.639555][T13949] geneve2: entered promiscuous mode
[  400.662155][T13949] geneve2: entered allmulticast mode
[  400.670884][T13953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2527'.
[  400.684329][T13953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2527'.
[  400.697156][ T1013] bond1: (slave macvlan2): failed to get link speed/duplex
[  400.773141][T13953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2527'.
[  400.826427][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  400.884320][T13962] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  400.944157][T13822] lo speed is unknown, defaulting to 1000
[  400.948062][ T1013] bond1: (slave macvlan2): failed to get link speed/duplex
[  401.086426][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  401.206645][ T1013] bond1: (slave macvlan2): failed to get link speed/duplex
[  401.324672][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2532'.
[  401.347087][ T3111] openvswitch: cpu_id mismatch with handler threads
[  401.431160][T13976] netlink: 'syz.3.2534': attribute type 1 has an invalid length.
[  401.514940][T13976] 8021q: adding VLAN 0 to HW filter on device bond5
[  401.542191][T13974] lo speed is unknown, defaulting to 1000
[  401.686243][T13985] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2536'.
[  401.698818][T13974] lo speed is unknown, defaulting to 1000
[  401.710066][T13986] lo speed is unknown, defaulting to 1000
[  402.065277][T13986] lo speed is unknown, defaulting to 1000
[  402.510869][T14003] 8021q: adding VLAN 0 to HW filter on device bond1
[  402.656612][T13999] netlink: 'syz.3.2542': attribute type 4 has an invalid length.
[  402.743358][T14014] ieee802154 phy0 wpan0: encryption failed: -22
[  402.788672][    C1] ip6_tnl_xmit_ctl: 11 callbacks suppressed
[  402.788696][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  402.841883][T14016] batadv_slave_0: entered allmulticast mode
[  403.119607][T14018] sctp: [Deprecated]: syz.1.2548 (pid 14018) Use of int in max_burst socket option.
[  403.119607][T14018] Use struct sctp_assoc_value instead
[  403.158985][T14018] netlink: 'syz.1.2548': attribute type 6 has an invalid length.
[  403.175900][T14018] IPv6: NLM_F_CREATE should be specified when creating new route
[  403.186467][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  403.266495][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  403.427589][T14034] syzkaller1: entered promiscuous mode
[  403.435683][T14034] syzkaller1: entered allmulticast mode
[  403.662679][T14044] trusted_key: syz.1.2555 sent an empty control message without MSG_MORE.
[  404.214226][T14061] lo speed is unknown, defaulting to 1000
[  404.244074][T14061] lo speed is unknown, defaulting to 1000
[  404.485543][T14044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  404.583486][T14067] netlink: 'syz.4.2560': attribute type 4 has an invalid length.
[  404.708148][    C1] openvswitch: cpu_id mismatch with handler threads
[  404.774173][T14075] FAULT_INJECTION: forcing a failure.
[  404.774173][T14075] name failslab, interval 1, probability 0, space 0, times 0
[  404.796416][T14075] CPU: 0 UID: 0 PID: 14075 Comm: syz.1.2561 Not tainted syzkaller #0 PREEMPT(full) 
[  404.796447][T14075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  404.796461][T14075] Call Trace:
[  404.796471][T14075]  <TASK>
[  404.796480][T14075]  dump_stack_lvl+0xe8/0x150
[  404.796519][T14075]  should_fail_ex+0x40c/0x560
[  404.796554][T14075]  should_failslab+0xa8/0x100
[  404.796591][T14075]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  404.796620][T14075]  ? local_lock_release+0x9c/0x160
[  404.796645][T14075]  ? __alloc_skb+0x1d7/0x7a0
[  404.796665][T14075]  ? __alloc_skb+0x1d7/0x7a0
[  404.796695][T14075]  __alloc_skb+0x1d7/0x7a0
[  404.796722][T14075]  netlink_sendmsg+0x5d4/0xb40
[  404.796760][T14075]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.796793][T14075]  ? aa_sock_msg_perm+0xf1/0x1b0
[  404.796824][T14075]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.796851][T14075]  sock_sendmsg_nosec+0x13a/0x180
[  404.796886][T14075]  ____sys_sendmsg+0x54e/0x850
[  404.796919][T14075]  ? __pfx_____sys_sendmsg+0x10/0x10
[  404.796955][T14075]  ? import_iovec+0x73/0xa0
[  404.796994][T14075]  ___sys_sendmsg+0x2a5/0x360
[  404.797019][T14075]  ? __lock_acquire+0x683/0x2cf0
[  404.797056][T14075]  ? __pfx____sys_sendmsg+0x10/0x10
[  404.797122][T14075]  ? __fget_files+0x2a/0x420
[  404.797154][T14075]  ? __fget_files+0x3a2/0x420
[  404.797195][T14075]  __x64_sys_sendmsg+0x1b1/0x290
[  404.797225][T14075]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  404.797279][T14075]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.797304][T14075]  do_syscall_64+0x174/0x580
[  404.797331][T14075]  ? trace_irq_disable+0x3b/0x140
[  404.797360][T14075]  ? clear_bhb_loop+0x40/0x90
[  404.797388][T14075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.797411][T14075] RIP: 0033:0x7f888439de99
[  404.797431][T14075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.797451][T14075] RSP: 002b:00007f88851f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  404.797475][T14075] RAX: ffffffffffffffda RBX: 00007f8884625fa0 RCX: 00007f888439de99
[  404.797492][T14075] RDX: 0000000000004880 RSI: 00002000000001c0 RDI: 0000000000000004
[  404.797506][T14075] RBP: 00007f88851f7090 R08: 0000000000000000 R09: 0000000000000000
[  404.797521][T14075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  404.797534][T14075] R13: 00007f8884626038 R14: 00007f8884625fa0 R15: 00007ffe019f20a8
[  404.797570][T14075]  </TASK>
[  405.416475][   T35] net_ratelimit: 27 callbacks suppressed
[  405.416497][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  405.566420][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  405.596156][T14086] tipc: New replicast peer: 172.20.20.170
[  405.605453][T14086] tipc: Enabled bearer <udp:syz2>, priority 26
[  405.676476][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  405.796649][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  405.832581][T14095] xt_hashlimit: max too large, truncated to 1048576
[  405.886772][T14092] netlink: 'syz.1.2569': attribute type 5 has an invalid length.
[  405.988366][T14095] ip6gre2: entered allmulticast mode
[  406.018530][T14103] __nla_validate_parse: 80 callbacks suppressed
[  406.018553][T14103] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2573'.
[  406.038438][ T3355] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  406.064843][T14104] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2572'.
[  406.074211][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  406.187249][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  406.297742][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  406.436399][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  406.477267][T14119] netlink: 'syz.1.2577': attribute type 4 has an invalid length.
[  406.570781][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  406.632884][T14131] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.2581'.
[  406.699380][ T1013] bond1: (slave macvlan2): failed to get link speed/duplex
[  406.726397][  T188] tipc: Node number set to 339694474
[  406.780650][T14137] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2581'.
[  407.175840][T14119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2577'.
[  407.186037][T14119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2577'.
[  407.198351][T14119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2577'.
[  407.532255][T14152] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2586'.
[  408.144134][   T50] block nbd34: Receive control failed (result -32)
[  408.144601][ T5626] block nbd34: Receive control failed (result -32)
[  408.362156][T14189] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2599'.
[  408.419977][T14190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2600'.
[  408.555493][T14184] netlink: 'syz.3.2598': attribute type 4 has an invalid length.
[  408.591307][   T50] block nbd35: Receive control failed (result -32)
[  408.591304][ T5626] block nbd35: Receive control failed (result -32)
[  408.709178][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  408.975410][T14203] scsi_nl_rcv_msg: discarding partial skb
[  409.117168][T14212] syzkaller0: entered promiscuous mode
[  409.132668][T14212] syzkaller0: entered allmulticast mode
[  409.318968][T14219] netlink: 'syz.2.2609': attribute type 1 has an invalid length.
[  409.463698][T14222] nbd: must specify at least one socket
[  409.518886][  T188] IPVS: starting estimator thread 0...
[  409.626363][T14227] IPVS: using max 27 ests per chain, 64800 per kthread
[  409.906960][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  410.078122][T14252] SET target dimension over the limit!
[  410.142291][T14256] syzkaller0: entered allmulticast mode
[  410.229357][T14237] netlink: 'syz.4.2614': attribute type 4 has an invalid length.
[  410.358532][ T5626] block nbd36: Receive control failed (result -32)
[  410.369623][   T50] block nbd36: Receive control failed (result -32)
[  410.512804][T14263] sctp: [Deprecated]: syz.1.2621 (pid 14263) Use of int in max_burst socket option.
[  410.512804][T14263] Use struct sctp_assoc_value instead
[  410.527931][   T47] net_ratelimit: 31 callbacks suppressed
[  410.527953][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  410.636890][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  410.907641][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  410.989759][T14282] xt_hashlimit: max too large, truncated to 1048576
[  411.009239][T14282] xt_hashlimit: overflow, try lower: 137438953472/8
[  411.030085][T14288] FAULT_INJECTION: forcing a failure.
[  411.030085][T14288] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  411.047495][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  411.077631][T14288] CPU: 1 UID: 0 PID: 14288 Comm: syz.3.2630 Not tainted syzkaller #0 PREEMPT(full) 
[  411.077671][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  411.077685][T14288] Call Trace:
[  411.077694][T14288]  <TASK>
[  411.077703][T14288]  dump_stack_lvl+0xe8/0x150
[  411.077743][T14288]  should_fail_ex+0x40c/0x560
[  411.077777][T14288]  _copy_from_user+0x2d/0xb0
[  411.077800][T14288]  ___sys_sendmsg+0x1c6/0x360
[  411.077826][T14288]  ? __lock_acquire+0x683/0x2cf0
[  411.077862][T14288]  ? __pfx____sys_sendmsg+0x10/0x10
[  411.077927][T14288]  ? __fget_files+0x2a/0x420
[  411.077957][T14288]  ? __fget_files+0x3a2/0x420
[  411.077998][T14288]  __x64_sys_sendmsg+0x1b1/0x290
[  411.078028][T14288]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  411.078074][T14288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.078099][T14288]  do_syscall_64+0x174/0x580
[  411.078126][T14288]  ? trace_irq_disable+0x3b/0x140
[  411.078155][T14288]  ? clear_bhb_loop+0x40/0x90
[  411.078183][T14288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.078207][T14288] RIP: 0033:0x7f4c58d9de99
[  411.078228][T14288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  411.078248][T14288] RSP: 002b:00007f4c59d08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  411.078273][T14288] RAX: ffffffffffffffda RBX: 00007f4c59025fa0 RCX: 00007f4c58d9de99
[  411.078290][T14288] RDX: 0000000000008804 RSI: 0000200000000000 RDI: 0000000000000003
[  411.078305][T14288] RBP: 00007f4c59d08090 R08: 0000000000000000 R09: 0000000000000000
[  411.078319][T14288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  411.078333][T14288] R13: 00007f4c59026038 R14: 00007f4c59025fa0 R15: 00007ffcbeccd288
[  411.078369][T14288]  </TASK>
[  411.266932][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  411.363102][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  411.496617][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  411.646411][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  411.771820][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  411.788684][T14306] __nla_validate_parse: 8 callbacks suppressed
[  411.788706][T14306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2638'.
[  411.833227][T14306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2638'.
[  411.859426][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'.
[  411.884842][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'.
[  411.903723][T14306] netlink: 'syz.3.2638': attribute type 18 has an invalid length.
[  411.913400][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  411.913689][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  411.930885][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  411.944585][T14310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2639'.
[  412.047108][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  412.351350][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2647'.
[  412.377077][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2647'.
[  412.412513][T14301] netlink: 'syz.0.2636': attribute type 4 has an invalid length.
[  412.422187][T14326] geneve3: entered promiscuous mode
[  412.437264][T14326] geneve3: entered allmulticast mode
[  412.442738][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2647'.
[  412.450994][   T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.461404][T14301] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2636'.
[  412.474284][   T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.483309][T14301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2636'.
[  412.493782][   T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.512041][   T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.573512][T14332] FAULT_INJECTION: forcing a failure.
[  412.573512][T14332] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  412.609407][T14332] CPU: 1 UID: 0 PID: 14332 Comm: syz.4.2648 Not tainted syzkaller #0 PREEMPT(full) 
[  412.609443][T14332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  412.609457][T14332] Call Trace:
[  412.609466][T14332]  <TASK>
[  412.609476][T14332]  dump_stack_lvl+0xe8/0x150
[  412.609516][T14332]  should_fail_ex+0x40c/0x560
[  412.609551][T14332]  prepare_alloc_pages+0x230/0x650
[  412.609593][T14332]  __alloc_frozen_pages_noprof+0x12f/0x380
[  412.609640][T14332]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  412.609676][T14332]  ? __pfx_policy_nodemask+0x10/0x10
[  412.609709][T14332]  ? __folio_batch_add_and_move+0x11a/0xc50
[  412.609736][T14332]  ? lock_acquire+0x106/0x350
[  412.609777][T14332]  alloc_pages_mpol+0x212/0x380
[  412.609819][T14332]  folio_alloc_mpol_noprof+0x39/0x160
[  412.609857][T14332]  vma_alloc_folio_noprof+0xe1/0x1e0
[  412.609896][T14332]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  412.609944][T14332]  do_wp_page+0x1163/0x4c70
[  412.609991][T14332]  ? __pfx_do_wp_page+0x10/0x10
[  412.610013][T14332]  ? do_raw_spin_lock+0x12b/0x2f0
[  412.610042][T14332]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  412.610082][T14332]  handle_mm_fault+0x1490/0x3080
[  412.610124][T14332]  ? handle_mm_fault+0xec/0x3080
[  412.610161][T14332]  ? __pfx_handle_mm_fault+0x10/0x10
[  412.610190][T14332]  ? follow_page_pte+0xbd0/0xe70
[  412.610226][T14332]  ? __pfx_follow_page_pte+0x10/0x10
[  412.610266][T14332]  __get_user_pages+0x1678/0x2720
[  412.610330][T14332]  __gup_longterm_locked+0xd52/0x15c0
[  412.610371][T14332]  ? sanity_check_pinned_pages+0x817/0x8d0
[  412.610403][T14332]  gup_fast_fallback+0x1d8c/0x20e0
[  412.610465][T14332]  ? __pfx_gup_fast_fallback+0x10/0x10
[  412.610488][T14332]  ? __x64_sys_recvmsg+0x1ae/0x290
[  412.610515][T14332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.610542][T14332]  ? is_valid_gup_args+0x11f/0x200
[  412.610569][T14332]  ? pin_user_pages_fast+0x4d/0xb0
[  412.610605][T14332]  iov_iter_extract_pages+0x3a1/0x690
[  412.610641][T14332]  extract_iter_to_sg+0xeda/0x2610
[  412.610689][T14332]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  412.610721][T14332]  ? __kmalloc_noprof+0x396/0x720
[  412.610751][T14332]  ? __kmalloc_noprof+0x1ad/0x720
[  412.610778][T14332]  ? sock_kmalloc+0xd6/0x160
[  412.610804][T14332]  ? sock_kmalloc+0xd6/0x160
[  412.610837][T14332]  ? __asan_memset+0x22/0x50
[  412.610868][T14332]  af_alg_get_rsgl+0x493/0x8d0
[  412.610910][T14332]  ? af_alg_alloc_areq+0xac/0x200
[  412.610942][T14332]  skcipher_recvmsg+0x39d/0xe10
[  412.610994][T14332]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  412.611024][T14332]  ? __lock_acquire+0x683/0x2cf0
[  412.611055][T14332]  ? aa_sock_msg_perm+0xf1/0x1b0
[  412.611081][T14332]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  412.611106][T14332]  ? security_socket_recvmsg+0x7e/0x2c0
[  412.611136][T14332]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  412.611168][T14332]  sock_recvmsg+0x196/0x1e0
[  412.611204][T14332]  ____sys_recvmsg+0x1e6/0x4a0
[  412.611243][T14332]  ? __pfx_____sys_recvmsg+0x10/0x10
[  412.611287][T14332]  ? import_iovec+0x73/0xa0
[  412.611336][T14332]  ___sys_recvmsg+0x213/0x5a0
[  412.611369][T14332]  ? __pfx____sys_recvmsg+0x10/0x10
[  412.611402][T14332]  ? __fget_files+0x2a/0x420
[  412.611454][T14332]  ? __fget_files+0x3a2/0x420
[  412.611496][T14332]  __x64_sys_recvmsg+0x1ae/0x290
[  412.611528][T14332]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  412.611576][T14332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.611608][T14332]  do_syscall_64+0x174/0x580
[  412.611638][T14332]  ? clear_bhb_loop+0x40/0x90
[  412.611667][T14332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.611690][T14332] RIP: 0033:0x7fc87d39de99
[  412.611710][T14332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.611728][T14332] RSP: 002b:00007fc87e2d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  412.611752][T14332] RAX: ffffffffffffffda RBX: 00007fc87d625fa0 RCX: 00007fc87d39de99
[  412.611769][T14332] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  412.611783][T14332] RBP: 00007fc87e2d3090 R08: 0000000000000000 R09: 0000000000000000
[  412.611796][T14332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  412.611808][T14332] R13: 00007fc87d626038 R14: 00007fc87d625fa0 R15: 00007ffc4ddb01e8
[  412.611844][T14332]  </TASK>
[  413.181040][T14342] netlink: 'syz.0.2651': attribute type 18 has an invalid length.
[  413.252736][T14344] netlink: 'syz.4.2653': attribute type 1 has an invalid length.
[  413.276711][T14344] netlink: 'syz.4.2653': attribute type 2 has an invalid length.
[  413.604006][T14361] netlink: 'syz.1.2657': attribute type 2 has an invalid length.
[  413.828157][    C1] openvswitch: cpu_id mismatch with handler threads
[  413.828157][T14371] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20002
[  413.910882][T14373] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:19999
[  414.119072][T14370] netlink: 'syz.4.2661': attribute type 4 has an invalid length.
[  415.536436][  T185] net_ratelimit: 25 callbacks suppressed
[  415.536470][  T185] bond1: (slave macvlan2): failed to get link speed/duplex
[  415.657141][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  415.766818][ T1013] bond1: (slave macvlan2): failed to get link speed/duplex
[  415.876794][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  415.986987][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  416.096920][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  416.206767][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  416.316713][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  416.372582][T14352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  416.426697][ T1013] bond1: (slave macvlan2): failed to get link speed/duplex
[  416.556599][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  416.663513][T14380] netlink: 'syz.3.2663': attribute type 12 has an invalid length.
[  416.691036][T14384] netlink: 'syz.1.2664': attribute type 18 has an invalid length.
[  416.875300][T14396] __nla_validate_parse: 12 callbacks suppressed
[  416.875320][T14396] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2670'.
[  416.930324][T14394] vlan3: entered promiscuous mode
[  416.947444][T14394] bond_slave_1: entered promiscuous mode
[  416.978662][T14402] netlink: 'syz.1.2670': attribute type 1 has an invalid length.
[  417.030036][T14404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2672'.
[  417.083673][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2673'.
[  417.666475][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  417.790361][T14402] 8021q: adding VLAN 0 to HW filter on device bond2
[  418.096692][T14434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2681'.
[  418.106617][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2680'.
[  418.117990][T14429] netlink: 'syz.3.2679': attribute type 4 has an invalid length.
[  418.128391][T14434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2681'.
[  418.142742][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2680'.
[  418.152990][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'.
[  418.153017][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2681'.
[  418.153047][T14434] netlink: 'syz.1.2681': attribute type 18 has an invalid length.
[  418.195942][T14436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2680'.
[  418.219472][T14436] netlink: 'syz.0.2680': attribute type 18 has an invalid length.
[  418.351587][T14442] netlink: 'syz.2.2683': attribute type 1 has an invalid length.
[  418.466113][T14447] netlink: 'syz.0.2685': attribute type 1 has an invalid length.
[  418.740308][T14453] x_tables: duplicate underflow at hook 2
[  419.432893][T14460] validate_nla: 1 callbacks suppressed
[  419.432915][T14460] netlink: 'syz.4.2690': attribute type 1 has an invalid length.
[  419.503973][T14483] netlink: 'syz.1.2695': attribute type 18 has an invalid length.
[  419.514473][T14485] netlink: 'syz.2.2696': attribute type 10 has an invalid length.
[  419.527700][T14485] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  419.541045][T14485] bond2: entered allmulticast mode
[  419.554723][T14484] bond2: left allmulticast mode
[  419.653895][   T50] block nbd37: Receive control failed (result -32)
[  419.660843][ T5626] block nbd37: Receive control failed (result -32)
[  419.765177][T14491] FAULT_INJECTION: forcing a failure.
[  419.765177][T14491] name failslab, interval 1, probability 0, space 0, times 0
[  419.797096][T14491] CPU: 1 UID: 0 PID: 14491 Comm: syz.4.2701 Not tainted syzkaller #0 PREEMPT(full) 
[  419.797139][T14491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  419.797153][T14491] Call Trace:
[  419.797162][T14491]  <TASK>
[  419.797171][T14491]  dump_stack_lvl+0xe8/0x150
[  419.797222][T14491]  should_fail_ex+0x40c/0x560
[  419.797304][T14491]  should_failslab+0xa8/0x100
[  419.797355][T14491]  __kmalloc_cache_noprof+0xa8/0x660
[  419.797426][T14491]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  419.797462][T14491]  ? __kmalloc_cache_noprof+0x150/0x660
[  419.797502][T14491]  ? sctp_add_bind_addr+0x8c/0x370
[  419.797523][T14491]  ? sctp_add_bind_addr+0x8c/0x370
[  419.797574][T14491]  sctp_add_bind_addr+0x8c/0x370
[  419.797603][T14491]  sctp_copy_local_addr_list+0x31a/0x4e0
[  419.797643][T14491]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  419.797669][T14491]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  419.797703][T14491]  ? sctp_v6_is_any+0x64/0x80
[  419.797754][T14491]  ? sctp_copy_one_addr+0x93/0x360
[  419.797795][T14491]  sctp_bind_addr_copy+0xb3/0x3c0
[  419.797821][T14491]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  419.797877][T14491]  sctp_connect_new_asoc+0x2ff/0x6b0
[  419.797924][T14491]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  419.797961][T14491]  ? __local_bh_enable_ip+0xd0/0x130
[  419.798005][T14491]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  419.798031][T14491]  ? security_sctp_bind_connect+0x7e/0x2c0
[  419.798098][T14491]  sctp_sendmsg+0x159b/0x2d00
[  419.798144][T14491]  ? __pfx_sctp_sendmsg+0x10/0x10
[  419.798204][T14491]  ? aa_sk_perm+0x6d5/0x900
[  419.798234][T14491]  ? __might_fault+0xaf/0x130
[  419.798276][T14491]  ? sock_rps_record_flow+0x19/0x350
[  419.798303][T14491]  ? inet_sendmsg+0x298/0x320
[  419.798349][T14491]  ? __pfx_inet_sendmsg+0x10/0x10
[  419.798386][T14491]  sock_sendmsg_nosec+0x10e/0x180
[  419.798462][T14491]  ____sys_sendmsg+0x54e/0x850
[  419.798496][T14491]  ? __pfx_____sys_sendmsg+0x10/0x10
[  419.798535][T14491]  ? import_iovec+0x73/0xa0
[  419.798573][T14491]  ___sys_sendmsg+0x2a5/0x360
[  419.798599][T14491]  ? __lock_acquire+0x683/0x2cf0
[  419.798635][T14491]  ? __pfx____sys_sendmsg+0x10/0x10
[  419.798699][T14491]  ? __fget_files+0x2a/0x420
[  419.798747][T14491]  ? __fget_files+0x3a2/0x420
[  419.798791][T14491]  __x64_sys_sendmsg+0x1b1/0x290
[  419.798822][T14491]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  419.798869][T14491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.798894][T14491]  do_syscall_64+0x174/0x580
[  419.798920][T14491]  ? trace_irq_disable+0x3b/0x140
[  419.798950][T14491]  ? clear_bhb_loop+0x40/0x90
[  419.798986][T14491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.799010][T14491] RIP: 0033:0x7fc87d39de99
[  419.799031][T14491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.799064][T14491] RSP: 002b:00007fc87e2d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  419.799089][T14491] RAX: ffffffffffffffda RBX: 00007fc87d625fa0 RCX: 00007fc87d39de99
[  419.799106][T14491] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003
[  419.799122][T14491] RBP: 00007fc87e2d3090 R08: 0000000000000000 R09: 0000000000000000
[  419.799136][T14491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  419.799150][T14491] R13: 00007fc87d626038 R14: 00007fc87d625fa0 R15: 00007ffc4ddb01e8
[  419.799186][T14491]  </TASK>
[  420.251658][T14498] FAULT_INJECTION: forcing a failure.
[  420.251658][T14498] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  420.276131][T14498] CPU: 1 UID: 0 PID: 14498 Comm: syz.3.2704 Not tainted syzkaller #0 PREEMPT(full) 
[  420.276163][T14498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  420.276177][T14498] Call Trace:
[  420.276186][T14498]  <TASK>
[  420.276196][T14498]  dump_stack_lvl+0xe8/0x150
[  420.276235][T14498]  should_fail_ex+0x40c/0x560
[  420.276273][T14498]  _copy_from_user+0x2d/0xb0
[  420.276296][T14498]  __sys_bpf+0x2e7/0xd90
[  420.276335][T14498]  ? __pfx___sys_bpf+0x10/0x10
[  420.276376][T14498]  ? __fget_files+0x2a/0x420
[  420.276436][T14498]  ? ksys_write+0x242/0x270
[  420.276461][T14498]  ? __pfx_ksys_write+0x10/0x10
[  420.276490][T14498]  __x64_sys_bpf+0xba/0xd0
[  420.276519][T14498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.276544][T14498]  do_syscall_64+0x174/0x580
[  420.276570][T14498]  ? trace_irq_disable+0x3b/0x140
[  420.276601][T14498]  ? clear_bhb_loop+0x40/0x90
[  420.276628][T14498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.276652][T14498] RIP: 0033:0x7f4c58d9de99
[  420.276673][T14498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.276693][T14498] RSP: 002b:00007f4c59d08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  420.276717][T14498] RAX: ffffffffffffffda RBX: 00007f4c59025fa0 RCX: 00007f4c58d9de99
[  420.276735][T14498] RDX: 0000000000000020 RSI: 0000200000000880 RDI: 0000000000000002
[  420.276749][T14498] RBP: 00007f4c59d08090 R08: 0000000000000000 R09: 0000000000000000
[  420.276764][T14498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.276777][T14498] R13: 00007f4c59026038 R14: 00007f4c59025fa0 R15: 00007ffcbeccd288
[  420.276811][T14498]  </TASK>
[  420.558258][ T1013] net_ratelimit: 19 callbacks suppressed
[  420.558280][ T1013] bond1: (slave macvlan2): failed to get link speed/duplex
[  420.770962][T14519] syzkaller0: entered promiscuous mode
[  420.777566][T14519] syzkaller0: entered allmulticast mode
[  420.787837][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  420.803225][T14513] netlink: 'syz.0.2709': attribute type 18 has an invalid length.
[  421.029521][T14522] openvswitch: netlink: Message has 8 unknown bytes.
[  421.036497][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  421.106179][T14528] erspan0: Device is already in use.
[  421.146485][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  421.256431][ T1013] bond1: (slave macvlan2): failed to get link speed/duplex
[  421.376409][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  421.496694][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  421.619045][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  421.756680][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  421.871116][T14582] netlink: 'syz.2.2723': attribute type 18 has an invalid length.
[  421.985017][T14584] __nla_validate_parse: 29 callbacks suppressed
[  421.985040][T14584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2728'.
[  422.208652][T14590] syzkaller0: entered promiscuous mode
[  422.214239][T14590] syzkaller0: entered allmulticast mode
[  424.356414][T14608] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2735'.
[  424.416578][T14565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  424.630952][T14611] netlink: 'syz.2.2736': attribute type 2 has an invalid length.
[  424.665252][T14611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2736'.
[  424.697864][T14620] netlink: 'syz.1.2740': attribute type 1 has an invalid length.
[  424.950336][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'.
[  425.026646][T14633] netlink: 'syz.3.2743': attribute type 10 has an invalid length.
[  425.084314][T14630] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  425.099985][T14633] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  425.109057][T14633] dummy0: entered promiscuous mode
[  425.119442][T14633] syz_tun: entered allmulticast mode
[  425.164960][T14631] syz_tun: left allmulticast mode
[  425.285115][T14647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2746'.
[  425.297602][T14647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2746'.
[  425.307731][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2746'.
[  425.316916][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2746'.
[  425.334693][T14647] netlink: 'syz.4.2746': attribute type 18 has an invalid length.
[  425.346909][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  425.443265][T14651] netlink: 'syz.2.2748': attribute type 2 has an invalid length.
[  425.469800][T14651] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2748'.
[  425.496648][T14651] FAULT_INJECTION: forcing a failure.
[  425.496648][T14651] name failslab, interval 1, probability 0, space 0, times 0
[  425.512218][T14653] syzkaller0: entered promiscuous mode
[  425.524931][T14653] syzkaller0: entered allmulticast mode
[  425.543601][T14651] CPU: 1 UID: 0 PID: 14651 Comm: syz.2.2748 Not tainted syzkaller #0 PREEMPT(full) 
[  425.543631][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  425.543644][T14651] Call Trace:
[  425.543652][T14651]  <TASK>
[  425.543661][T14651]  dump_stack_lvl+0xe8/0x150
[  425.543701][T14651]  should_fail_ex+0x40c/0x560
[  425.543735][T14651]  should_failslab+0xa8/0x100
[  425.543768][T14651]  __kmalloc_cache_noprof+0xa8/0x660
[  425.543800][T14651]  ? ovs_flow_tbl_init+0xfa/0x840
[  425.543832][T14651]  ? ovs_flow_tbl_init+0xfa/0x840
[  425.543873][T14651]  ovs_flow_tbl_init+0xfa/0x840
[  425.543906][T14651]  ? ovs_dp_cmd_new+0x1c1/0xad0
[  425.543928][T14651]  ? ovs_dp_cmd_new+0x1c1/0xad0
[  425.543959][T14651]  ovs_dp_cmd_new+0x26b/0xad0
[  425.544002][T14651]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  425.544034][T14651]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  425.544069][T14651]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  425.544123][T14651]  genl_family_rcv_msg_doit+0x233/0x340
[  425.544165][T14651]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  425.544213][T14651]  ? bpf_lsm_capable+0x9/0x20
[  425.544243][T14651]  ? security_capable+0x7e/0x2c0
[  425.544274][T14651]  genl_rcv_msg+0x614/0x7a0
[  425.544314][T14651]  ? __pfx_genl_rcv_msg+0x10/0x10
[  425.544347][T14651]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  425.544387][T14651]  netlink_rcv_skb+0x226/0x4a0
[  425.544421][T14651]  ? __pfx_genl_rcv_msg+0x10/0x10
[  425.544456][T14651]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  425.544502][T14651]  ? down_read+0x2be/0x330
[  425.544538][T14651]  genl_rcv+0x28/0x40
[  425.544568][T14651]  netlink_unicast+0x7bb/0x940
[  425.544606][T14651]  netlink_sendmsg+0x813/0xb40
[  425.544646][T14651]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.544679][T14651]  ? aa_sock_msg_perm+0xf1/0x1b0
[  425.544712][T14651]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.544739][T14651]  sock_sendmsg_nosec+0x13a/0x180
[  425.544775][T14651]  ____sys_sendmsg+0x54e/0x850
[  425.544809][T14651]  ? __pfx_____sys_sendmsg+0x10/0x10
[  425.544847][T14651]  ? import_iovec+0x73/0xa0
[  425.544887][T14651]  ___sys_sendmsg+0x2a5/0x360
[  425.544913][T14651]  ? __lock_acquire+0x683/0x2cf0
[  425.544950][T14651]  ? __pfx____sys_sendmsg+0x10/0x10
[  425.545017][T14651]  ? __fget_files+0x2a/0x420
[  425.545047][T14651]  ? __fget_files+0x3a2/0x420
[  425.545098][T14651]  __x64_sys_sendmsg+0x1b1/0x290
[  425.545128][T14651]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  425.545177][T14651]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.545202][T14651]  do_syscall_64+0x174/0x580
[  425.545229][T14651]  ? trace_irq_disable+0x3b/0x140
[  425.545259][T14651]  ? clear_bhb_loop+0x40/0x90
[  425.545287][T14651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.545310][T14651] RIP: 0033:0x7f24a199de99
[  425.545331][T14651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.545351][T14651] RSP: 002b:00007f24a2858028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  425.545375][T14651] RAX: ffffffffffffffda RBX: 00007f24a1c25fa0 RCX: 00007f24a199de99
[  425.545392][T14651] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000008
[  425.545407][T14651] RBP: 00007f24a2858090 R08: 0000000000000000 R09: 0000000000000000
[  425.545421][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.545435][T14651] R13: 00007f24a1c26038 R14: 00007f24a1c25fa0 R15: 00007ffe9588b568
[  425.545472][T14651]  </TASK>
[  426.043156][T14664] netlink: 'syz.2.2751': attribute type 2 has an invalid length.
[  426.060455][T14664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2751'.
[  426.076635][  T185] net_ratelimit: 15 callbacks suppressed
[  426.076656][  T185] bond1: (slave macvlan2): failed to get link speed/duplex
[  426.236877][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  426.356583][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  426.467042][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  426.606487][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  426.717261][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  426.741775][T14695] netlink: 'syz.1.2760': attribute type 18 has an invalid length.
[  426.828157][  T185] bond1: (slave macvlan2): failed to get link speed/duplex
[  426.856364][T14698] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003
[  426.923158][T14700] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  426.930818][T14700] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  426.956396][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  427.000116][T14701] __nla_validate_parse: 4 callbacks suppressed
[  427.000136][T14701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2763'.
[  427.128697][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  427.246648][  T185] bond1: (slave macvlan2): failed to get link speed/duplex
[  427.259273][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2766'.
[  427.459907][T14719] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2769'.
[  427.471970][T14719] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2769'.
[  427.539863][T14722] netlink: 'syz.0.2770': attribute type 10 has an invalid length.
[  427.551637][T14722] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  427.561595][T14722] syz_tun: entered allmulticast mode
[  427.572257][T14721] syz_tun: left allmulticast mode
[  427.733384][T14728] netlink: 'syz.0.2773': attribute type 1 has an invalid length.
[  427.771149][T14728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2773'.
[  427.782607][T14728] 8021q: adding VLAN 0 to HW filter on device bond3
[  427.807819][T14728] 8021q: adding VLAN 0 to HW filter on device bond3
[  427.818921][T14728] bond3: (slave geneve2): making interface the new active one
[  427.827753][T14728] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  427.837917][  T185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  427.848145][  T185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  427.859309][  T185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  427.870232][  T185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  427.917770][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  428.035641][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2775'.
[  428.065523][T14734] syzkaller0: entered promiscuous mode
[  428.071607][T14734] syzkaller0: entered allmulticast mode
[  428.512486][T14659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  428.703108][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2777'.
[  428.722812][T14738] FAULT_INJECTION: forcing a failure.
[  428.722812][T14738] name failslab, interval 1, probability 0, space 0, times 0
[  428.745773][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2778'.
[  428.754228][T14738] CPU: 0 UID: 0 PID: 14738 Comm: syz.3.2777 Not tainted syzkaller #0 PREEMPT(full) 
[  428.754325][T14738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  428.754359][T14738] Call Trace:
[  428.754381][T14738]  <TASK>
[  428.754410][T14738]  dump_stack_lvl+0xe8/0x150
[  428.754508][T14738]  should_fail_ex+0x40c/0x560
[  428.754602][T14738]  should_failslab+0xa8/0x100
[  428.754687][T14738]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  428.754716][T14738]  ? local_lock_release+0x9c/0x160
[  428.754741][T14738]  ? __alloc_skb+0x1d7/0x7a0
[  428.754761][T14738]  ? __alloc_skb+0x1d7/0x7a0
[  428.754789][T14738]  __alloc_skb+0x1d7/0x7a0
[  428.754817][T14738]  rtmsg_ifinfo_build_skb+0x7f/0x260
[  428.754857][T14738]  rtmsg_ifinfo+0x8c/0x1a0
[  428.754896][T14738]  __dev_notify_flags+0x257/0x510
[  428.754928][T14738]  ? __pfx___dev_notify_flags+0x10/0x10
[  428.754985][T14738]  ? __dev_change_flags+0x5f1/0x820
[  428.755077][T14738]  ? __pfx___dev_change_flags+0x10/0x10
[  428.755154][T14738]  ? __pfx___irq_work_queue_local+0x10/0x10
[  428.755244][T14738]  ? console_unlock+0x150/0x1c0
[  428.755307][T14738]  ? preempt_schedule_thunk+0x16/0x40
[  428.755384][T14738]  netif_change_flags+0xde/0x1b0
[  428.755465][T14738]  do_setlink+0xdd6/0x4670
[  428.755530][T14738]  ? __wake_up_klogd+0xe6/0x120
[  428.755617][T14738]  ? __pfx_vprintk_emit+0x10/0x10
[  428.755693][T14738]  ? __pfx_do_setlink+0x10/0x10
[  428.755769][T14738]  ? __lock_acquire+0x683/0x2cf0
[  428.755869][T14738]  ? lockdep_hardirqs_on+0x7a/0x110
[  428.755944][T14738]  ? rcu_is_watching+0x15/0xb0
[  428.755999][T14738]  ? do_trace_netlink_extack+0x80/0x1d0
[  428.756072][T14738]  ? __mutex_trylock_common+0x15f/0x270
[  428.756145][T14738]  ? __pfx___mutex_trylock_common+0x10/0x10
[  428.756222][T14738]  ? rcu_is_watching+0x15/0xb0
[  428.756283][T14738]  ? trace_contention_end+0x3d/0x140
[  428.756349][T14738]  ? __mutex_lock+0x30d/0x1550
[  428.756477][T14738]  ? rtnl_newlink+0xc10/0x1c30
[  428.756556][T14738]  ? __pfx___mutex_lock+0x10/0x10
[  428.756653][T14738]  ? ns_capable+0x89/0xe0
[  428.756737][T14738]  ? rtnl_nets_add+0x16c/0x300
[  428.756792][T14738]  ? refcount_inc+0x46/0x70
[  428.756887][T14738]  rtnl_newlink+0x15a3/0x1c30
[  428.756976][T14738]  ? __pfx_rtnl_newlink+0x10/0x10
[  428.757029][T14738]  ? do_syscall_64+0x174/0x580
[  428.757099][T14738]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.757265][T14738]  ? kasan_quarantine_put+0xbb/0x1f0
[  428.757341][T14738]  ? lockdep_hardirqs_on+0x7a/0x110
[  428.757421][T14738]  ? nlmon_xmit+0xb0/0x100
[  428.757504][T14738]  ? kmem_cache_free+0x182/0x650
[  428.757611][T14738]  ? __lock_acquire+0x683/0x2cf0
[  428.757697][T14738]  ? __dev_queue_xmit+0x29b/0x3820
[  428.757780][T14738]  ? __local_bh_enable_ip+0xd0/0x130
[  428.757873][T14738]  ? lockdep_hardirqs_on+0x7a/0x110
[  428.757950][T14738]  ? __dev_queue_xmit+0x29b/0x3820
[  428.758015][T14738]  ? __local_bh_enable_ip+0xd0/0x130
[  428.758078][T14738]  ? __dev_queue_xmit+0x29b/0x3820
[  428.758165][T14738]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  428.758238][T14738]  ? __pfx_rtnl_newlink+0x10/0x10
[  428.758326][T14738]  ? __pfx_rtnl_newlink+0x10/0x10
[  428.758393][T14738]  rtnetlink_rcv_msg+0x802/0xc00
[  428.758458][T14738]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  428.758521][T14738]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  428.758581][T14738]  ? ref_tracker_free+0x689/0x830
[  428.758699][T14738]  ? __pfx_ref_tracker_free+0x10/0x10
[  428.758798][T14738]  netlink_rcv_skb+0x226/0x4a0
[  428.758873][T14738]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  428.758937][T14738]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  428.759043][T14738]  ? netlink_deliver_tap+0x2e/0x1b0
[  428.759108][T14738]  ? netlink_deliver_tap+0x2e/0x1b0
[  428.759215][T14738]  netlink_unicast+0x7bb/0x940
[  428.759330][T14738]  netlink_sendmsg+0x813/0xb40
[  428.759429][T14738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  428.759512][T14738]  ? aa_sock_msg_perm+0xf1/0x1b0
[  428.759597][T14738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  428.759669][T14738]  sock_sendmsg_nosec+0x13a/0x180
[  428.759761][T14738]  ____sys_sendmsg+0x54e/0x850
[  428.759848][T14738]  ? __pfx_____sys_sendmsg+0x10/0x10
[  428.759944][T14738]  ? import_iovec+0x73/0xa0
[  428.760042][T14738]  ___sys_sendmsg+0x2a5/0x360
[  428.760107][T14738]  ? __lock_acquire+0x683/0x2cf0
[  428.760201][T14738]  ? __pfx____sys_sendmsg+0x10/0x10
[  428.760374][T14738]  ? __fget_files+0x2a/0x420
[  428.760450][T14738]  ? __fget_files+0x3a2/0x420
[  428.760557][T14738]  __x64_sys_sendmsg+0x1b1/0x290
[  428.760657][T14738]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  428.760783][T14738]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.760853][T14738]  do_syscall_64+0x174/0x580
[  428.760920][T14738]  ? trace_irq_disable+0x3b/0x140
[  428.760995][T14738]  ? clear_bhb_loop+0x40/0x90
[  428.761068][T14738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.761131][T14738] RIP: 0033:0x7f4c58d9de99
[  428.761186][T14738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.761248][T14738] RSP: 002b:00007f4c59d08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  428.761312][T14738] RAX: ffffffffffffffda RBX: 00007f4c59025fa0 RCX: 00007f4c58d9de99
[  428.761355][T14738] RDX: 0000000000000004 RSI: 00002000000005c0 RDI: 0000000000000005
[  428.761397][T14738] RBP: 00007f4c59d08090 R08: 0000000000000000 R09: 0000000000000000
[  428.761430][T14738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  428.761463][T14738] R13: 00007f4c59026038 R14: 00007f4c59025fa0 R15: 00007ffcbeccd288
[  428.761551][T14738]  </TASK>
[  428.779726][T14738] netlink: 'syz.3.2777': attribute type 1 has an invalid length.
[  429.199787][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  429.308071][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  429.339818][T14747] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2780'.
[  429.362155][T14747] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2780'.
[  429.526797][T14756] vlan2: entered promiscuous mode
[  429.532906][T14756] veth0: entered promiscuous mode
[  429.750071][T14771] syzkaller0: entered promiscuous mode
[  429.755850][T14771] syzkaller0: entered allmulticast mode
[  430.038028][ T5626] block nbd38: Receive control failed (result -32)
[  430.046139][   T50] block nbd38: Receive control failed (result -32)
[  430.510871][T14805] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  430.872946][T14814] ip6tnl2: entered allmulticast mode
[  430.884900][   T47] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  430.893182][   T47] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  430.906610][  T188] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  431.011825][T14811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  431.045744][T14811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  431.069317][T14811] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  431.089097][T14811] bond0 (unregistering): Released all slaves
[  431.402853][T14818] ip6erspan0: left allmulticast mode
[  431.433479][T14818] ip6gre1: left promiscuous mode
[  431.450897][T14818] ip6gre1: left allmulticast mode
[  431.489963][T14818] ip6gre2: left promiscuous mode
[  431.508324][T14818] ip6gre2: left allmulticast mode
[  431.537919][T14818] ip6tnl1: left allmulticast mode
[  431.570053][T14818] ip6tnl2: left allmulticast mode
[  431.602206][T14839] FAULT_INJECTION: forcing a failure.
[  431.602206][T14839] name failslab, interval 1, probability 0, space 0, times 0
[  431.635908][T14820] vlan2: entered promiscuous mode
[  431.642999][T14839] CPU: 1 UID: 0 PID: 14839 Comm: syz.4.2810 Not tainted syzkaller #0 PREEMPT(full) 
[  431.643029][T14839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  431.643041][T14839] Call Trace:
[  431.643049][T14839]  <TASK>
[  431.643057][T14839]  dump_stack_lvl+0xe8/0x150
[  431.643094][T14839]  should_fail_ex+0x40c/0x560
[  431.643124][T14839]  should_failslab+0xa8/0x100
[  431.643157][T14839]  __kmalloc_cache_noprof+0xa8/0x660
[  431.643182][T14839]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  431.643204][T14839]  ? __kmalloc_cache_noprof+0x150/0x660
[  431.643228][T14839]  ? sctp_add_bind_addr+0x8c/0x370
[  431.643247][T14839]  ? sctp_add_bind_addr+0x8c/0x370
[  431.643273][T14839]  sctp_add_bind_addr+0x8c/0x370
[  431.643299][T14839]  sctp_copy_local_addr_list+0x31a/0x4e0
[  431.643323][T14839]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  431.643346][T14839]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  431.643373][T14839]  ? sctp_v6_is_any+0x64/0x80
[  431.643400][T14839]  ? sctp_copy_one_addr+0x93/0x360
[  431.643429][T14839]  sctp_bind_addr_copy+0xb3/0x3c0
[  431.643454][T14839]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  431.643488][T14839]  sctp_connect_new_asoc+0x2ff/0x6b0
[  431.643518][T14839]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  431.643551][T14839]  ? __local_bh_enable_ip+0xd0/0x130
[  431.643574][T14839]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  431.643599][T14839]  ? security_sctp_bind_connect+0x7e/0x2c0
[  431.643632][T14839]  sctp_sendmsg+0x159b/0x2d00
[  431.643680][T14839]  ? __pfx_sctp_sendmsg+0x10/0x10
[  431.643715][T14839]  ? aa_sk_perm+0x6d5/0x900
[  431.643742][T14839]  ? __might_fault+0xaf/0x130
[  431.643770][T14839]  ? sock_rps_record_flow+0x19/0x350
[  431.643794][T14839]  ? inet_sendmsg+0x298/0x320
[  431.643817][T14839]  ? __pfx_inet_sendmsg+0x10/0x10
[  431.643837][T14839]  sock_sendmsg_nosec+0x10e/0x180
[  431.643869][T14839]  ____sys_sendmsg+0x54e/0x850
[  431.643898][T14839]  ? __pfx_____sys_sendmsg+0x10/0x10
[  431.643931][T14839]  ? import_iovec+0x73/0xa0
[  431.643973][T14839]  ___sys_sendmsg+0x2a5/0x360
[  431.643994][T14839]  ? __lock_acquire+0x683/0x2cf0
[  431.644030][T14839]  ? __pfx____sys_sendmsg+0x10/0x10
[  431.644089][T14839]  ? __fget_files+0x2a/0x420
[  431.644115][T14839]  ? __fget_files+0x3a2/0x420
[  431.644152][T14839]  __x64_sys_sendmsg+0x1b1/0x290
[  431.644179][T14839]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  431.644220][T14839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.644242][T14839]  do_syscall_64+0x174/0x580
[  431.644266][T14839]  ? trace_irq_disable+0x3b/0x140
[  431.644293][T14839]  ? clear_bhb_loop+0x40/0x90
[  431.644318][T14839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.644338][T14839] RIP: 0033:0x7fc87d39de99
[  431.644359][T14839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.644377][T14839] RSP: 002b:00007fc87e2d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  431.644400][T14839] RAX: ffffffffffffffda RBX: 00007fc87d625fa0 RCX: 00007fc87d39de99
[  431.644415][T14839] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003
[  431.644428][T14839] RBP: 00007fc87e2d3090 R08: 0000000000000000 R09: 0000000000000000
[  431.644443][T14839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  431.644455][T14839] R13: 00007fc87d626038 R14: 00007fc87d625fa0 R15: 00007ffc4ddb01e8
[  431.644492][T14839]  </TASK>
[  431.650095][T14820] hsr0: entered promiscuous mode
[  431.752834][    C1] openvswitch: cpu_id mismatch with handler threads
[  431.817428][T14820] vlan2: entered allmulticast mode
[  432.030668][T14820] hsr0: entered allmulticast mode
[  432.043885][T14820] hsr_slave_0: entered allmulticast mode
[  432.061154][T14847] FAULT_INJECTION: forcing a failure.
[  432.061154][T14847] name failslab, interval 1, probability 0, space 0, times 0
[  432.074164][T14820] hsr_slave_1: entered allmulticast mode
[  432.087985][T14847] CPU: 0 UID: 0 PID: 14847 Comm: syz.4.2811 Not tainted syzkaller #0 PREEMPT(full) 
[  432.088015][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  432.088029][T14847] Call Trace:
[  432.088038][T14847]  <TASK>
[  432.088048][T14847]  dump_stack_lvl+0xe8/0x150
[  432.088086][T14847]  should_fail_ex+0x40c/0x560
[  432.088120][T14847]  should_failslab+0xa8/0x100
[  432.088156][T14847]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  432.088185][T14847]  ? local_lock_release+0x9c/0x160
[  432.088209][T14847]  ? __alloc_skb+0x1d7/0x7a0
[  432.088228][T14847]  ? __alloc_skb+0x1d7/0x7a0
[  432.088257][T14847]  __alloc_skb+0x1d7/0x7a0
[  432.088303][T14847]  alloc_skb_with_frags+0xc6/0x760
[  432.088342][T14847]  sock_alloc_send_pskb+0x878/0x990
[  432.088392][T14847]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  432.088419][T14847]  ? kasan_quarantine_put+0xbb/0x1f0
[  432.088448][T14847]  ? lockdep_hardirqs_on+0x7a/0x110
[  432.088481][T14847]  ? unix_dgram_sendmsg+0x5d7/0x17b0
[  432.088509][T14847]  ? kmem_cache_free+0x182/0x650
[  432.088541][T14847]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  432.088573][T14847]  unix_dgram_sendmsg+0x4da/0x17b0
[  432.088624][T14847]  ? __lock_acquire+0x683/0x2cf0
[  432.088660][T14847]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  432.088698][T14847]  ? aa_sock_msg_perm+0xda/0x1b0
[  432.088725][T14847]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  432.088758][T14847]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  432.088788][T14847]  sock_sendmsg_nosec+0x13a/0x180
[  432.088824][T14847]  ____sys_sendmsg+0x54e/0x850
[  432.088857][T14847]  ? __pfx_____sys_sendmsg+0x10/0x10
[  432.088894][T14847]  ? import_iovec+0x73/0xa0
[  432.088941][T14847]  ___sys_sendmsg+0x2a5/0x360
[  432.088967][T14847]  ? __lock_acquire+0x683/0x2cf0
[  432.089004][T14847]  ? __pfx____sys_sendmsg+0x10/0x10
[  432.089028][T14847]  ? __lock_acquire+0x683/0x2cf0
[  432.089080][T14847]  ? kstrtouint+0x6e/0xe0
[  432.089154][T14847]  __sys_sendmmsg+0x273/0x4d0
[  432.089187][T14847]  ? __pfx___sys_sendmmsg+0x10/0x10
[  432.089224][T14847]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  432.089269][T14847]  ? ksys_write+0x242/0x270
[  432.089294][T14847]  ? __pfx_ksys_write+0x10/0x10
[  432.089324][T14847]  __x64_sys_sendmmsg+0xa0/0xc0
[  432.089351][T14847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.089376][T14847]  do_syscall_64+0x174/0x580
[  432.089402][T14847]  ? trace_irq_disable+0x3b/0x140
[  432.089432][T14847]  ? clear_bhb_loop+0x40/0x90
[  432.089461][T14847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.089484][T14847] RIP: 0033:0x7fc87d39de99
[  432.089505][T14847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  432.089525][T14847] RSP: 002b:00007fc87e2d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  432.089549][T14847] RAX: ffffffffffffffda RBX: 00007fc87d625fa0 RCX: 00007fc87d39de99
[  432.089567][T14847] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003
[  432.089583][T14847] RBP: 00007fc87e2d3090 R08: 0000000000000000 R09: 0000000000000000
[  432.089598][T14847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  432.089613][T14847] R13: 00007fc87d626038 R14: 00007fc87d625fa0 R15: 00007ffc4ddb01e8
[  432.089650][T14847]  </TASK>
[  432.593804][T14853] __nla_validate_parse: 10 callbacks suppressed
[  432.593825][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'.
[  432.610929][   T47] net_ratelimit: 26 callbacks suppressed
[  432.610948][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  432.635899][T14853] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  432.643735][T14853] FAULT_INJECTION: forcing a failure.
[  432.643735][T14853] name failslab, interval 1, probability 0, space 0, times 0
[  432.659604][T14853] CPU: 0 UID: 0 PID: 14853 Comm: syz.0.2813 Not tainted syzkaller #0 PREEMPT(full) 
[  432.659636][T14853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  432.659650][T14853] Call Trace:
[  432.659660][T14853]  <TASK>
[  432.659670][T14853]  dump_stack_lvl+0xe8/0x150
[  432.659711][T14853]  should_fail_ex+0x40c/0x560
[  432.659747][T14853]  should_failslab+0xa8/0x100
[  432.659789][T14853]  __kmalloc_cache_noprof+0xa8/0x660
[  432.659822][T14853]  ? ____ip_mc_inc_group+0x518/0xdb0
[  432.659848][T14853]  ? ____ip_mc_inc_group+0x518/0xdb0
[  432.659882][T14853]  ____ip_mc_inc_group+0x518/0xdb0
[  432.659920][T14853]  ip_mc_up+0x115/0x2e0
[  432.659950][T14853]  inetdev_event+0xfc3/0x15e0
[  432.659983][T14853]  ? __pfx_ib_device_get_by_netdev+0x10/0x10
[  432.660018][T14853]  ? __pfx_inetdev_event+0x10/0x10
[  432.660064][T14853]  notifier_call_chain+0x1a5/0x3d0
[  432.660105][T14853]  __dev_notify_flags+0x31e/0x510
[  432.660137][T14853]  ? __pfx___dev_notify_flags+0x10/0x10
[  432.660160][T14853]  ? __dev_change_flags+0x5f1/0x820
[  432.660190][T14853]  ? __pfx___dev_change_flags+0x10/0x10
[  432.660225][T14853]  netif_change_flags+0xde/0x1b0
[  432.660254][T14853]  do_setlink+0xdd6/0x4670
[  432.660290][T14853]  ? __lock_acquire+0x683/0x2cf0
[  432.660325][T14853]  ? __pfx_do_setlink+0x10/0x10
[  432.660360][T14853]  ? __lock_acquire+0x683/0x2cf0
[  432.660413][T14853]  ? do_raw_spin_lock+0x12b/0x2f0
[  432.660459][T14853]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  432.660486][T14853]  ? lockdep_hardirqs_on+0x7a/0x110
[  432.660515][T14853]  ? __mutex_lock+0x1092/0x1550
[  432.660548][T14853]  ? __mutex_lock+0x5d4/0x1550
[  432.660580][T14853]  ? rtnl_newlink+0xc10/0x1c30
[  432.660606][T14853]  ? __pfx___mutex_lock+0x10/0x10
[  432.660643][T14853]  ? full_name_hash+0x92/0xe0
[  432.660681][T14853]  rtnl_newlink+0x15a3/0x1c30
[  432.660720][T14853]  ? __pfx_rtnl_newlink+0x10/0x10
[  432.660755][T14853]  ? __lock_acquire+0x683/0x2cf0
[  432.660792][T14853]  ? __lock_acquire+0x683/0x2cf0
[  432.660833][T14853]  ? unwind_next_frame+0x8f/0x2550
[  432.660867][T14853]  ? is_bpf_text_address+0x26/0x2b0
[  432.660912][T14853]  ? is_bpf_text_address+0x26/0x2b0
[  432.660951][T14853]  ? __lock_acquire+0x683/0x2cf0
[  432.660987][T14853]  ? kernel_text_address+0xa5/0xe0
[  432.661010][T14853]  ? __kernel_text_address+0xd/0x30
[  432.661032][T14853]  ? unwind_get_return_address+0x4d/0x90
[  432.661055][T14853]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  432.661084][T14853]  ? arch_stack_walk+0xfb/0x150
[  432.661120][T14853]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  432.661146][T14853]  ? __pfx_rtnl_newlink+0x10/0x10
[  432.661182][T14853]  ? __pfx_rtnl_newlink+0x10/0x10
[  432.661202][T14853]  rtnetlink_rcv_msg+0x802/0xc00
[  432.661221][T14853]  ? netlink_sendmsg+0x5d4/0xb40
[  432.661249][T14853]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  432.661269][T14853]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  432.661291][T14853]  ? __lock_acquire+0x683/0x2cf0
[  432.661330][T14853]  netlink_rcv_skb+0x226/0x4a0
[  432.661362][T14853]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  432.661385][T14853]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  432.661420][T14853]  ? netlink_deliver_tap+0x2e/0x1b0
[  432.661443][T14853]  ? netlink_deliver_tap+0x2e/0x1b0
[  432.661472][T14853]  netlink_unicast+0x7bb/0x940
[  432.661504][T14853]  netlink_sendmsg+0x813/0xb40
[  432.661537][T14853]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.661565][T14853]  ? aa_sock_msg_perm+0xf1/0x1b0
[  432.661593][T14853]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.661616][T14853]  sock_sendmsg_nosec+0x13a/0x180
[  432.661648][T14853]  ____sys_sendmsg+0x54e/0x850
[  432.661677][T14853]  ? __pfx_____sys_sendmsg+0x10/0x10
[  432.661709][T14853]  ? import_iovec+0x73/0xa0
[  432.661743][T14853]  ___sys_sendmsg+0x2a5/0x360
[  432.661765][T14853]  ? __lock_acquire+0x683/0x2cf0
[  432.661796][T14853]  ? __pfx____sys_sendmsg+0x10/0x10
[  432.661852][T14853]  ? __fget_files+0x2a/0x420
[  432.661879][T14853]  ? __fget_files+0x3a2/0x420
[  432.661916][T14853]  __x64_sys_sendmsg+0x1b1/0x290
[  432.661942][T14853]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  432.661981][T14853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.662004][T14853]  do_syscall_64+0x174/0x580
[  432.662031][T14853]  ? trace_irq_disable+0x3b/0x140
[  432.662061][T14853]  ? clear_bhb_loop+0x40/0x90
[  432.662089][T14853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.662112][T14853] RIP: 0033:0x7f32ad19de99
[  432.662132][T14853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  432.662152][T14853] RSP: 002b:00007f32adfc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  432.662177][T14853] RAX: ffffffffffffffda RBX: 00007f32ad425fa0 RCX: 00007f32ad19de99
[  432.662194][T14853] RDX: 0000000004000844 RSI: 0000200000000280 RDI: 0000000000000003
[  432.662210][T14853] RBP: 00007f32adfc2090 R08: 0000000000000000 R09: 0000000000000000
[  432.662225][T14853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  432.662239][T14853] R13: 00007f32ad426038 R14: 00007f32ad425fa0 R15: 00007ffd15dddce8
[  432.662275][T14853]  </TASK>
[  432.662800][T14853] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  432.755260][T14856] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2814'.
[  432.761809][T14853] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2813'.
[  433.037175][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  433.226493][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex
[  433.346659][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  433.394449][T14866] ip_tables: iptables: counters copy to user failed while replacing table
[  433.408413][   T50] block nbd39: Receive control failed (result -32)
[  433.516459][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  433.629851][T14877] sctp: [Deprecated]: syz.4.2819 (pid 14877) Use of int in max_burst socket option deprecated.
[  433.629851][T14877] Use struct sctp_assoc_value instead
[  433.654939][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  433.671790][T14880] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2820'.
[  433.702107][T14877] sctp: [Deprecated]: syz.4.2819 (pid 14877) Use of struct sctp_assoc_value in delayed_ack socket option.
[  433.702107][T14877] Use struct sctp_sack_info instead
[  433.722234][T14880] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2820'.
[  433.787567][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  433.896405][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  434.046406][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  434.066869][T14889] syzkaller0: entered promiscuous mode
[  434.072907][T14889] syzkaller0: entered allmulticast mode
[  434.088741][T14889] validate_nla: 1 callbacks suppressed
[  434.088761][T14889] netlink: 'syz.0.2822': attribute type 39 has an invalid length.
[  434.176478][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  434.338529][T14907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2826'.
[  434.439363][T14911] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2828'.
[  434.520813][T14914] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  435.013766][T14928] netlink: 'syz.3.2831': attribute type 2 has an invalid length.
[  435.025243][T14929] netlink: 'syz.3.2831': attribute type 2 has an invalid length.
[  435.115550][T14931] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2832'.
[  435.129638][T14931] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2832'.
[  437.008473][T14899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  437.181660][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2837'.
[  437.272662][T14956] netlink: 'syz.2.2840': attribute type 1 has an invalid length.
[  437.297875][T14951] netlink: 'syz.3.2836': attribute type 2 has an invalid length.
[  437.560736][T14966] syz_tun: entered allmulticast mode
[  437.584311][T14965] syz_tun: left allmulticast mode
[  437.710939][T14972] tipc: Started in network mode
[  437.718109][T14972] tipc: Node identity 8a55a224c713, cluster identity 4711
[  437.729888][T14972] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  437.840762][T14972] syzkaller0: entered promiscuous mode
[  437.846632][T14972] syzkaller0: entered allmulticast mode
[  437.853006][T14972] tipc: Resetting bearer <eth:syzkaller0>
[  437.886504][   T35] net_ratelimit: 33 callbacks suppressed
[  437.886526][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  437.964273][T14993] netlink: 'syz.1.2851': attribute type 7 has an invalid length.
[  437.986340][T14993] netlink: 'syz.1.2851': attribute type 3 has an invalid length.
[  437.994467][T14993] __nla_validate_parse: 3 callbacks suppressed
[  437.994486][T14993] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2851'.
[  438.010284][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  438.114113][T14981] netlink: 'syz.3.2848': attribute type 1 has an invalid length.
[  438.121877][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  438.142702][   T50] block nbd40: Receive control failed (result -32)
[  438.147658][ T5626] block nbd40: Receive control failed (result -32)
[  438.157751][T14981] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2848'.
[  438.212962][T14970] tipc: Resetting bearer <eth:syzkaller0>
[  438.361522][T15003] netlink: 'syz.2.2853': attribute type 4 has an invalid length.
[  438.392790][T15003] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2853'.
[  438.735069][T15023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2853'.
[  438.760372][T15023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2853'.
[  438.778882][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2853'.
[  438.792062][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2853'.
[  440.070385][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  440.077016][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  440.480271][T14970] tipc: Disabling bearer <eth:syzkaller0>
[  440.497981][    T9] tipc: Node number set to 1296474660
[  440.516804][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  440.646406][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  440.796405][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  440.832851][T15043] syz_tun: entered allmulticast mode
[  440.851010][T15048] FAULT_INJECTION: forcing a failure.
[  440.851010][T15048] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  440.890335][T15041] syz_tun: left allmulticast mode
[  440.913318][T15048] CPU: 1 UID: 0 PID: 15048 Comm: syz.3.2863 Not tainted syzkaller #0 PREEMPT(full) 
[  440.913347][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  440.913360][T15048] Call Trace:
[  440.913369][T15048]  <TASK>
[  440.913377][T15048]  dump_stack_lvl+0xe8/0x150
[  440.913412][T15048]  should_fail_ex+0x40c/0x560
[  440.913443][T15048]  _copy_from_user+0x2d/0xb0
[  440.913463][T15048]  bpf_prog_test_run_xdp+0xe12/0x11d0
[  440.913504][T15048]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  440.913534][T15048]  ? __fget_files+0x2a/0x420
[  440.913567][T15048]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  440.913593][T15048]  bpf_prog_test_run+0x2c5/0x340
[  440.913627][T15048]  __sys_bpf+0xa22/0xd90
[  440.913661][T15048]  ? __pfx___sys_bpf+0x10/0x10
[  440.913698][T15048]  ? __fget_files+0x2a/0x420
[  440.913742][T15048]  ? ksys_write+0x242/0x270
[  440.913764][T15048]  ? __pfx_ksys_write+0x10/0x10
[  440.913789][T15048]  __x64_sys_bpf+0xba/0xd0
[  440.913813][T15048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.913845][T15048]  do_syscall_64+0x174/0x580
[  440.913869][T15048]  ? trace_irq_disable+0x3b/0x140
[  440.913895][T15048]  ? clear_bhb_loop+0x40/0x90
[  440.913919][T15048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.913940][T15048] RIP: 0033:0x7f4c58d9de99
[  440.913959][T15048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.913976][T15048] RSP: 002b:00007f4c59d08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  440.913997][T15048] RAX: ffffffffffffffda RBX: 00007f4c59025fa0 RCX: 00007f4c58d9de99
[  440.914012][T15048] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  440.914025][T15048] RBP: 00007f4c59d08090 R08: 0000000000000000 R09: 0000000000000000
[  440.914038][T15048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  440.914050][T15048] R13: 00007f4c59026038 R14: 00007f4c59025fa0 R15: 00007ffcbeccd288
[  440.914081][T15048]  </TASK>
[  441.170126][T15056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2865'.
[  441.214616][ T1013] bond1: (slave macvlan2): failed to get link speed/duplex
[  441.333076][T15059] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2864'.
[  441.342356][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  441.357212][T15059] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2864'.
[  441.487164][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  441.616504][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  441.632717][T15080] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  441.658674][T15077] sctp: [Deprecated]: syz.3.2871 (pid 15077) Use of struct sctp_assoc_value in delayed_ack socket option.
[  441.658674][T15077] Use struct sctp_sack_info instead
[  441.760655][T15084] sctp: [Deprecated]: syz.3.2871 (pid 15084) Use of struct sctp_assoc_value in delayed_ack socket option.
[  441.760655][T15084] Use struct sctp_sack_info instead
[  442.023838][T15050] scsi_nl_rcv_msg: discarding partial skb
[  442.084013][T15097] FAULT_INJECTION: forcing a failure.
[  442.084013][T15097] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.110294][T15097] CPU: 1 UID: 0 PID: 15097 Comm: syz.2.2875 Not tainted syzkaller #0 PREEMPT(full) 
[  442.110325][T15097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  442.110340][T15097] Call Trace:
[  442.110349][T15097]  <TASK>
[  442.110359][T15097]  dump_stack_lvl+0xe8/0x150
[  442.110398][T15097]  should_fail_ex+0x40c/0x560
[  442.110432][T15097]  _copy_from_user+0x2d/0xb0
[  442.110456][T15097]  ___sys_recvmsg+0x173/0x5a0
[  442.110486][T15097]  ? ktime_get_ts64+0xa9/0x410
[  442.110521][T15097]  ? __pfx____sys_recvmsg+0x10/0x10
[  442.110556][T15097]  ? ktime_get_ts64+0xa9/0x410
[  442.110615][T15097]  do_recvmmsg+0x31a/0x7f0
[  442.110654][T15097]  ? __pfx_do_recvmmsg+0x10/0x10
[  442.110705][T15097]  ? get_timespec64+0x119/0x1b0
[  442.110740][T15097]  ? __pfx_get_timespec64+0x10/0x10
[  442.110786][T15097]  __x64_sys_recvmmsg+0x1b7/0x250
[  442.110818][T15097]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  442.110858][T15097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.110884][T15097]  do_syscall_64+0x174/0x580
[  442.110912][T15097]  ? trace_irq_disable+0x3b/0x140
[  442.110942][T15097]  ? clear_bhb_loop+0x40/0x90
[  442.110971][T15097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.110994][T15097] RIP: 0033:0x7f24a199de99
[  442.111015][T15097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.111036][T15097] RSP: 002b:00007f24a2858028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  442.111061][T15097] RAX: ffffffffffffffda RBX: 00007f24a1c25fa0 RCX: 00007f24a199de99
[  442.111090][T15097] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  442.111106][T15097] RBP: 00007f24a2858090 R08: 0000200000003700 R09: 0000000000000000
[  442.111121][T15097] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002
[  442.111136][T15097] R13: 00007f24a1c26038 R14: 00007f24a1c25fa0 R15: 00007ffe9588b568
[  442.111170][T15097]  </TASK>
[  442.347189][T15094] netlink: 'syz.3.2874': attribute type 2 has an invalid length.
[  442.386923][T15094] ´: entered promiscuous mode
[  442.430327][T15099] syz_tun: entered allmulticast mode
[  442.869365][T15098] syz_tun: left allmulticast mode
[  442.896392][   T35] net_ratelimit: 8 callbacks suppressed
[  442.896412][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  443.039982][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  443.316380][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  443.441150][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  443.576425][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  443.706544][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  443.839002][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  443.979170][ T1013] bond1: (slave macvlan2): failed to get link speed/duplex
[  444.108735][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  444.229327][T15173] IPVS: Scheduler module ip_vs_sip not found
[  444.243494][   T60] bond1: (slave macvlan2): failed to get link speed/duplex
[  444.327526][T15189] __nla_validate_parse: 1 callbacks suppressed
[  444.327547][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2901'.
[  444.374385][T15184] netlink: 'syz.3.2900': attribute type 2 has an invalid length.
[  444.397474][T15184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2900'.
[  444.412605][T15185] netlink: 'syz.0.2901': attribute type 39 has an invalid length.
[  444.725056][T15196] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.2905'.
[  444.920438][T15205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2908'.
[  444.977771][T15205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2908'.
[  445.005861][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'.
[  445.021269][T15205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2908'.
[  445.150312][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2910'.
[  445.186176][T15212] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  445.215758][T15212] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2910'.
[  445.372075][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2913'.
[  445.431273][T15223] bond0: option lacp_active: invalid value (5)
[  445.442691][T15223] bond0 (unregistering): Released all slaves
[  445.483542][T15235] netlink: 'syz.4.2915': attribute type 2 has an invalid length.
[  445.567599][T15239] netlink: 'syz.1.2917': attribute type 1 has an invalid length.
[  445.687282][T15239] netlink: 'syz.1.2917': attribute type 2 has an invalid length.
[  445.846740][T15250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.015420][T15245] tipc: Disabling bearer <eth:syzkaller0>
[  446.114787][T15258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.249857][T15262] netlink: 'syz.3.2925': attribute type 29 has an invalid length.
[  446.563458][T15272] netlink: 'syz.2.2930': attribute type 2 has an invalid length.
[  446.737811][T15280] netlink: 'syz.1.2934': attribute type 18 has an invalid length.
[  447.144749][T15303] syz_tun: entered allmulticast mode
[  447.212400][T15303] netlink: 'syz.3.2944': attribute type 9 has an invalid length.
[  447.312912][T15302] lo speed is unknown, defaulting to 1000
[  447.343369][T15307] team0 (unregistering): Port device team_slave_0 removed
[  447.354251][   T50] block nbd41: Receive control failed (result -32)
[  447.354323][ T5626] block nbd41: Receive control failed (result -32)
[  447.407997][T15307] team0 (unregistering): Port device team_slave_1 removed
[  447.434063][T15307] team0 (unregistering): Port device bridge0 removed
[  447.462175][T15300] syz_tun: left allmulticast mode
[  447.496427][T15302] lo speed is unknown, defaulting to 1000
[  447.524885][T15311] validate_nla: 1 callbacks suppressed
[  447.524905][T15311] netlink: 'syz.2.2946': attribute type 2 has an invalid length.
[  447.709204][T15318] netlink: 'syz.3.2949': attribute type 1 has an invalid length.
[  447.798116][T15321] netlink: 'syz.0.2950': attribute type 18 has an invalid length.
[  448.016450][   T47] net_ratelimit: 27 callbacks suppressed
[  448.016473][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  448.160895][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  448.307454][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex
[  448.350740][T15342] netlink: 'syz.1.2959': attribute type 1 has an invalid length.
[  448.656866][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  448.673763][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  448.682628][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  448.694908][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  448.702909][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  448.801504][T15348] veth5: entered allmulticast mode
[  448.859386][T15348] bond3: (slave veth5): Enslaving as an active interface with a down link
[  448.893831][T15351] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  448.959794][T15342] macvlan2: entered promiscuous mode
[  448.971327][T15342] macvlan2: entered allmulticast mode
[  448.991530][T15342] bond3: entered promiscuous mode
[  449.003315][T15342] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  449.013533][T15342] bond3: left promiscuous mode
[  449.174956][T15358] netlink: 'syz.2.2963': attribute type 18 has an invalid length.
[  449.286930][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  449.536383][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  449.648636][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  449.765091][T15385] __nla_validate_parse: 25 callbacks suppressed
[  449.765116][T15385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2969'.
[  449.807185][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  449.863815][T15354] lo speed is unknown, defaulting to 1000
[  449.890644][T15354] lo speed is unknown, defaulting to 1000
[  449.929494][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  450.071961][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  450.196926][   T47] bond1: (slave macvlan2): failed to get link speed/duplex
[  450.240629][T15394] sctp: [Deprecated]: syz.3.2973 (pid 15394) Use of int in max_burst socket option deprecated.
[  450.240629][T15394] Use struct sctp_assoc_value instead
[  450.787830][ T5626] Bluetooth: hci5: command tx timeout
[  450.978858][T15354] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.986193][T15354] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.993501][T15354] bridge_slave_0: entered allmulticast mode
[  451.009857][T15354] bridge_slave_0: entered promiscuous mode
[  451.031324][T15354] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.057288][T15354] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.080013][T15354] bridge_slave_1: entered allmulticast mode
[  451.102400][T15354] bridge_slave_1: entered promiscuous mode
[  451.134611][T15428] netlink: 'syz.4.2984': attribute type 6 has an invalid length.
[  451.220832][T15354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.242601][T15354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.349626][T15436] x_tables: unsorted entry at hook 3
[  451.399925][T15427] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  451.433032][T15427] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  451.471198][T15354] team0: Port device team_slave_0 added
[  451.493839][T15354] team0: Port device team_slave_1 added
[  451.583083][T15354] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.598185][T15354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.628060][T15441] netlink: 'syz.3.2990': attribute type 2 has an invalid length.
[  451.636060][T15441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2990'.
[  451.645947][T15354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.698602][T15354] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.710185][T15354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.777494][T15354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.945061][T15354] hsr_slave_0: entered promiscuous mode
[  451.955404][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2997'.
[  451.966043][T15354] hsr_slave_1: entered promiscuous mode
[  451.972975][T15354] debugfs: 'hsr0' already exists in 'hsr'
[  451.986560][T15354] Cannot create hsr debugfs directory
[  452.433617][T15471] netlink: 'syz.1.3002': attribute type 13 has an invalid length.
[  452.737720][T15354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  452.863322][T15354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  452.872333][ T5626] Bluetooth: hci5: command tx timeout
[  453.020902][T15354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  453.055486][T15490] net_ratelimit: 10 callbacks suppressed
[  453.055507][T15490] openvswitch: netlink: Unknown key attributes 2
[  453.073731][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  453.180890][T15494] netlink: 'syz.3.3010': attribute type 1 has an invalid length.
[  453.194773][T15354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  453.346118][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3010'.
[  453.357763][   T35] bond1: (slave macvlan2): failed to get link speed/duplex
[  453.387671][T15494] bridge2: entered promiscuous mode
[  453.430851][T15494] bond6: (slave bridge2): making interface the new active one
[  453.454009][T15494] bond6: (slave bridge2): Enslaving as an active interface with an up link
[  453.650865][T15354] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  453.678080][T15354] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  453.696905][ T3355] bond1: (slave macvlan2): failed to get link speed/duplex
[  453.720850][T15354] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  453.751256][T15354] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  453.773254][T15354] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  453.808611][T15354] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  453.828973][T15354] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  453.863261][T15354] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  453.942599][T15517] lo: entered allmulticast mode
[  453.976013][T15517] tunl0: entered allmulticast mode
[  453.983476][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3018'.
[  454.005562][T15517] gre0: entered allmulticast mode
[  454.031316][T15517] gretap0: entered allmulticast mode
[  454.043329][T15517] erspan0: entered allmulticast mode
[  454.057286][T15517] ip_vti0: entered allmulticast mode
[  454.073158][T15517] ip6_vti0: entered allmulticast mode
[  454.086158][T15517] sit0: entered allmulticast mode
[  454.112137][T15517] ip6tnl0: entered allmulticast mode
[  454.148063][T15517] ip6gre0: entered allmulticast mode
[  454.160247][T15517] syz_tun: entered allmulticast mode
[  454.178311][T15517] bridge0: entered allmulticast mode
[  454.193479][T15527] FAULT_INJECTION: forcing a failure.
[  454.193479][T15527] name failslab, interval 1, probability 0, space 0, times 0
[  454.210865][T15517] vcan0: entered allmulticast mode
[  454.225021][T15527] CPU: 0 UID: 0 PID: 15527 Comm: syz.4.3019 Not tainted syzkaller #0 PREEMPT(full) 
[  454.225052][T15527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  454.225066][T15527] Call Trace:
[  454.225076][T15527]  <TASK>
[  454.225085][T15527]  dump_stack_lvl+0xe8/0x150
[  454.225132][T15527]  should_fail_ex+0x40c/0x560
[  454.225167][T15527]  should_failslab+0xa8/0x100
[  454.225202][T15527]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  454.225233][T15527]  ? skb_clone+0x212/0x3a0
[  454.225259][T15527]  ? skb_clone+0x212/0x3a0
[  454.225292][T15527]  skb_clone+0x212/0x3a0
[  454.225317][T15527]  ? nfnetlink_rcv+0x4b0/0x28c0
[  454.225345][T15527]  nfnetlink_rcv+0x4de/0x28c0
[  454.225394][T15527]  ? kernel_text_address+0xa5/0xe0
[  454.225419][T15527]  ? __kernel_text_address+0xd/0x30
[  454.225443][T15527]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  454.225474][T15527]  ? arch_stack_walk+0xfb/0x150
[  454.225530][T15527]  ? stack_trace_save+0xa9/0x100
[  454.225562][T15527]  ? __lock_acquire+0x683/0x2cf0
[  454.225606][T15527]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  454.225652][T15527]  ? __lock_acquire+0x683/0x2cf0
[  454.225699][T15527]  ? __netlink_lookup+0xc6/0x8b0
[  454.225739][T15527]  ? netlink_deliver_tap+0x2e/0x1b0
[  454.225769][T15527]  ? netlink_deliver_tap+0x2e/0x1b0
[  454.225803][T15527]  ? netlink_deliver_tap+0x2e/0x1b0
[  454.225830][T15527]  ? netlink_deliver_tap+0x2e/0x1b0
[  454.225864][T15527]  netlink_unicast+0x7bb/0x940
[  454.225901][T15527]  netlink_sendmsg+0x813/0xb40
[  454.225940][T15527]  ? __pfx_netlink_sendmsg+0x10/0x10
[  454.225973][T15527]  ? aa_sock_msg_perm+0xf1/0x1b0
[  454.226005][T15527]  ? __pfx_netlink_sendmsg+0x10/0x10
[  454.226032][T15527]  sock_sendmsg_nosec+0x13a/0x180
[  454.226068][T15527]  ____sys_sendmsg+0x54e/0x850
[  454.226109][T15527]  ? __pfx_____sys_sendmsg+0x10/0x10
[  454.226147][T15527]  ? import_iovec+0x73/0xa0
[  454.226186][T15527]  ___sys_sendmsg+0x2a5/0x360
[  454.226212][T15527]  ? __lock_acquire+0x683/0x2cf0
[  454.226248][T15527]  ? __pfx____sys_sendmsg+0x10/0x10
[  454.226312][T15527]  ? __fget_files+0x2a/0x420
[  454.226343][T15527]  ? __fget_files+0x3a2/0x420
[  454.226384][T15527]  __x64_sys_sendmsg+0x1b1/0x290
[  454.226414][T15527]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  454.226456][T15527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.226481][T15527]  do_syscall_64+0x174/0x580
[  454.226509][T15527]  ? trace_irq_disable+0x3b/0x140
[  454.226539][T15527]  ? clear_bhb_loop+0x40/0x90
[  454.226567][T15527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.226590][T15527] RIP: 0033:0x7fc87d39de99
[  454.226613][T15527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  454.226633][T15527] RSP: 002b:00007fc87e2d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  454.226657][T15527] RAX: ffffffffffffffda RBX: 00007fc87d625fa0 RCX: 00007fc87d39de99
[  454.226675][T15527] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  454.226690][T15527] RBP: 00007fc87e2d3090 R08: 0000000000000000 R09: 0000000000000000
[  454.226706][T15527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  454.226719][T15527] R13: 00007fc87d626038 R14: 00007fc87d625fa0 R15: 00007ffc4ddb01e8
[  454.226753][T15527]  </TASK>
[  454.261278][T15517] bond0: entered allmulticast mode
[  454.588522][T15517] bond_slave_0: entered allmulticast mode
[  454.597084][T15517] bond_slave_1: entered allmulticast mode
[  454.614483][T15517] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.641968][T15517] team0: entered allmulticast mode
[  454.658195][T15517] team_slave_0: entered allmulticast mode
[  454.670931][T15517] team_slave_1: entered allmulticast mode
[  454.689321][T15517] 8021q: adding VLAN 0 to HW filter on device team0
[  454.720494][T15517] dummy0: entered allmulticast mode
[  454.742040][T15517] nlmon0: entered allmulticast mode
[  454.751313][T15517] batadv0: entered allmulticast mode
[  454.770444][T15517] 8021q: adding VLAN 0 to HW filter on device batadv0
[  454.798684][T15517] vxcan0: entered allmulticast mode
[  454.822561][T15517] vxcan1: entered allmulticast mode
[  454.844492][T15517] veth0: entered allmulticast mode
[  454.853629][T15517] veth1: entered allmulticast mode
[  454.861280][T15517] wg0: entered allmulticast mode
[  454.873772][T15517] wg1: entered allmulticast mode
[  454.881738][T15517] wg2: entered allmulticast mode
[  454.889545][T15517] veth0_to_bridge: entered allmulticast mode
[  454.901789][T15517] veth1_to_bridge: entered allmulticast mode
[  454.916100][T15517] veth0_to_bond: entered allmulticast mode
[  454.925228][T15517] veth1_to_bond: entered allmulticast mode
[  454.938689][T15517] veth0_to_team: entered allmulticast mode
[  454.946826][ T5626] Bluetooth: hci5: command tx timeout
[  454.961015][T15517] veth1_to_team: entered allmulticast mode
[  454.970123][T15517] xfrm0: entered allmulticast mode
[  454.978864][T15517] veth0_to_hsr: entered allmulticast mode
[  454.987690][T15517] veth1_to_hsr: entered allmulticast mode
[  454.998429][T15517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  455.016614][T15517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  455.035712][T15517] veth1_virt_wifi: entered allmulticast mode
[  455.057309][T15517] veth0_virt_wifi: entered allmulticast mode
[  455.073112][T15517] virt_wifi0: entered allmulticast mode
[  455.080420][T15517] veth1_vlan: left promiscuous mode
[  455.085708][T15517] veth1_vlan: entered allmulticast mode
[  455.093256][T15517] veth0_vlan: left promiscuous mode
[  455.098824][T15517] veth0_vlan: entered allmulticast mode
[  455.109951][T15517] veth0_vlan: entered promiscuous mode
[  455.117250][T15517] vlan0: entered allmulticast mode
[  455.123711][T15517] vlan1: entered allmulticast mode
[  455.130039][T15517] veth1_vlan: entered promiscuous mode
[  455.135571][T15517] macvlan0: entered allmulticast mode
[  455.142693][T15517] macvlan1: entered allmulticast mode
[  455.149366][T15517] ipvlan0: entered allmulticast mode
[  455.157159][T15517] ipvlan1: entered allmulticast mode
[  455.163808][T15517] veth1_macvtap: left promiscuous mode
[  455.169886][T15517] veth1_macvtap: entered allmulticast mode
[  455.177271][T15517] veth0_macvtap: left promiscuous mode
[  455.182783][T15517] veth0_macvtap: entered allmulticast mode
[  455.189899][T15517] veth0_macvtap: entered promiscuous mode
[  455.195701][T15517] macvtap0: entered allmulticast mode
[  455.202376][T15517] veth1_macvtap: entered promiscuous mode
[  455.208422][T15517] macsec0: entered allmulticast mode
[  455.215200][T15517] geneve0: entered allmulticast mode
[  455.222896][T15517] geneve1: entered allmulticast mode
[  455.230490][T15517] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  455.239672][T15517] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  455.248002][T15517] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  455.256040][T15517] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  455.263931][T15517] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  455.272753][T15517] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  455.280617][T15517] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  455.289132][T15517] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  455.297211][T15517] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  455.304299][T15517] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  455.328222][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.335423][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.355855][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.363092][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.404746][T15531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3020'.
[  455.422489][   T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  455.423365][T15546] openvswitch: netlink: IP tunnel dst address not specified
[  455.451368][   T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  455.580103][   T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  455.620217][   T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  455.661132][T15530] ------------[ cut here ]------------
[  455.667726][T15530] !chanctx_conf
[  455.667758][T15530] WARNING: net/mac80211/tx.c:6492 at ieee80211_tx_skb_tid+0x3b8/0x480, CPU#1: syz.4.3021/15530
[  455.681733][T15530] Modules linked in:
[  455.687434][T15530] CPU: 1 UID: 0 PID: 15530 Comm: syz.4.3021 Not tainted syzkaller #0 PREEMPT(full) 
[  455.696925][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  455.707067][T15530] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480
[  455.713120][T15530] Code: 48 56 f6 e9 b1 fe ff ff e8 55 4c 7a f6 90 0f 0b 90 e9 e2 fe ff ff e8 47 4c 7a f6 90 0f 0b 90 e9 2a fe ff ff e8 39 4c 7a f6 90 <0f> 0b 90 e8 40 b4 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4
[  455.732831][T15530] RSP: 0018:ffffc900036af318 EFLAGS: 00010283
[  455.739000][T15530] RAX: ffffffff8b4cb547 RBX: ffffffff8b4cb1bf RCX: 0000000000080000
[  455.747087][T15530] RDX: ffffc9000ddf9000 RSI: 00000000000097e5 RDI: 00000000000097e6
[  455.755111][T15530] RBP: 00000000ffffffff R08: ffffffff8b4cb1bf R09: 0000000000000000
[  455.763170][T15530] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffff88807a698ec0
[  455.771237][T15530] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
[  455.779302][T15530] FS:  00007fc87e2d36c0(0000) GS:ffff888125053000(0000) knlGS:0000000000000000
[  455.788327][T15530] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  455.795012][T15530] CR2: 00007f88845ef4b8 CR3: 0000000056abc000 CR4: 00000000003526f0
[  455.803093][T15530] Call Trace:
[  455.806453][T15530]  <TASK>
[  455.809435][T15530]  mesh_plink_frame_tx+0x73d/0xc30
[  455.814604][T15530]  ? __pfx_mesh_plink_frame_tx+0x10/0x10
[  455.820338][T15530]  ? mesh_path_start_discovery+0xc30/0xd40
[  455.826217][T15530]  mesh_plink_deactivate+0x18b/0x2f0
[  455.832397][T15530]  mesh_sta_cleanup+0x42/0x150
[  455.837275][T15530]  cleanup_single_sta+0x3ff/0x660
[  455.842353][T15530]  __sta_info_flush+0x5bb/0x700
[  455.847294][T15530]  ? __pfx___sta_info_flush+0x10/0x10
[  455.852728][T15530]  ieee80211_do_stop+0x3cd/0x2410
[  455.857888][T15530]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  455.863433][T15530]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  455.869354][T15530]  ieee80211_stop+0x1ab/0x200
[  455.874097][T15530]  ? __pfx_ieee80211_stop+0x10/0x10
[  455.879434][T15530]  __dev_close_many+0x366/0x6e0
[  455.884374][T15530]  ? __pfx___dev_close_many+0x10/0x10
[  455.889880][T15530]  netif_close_many+0x249/0x660
[  455.894784][T15530]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  455.900695][T15530]  ? __pfx_netif_close_many+0x10/0x10
[  455.906133][T15530]  ? __mutex_lock+0x1092/0x1550
[  455.911191][T15530]  ? __mutex_lock+0x5d4/0x1550
[  455.916021][T15530]  netif_close+0x160/0x220
[  455.920547][T15530]  ? __pfx_netif_close+0x10/0x10
[  455.925545][T15530]  ? __pfx___mutex_lock+0x10/0x10
[  455.930677][T15530]  ? do_raw_spin_lock+0x12b/0x2f0
[  455.935780][T15530]  dev_close+0xf7/0x210
[  455.940037][T15530]  cfg80211_shutdown_all_interfaces+0xb0/0x220
[  455.946284][T15530]  ? __pfx_cfg80211_rfkill_set_block+0x10/0x10
[  455.952500][T15530]  cfg80211_rfkill_set_block+0x2d/0x50
[  455.958071][T15530]  rfkill_set_block+0x19f/0x4d0
[  455.962998][T15530]  rfkill_fop_write+0x43b/0x560
[  455.967967][T15530]  ? apparmor_file_permission+0x1f4/0x300
[  455.973770][T15530]  ? __pfx_rfkill_fop_write+0x10/0x10
[  455.979254][T15530]  ? security_kernfs_init_security+0x240/0x270
[  455.985493][T15530]  ? rw_verify_area+0x203/0x4c0
[  455.990484][T15530]  ? __pfx_rfkill_fop_write+0x10/0x10
[  455.995914][T15530]  vfs_write+0x296/0xba0
[  456.000270][T15530]  ? __pfx_vfs_write+0x10/0x10
[  456.005092][T15530]  ? __fget_files+0x2a/0x420
[  456.009789][T15530]  ? __fget_files+0x2a/0x420
[  456.014429][T15530]  ? __fget_files+0x3a2/0x420
[  456.019217][T15530]  ? __fget_files+0x2a/0x420
[  456.023875][T15530]  ksys_write+0x150/0x270
[  456.028302][T15530]  ? __pfx_ksys_write+0x10/0x10
[  456.033213][T15530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.039376][T15530]  do_syscall_64+0x174/0x580
[  456.044032][T15530]  ? clear_bhb_loop+0x40/0x90
[  456.048811][T15530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.054760][T15530] RIP: 0033:0x7fc87d39de99
[  456.059308][T15530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  456.079113][T15530] RSP: 002b:00007fc87e2d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  456.087714][T15530] RAX: ffffffffffffffda RBX: 00007fc87d625fa0 RCX: 00007fc87d39de99
[  456.095769][T15530] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000c
[  456.103837][T15530] RBP: 00007fc87d433eaf R08: 0000000000000000 R09: 0000000000000000
[  456.111899][T15530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  456.119965][T15530] R13: 00007fc87d626038 R14: 00007fc87d625fa0 R15: 00007ffc4ddb01e8
[  456.128067][T15530]  </TASK>
[  456.131147][T15530] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  456.138485][T15530] CPU: 1 UID: 0 PID: 15530 Comm: syz.4.3021 Not tainted syzkaller #0 PREEMPT(full) 
[  456.147900][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  456.157976][T15530] Call Trace:
[  456.161277][T15530]  <TASK>
[  456.164232][T15530]  vpanic+0x56c/0xa60
[  456.168258][T15530]  ? __pfx__printk+0x10/0x10
[  456.172966][T15530]  ? __pfx_vpanic+0x10/0x10
[  456.177506][T15530]  ? is_bpf_text_address+0x292/0x2b0
[  456.182862][T15530]  ? is_bpf_text_address+0x26/0x2b0
[  456.188128][T15530]  panic+0xc5/0xd0
[  456.191889][T15530]  ? __pfx_panic+0x10/0x10
[  456.196365][T15530]  __warn+0x315/0x4c0
[  456.200372][T15530]  ? ieee80211_tx_skb_tid+0x3b8/0x480
[  456.205780][T15530]  ? ieee80211_tx_skb_tid+0x3b8/0x480
[  456.211184][T15530]  __report_bug+0x276/0x570
[  456.215717][T15530]  ? ieee80211_tx_skb_tid+0x3b8/0x480
[  456.221125][T15530]  ? __pfx___report_bug+0x10/0x10
[  456.226177][T15530]  ? __lock_acquire+0x683/0x2cf0
[  456.231180][T15530]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  456.237278][T15530]  ? ieee80211_tx_skb_tid+0x3b8/0x480
[  456.242692][T15530]  report_bug+0x16a/0x220
[  456.247053][T15530]  ? ieee80211_tx_skb_tid+0x3b8/0x480
[  456.252457][T15530]  ? ieee80211_tx_skb_tid+0x3ba/0x480
[  456.257880][T15530]  handle_bug+0x9c/0x200
[  456.262172][T15530]  exc_invalid_op+0x1a/0x50
[  456.266704][T15530]  asm_exc_invalid_op+0x1a/0x20
[  456.271587][T15530] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480
[  456.277616][T15530] Code: 48 56 f6 e9 b1 fe ff ff e8 55 4c 7a f6 90 0f 0b 90 e9 e2 fe ff ff e8 47 4c 7a f6 90 0f 0b 90 e9 2a fe ff ff e8 39 4c 7a f6 90 <0f> 0b 90 e8 40 b4 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4
[  456.297255][T15530] RSP: 0018:ffffc900036af318 EFLAGS: 00010283
[  456.303358][T15530] RAX: ffffffff8b4cb547 RBX: ffffffff8b4cb1bf RCX: 0000000000080000
[  456.311363][T15530] RDX: ffffc9000ddf9000 RSI: 00000000000097e5 RDI: 00000000000097e6
[  456.319359][T15530] RBP: 00000000ffffffff R08: ffffffff8b4cb1bf R09: 0000000000000000
[  456.327358][T15530] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffff88807a698ec0
[  456.335352][T15530] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
[  456.343346][T15530]  ? ieee80211_tx_skb_tid+0x2f/0x480
[  456.348665][T15530]  ? ieee80211_tx_skb_tid+0x2f/0x480
[  456.353978][T15530]  ? ieee80211_tx_skb_tid+0x3b7/0x480
[  456.359385][T15530]  ? ieee80211_tx_skb_tid+0x3b7/0x480
[  456.364808][T15530]  mesh_plink_frame_tx+0x73d/0xc30
[  456.369995][T15530]  ? __pfx_mesh_plink_frame_tx+0x10/0x10
[  456.375683][T15530]  ? mesh_path_start_discovery+0xc30/0xd40
[  456.381532][T15530]  mesh_plink_deactivate+0x18b/0x2f0
[  456.386868][T15530]  mesh_sta_cleanup+0x42/0x150
[  456.391682][T15530]  cleanup_single_sta+0x3ff/0x660
[  456.396745][T15530]  __sta_info_flush+0x5bb/0x700
[  456.401635][T15530]  ? __pfx___sta_info_flush+0x10/0x10
[  456.407052][T15530]  ieee80211_do_stop+0x3cd/0x2410
[  456.412128][T15530]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  456.417638][T15530]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  456.423480][T15530]  ieee80211_stop+0x1ab/0x200
[  456.428211][T15530]  ? __pfx_ieee80211_stop+0x10/0x10
[  456.433526][T15530]  __dev_close_many+0x366/0x6e0
[  456.438440][T15530]  ? __pfx___dev_close_many+0x10/0x10
[  456.443886][T15530]  netif_close_many+0x249/0x660
[  456.448795][T15530]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  456.454644][T15530]  ? __pfx_netif_close_many+0x10/0x10
[  456.460066][T15530]  ? __mutex_lock+0x1092/0x1550
[  456.464968][T15530]  ? __mutex_lock+0x5d4/0x1550
[  456.469781][T15530]  netif_close+0x160/0x220
[  456.474245][T15530]  ? __pfx_netif_close+0x10/0x10
[  456.479237][T15530]  ? __pfx___mutex_lock+0x10/0x10
[  456.484301][T15530]  ? do_raw_spin_lock+0x12b/0x2f0
[  456.489390][T15530]  dev_close+0xf7/0x210
[  456.493593][T15530]  cfg80211_shutdown_all_interfaces+0xb0/0x220
[  456.499791][T15530]  ? __pfx_cfg80211_rfkill_set_block+0x10/0x10
[  456.505985][T15530]  cfg80211_rfkill_set_block+0x2d/0x50
[  456.511485][T15530]  rfkill_set_block+0x19f/0x4d0
[  456.516413][T15530]  rfkill_fop_write+0x43b/0x560
[  456.521318][T15530]  ? apparmor_file_permission+0x1f4/0x300
[  456.527099][T15530]  ? __pfx_rfkill_fop_write+0x10/0x10
[  456.532528][T15530]  ? security_kernfs_init_security+0x240/0x270
[  456.538731][T15530]  ? rw_verify_area+0x203/0x4c0
[  456.543635][T15530]  ? __pfx_rfkill_fop_write+0x10/0x10
[  456.549048][T15530]  vfs_write+0x296/0xba0
[  456.553342][T15530]  ? __pfx_vfs_write+0x10/0x10
[  456.558150][T15530]  ? __fget_files+0x2a/0x420
[  456.562794][T15530]  ? __fget_files+0x2a/0x420
[  456.567420][T15530]  ? __fget_files+0x3a2/0x420
[  456.572143][T15530]  ? __fget_files+0x2a/0x420
[  456.576788][T15530]  ksys_write+0x150/0x270
[  456.581168][T15530]  ? __pfx_ksys_write+0x10/0x10
[  456.586060][T15530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.592185][T15530]  do_syscall_64+0x174/0x580
[  456.596824][T15530]  ? clear_bhb_loop+0x40/0x90
[  456.601555][T15530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.607481][T15530] RIP: 0033:0x7fc87d39de99
[  456.611936][T15530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  456.631569][T15530] RSP: 002b:00007fc87e2d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  456.640032][T15530] RAX: ffffffffffffffda RBX: 00007fc87d625fa0 RCX: 00007fc87d39de99
[  456.648051][T15530] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000c
[  456.656058][T15530] RBP: 00007fc87d433eaf R08: 0000000000000000 R09: 0000000000000000
[  456.664066][T15530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  456.672069][T15530] R13: 00007fc87d626038 R14: 00007fc87d625fa0 R15: 00007ffc4ddb01e8
[  456.680094][T15530]  </TASK>
[  456.683768][T15530] Kernel Offset: disabled
[  456.688145][T15530] Rebooting in 86400 seconds..