last executing test programs:

4.341758592s ago: executing program 2 (id=6615):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000014c0)=ANY=[@ANYBLOB="4800000013000500"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\f\x00+'], 0x48}}, 0x0)

4.239708263s ago: executing program 2 (id=6617):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$netlink(0x10, 0x3, 0x9)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="b5fdad88ebffff0bd2f0fe536755b93cb952"], 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)
setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r8}, 0x18)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r6], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r10, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], <r11=>0x0}, 0x40)
r12 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r7, r9, 0x37, 0x2000, 0x0, @value=r12, @void, @void, @void, r11}, 0x20)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r13, r6, 0x24, 0x2000, r6, @value, @void, @void, @void, r11}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex, r2, 0x6, 0x8, 0x0, @void, @value=r2, @void, @void, r11}, 0x20)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r14, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r5, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xaf}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x2c}}, 0x24000806)

3.174600979s ago: executing program 2 (id=6635):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
getsockopt$inet_buf(r1, 0x118, 0x29, 0x0, &(0x7f00000003c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x408d0}, 0x4008800)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000005200bf952cfbdbdf250a000000000000"], 0x14}, 0x1, 0x0, 0x0, 0xc8}, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00240600000062000000"], 0x20}, 0x1, 0x0, 0x0, 0x8a5}, 0x24040000)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf25100000000800070000080000080008000900000008000600080000000800060000080000"], 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x4)
unshare(0xa020480)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x50)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x2, @local}, 0x3, 0xffff, 0x3, 0x1}}, 0x26)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x3, 0x2, 0xfd}}, 0xe8)
close(r9)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$sock_x25_SIOCDELRT(r11, 0x890c, &(0x7f00000005c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xa, 'veth0_to_hsr\x00'})
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r12=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf252800000005002b000100000008", @ANYRES32=r12, @ANYBLOB="05002e000700a700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000811}, 0x2)

3.06026961s ago: executing program 2 (id=6638):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0x1, 0xfff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, <r2=>0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xf11, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r3, 0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

2.865487118s ago: executing program 2 (id=6643):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611088000000000063012300000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {0xffff, 0x10}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x920, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @empty, @loopback}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000002c0)=r4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x4)

2.528650191s ago: executing program 3 (id=6646):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

2.356038977s ago: executing program 2 (id=6649):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0cc3, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="0100000000fff4001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100003040000ae85d95c000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x4000)
sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e12110000", 0x17}], 0x1}, 0x24000000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.35573143s ago: executing program 3 (id=6650):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x83a5, 0x7, [0x5, 0x4, 0x5, 0x5, 0x10, 0xd, 0x1]}, 0x16)

2.103881856s ago: executing program 3 (id=6653):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0x1, 0xfff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, <r2=>0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xf11, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r3, 0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

1.98343386s ago: executing program 3 (id=6654):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5193bb672965592202c1000000000015000000000000000000000000099931b1", '\x00\x00=*', "1202000000040030"}, 0x38)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x1802, 0x0, @loopback, 0xffff}, 0x1c)

1.800204665s ago: executing program 1 (id=6656):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
sendto$packet(r1, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000080)={0x11, 0x2, 0x0, 0x1, 0x3, 0x6, @link_local}, 0x14)

1.728665408s ago: executing program 1 (id=6657):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.558022535s ago: executing program 1 (id=6661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000380)="00214717a70700000000030600710a5eeb9d0471200000000500000000000000ffff0342844d50e77d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3d8134e72158357ee37fdae", 0x4e}], 0x1, 0xee, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7200000b52e1d300000800030000", @ANYRES32=r5, @ANYBLOB="10005a800c000180050002009e000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$FIOCLEX(r0, 0x5451)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

1.418015537s ago: executing program 1 (id=6663):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x83a5, 0x7, [0x5, 0x4, 0x5, 0x5, 0x10, 0xd, 0x1]}, 0x16)

1.390922444s ago: executing program 0 (id=6664):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0x1, 0xfff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, <r2=>0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xf11, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r3, 0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

1.338168096s ago: executing program 4 (id=6665):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000)
sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

1.247500824s ago: executing program 0 (id=6666):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000010003704010000800000000000000000", @ANYRES32=r3, @ANYBLOB="e9a802000b2ebe264c0012800e0001006970366772657461700000003800028008000100", @ANYRES32=r3, @ANYBLOB="1400070000000000000000000000ffff"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="2769bab71a674a7f978eabc4f8cdb416", 0x10)
writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x444, 0x3f3, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x1, [0xd, 0x4, 0x3, 0x1, 0xffffffff, 0x8, 0x0, 0xdc, 0x1, 0x0, 0x9, 0x800, 0x9e5, 0x8, 0x80, 0xfffffffb, 0x3, 0x2, 0x4, 0x70d, 0x4c91, 0x5, 0x0, 0x0, 0x7f, 0x10000, 0x9, 0x2, 0x1000, 0x101, 0x9, 0x6, 0xa76, 0x9, 0x9, 0x400, 0x5, 0x80, 0x1, 0x448, 0x5, 0x401, 0x27, 0x8001, 0x8, 0x8, 0x10, 0x9, 0x9, 0x6, 0x3, 0x7, 0x9, 0xfffffffc, 0x5, 0x800, 0x6, 0xfff, 0x9, 0x4, 0x400, 0xfffffe01, 0x6f87, 0xe4], [0x5, 0x4, 0x2, 0x10001, 0x295e, 0x7, 0x68d010e, 0xfffffffa, 0x0, 0x4be, 0x800, 0x5, 0x101, 0x8, 0x9, 0x5, 0xc, 0xba5, 0x1ff, 0x1, 0x0, 0x5, 0xb65c, 0x84, 0x5, 0xc0, 0x4, 0xfffffff7, 0x1a836daf, 0x2, 0x0, 0x1, 0x0, 0x8, 0x2, 0x3, 0x7, 0x1ff, 0x9, 0xc83, 0xfff, 0x7, 0x7, 0x3, 0x4, 0x7ff, 0x6, 0x8001, 0x100, 0x0, 0x1, 0x7a, 0x9, 0xfffffff9, 0x5, 0x7fffffff, 0x7, 0x24131958, 0x0, 0xfffffff9, 0xffffffff, 0x80, 0x1, 0x401], [0x3, 0xcd17, 0x4, 0x4, 0x2, 0x4, 0x720, 0x3, 0x0, 0x0, 0x6, 0x3, 0x2000, 0xf, 0x401, 0x7, 0x5, 0x9, 0x3, 0x7, 0x6, 0xc, 0x9, 0x28dc, 0x2, 0xf, 0x134, 0x1, 0x7ff, 0x7, 0x32de, 0x100, 0x10001, 0xf16, 0x918, 0x0, 0x8, 0x3, 0x7, 0x9, 0x8, 0x1, 0x8841ea30, 0x4, 0xa4, 0xd, 0x1, 0x1, 0x8, 0x4, 0x7, 0x28, 0x3, 0x10, 0x1, 0x6, 0x2f7, 0x3, 0x8000, 0x8, 0x2, 0x2, 0xfffffffd, 0x5], [0x0, 0x0, 0x2, 0x2bcc, 0x2, 0x3, 0x9, 0x7ff, 0xfff, 0x0, 0xfffffffb, 0xffff, 0x483, 0x3, 0x4, 0x0, 0x39, 0x6, 0x7, 0xffffffff, 0x0, 0x6, 0x1, 0x401, 0x400, 0x0, 0x1b5f, 0x7221, 0x707e, 0x9, 0xa, 0x4, 0x0, 0x10000, 0x8, 0x7f, 0x80000001, 0xf, 0x6, 0x0, 0xffffffca, 0x2, 0x7, 0xfffffffd, 0xfffffff8, 0x6, 0x9, 0x2, 0x9, 0xe, 0x3, 0x7, 0x3, 0xd21, 0x10000, 0x1, 0x8, 0xbe, 0x100, 0x6c062600, 0x7, 0x0, 0x3, 0x8ded], 0x21, ['\x00', 'I&(/\x00', '^*)]\x00', '{-#-**\x00', '\x00', '.!-#!$!\x00', 'h\x00', ':[\x00', '\x00']}, ["", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040040)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x11)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c)

1.244651225s ago: executing program 4 (id=6667):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
sendto$packet(r1, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000080)={0x11, 0x2, 0x0, 0x1, 0x3, 0x6, @link_local}, 0x14)

1.139759955s ago: executing program 4 (id=6668):
socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @empty, 0xffff}, 0x1c)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

1.113396442s ago: executing program 4 (id=6669):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c040)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="e20000002fd0ce098814de66450000000301f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640d00"/276], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000180)={r4, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfc}, {0x2, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6e7a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18}, 0x4008000)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={@private0, <r9=>0x0}, &(0x7f0000000240)=0x14)
bind$alg(r7, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x58)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', <r10=>0x0, 0x700, 0x80, 0x0, 0x1dd, {{0x10, 0x4, 0x3, 0x7, 0x40, 0x66, 0x0, 0x70, 0x2f, 0x0, @multicast1, @local, {[@noop, @generic={0x82, 0x7, "ef7535b977"}, @rr={0x7, 0x17, 0x88, [@local, @private=0xa010100, @private=0xa010102, @local, @private=0xa010102]}, @lsrr={0x83, 0xb, 0x7d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@initdev, <r11=>0x0}, &(0x7f0000000380)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r12=>0x0, 0x2f, 0x2, 0x7, 0x0, 0x20, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7722e722d3daf6b1, 0x8000, 0x1, 0x3}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', <r13=>0x0, 0x8000, 0x8000, 0x7, 0x1, {{0x15, 0x4, 0x0, 0x1e, 0x54, 0x64, 0x0, 0x6, 0x2f, 0x0, @local, @empty, {[@generic={0x84, 0x2}, @cipso={0x86, 0x23, 0xffffffffffffffff, [{0x2, 0x12, "6ef12e4193880a1fb77f36826f592ad8"}, {0x1, 0xb, "083514b2ab57644c96"}]}, @lsrr={0x83, 0x1b, 0xbf, [@multicast1, @private=0xa010102, @local, @remote, @private=0xa010101, @rand_addr=0x64010102]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x13c, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40014}, 0x8000)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

1.065521975s ago: executing program 3 (id=6670):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="2769bab71a674a7f978eabc4f8cdb416", 0x10)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) (fail_nth: 2)

1.040043283s ago: executing program 0 (id=6671):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a200100000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) (fail_nth: 9)

1.038927261s ago: executing program 1 (id=6672):
unshare(0x20000400)
r0 = socket$inet6(0x2d, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9a00fe00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b00)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x20008840)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x11d, 0x11, 0x0, 0x0)

820.116593ms ago: executing program 0 (id=6673):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="d2a5", 0x2}], 0x1}}], 0x2, 0x40) (fail_nth: 6)

260.2428ms ago: executing program 3 (id=6674):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d"], 0x0)
recvmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}, 0x2}], 0x1, 0x0, 0x0)

202.469168ms ago: executing program 1 (id=6675):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4040)
close(r1)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f0000001000)=""/4096, &(0x7f0000000080)=0xffffffffffffffe6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_1\x00', {0x1}, 0x200})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffe6, 0xb}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00'})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

133.605105ms ago: executing program 0 (id=6676):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002c0007012bbd7000ffdbdf25077c0000080001800400dd80100003800c0003"], 0x2c}}, 0x2000c004)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000140)=0x3, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000001c0))
setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @rand_addr=0x64010102, 0xffff00, 0xff000000, 0x7, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0xff]}}, 0x4d00, 0x7, 0x5, 0xfffd, 0x4, 0x3, 'hsr0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0x128}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast1, @local, 0xf}}}, {{@arp={@initdev={0xac, 0x1e, 0x11, 0x0}, @broadcast, 0xffffffff, 0xff0000ff, 0xc, 0x1, {@empty, {[0x0, 0x2064f8bb0fa89a85, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x10, 0x4, 0x6, 0xffff, 0x42, 0x8001, 'batadv_slave_1\x00', 'ipvlan0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xd7}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x4)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200))
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000340)="00214717a707000000001b8d74030600710a5e31163c48", 0x17}], 0x1, 0x7ce, 0x1)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0)

132.849836ms ago: executing program 4 (id=6677):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0x1, 0xfff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, <r2=>0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xf11, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r3, 0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

14.067881ms ago: executing program 4 (id=6678):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x20000000) (fail_nth: 5)

0s ago: executing program 0 (id=6679):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x12a, 0xfffffffffffffffe}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a200100000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x30, 0x0, 0x5f, 0x0, 0x61, 0x61, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000440)=""/189, 0x2f, 0xbd, 0x1, 0x2}, 0x28)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x6, 0x10}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @generic={0x5, 0xf, 0x4, 0xb207, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x342, 0x1000, &(0x7f0000001380)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x3, 0x7ff, 0x400}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r5], &(0x7f0000000600)=[{0x2, 0x4, 0x9, 0x1}, {0x3, 0x5, 0x9, 0xc}, {0x5, 0x5, 0x3}, {0x1, 0x4, 0x1, 0x3}, {0x5, 0x1, 0xc, 0x7}, {0x5, 0x2, 0x1, 0x9}], 0x10, 0x101}, 0x94)

kernel console output (not intermixed with test programs):

44][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  952.578142][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  952.589318][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  952.599729][T18925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  952.608313][T18925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  952.618988][T18925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  952.659343][T18925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  952.670258][T18925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  954.471151][T20578] lec:lec_start_xmit: lec0:No lecd attached
[  954.605445][T24148] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  954.621834][T24148] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  954.724130][T24148] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  954.752423][T24148] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  954.773634][ T5847] Bluetooth: hci0: command tx timeout
[  954.784362][T25608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6052'.
[  954.797336][T25608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6052'.
[  954.881724][T24148] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  954.898013][T24148] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  954.975651][T24148] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  955.000208][T24148] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.086366][T25619] syzkaller0: entered promiscuous mode
[  955.091915][T25619] syzkaller0: entered allmulticast mode
[  955.157993][T25575] chnl_net:caif_netlink_parms(): no params data found
[  955.499296][T25575] bridge0: port 1(bridge_slave_0) entered blocking state
[  955.507558][T25575] bridge0: port 1(bridge_slave_0) entered disabled state
[  955.515033][T25575] bridge_slave_0: entered allmulticast mode
[  955.525813][T25575] bridge_slave_0: entered promiscuous mode
[  955.537158][T25575] bridge0: port 2(bridge_slave_1) entered blocking state
[  955.547122][T25575] bridge0: port 2(bridge_slave_1) entered disabled state
[  955.562752][T25575] bridge_slave_1: entered allmulticast mode
[  955.570838][T25575] bridge_slave_1: entered promiscuous mode
[  955.615727][T24148] bridge_slave_1: left allmulticast mode
[  955.631891][T24148] bridge0: port 2(bridge_slave_1) entered disabled state
[  955.657522][T24148] bridge_slave_0: left allmulticast mode
[  955.669667][T24148] bridge_slave_0: left promiscuous mode
[  955.682525][T24148] bridge0: port 1(bridge_slave_0) entered disabled state
[  956.103089][T24148] erspan0 (unregistering): left allmulticast mode
[  956.268714][T24148] gretap0 (unregistering): left promiscuous mode
[  956.383034][T24148] geneve1 (unregistering): left allmulticast mode
[  956.404838][T24148] team0: Port device geneve0 removed
[  956.852950][ T5847] Bluetooth: hci0: command tx timeout
[  956.976005][T24148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  956.996198][T24148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  957.006320][T24148] bond0 (unregistering): Released all slaves
[  957.018820][T24148] bond1 (unregistering): Released all slaves
[  957.033927][T24148] bond2 (unregistering): Released all slaves
[  957.048302][T24148] bond3 (unregistering): Released all slaves
[  957.070431][T24148] bond4 (unregistering): Released all slaves
[  957.084996][T24148] bond5 (unregistering): Released all slaves
[  957.107967][T24148] bond6 (unregistering): Released all slaves
[  957.124085][T24148] bond7 (unregistering): (slave veth3): Releasing active interface
[  957.135408][T24148] bond7 (unregistering): Released all slaves
[  957.149729][T24148] bond8 (unregistering): Released all slaves
[  957.167950][T24148] bond9 (unregistering): Released all slaves
[  957.184577][T24148] bond10 (unregistering): Released all slaves
[  957.198933][T24148] bond11 (unregistering): Released all slaves
[  957.214241][T24148] bond12 (unregistering): (slave veth5): Releasing active interface
[  957.225329][T24148] bond12 (unregistering): Released all slaves
[  957.243756][T24148] bond13 (unregistering): Released all slaves
[  957.258785][T24148] bond14 (unregistering): Released all slaves
[  957.277457][T24148] bond15 (unregistering): Released all slaves
[  957.293459][T24148] bond16 (unregistering): Released all slaves
[  957.307796][T24148] bond17 (unregistering): Released all slaves
[  957.326842][T24148] bond18 (unregistering): Released all slaves
[  957.342327][T24148] bond19 (unregistering): (slave bond20): Releasing backup interface
[  957.350548][T24148] bond20 (unregistering): left promiscuous mode
[  957.360768][T24148] bond19 (unregistering): Released all slaves
[  957.384117][T24148] bond20 (unregistering): Released all slaves
[  957.399855][T24148] bond21 (unregistering): (slave veth15): Releasing active interface
[  957.409677][T24148] bond21 (unregistering): Released all slaves
[  957.427560][T24148] bond22 (unregistering): (slave veth17): Releasing active interface
[  957.441656][T24148] bond22 (unregistering): Released all slaves
[  957.457454][T24148] bond23 (unregistering): (slave veth19): Releasing active interface
[  957.468571][T24148] bond23 (unregistering): Released all slaves
[  957.585460][T25575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  957.650167][T25575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  957.824869][T24148] !©�9: left promiscuous mode
[  957.900031][T25575] team0: Port device team_slave_0 added
[  957.933272][T25669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6068'.
[  957.964538][T24148] : left promiscuous mode
[  958.025086][T25575] team0: Port device team_slave_1 added
[  958.374574][T24148] tipc: Disabling bearer <eth:vlan0>
[  958.397759][T24148] tipc: Left network mode
[  958.421362][T25575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  958.428692][T25575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  958.518529][T25575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  958.606634][T25575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  958.638111][T25575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  958.726869][T25575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  958.935664][ T5847] Bluetooth: hci0: command tx timeout
[  959.112630][T25718] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6080'.
[  959.159354][T24148] hsr0: left allmulticast mode
[  959.165078][T24148] veth1_to_hsr: left allmulticast mode
[  959.170789][T24148] veth1_to_hsr: left promiscuous mode
[  959.193309][T24148] veth1_macvtap: left promiscuous mode
[  959.199057][T24148] veth1_vlan: left promiscuous mode
[  959.812663][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms
[  959.820828][    C1] lec:lec_tx_timeout: lec0
[  959.828639][T24148] team0 (unregistering): Port device team_slave_1 removed
[  960.090747][T25575] hsr_slave_0: entered promiscuous mode
[  960.098755][T25575] hsr_slave_1: entered promiscuous mode
[  960.123078][T25575] debugfs: 'hsr0' already exists in 'hsr'
[  960.129111][T25575] Cannot create hsr debugfs directory
[  960.253827][T25739] netlink: 'syz.2.6079': attribute type 29 has an invalid length.
[  960.619800][T25759] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6087'.
[  960.629564][T25750] netlink: 'syz.1.6086': attribute type 13 has an invalid length.
[  960.759675][T24148] IPVS: stop unused estimator thread 0...
[  960.821988][T25767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6091'.
[  960.839466][T25767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6091'.
[  960.849554][T25767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6091'.
[  960.898581][T25767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6091'.
[  960.944456][T25767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6091'.
[  960.994317][T25767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6091'.
[  961.024093][T25767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6091'.
[  961.026914][ T5847] Bluetooth: hci0: command tx timeout
[  961.053969][T25767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6091'.
[  961.073438][T25767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6091'.
[  961.779722][T25575] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  961.832397][T25575] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  961.884741][T25575] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  961.923975][T25575] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  962.218282][T25824] syzkaller0: entered promiscuous mode
[  962.224676][T25824] syzkaller0: entered allmulticast mode
[  962.235997][T25824] netlink: 'syz.4.6107': attribute type 1 has an invalid length.
[  962.329016][T25824] bond21: (slave veth23): Enslaving as an active interface with a down link
[  962.361243][T25830] syzkaller0: entered promiscuous mode
[  962.367882][T25830] syzkaller0: entered allmulticast mode
[  962.389059][T25830] netlink: 'syz.1.6108': attribute type 1 has an invalid length.
[  962.545008][T25830] bond1: (slave veth3): Enslaving as an active interface with a down link
[  962.814773][T25575] 8021q: adding VLAN 0 to HW filter on device bond0
[  962.899830][T25575] 8021q: adding VLAN 0 to HW filter on device team0
[  962.947876][T24147] bridge0: port 1(bridge_slave_0) entered blocking state
[  962.955115][T24147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  963.039450][T24155] bridge0: port 2(bridge_slave_1) entered blocking state
[  963.046668][T24155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  963.303326][T25868] syzkaller0: entered promiscuous mode
[  963.321472][T25868] syzkaller0: entered allmulticast mode
[  963.334387][T25858] syzkaller1: entered promiscuous mode
[  963.346053][T25868] netlink: 'syz.3.6118': attribute type 1 has an invalid length.
[  963.354137][T25858] syzkaller1: entered allmulticast mode
[  963.586911][T25877] bond21: (slave veth21): Enslaving as an active interface with a down link
[  963.834219][T25575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  963.979996][T25575] veth0_vlan: entered promiscuous mode
[  964.028028][T25575] veth1_vlan: entered promiscuous mode
[  964.148074][T25575] veth0_macvtap: entered promiscuous mode
[  964.170774][T25575] veth1_macvtap: entered promiscuous mode
[  964.236769][T25575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  964.260228][T25575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  964.324878][ T1164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  964.354093][ T1164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  964.395022][T25915] syzkaller1: entered promiscuous mode
[  964.405687][T25915] syzkaller1: entered allmulticast mode
[  964.467003][ T1164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  964.496301][ T1164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  964.703437][T24147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  964.715044][T24147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  964.820875][T24147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  964.857476][T24147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  965.842765][T25964] syzkaller1: entered promiscuous mode
[  965.853519][T25964] syzkaller1: entered allmulticast mode
[  966.572489][T25984] __nla_validate_parse: 33 callbacks suppressed
[  966.572514][T25984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6150'.
[  966.651068][T18925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  966.660764][T18925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  966.669548][T18925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  966.678390][T18925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  966.686956][T18925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  966.832761][T25994] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6151'.
[  967.094434][T26003] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6155'.
[  967.215355][T15095] bridge0: port 3(syz_tun) entered disabled state
[  967.317066][T15095] syz_tun (unregistering): left allmulticast mode
[  967.355584][T15095] syz_tun (unregistering): left promiscuous mode
[  967.362473][T15095] bridge0: port 3(syz_tun) entered disabled state
[  967.463493][T26022] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6161'.
[  967.578524][T26020] syzkaller0: entered promiscuous mode
[  967.610901][T26020] syzkaller0: entered allmulticast mode
[  967.819960][T25985] chnl_net:caif_netlink_parms(): no params data found
[  967.909777][T26037] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6164'.
[  968.433661][T25985] bridge0: port 1(bridge_slave_0) entered blocking state
[  968.440908][T25985] bridge0: port 1(bridge_slave_0) entered disabled state
[  968.485418][T25985] bridge_slave_0: entered allmulticast mode
[  968.500599][T25985] bridge_slave_0: entered promiscuous mode
[  968.613915][T25985] bridge0: port 2(bridge_slave_1) entered blocking state
[  968.621104][T25985] bridge0: port 2(bridge_slave_1) entered disabled state
[  968.638371][T25985] bridge_slave_1: entered allmulticast mode
[  968.652355][T25985] bridge_slave_1: entered promiscuous mode
[  968.775995][T18925] Bluetooth: hci2: command tx timeout
[  968.861712][T25985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  969.083288][T26085] syzkaller0: entered promiscuous mode
[  969.097375][T26085] syzkaller0: entered allmulticast mode
[  969.123319][T25985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  969.349739][T26113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6181'.
[  970.862670][T18925] Bluetooth: hci2: command tx timeout
[  971.510191][T25985] team0: Port device team_slave_0 added
[  971.520634][T24147] bridge_slave_1: left allmulticast mode
[  971.527267][T24147] bridge_slave_1: left promiscuous mode
[  971.534617][T24147] bridge0: port 2(bridge_slave_1) entered disabled state
[  971.545998][T24147] bridge_slave_0: left allmulticast mode
[  971.551692][T24147] bridge_slave_0: left promiscuous mode
[  971.558134][T24147] bridge0: port 1(bridge_slave_0) entered disabled state
[  971.857365][T24147] gretap0 (unregistering): left promiscuous mode
[  971.879574][T24147] bond7 (unregistering): (slave gretap1): Releasing active interface
[  971.888087][T24147] gretap1 (unregistering): left allmulticast mode
[  971.929534][T24147] bond4 (unregistering): (slave geneve2): Releasing backup interface
[  972.551627][T24147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  972.562525][T24147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  972.572070][T24147] bond0 (unregistering): Released all slaves
[  972.583455][T24147] bond1 (unregistering): Released all slaves
[  972.601622][T24147] bond2 (unregistering): Released all slaves
[  972.621464][T24147] bond3 (unregistering): (slave veth3): Releasing active interface
[  972.630583][T24147] bond3 (unregistering): Released all slaves
[  972.646258][T24147] bond4 (unregistering): Released all slaves
[  972.668015][T24147] bond5 (unregistering): Released all slaves
[  972.685231][T24147] bond6 (unregistering): Released all slaves
[  972.700043][T24147] bond7 (unregistering): Released all slaves
[  972.721907][T24147] bond8 (unregistering): (slave veth7): Releasing active interface
[  972.734040][T24147] bond8 (unregistering): Released all slaves
[  972.749356][T24147] bond9 (unregistering): (slave veth9): Releasing active interface
[  972.759510][T24147] bond9 (unregistering): Released all slaves
[  972.779147][T24147] bond10 (unregistering): Released all slaves
[  972.796407][T24147] bond11 (unregistering): Released all slaves
[  972.810812][T24147] bond12 (unregistering): Released all slaves
[  972.826408][T24147] bond13 (unregistering): Released all slaves
[  972.841629][T24147] bond14 (unregistering): Released all slaves
[  972.860357][T24147] bond15 (unregistering): Released all slaves
[  972.884344][T24147] bond16 (unregistering): (slave veth13): Releasing active interface
[  972.892760][T24147] batadv1: entered promiscuous mode
[  972.900494][T24147] bond16 (unregistering): (slave batadv1): Releasing active interface
[  972.910463][T24147] bond16 (unregistering): Released all slaves
[  972.928501][T24147] bond17 (unregistering): Released all slaves
[  972.942661][T18925] Bluetooth: hci2: command tx timeout
[  972.956291][T24147] bond18 (unregistering): (slave veth17): Releasing backup interface
[  972.965010][T24147] veth17: left promiscuous mode
[  972.971629][T24147] bond18 (unregistering): Released all slaves
[  972.987630][T24147] bond19 (unregistering): Released all slaves
[  973.002073][T24147] bond20 (unregistering): Released all slaves
[  973.018128][T24147] bond21 (unregistering): (slave veth23): Releasing active interface
[  973.028634][T24147] bond21 (unregistering): Released all slaves
[  973.059431][T25985] team0: Port device team_slave_1 added
[  973.253539][T25985] batman_adv: batadv0: Adding interface: batadv_slave_0
[  973.260546][T25985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  973.352249][T25985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  973.385165][T24147] tipc: Left network mode
[  973.390464][T25985] batman_adv: batadv0: Adding interface: batadv_slave_1
[  973.398349][T26184] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6198'.
[  973.408517][T25985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  973.421652][T26185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6197'.
[  973.455373][T25985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  973.503306][T26185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6197'.
[  973.769362][T25985] hsr_slave_0: entered promiscuous mode
[  973.811731][T25985] hsr_slave_1: entered promiscuous mode
[  973.833153][T25985] debugfs: 'hsr0' already exists in 'hsr'
[  973.838954][T25985] Cannot create hsr debugfs directory
[  974.085403][T26212] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6209'.
[  974.947217][T26250] netlink: 'syz.1.6223': attribute type 1 has an invalid length.
[  975.014145][T18925] Bluetooth: hci2: command tx timeout
[  975.118454][T26255] syzkaller0: entered promiscuous mode
[  975.124393][T26255] syzkaller0: entered allmulticast mode
[  975.137742][T24147] `: left promiscuous mode
[  975.148042][T26250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6223'.
[  975.158764][T24147] C: left promiscuous mode
[  975.163516][T24147] team_slave_1: left promiscuous mode
[  975.177715][T24147] hsr_slave_0: left promiscuous mode
[  975.188784][T24147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  975.190566][T26255] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6223'.
[  975.206116][T24147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  975.487149][T26282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6229'.
[  975.641287][T24147] ` (unregistering): Port device team_slave_1 removed
[  975.667459][T24147] ` (unregistering): Port device C removed
[  975.858211][T26262] bond3: (slave veth5): Enslaving as an active interface with a down link
[  975.906850][T26253] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.029034][T26253] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.157690][T26284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6233'.
[  976.198969][T26253] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.356478][T26253] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.507099][T24147] IPVS: stop unused estimator thread 0...
[  976.529327][T26291] syzkaller0: entered promiscuous mode
[  976.552853][T26291] syzkaller0: entered allmulticast mode
[  976.642861][T26291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  976.726716][T24145] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  976.749610][T26290] tipc: Resetting bearer <eth:syzkaller0>
[  976.768857][T26290] tipc: Disabling bearer <eth:syzkaller0>
[  976.804525][T24147] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  976.849470][T24145] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  976.893525][T24147] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  976.948278][T25985] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  976.975932][T25985] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  977.025615][T25985] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  977.080219][T25985] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  977.143910][T26319] netlink: 'syz.3.6243': attribute type 1 has an invalid length.
[  977.151902][T26319] netlink: 'syz.3.6243': attribute type 2 has an invalid length.
[  977.364093][T26332] IPv6: Can't replace route, no match found
[  977.406274][T25985] 8021q: adding VLAN 0 to HW filter on device bond0
[  977.502503][T25985] 8021q: adding VLAN 0 to HW filter on device team0
[  977.559477][T24147] bridge0: port 1(bridge_slave_0) entered blocking state
[  977.566744][T24147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  977.637066][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state
[  977.644324][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  977.863988][T26350] netlink: 'syz.1.6251': attribute type 39 has an invalid length.
[  977.937231][T26357] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6251'.
[  977.976833][T26357] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6251'.
[  978.012365][T26357] netlink: 'syz.1.6251': attribute type 5 has an invalid length.
[  978.287620][T26374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  978.348538][T25985] 8021q: adding VLAN 0 to HW filter on device batadv0
[  978.444550][T26367] tipc: Disabling bearer <eth:syzkaller0>
[  978.639067][T26391] bridge0: port 1(bridge_slave_0) entered blocking state
[  978.646331][T26391] bridge0: port 1(bridge_slave_0) entered forwarding state
[  978.798942][T26382] netlink: 'syz.1.6263': attribute type 13 has an invalid length.
[  978.812262][T26391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  978.899420][T26382] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  979.271401][T25985] veth0_vlan: entered promiscuous mode
[  979.312632][T25985] veth1_vlan: entered promiscuous mode
[  979.350490][T26419] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  979.366725][T26419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  979.394799][T25985] veth0_macvtap: entered promiscuous mode
[  979.424623][T25985] veth1_macvtap: entered promiscuous mode
[  979.475732][T25985] batman_adv: batadv0: Interface activated: batadv_slave_0
[  979.509889][T25985] batman_adv: batadv0: Interface activated: batadv_slave_1
[  979.548353][T26425] __nla_validate_parse: 1 callbacks suppressed
[  979.548375][T26425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6277'.
[  979.565926][T24145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  979.583092][T24145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  979.613403][ T1164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  979.639440][ T1164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  979.708645][T26432] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  979.754676][T26432] 8021q: adding VLAN 0 to HW filter on device bond4
[  979.791804][T24145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  979.800366][T24145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  979.861024][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  979.870244][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  979.986193][T26441] tipc: Started in network mode
[  980.012849][T26441] tipc: Node identity 924ceafc1017, cluster identity 4711
[  980.020151][T26441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  980.036500][T26441] syzkaller0: entered promiscuous mode
[  980.042032][T26441] syzkaller0: entered allmulticast mode
[  980.067442][T26441] tipc: Resetting bearer <eth:syzkaller0>
[  980.077574][T26440] tipc: Resetting bearer <eth:syzkaller0>
[  980.100002][T26440] tipc: Disabling bearer <eth:syzkaller0>
[  980.141385][T26447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6285'.
[  980.152543][T26447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6285'.
[  980.170288][T26445] tipc: Started in network mode
[  980.176664][T26445] tipc: Node identity 5adfefbf6fa8, cluster identity 4711
[  980.185621][T26445] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  980.215231][T26444] tipc: Disabling bearer <eth:syzkaller0>
[  980.389336][T26451] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6287'.
[  980.700118][T26470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6294'.
[  980.734770][T26464] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  980.756498][T26459] netlink: 'syz.1.6291': attribute type 13 has an invalid length.
[  980.845778][T26459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  980.887265][T26477] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.6296'.
[  981.019328][T26482] FAULT_INJECTION: forcing a failure.
[  981.019328][T26482] name failslab, interval 1, probability 0, space 0, times 0
[  981.052333][T26482] CPU: 1 UID: 0 PID: 26482 Comm: syz.2.6298 Not tainted syzkaller #0 PREEMPT(full) 
[  981.052363][T26482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  981.052378][T26482] Call Trace:
[  981.052387][T26482]  <TASK>
[  981.052398][T26482]  dump_stack_lvl+0xe8/0x150
[  981.052436][T26482]  should_fail_ex+0x412/0x560
[  981.052470][T26482]  should_failslab+0xa8/0x100
[  981.052510][T26482]  ? skb_clone+0x212/0x3a0
[  981.052545][T26482]  kmem_cache_alloc_noprof+0x87/0x650
[  981.052581][T26482]  ? __netlink_lookup+0xc6/0x8b0
[  981.052619][T26482]  skb_clone+0x212/0x3a0
[  981.052657][T26482]  __netlink_deliver_tap+0x404/0x850
[  981.052697][T26482]  ? netlink_deliver_tap+0x2e/0x1b0
[  981.052727][T26482]  netlink_deliver_tap+0x19c/0x1b0
[  981.052756][T26482]  netlink_unicast+0x7e3/0x9b0
[  981.052789][T26482]  ? __pfx_netlink_unicast+0x10/0x10
[  981.052816][T26482]  ? netlink_sendmsg+0x650/0xb40
[  981.052841][T26482]  ? skb_put+0x11b/0x210
[  981.052875][T26482]  netlink_sendmsg+0x813/0xb40
[  981.052914][T26482]  ? __pfx_netlink_sendmsg+0x10/0x10
[  981.052947][T26482]  ? aa_sock_msg_perm+0xf1/0x1b0
[  981.052978][T26482]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  981.053005][T26482]  ? __pfx_netlink_sendmsg+0x10/0x10
[  981.053033][T26482]  ____sys_sendmsg+0xa68/0xad0
[  981.053077][T26482]  ? __pfx_____sys_sendmsg+0x10/0x10
[  981.053121][T26482]  ? import_iovec+0x73/0xa0
[  981.053156][T26482]  ___sys_sendmsg+0x2a5/0x360
[  981.053195][T26482]  ? __pfx____sys_sendmsg+0x10/0x10
[  981.053267][T26482]  ? __fget_files+0x2a/0x420
[  981.053298][T26482]  ? __fget_files+0x3a0/0x420
[  981.053341][T26482]  __x64_sys_sendmsg+0x1bd/0x2a0
[  981.053377][T26482]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  981.053421][T26482]  ? __pfx_ksys_write+0x10/0x10
[  981.053457][T26482]  do_syscall_64+0x14d/0xf80
[  981.053480][T26482]  ? trace_irq_disable+0x3b/0x150
[  981.053520][T26482]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  981.053544][T26482]  ? clear_bhb_loop+0x40/0x90
[  981.053577][T26482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  981.053600][T26482] RIP: 0033:0x7f9c7179c799
[  981.053621][T26482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  981.053641][T26482] RSP: 002b:00007f9c726eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  981.053666][T26482] RAX: ffffffffffffffda RBX: 00007f9c71a15fa0 RCX: 00007f9c7179c799
[  981.053683][T26482] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  981.053698][T26482] RBP: 00007f9c726eb090 R08: 0000000000000000 R09: 0000000000000000
[  981.053712][T26482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  981.053726][T26482] R13: 00007f9c71a16038 R14: 00007f9c71a15fa0 R15: 00007ffdd7e651d8
[  981.053761][T26482]  </TASK>
[  981.566255][T26494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6302'.
[  981.588520][T26494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6302'.
[  981.749699][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6307'.
[  981.774825][T26501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6306'.
[  981.993015][T26508] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  982.226801][T26525] lo: Caught tx_queue_len zero misconfig
[  982.238910][T26525] IPv6: Can't replace route, no match found
[  982.473146][T26542] bond0: Caught tx_queue_len zero misconfig
[  982.967059][T26569] netlink: 'syz.3.6329': attribute type 2 has an invalid length.
[  983.233396][T26586] syzkaller0: entered promiscuous mode
[  983.239084][T26586] syzkaller0: entered allmulticast mode
[  983.250360][T26586] netlink: 'syz.0.6336': attribute type 1 has an invalid length.
[  983.312064][T26586] bond1: (slave veth3): Enslaving as an active interface with a down link
[  983.689469][T26605] FAULT_INJECTION: forcing a failure.
[  983.689469][T26605] name failslab, interval 1, probability 0, space 0, times 0
[  983.702962][T26605] CPU: 1 UID: 0 PID: 26605 Comm: syz.1.6342 Not tainted syzkaller #0 PREEMPT(full) 
[  983.702995][T26605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  983.703011][T26605] Call Trace:
[  983.703022][T26605]  <TASK>
[  983.703033][T26605]  dump_stack_lvl+0xe8/0x150
[  983.703072][T26605]  should_fail_ex+0x412/0x560
[  983.703103][T26605]  should_failslab+0xa8/0x100
[  983.703131][T26605]  ? dst_alloc+0x105/0x170
[  983.703153][T26605]  kmem_cache_alloc_noprof+0x87/0x650
[  983.703191][T26605]  ? __pfx_ip6_dst_gc+0x10/0x10
[  983.703322][T26605]  dst_alloc+0x105/0x170
[  983.703347][T26605]  ip6_pol_route+0xafb/0x13d0
[  983.703400][T26605]  ? ip6_pol_route+0x160/0x13d0
[  983.703430][T26605]  ? __pfx_ip6_pol_route+0x10/0x10
[  983.703454][T26605]  ? ip6_compressed_string+0xa79/0xb60
[  983.703519][T26605]  ? __lock_acquire+0x6b5/0x2cf0
[  983.703553][T26605]  ? __kernel_text_address+0xd/0x30
[  983.703582][T26605]  fib6_rule_lookup+0x36b/0x730
[  983.703659][T26605]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  983.703686][T26605]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  983.703709][T26605]  ? ip6_addr_string+0x259/0x300
[  983.703762][T26605]  ? dev_get_by_index_rcu+0xf4/0x110
[  983.703793][T26605]  ip6_route_output_flags+0x364/0x5d0
[  983.703819][T26605]  ? ip6_route_output_flags+0x2e/0x5d0
[  983.703849][T26605]  ip6_dst_lookup_tail+0x1c3/0x15a0
[  983.703916][T26605]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  983.703946][T26605]  ? sk_dst_check+0x25/0x480
[  983.703976][T26605]  ? sk_dst_check+0x25/0x480
[  983.704005][T26605]  ? sk_dst_check+0x25/0x480
[  983.704028][T26605]  ? sk_dst_check+0x30e/0x480
[  983.704057][T26605]  ip6_sk_dst_lookup_flow+0x72b/0x9c0
[  983.704087][T26605]  ? udpv6_sendmsg+0x180e/0x2560
[  983.704146][T26605]  udpv6_sendmsg+0x19f0/0x2560
[  983.704186][T26605]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  983.704218][T26605]  ? __lock_acquire+0x6b5/0x2cf0
[  983.704250][T26605]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  983.704305][T26605]  ? inet_send_prepare+0x1b9/0x270
[  983.704339][T26605]  ? inet_send_prepare+0x1b9/0x270
[  983.704374][T26605]  ? inet_send_prepare+0x1b9/0x270
[  983.704404][T26605]  ? __local_bh_enable_ip+0xd0/0x130
[  983.704434][T26605]  ? inet_send_prepare+0x1b9/0x270
[  983.704470][T26605]  ? inet6_sendmsg+0xe4/0x120
[  983.704494][T26605]  ____sys_sendmsg+0x62c/0xad0
[  983.704538][T26605]  ? __pfx_____sys_sendmsg+0x10/0x10
[  983.704582][T26605]  ? import_iovec+0x73/0xa0
[  983.704618][T26605]  ___sys_sendmsg+0x2a5/0x360
[  983.704656][T26605]  ? __pfx____sys_sendmsg+0x10/0x10
[  983.704694][T26605]  ? kstrtouint+0x6e/0xe0
[  983.704757][T26605]  ? __fget_files+0x2a/0x420
[  983.704788][T26605]  ? __fget_files+0x3a0/0x420
[  983.704829][T26605]  __sys_sendmmsg+0x27c/0x4e0
[  983.704875][T26605]  ? __pfx___sys_sendmmsg+0x10/0x10
[  983.704905][T26605]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  983.704955][T26605]  ? ksys_write+0x242/0x270
[  983.704979][T26605]  ? __pfx_ksys_write+0x10/0x10
[  983.705008][T26605]  __x64_sys_sendmmsg+0xa0/0xc0
[  983.705044][T26605]  do_syscall_64+0x14d/0xf80
[  983.705065][T26605]  ? trace_irq_disable+0x3b/0x150
[  983.705095][T26605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.705118][T26605]  ? clear_bhb_loop+0x40/0x90
[  983.705145][T26605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.705167][T26605] RIP: 0033:0x7fb318d9c799
[  983.705189][T26605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  983.705208][T26605] RSP: 002b:00007fb319d2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  983.705233][T26605] RAX: ffffffffffffffda RBX: 00007fb319015fa0 RCX: 00007fb318d9c799
[  983.705251][T26605] RDX: 0000000000000001 RSI: 0000200000001ac0 RDI: 0000000000000003
[  983.705265][T26605] RBP: 00007fb319d2b090 R08: 0000000000000000 R09: 0000000000000000
[  983.705279][T26605] R10: 0000000004004800 R11: 0000000000000246 R12: 0000000000000001
[  983.705293][T26605] R13: 00007fb319016038 R14: 00007fb319015fa0 R15: 00007fff54034bc8
[  983.705329][T26605]  </TASK>
[  984.457200][T26628] FAULT_INJECTION: forcing a failure.
[  984.457200][T26628] name failslab, interval 1, probability 0, space 0, times 0
[  984.487080][T26628] CPU: 1 UID: 0 PID: 26628 Comm: syz.1.6349 Not tainted syzkaller #0 PREEMPT(full) 
[  984.487109][T26628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  984.487122][T26628] Call Trace:
[  984.487131][T26628]  <TASK>
[  984.487140][T26628]  dump_stack_lvl+0xe8/0x150
[  984.487177][T26628]  should_fail_ex+0x412/0x560
[  984.487219][T26628]  should_failslab+0xa8/0x100
[  984.487247][T26628]  ? skb_clone+0x212/0x3a0
[  984.487281][T26628]  kmem_cache_alloc_noprof+0x87/0x650
[  984.487325][T26628]  skb_clone+0x212/0x3a0
[  984.487362][T26628]  __netlink_deliver_tap+0x404/0x850
[  984.487404][T26628]  ? netlink_deliver_tap+0x2e/0x1b0
[  984.487434][T26628]  netlink_deliver_tap+0x19c/0x1b0
[  984.487464][T26628]  netlink_sendskb+0x68/0x140
[  984.487491][T26628]  netlink_unicast+0x3a3/0x9b0
[  984.487526][T26628]  ? __pfx_netlink_unicast+0x10/0x10
[  984.487560][T26628]  netlink_rcv_skb+0x2b6/0x4b0
[  984.487589][T26628]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  984.487619][T26628]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  984.487659][T26628]  ? netlink_deliver_tap+0x2e/0x1b0
[  984.487703][T26628]  netlink_unicast+0x80f/0x9b0
[  984.487738][T26628]  ? __pfx_netlink_unicast+0x10/0x10
[  984.487766][T26628]  ? netlink_sendmsg+0x650/0xb40
[  984.487792][T26628]  ? skb_put+0x11b/0x210
[  984.487826][T26628]  netlink_sendmsg+0x813/0xb40
[  984.487864][T26628]  ? __pfx_netlink_sendmsg+0x10/0x10
[  984.487897][T26628]  ? aa_sock_msg_perm+0xf1/0x1b0
[  984.487925][T26628]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  984.487951][T26628]  ? __pfx_netlink_sendmsg+0x10/0x10
[  984.487979][T26628]  ____sys_sendmsg+0xa68/0xad0
[  984.488023][T26628]  ? __pfx_____sys_sendmsg+0x10/0x10
[  984.488066][T26628]  ? import_iovec+0x73/0xa0
[  984.488102][T26628]  ___sys_sendmsg+0x2a5/0x360
[  984.488141][T26628]  ? __pfx____sys_sendmsg+0x10/0x10
[  984.488219][T26628]  ? __fget_files+0x2a/0x420
[  984.488250][T26628]  ? __fget_files+0x3a0/0x420
[  984.488292][T26628]  __x64_sys_sendmsg+0x1bd/0x2a0
[  984.488329][T26628]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  984.488373][T26628]  ? __pfx_ksys_write+0x10/0x10
[  984.488407][T26628]  do_syscall_64+0x14d/0xf80
[  984.488430][T26628]  ? trace_irq_disable+0x3b/0x150
[  984.488460][T26628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  984.488484][T26628]  ? clear_bhb_loop+0x40/0x90
[  984.488510][T26628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  984.488532][T26628] RIP: 0033:0x7fb318d9c799
[  984.488552][T26628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  984.488571][T26628] RSP: 002b:00007fb319d2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  984.488594][T26628] RAX: ffffffffffffffda RBX: 00007fb319015fa0 RCX: 00007fb318d9c799
[  984.488611][T26628] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  984.488625][T26628] RBP: 00007fb319d2b090 R08: 0000000000000000 R09: 0000000000000000
[  984.488639][T26628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  984.488652][T26628] R13: 00007fb319016038 R14: 00007fb319015fa0 R15: 00007fff54034bc8
[  984.488686][T26628]  </TASK>
[  984.970109][T26636] __nla_validate_parse: 15 callbacks suppressed
[  984.970130][T26636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6352'.
[  985.043131][T26639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6353'.
[  985.150760][T26643] syzkaller0: entered promiscuous mode
[  985.158916][T26647] FAULT_INJECTION: forcing a failure.
[  985.158916][T26647] name failslab, interval 1, probability 0, space 0, times 0
[  985.186776][T26643] syzkaller0: entered allmulticast mode
[  985.192484][T26647] CPU: 1 UID: 0 PID: 26647 Comm: syz.2.6357 Not tainted syzkaller #0 PREEMPT(full) 
[  985.192514][T26647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  985.192529][T26647] Call Trace:
[  985.192539][T26647]  <TASK>
[  985.192550][T26647]  dump_stack_lvl+0xe8/0x150
[  985.192586][T26647]  should_fail_ex+0x412/0x560
[  985.192617][T26647]  should_failslab+0xa8/0x100
[  985.192646][T26647]  __kmalloc_cache_noprof+0x88/0x660
[  985.192669][T26647]  ? __pfx_stack_trace_save+0x10/0x10
[  985.192691][T26647]  ? rtnl_newlink+0x136/0x1be0
[  985.192733][T26647]  rtnl_newlink+0x136/0x1be0
[  985.192760][T26647]  ? kasan_save_track+0x4f/0x80
[  985.192781][T26647]  ? kasan_save_track+0x3e/0x80
[  985.192800][T26647]  ? kasan_save_free_info+0x46/0x50
[  985.192829][T26647]  ? __kasan_slab_free+0x5c/0x80
[  985.192848][T26647]  ? kmem_cache_free+0x187/0x630
[  985.192870][T26647]  ? __dev_queue_xmit+0x17a7/0x38d0
[  985.192890][T26647]  ? __netlink_deliver_tap+0x5ad/0x850
[  985.192915][T26647]  ? netlink_deliver_tap+0x19c/0x1b0
[  985.192940][T26647]  ? netlink_unicast+0x7e3/0x9b0
[  985.192961][T26647]  ? netlink_sendmsg+0x813/0xb40
[  985.192989][T26647]  ? __pfx_rtnl_newlink+0x10/0x10
[  985.193015][T26647]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  985.193074][T26647]  ? kasan_quarantine_put+0xbb/0x1f0
[  985.193094][T26647]  ? lockdep_hardirqs_on+0x7a/0x110
[  985.193132][T26647]  ? kmem_cache_free+0x187/0x630
[  985.193153][T26647]  ? nlmon_xmit+0xb0/0x100
[  985.193195][T26647]  ? __lock_acquire+0x6b5/0x2cf0
[  985.193227][T26647]  ? __local_bh_enable_ip+0xd0/0x130
[  985.193255][T26647]  ? lockdep_hardirqs_on+0x7a/0x110
[  985.193287][T26647]  ? __dev_queue_xmit+0x28d/0x38d0
[  985.193307][T26647]  ? __local_bh_enable_ip+0xd0/0x130
[  985.193333][T26647]  ? __dev_queue_xmit+0x28d/0x38d0
[  985.193379][T26647]  ? __pfx_rtnl_newlink+0x10/0x10
[  985.193406][T26647]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  985.193438][T26647]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  985.193465][T26647]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  985.193490][T26647]  ? ref_tracker_free+0x693/0x840
[  985.193516][T26647]  ? __copy_skb_header+0xa3/0x4a0
[  985.193550][T26647]  ? __pfx_ref_tracker_free+0x10/0x10
[  985.193586][T26647]  netlink_rcv_skb+0x232/0x4b0
[  985.193615][T26647]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  985.193645][T26647]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  985.193684][T26647]  ? netlink_deliver_tap+0x2e/0x1b0
[  985.193725][T26647]  netlink_unicast+0x80f/0x9b0
[  985.193757][T26647]  ? __pfx_netlink_unicast+0x10/0x10
[  985.193782][T26647]  ? netlink_sendmsg+0x650/0xb40
[  985.193807][T26647]  ? skb_put+0x11b/0x210
[  985.193837][T26647]  netlink_sendmsg+0x813/0xb40
[  985.193875][T26647]  ? __pfx_netlink_sendmsg+0x10/0x10
[  985.193907][T26647]  ? aa_sock_msg_perm+0xf1/0x1b0
[  985.193932][T26647]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  985.193954][T26647]  ? __pfx_netlink_sendmsg+0x10/0x10
[  985.193976][T26647]  ____sys_sendmsg+0xa68/0xad0
[  985.194015][T26647]  ? __pfx_____sys_sendmsg+0x10/0x10
[  985.194056][T26647]  ? import_iovec+0x73/0xa0
[  985.194090][T26647]  ___sys_sendmsg+0x2a5/0x360
[  985.194132][T26647]  ? __pfx____sys_sendmsg+0x10/0x10
[  985.194197][T26647]  ? __fget_files+0x2a/0x420
[  985.194226][T26647]  ? __fget_files+0x3a0/0x420
[  985.194266][T26647]  __x64_sys_sendmsg+0x1bd/0x2a0
[  985.194301][T26647]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  985.194340][T26647]  ? __pfx_ksys_write+0x10/0x10
[  985.194373][T26647]  do_syscall_64+0x14d/0xf80
[  985.194392][T26647]  ? trace_irq_disable+0x3b/0x150
[  985.194433][T26647]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  985.194455][T26647]  ? clear_bhb_loop+0x40/0x90
[  985.194482][T26647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  985.194502][T26647] RIP: 0033:0x7f9c7179c799
[  985.194524][T26647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  985.194543][T26647] RSP: 002b:00007f9c726eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  985.194566][T26647] RAX: ffffffffffffffda RBX: 00007f9c71a15fa0 RCX: 00007f9c7179c799
[  985.194581][T26647] RDX: 0000000000004000 RSI: 0000200000000300 RDI: 0000000000000003
[  985.194596][T26647] RBP: 00007f9c726eb090 R08: 0000000000000000 R09: 0000000000000000
[  985.194609][T26647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  985.194621][T26647] R13: 00007f9c71a16038 R14: 00007f9c71a15fa0 R15: 00007ffdd7e651d8
[  985.194653][T26647]  </TASK>
[  985.208664][T26643] netlink: 'syz.4.6356': attribute type 1 has an invalid length.
[  985.389346][T26652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6356'.
[  985.521475][T26654] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6356'.
[  986.026318][T26676] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6367'.
[  986.251382][T26683] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6370'.
[  986.280773][T26685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6372'.
[  986.307996][T26689] tipc: Failed to remove unknown binding: 66,0,0/0:1796583523/1796583525
[  986.320523][T26689] tipc: Failed to remove unknown binding: 66,0,0/0:1796583523/1796583524
[  986.324528][T26687] tipc: Failed to remove unknown binding: 66,0,0/0:2392402669/2392402671
[  986.337529][T26689] tipc: Failed to remove unknown binding: 66,0,0/0:1796583523/1796583525
[  986.347844][T26687] tipc: Failed to remove unknown binding: 66,0,0/0:2392402669/2392402670
[  986.358082][T26690] openvswitch: netlink: Key type 8213 is out of range max 32
[  986.369688][T26689] tipc: Failed to remove unknown binding: 66,0,0/0:1796583523/1796583524
[  986.394228][T26693] FAULT_INJECTION: forcing a failure.
[  986.394228][T26693] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  986.433008][T26693] CPU: 0 UID: 0 PID: 26693 Comm: syz.3.6374 Not tainted syzkaller #0 PREEMPT(full) 
[  986.433030][T26693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  986.433046][T26693] Call Trace:
[  986.433053][T26693]  <TASK>
[  986.433060][T26693]  dump_stack_lvl+0xe8/0x150
[  986.433088][T26693]  should_fail_ex+0x412/0x560
[  986.433111][T26693]  _copy_from_user+0x2d/0xb0
[  986.433135][T26693]  get_user_ifreq+0x6b/0x180
[  986.433188][T26693]  sock_ioctl+0x704/0x7f0
[  986.433213][T26693]  ? __pfx_sock_ioctl+0x10/0x10
[  986.433244][T26693]  ? __fget_files+0x3a0/0x420
[  986.433267][T26693]  ? __fget_files+0x2a/0x420
[  986.433291][T26693]  ? bpf_lsm_file_ioctl+0x9/0x20
[  986.433310][T26693]  ? __pfx_sock_ioctl+0x10/0x10
[  986.433326][T26693]  __se_sys_ioctl+0xfc/0x170
[  986.433346][T26693]  do_syscall_64+0x14d/0xf80
[  986.433360][T26693]  ? trace_irq_disable+0x3b/0x150
[  986.433384][T26693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  986.433399][T26693]  ? clear_bhb_loop+0x40/0x90
[  986.433419][T26693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  986.433435][T26693] RIP: 0033:0x7f27d979c799
[  986.433450][T26693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  986.433464][T26693] RSP: 002b:00007f27da6a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  986.433481][T26693] RAX: ffffffffffffffda RBX: 00007f27d9a15fa0 RCX: 00007f27d979c799
[  986.433493][T26693] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004
[  986.433503][T26693] RBP: 00007f27da6a4090 R08: 0000000000000000 R09: 0000000000000000
[  986.433513][T26693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  986.433522][T26693] R13: 00007f27d9a16038 R14: 00007f27d9a15fa0 R15: 00007ffd6eb9eed8
[  986.433548][T26693]  </TASK>
[  986.439481][T26687] tipc: Failed to remove unknown binding: 66,0,0/0:2392402669/2392402671
[  986.689027][T26701] FAULT_INJECTION: forcing a failure.
[  986.689027][T26701] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  986.702383][T26701] CPU: 1 UID: 0 PID: 26701 Comm: syz.3.6378 Not tainted syzkaller #0 PREEMPT(full) 
[  986.702413][T26701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  986.702428][T26701] Call Trace:
[  986.702439][T26701]  <TASK>
[  986.702449][T26701]  dump_stack_lvl+0xe8/0x150
[  986.702507][T26701]  should_fail_ex+0x412/0x560
[  986.702539][T26701]  _copy_from_user+0x2d/0xb0
[  986.702589][T26701]  ___sys_sendmsg+0x1c6/0x360
[  986.702642][T26701]  ? __pfx____sys_sendmsg+0x10/0x10
[  986.702710][T26701]  ? __fget_files+0x2a/0x420
[  986.702740][T26701]  ? __fget_files+0x3a0/0x420
[  986.702798][T26701]  __x64_sys_sendmsg+0x1bd/0x2a0
[  986.702834][T26701]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  986.702877][T26701]  ? __pfx_ksys_write+0x10/0x10
[  986.702912][T26701]  do_syscall_64+0x14d/0xf80
[  986.702933][T26701]  ? trace_irq_disable+0x3b/0x150
[  986.702966][T26701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  986.702988][T26701]  ? clear_bhb_loop+0x40/0x90
[  986.703016][T26701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  986.703038][T26701] RIP: 0033:0x7f27d979c799
[  986.703059][T26701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  986.703078][T26701] RSP: 002b:00007f27da6a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  986.703102][T26701] RAX: ffffffffffffffda RBX: 00007f27d9a15fa0 RCX: 00007f27d979c799
[  986.703119][T26701] RDX: 00000000000008c0 RSI: 0000200000000280 RDI: 0000000000000003
[  986.703134][T26701] RBP: 00007f27da6a4090 R08: 0000000000000000 R09: 0000000000000000
[  986.703148][T26701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  986.703162][T26701] R13: 00007f27d9a16038 R14: 00007f27d9a15fa0 R15: 00007ffd6eb9eed8
[  986.703196][T26701]  </TASK>
[  986.893197][T26687] tipc: Failed to remove unknown binding: 66,0,0/0:2392402669/2392402670
[  986.927772][T26706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6379'.
[  986.986381][T26708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6380'.
[  986.997590][T26708] IPv6: NLM_F_CREATE should be specified when creating new route
[  987.282522][T26724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6386'.
[  988.040389][T26752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  988.068326][T26752] syzkaller0: entered promiscuous mode
[  988.074208][T26752] syzkaller0: entered allmulticast mode
[  988.405702][T26751] tipc: Resetting bearer <eth:syzkaller0>
[  988.473846][T26751] tipc: Disabling bearer <eth:syzkaller0>
[  988.574304][T26766] bridge_slave_1: left allmulticast mode
[  988.580056][T26766] bridge_slave_1: left promiscuous mode
[  988.597054][T26766] bridge0: port 2(bridge_slave_1) entered disabled state
[  988.753837][T26774] FAULT_INJECTION: forcing a failure.
[  988.753837][T26774] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  988.788207][T26774] CPU: 1 UID: 0 PID: 26774 Comm: syz.3.6408 Not tainted syzkaller #0 PREEMPT(full) 
[  988.788235][T26774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  988.788248][T26774] Call Trace:
[  988.788257][T26774]  <TASK>
[  988.788266][T26774]  dump_stack_lvl+0xe8/0x150
[  988.788309][T26774]  should_fail_ex+0x412/0x560
[  988.788338][T26774]  _copy_from_user+0x2d/0xb0
[  988.788368][T26774]  __copy_msghdr+0x3c5/0x5b0
[  988.788402][T26774]  ___sys_sendmsg+0x213/0x360
[  988.788437][T26774]  ? __pfx____sys_sendmsg+0x10/0x10
[  988.788472][T26774]  ? kstrtouint+0x6e/0xe0
[  988.788518][T26774]  ? __fget_files+0x2a/0x420
[  988.788546][T26774]  ? __fget_files+0x3a0/0x420
[  988.788583][T26774]  __sys_sendmmsg+0x27c/0x4e0
[  988.788618][T26774]  ? __pfx___sys_sendmmsg+0x10/0x10
[  988.788647][T26774]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  988.788691][T26774]  ? ksys_write+0x242/0x270
[  988.788714][T26774]  ? __pfx_ksys_write+0x10/0x10
[  988.788746][T26774]  __x64_sys_sendmmsg+0xa0/0xc0
[  988.788795][T26774]  do_syscall_64+0x14d/0xf80
[  988.788816][T26774]  ? trace_irq_disable+0x3b/0x150
[  988.788848][T26774]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  988.788871][T26774]  ? clear_bhb_loop+0x40/0x90
[  988.788898][T26774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  988.788921][T26774] RIP: 0033:0x7f27d979c799
[  988.788942][T26774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  988.788962][T26774] RSP: 002b:00007f27da6a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  988.788986][T26774] RAX: ffffffffffffffda RBX: 00007f27d9a15fa0 RCX: 00007f27d979c799
[  988.789003][T26774] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004
[  988.789017][T26774] RBP: 00007f27da6a4090 R08: 0000000000000000 R09: 0000000000000000
[  988.789031][T26774] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000001
[  988.789045][T26774] R13: 00007f27d9a16038 R14: 00007f27d9a15fa0 R15: 00007ffd6eb9eed8
[  988.789079][T26774]  </TASK>
[  989.263755][T26798] FAULT_INJECTION: forcing a failure.
[  989.263755][T26798] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  989.297362][T26789] syzkaller0: entered promiscuous mode
[  989.303124][T26789] syzkaller0: entered allmulticast mode
[  989.310131][T26801] FAULT_INJECTION: forcing a failure.
[  989.310131][T26801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  989.320337][T26798] CPU: 1 UID: 0 PID: 26798 Comm: syz.1.6416 Not tainted syzkaller #0 PREEMPT(full) 
[  989.320405][T26798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  989.320444][T26798] Call Trace:
[  989.320466][T26798]  <TASK>
[  989.320494][T26798]  dump_stack_lvl+0xe8/0x150
[  989.320583][T26798]  should_fail_ex+0x412/0x560
[  989.320664][T26798]  _copy_from_iter+0x1d3/0x1670
[  989.320744][T26798]  ? rcu_is_watching+0x15/0xb0
[  989.320835][T26798]  ? __pfx__copy_from_iter+0x10/0x10
[  989.320926][T26798]  ? netlink_sendmsg+0x650/0xb40
[  989.320995][T26798]  ? skb_put+0x11b/0x210
[  989.321079][T26798]  netlink_sendmsg+0x6c0/0xb40
[  989.321169][T26798]  ? __pfx_netlink_sendmsg+0x10/0x10
[  989.321258][T26798]  ? aa_sock_msg_perm+0xf1/0x1b0
[  989.321329][T26798]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  989.321392][T26798]  ? __pfx_netlink_sendmsg+0x10/0x10
[  989.321499][T26798]  ____sys_sendmsg+0xa68/0xad0
[  989.321601][T26798]  ? __pfx_____sys_sendmsg+0x10/0x10
[  989.321688][T26798]  ? import_iovec+0x73/0xa0
[  989.321775][T26798]  ___sys_sendmsg+0x2a5/0x360
[  989.321868][T26798]  ? __pfx____sys_sendmsg+0x10/0x10
[  989.322023][T26798]  ? __fget_files+0x2a/0x420
[  989.322103][T26798]  ? __fget_files+0x3a0/0x420
[  989.322200][T26798]  __x64_sys_sendmsg+0x1bd/0x2a0
[  989.322297][T26798]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  989.322400][T26798]  ? __pfx_ksys_write+0x10/0x10
[  989.322486][T26798]  do_syscall_64+0x14d/0xf80
[  989.322535][T26798]  ? trace_irq_disable+0x3b/0x150
[  989.322617][T26798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  989.322662][T26798]  ? clear_bhb_loop+0x40/0x90
[  989.322726][T26798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  989.322818][T26798] RIP: 0033:0x7fb318d9c799
[  989.322880][T26798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  989.322925][T26798] RSP: 002b:00007fb319d2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  989.322985][T26798] RAX: ffffffffffffffda RBX: 00007fb319015fa0 RCX: 00007fb318d9c799
[  989.323027][T26798] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003
[  989.323084][T26798] RBP: 00007fb319d2b090 R08: 0000000000000000 R09: 0000000000000000
[  989.323121][T26798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  989.323152][T26798] R13: 00007fb319016038 R14: 00007fb319015fa0 R15: 00007fff54034bc8
[  989.323206][T26798]  </TASK>
[  989.475269][T26793] netlink: 'syz.3.6417': attribute type 13 has an invalid length.
[  989.550857][T26801] CPU: 0 UID: 0 PID: 26801 Comm: syz.4.6419 Not tainted syzkaller #0 PREEMPT(full) 
[  989.550930][T26801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  989.550968][T26801] Call Trace:
[  989.550995][T26801]  <TASK>
[  989.551018][T26801]  dump_stack_lvl+0xe8/0x150
[  989.551118][T26801]  should_fail_ex+0x412/0x560
[  989.551184][T26801]  _copy_from_user+0x2d/0xb0
[  989.551273][T26801]  br_dev_siocdevprivate+0x118/0x1630
[  989.551463][T26801]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  989.551534][T26801]  ? lockdep_hardirqs_on+0x7a/0x110
[  989.551639][T26801]  ? __mutex_lock+0x5ac/0x1300
[  989.551749][T26801]  ? dev_ioctl+0x83c/0x1150
[  989.551862][T26801]  ? full_name_hash+0x92/0xe0
[  989.551965][T26801]  dev_ifsioc+0xba6/0x1280
[  989.552056][T26801]  dev_ioctl+0x84c/0x1150
[  989.552142][T26801]  sock_ioctl+0x75f/0x7f0
[  989.552211][T26801]  ? __pfx_sock_ioctl+0x10/0x10
[  989.552274][T26801]  ? __fget_files+0x3a0/0x420
[  989.552355][T26801]  ? __fget_files+0x2a/0x420
[  989.552451][T26801]  ? bpf_lsm_file_ioctl+0x9/0x20
[  989.552520][T26801]  ? __pfx_sock_ioctl+0x10/0x10
[  989.552580][T26801]  __se_sys_ioctl+0xfc/0x170
[  989.552643][T26801]  do_syscall_64+0x14d/0xf80
[  989.552693][T26801]  ? trace_irq_disable+0x3b/0x150
[  989.552764][T26801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  989.552822][T26801]  ? clear_bhb_loop+0x40/0x90
[  989.552886][T26801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  989.552945][T26801] RIP: 0033:0x7f2b3e59c799
[  989.552997][T26801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  989.553065][T26801] RSP: 002b:00007f2b3f4bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  989.553132][T26801] RAX: ffffffffffffffda RBX: 00007f2b3e815fa0 RCX: 00007f2b3e59c799
[  989.553172][T26801] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004
[  989.553213][T26801] RBP: 00007f2b3f4bf090 R08: 0000000000000000 R09: 0000000000000000
[  989.553252][T26801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  989.553283][T26801] R13: 00007f2b3e816038 R14: 00007f2b3e815fa0 R15: 00007fff84947c78
[  989.553374][T26801]  </TASK>
[  989.889156][T26808] netlink: 'syz.1.6420': attribute type 21 has an invalid length.
[  991.430814][T26793] 8021q: adding VLAN 0 to HW filter on device team0
[  991.488489][T26793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  991.544291][T26808] __nla_validate_parse: 7 callbacks suppressed
[  991.544313][T26808] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6420'.
[  991.930507][T26849] FAULT_INJECTION: forcing a failure.
[  991.930507][T26849] name failslab, interval 1, probability 0, space 0, times 0
[  991.943681][T26849] CPU: 1 UID: 0 PID: 26849 Comm: syz.2.6435 Not tainted syzkaller #0 PREEMPT(full) 
[  991.943709][T26849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  991.943724][T26849] Call Trace:
[  991.943733][T26849]  <TASK>
[  991.943743][T26849]  dump_stack_lvl+0xe8/0x150
[  991.943779][T26849]  should_fail_ex+0x412/0x560
[  991.943810][T26849]  should_failslab+0xa8/0x100
[  991.943837][T26849]  ? sctp_get_port_local+0x6f2/0x1730
[  991.943872][T26849]  kmem_cache_alloc_noprof+0x87/0x650
[  991.943916][T26849]  sctp_get_port_local+0x6f2/0x1730
[  991.943959][T26849]  ? __pfx_sctp_get_port_local+0x10/0x10
[  991.943993][T26849]  ? sctp_bind_addr_match+0x28b/0x2b0
[  991.944024][T26849]  sctp_do_bind+0x4f1/0x9d0
[  991.944072][T26849]  sctp_connect_new_asoc+0x270/0x6b0
[  991.944107][T26849]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  991.944144][T26849]  ? __local_bh_enable_ip+0xd0/0x130
[  991.944170][T26849]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  991.944195][T26849]  ? security_sctp_bind_connect+0x7e/0x2c0
[  991.944314][T26849]  sctp_sendmsg+0x1528/0x2c10
[  991.944359][T26849]  ? __pfx_sctp_sendmsg+0x10/0x10
[  991.944392][T26849]  ? aa_sk_perm+0x6d5/0x900
[  991.944424][T26849]  ? __pfx_aa_sk_perm+0x10/0x10
[  991.944451][T26849]  ? sock_rps_record_flow+0x19/0x350
[  991.944486][T26849]  ? inet_sendmsg+0x2f4/0x370
[  991.944520][T26849]  ____sys_sendmsg+0x894/0xad0
[  991.944561][T26849]  ? __pfx_____sys_sendmsg+0x10/0x10
[  991.944602][T26849]  ? import_iovec+0x73/0xa0
[  991.944637][T26849]  ___sys_sendmsg+0x2a5/0x360
[  991.944672][T26849]  ? __pfx____sys_sendmsg+0x10/0x10
[  991.944709][T26849]  ? kstrtouint+0x6e/0xe0
[  991.944761][T26849]  ? __fget_files+0x2a/0x420
[  991.944790][T26849]  ? __fget_files+0x3a0/0x420
[  991.944831][T26849]  __sys_sendmmsg+0x27c/0x4e0
[  991.944868][T26849]  ? __pfx___sys_sendmmsg+0x10/0x10
[  991.944898][T26849]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  991.944946][T26849]  ? ksys_write+0x242/0x270
[  991.944970][T26849]  ? __pfx_ksys_write+0x10/0x10
[  991.944998][T26849]  __x64_sys_sendmmsg+0xa0/0xc0
[  991.945032][T26849]  do_syscall_64+0x14d/0xf80
[  991.945051][T26849]  ? trace_irq_disable+0x3b/0x150
[  991.945089][T26849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.945110][T26849]  ? clear_bhb_loop+0x40/0x90
[  991.945137][T26849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.945158][T26849] RIP: 0033:0x7f9c7179c799
[  991.945179][T26849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  991.945197][T26849] RSP: 002b:00007f9c726eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  991.945220][T26849] RAX: ffffffffffffffda RBX: 00007f9c71a15fa0 RCX: 00007f9c7179c799
[  991.945236][T26849] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004
[  991.945250][T26849] RBP: 00007f9c726eb090 R08: 0000000000000000 R09: 0000000000000000
[  991.945263][T26849] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000001
[  991.945277][T26849] R13: 00007f9c71a16038 R14: 00007f9c71a15fa0 R15: 00007ffdd7e651d8
[  991.945311][T26849]  </TASK>
[  992.349378][T26856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6433'.
[  992.481354][T26864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6438'.
[  992.538510][T26862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6438'.
[  992.580212][T26865] netlink: 'syz.3.6439': attribute type 13 has an invalid length.
[  992.627249][T26870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6440'.
[  992.670209][T26865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  992.747534][T26872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6441'.
[  992.758941][T26872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6441'.
[  992.771009][T26875] FAULT_INJECTION: forcing a failure.
[  992.771009][T26875] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  992.788626][T26875] CPU: 1 UID: 0 PID: 26875 Comm: syz.1.6442 Not tainted syzkaller #0 PREEMPT(full) 
[  992.788657][T26875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  992.788671][T26875] Call Trace:
[  992.788680][T26875]  <TASK>
[  992.788690][T26875]  dump_stack_lvl+0xe8/0x150
[  992.788734][T26875]  should_fail_ex+0x412/0x560
[  992.788766][T26875]  _copy_from_user+0x2d/0xb0
[  992.788800][T26875]  ___sys_sendmsg+0x1c6/0x360
[  992.788839][T26875]  ? __pfx____sys_sendmsg+0x10/0x10
[  992.788908][T26875]  ? __fget_files+0x2a/0x420
[  992.788938][T26875]  ? __fget_files+0x3a0/0x420
[  992.788979][T26875]  __x64_sys_sendmsg+0x1bd/0x2a0
[  992.789016][T26875]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  992.789059][T26875]  ? __pfx_ksys_write+0x10/0x10
[  992.789094][T26875]  do_syscall_64+0x14d/0xf80
[  992.789115][T26875]  ? trace_irq_disable+0x3b/0x150
[  992.789155][T26875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  992.789178][T26875]  ? clear_bhb_loop+0x40/0x90
[  992.789205][T26875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  992.789227][T26875] RIP: 0033:0x7fb318d9c799
[  992.789248][T26875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  992.789267][T26875] RSP: 002b:00007fb319d2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  992.789289][T26875] RAX: ffffffffffffffda RBX: 00007fb319015fa0 RCX: 00007fb318d9c799
[  992.789306][T26875] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  992.789320][T26875] RBP: 00007fb319d2b090 R08: 0000000000000000 R09: 0000000000000000
[  992.789334][T26875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  992.789347][T26875] R13: 00007fb319016038 R14: 00007fb319015fa0 R15: 00007fff54034bc8
[  992.789380][T26875]  </TASK>
[  992.789965][T26876] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 773
[  993.006129][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  993.015125][ T1303] lec:lec_start_xmit: lec0:No lecd attached
[  993.289435][T26898] FAULT_INJECTION: forcing a failure.
[  993.289435][T26898] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  993.332418][T26898] CPU: 0 UID: 0 PID: 26898 Comm: syz.4.6448 Not tainted syzkaller #0 PREEMPT(full) 
[  993.332459][T26898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  993.332474][T26898] Call Trace:
[  993.332484][T26898]  <TASK>
[  993.332495][T26898]  dump_stack_lvl+0xe8/0x150
[  993.332531][T26898]  should_fail_ex+0x412/0x560
[  993.332563][T26898]  _copy_from_iter+0x1d3/0x1670
[  993.332594][T26898]  ? rcu_is_watching+0x15/0xb0
[  993.332632][T26898]  ? __pfx__copy_from_iter+0x10/0x10
[  993.332666][T26898]  ? netlink_sendmsg+0x650/0xb40
[  993.332693][T26898]  ? skb_put+0x11b/0x210
[  993.332725][T26898]  netlink_sendmsg+0x6c0/0xb40
[  993.332763][T26898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  993.332795][T26898]  ? aa_sock_msg_perm+0xf1/0x1b0
[  993.332822][T26898]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  993.332848][T26898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  993.332872][T26898]  ____sys_sendmsg+0xa68/0xad0
[  993.332915][T26898]  ? __pfx_____sys_sendmsg+0x10/0x10
[  993.332956][T26898]  ? import_iovec+0x73/0xa0
[  993.332990][T26898]  ___sys_sendmsg+0x2a5/0x360
[  993.333029][T26898]  ? __pfx____sys_sendmsg+0x10/0x10
[  993.333096][T26898]  ? __fget_files+0x2a/0x420
[  993.333126][T26898]  ? __fget_files+0x3a0/0x420
[  993.333166][T26898]  __x64_sys_sendmsg+0x1bd/0x2a0
[  993.333202][T26898]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  993.333245][T26898]  ? __pfx_ksys_write+0x10/0x10
[  993.333278][T26898]  do_syscall_64+0x14d/0xf80
[  993.333299][T26898]  ? trace_irq_disable+0x3b/0x150
[  993.333331][T26898]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.333354][T26898]  ? clear_bhb_loop+0x40/0x90
[  993.333381][T26898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.333403][T26898] RIP: 0033:0x7f2b3e59c799
[  993.333425][T26898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  993.333454][T26898] RSP: 002b:00007f2b3f4bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  993.333478][T26898] RAX: ffffffffffffffda RBX: 00007f2b3e815fa0 RCX: 00007f2b3e59c799
[  993.333495][T26898] RDX: 00000000000008c0 RSI: 0000200000000280 RDI: 0000000000000003
[  993.333510][T26898] RBP: 00007f2b3f4bf090 R08: 0000000000000000 R09: 0000000000000000
[  993.333524][T26898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  993.333537][T26898] R13: 00007f2b3e816038 R14: 00007f2b3e815fa0 R15: 00007fff84947c78
[  993.333571][T26898]  </TASK>
[  993.672652][T26905] FAULT_INJECTION: forcing a failure.
[  993.672652][T26905] name failslab, interval 1, probability 0, space 0, times 0
[  993.685748][T26905] CPU: 1 UID: 0 PID: 26905 Comm: syz.4.6455 Not tainted syzkaller #0 PREEMPT(full) 
[  993.685777][T26905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  993.685792][T26905] Call Trace:
[  993.685802][T26905]  <TASK>
[  993.685812][T26905]  dump_stack_lvl+0xe8/0x150
[  993.685848][T26905]  should_fail_ex+0x412/0x560
[  993.685900][T26905]  should_failslab+0xa8/0x100
[  993.685929][T26905]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  993.685956][T26905]  ? ip6_setup_cork+0x930/0xf30
[  993.685984][T26905]  ? __kmalloc_cache_noprof+0x31c/0x660
[  993.686011][T26905]  kmemdup_noprof+0x2b/0x70
[  993.686041][T26905]  ip6_setup_cork+0x930/0xf30
[  993.686080][T26905]  ip6_make_skb+0x1c8/0x320
[  993.686110][T26905]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  993.686145][T26905]  ? __pfx_ip6_make_skb+0x10/0x10
[  993.686189][T26905]  ? ip6_dst_hoplimit+0x65/0x3e0
[  993.686211][T26905]  ? ip6_dst_hoplimit+0x65/0x3e0
[  993.686238][T26905]  udpv6_sendmsg+0x1cfe/0x2560
[  993.686279][T26905]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  993.686308][T26905]  ? __lock_acquire+0x6b5/0x2cf0
[  993.686341][T26905]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  993.686397][T26905]  ? inet_send_prepare+0x1b9/0x270
[  993.686432][T26905]  ? inet_send_prepare+0x1b9/0x270
[  993.686467][T26905]  ? inet_send_prepare+0x1b9/0x270
[  993.686498][T26905]  ? __local_bh_enable_ip+0xd0/0x130
[  993.686527][T26905]  ? inet_send_prepare+0x1b9/0x270
[  993.686563][T26905]  ? inet6_sendmsg+0xe4/0x120
[  993.686588][T26905]  ____sys_sendmsg+0x62c/0xad0
[  993.686630][T26905]  ? __pfx_____sys_sendmsg+0x10/0x10
[  993.686673][T26905]  ? import_iovec+0x73/0xa0
[  993.686707][T26905]  ___sys_sendmsg+0x2a5/0x360
[  993.686745][T26905]  ? __pfx____sys_sendmsg+0x10/0x10
[  993.686785][T26905]  ? kstrtouint+0x6e/0xe0
[  993.686837][T26905]  ? __fget_files+0x2a/0x420
[  993.686867][T26905]  ? __fget_files+0x3a0/0x420
[  993.686943][T26905]  __sys_sendmmsg+0x27c/0x4e0
[  993.686983][T26905]  ? __pfx___sys_sendmmsg+0x10/0x10
[  993.687015][T26905]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  993.687065][T26905]  ? ksys_write+0x242/0x270
[  993.687091][T26905]  ? __pfx_ksys_write+0x10/0x10
[  993.687120][T26905]  __x64_sys_sendmmsg+0xa0/0xc0
[  993.687156][T26905]  do_syscall_64+0x14d/0xf80
[  993.687176][T26905]  ? trace_irq_disable+0x3b/0x150
[  993.687208][T26905]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.687243][T26905]  ? clear_bhb_loop+0x40/0x90
[  993.687269][T26905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.687291][T26905] RIP: 0033:0x7f2b3e59c799
[  993.687312][T26905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  993.687332][T26905] RSP: 002b:00007f2b3f4bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  993.687355][T26905] RAX: ffffffffffffffda RBX: 00007f2b3e815fa0 RCX: 00007f2b3e59c799
[  993.687371][T26905] RDX: 0000000000000001 RSI: 0000200000001ac0 RDI: 0000000000000003
[  993.687386][T26905] RBP: 00007f2b3f4bf090 R08: 0000000000000000 R09: 0000000000000000
[  993.687400][T26905] R10: 0000000004004800 R11: 0000000000000246 R12: 0000000000000001
[  993.687414][T26905] R13: 00007f2b3e816038 R14: 00007f2b3e815fa0 R15: 00007fff84947c78
[  993.687448][T26905]  </TASK>
[  994.005860][T26906] FAULT_INJECTION: forcing a failure.
[  994.005860][T26906] name failslab, interval 1, probability 0, space 0, times 0
[  994.018570][T26906] CPU: 1 UID: 0 PID: 26906 Comm: syz.2.6453 Not tainted syzkaller #0 PREEMPT(full) 
[  994.018600][T26906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  994.018614][T26906] Call Trace:
[  994.018624][T26906]  <TASK>
[  994.018634][T26906]  dump_stack_lvl+0xe8/0x150
[  994.018671][T26906]  should_fail_ex+0x412/0x560
[  994.018703][T26906]  should_failslab+0xa8/0x100
[  994.018732][T26906]  __kmalloc_noprof+0xe8/0x760
[  994.018755][T26906]  ? rcu_is_watching+0x15/0xb0
[  994.018803][T26906]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  994.018848][T26906]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  994.018891][T26906]  genl_family_rcv_msg_doit+0xd9/0x330
[  994.018927][T26906]  ? __asan_memcpy+0x40/0x70
[  994.018964][T26906]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  994.019007][T26906]  ? apparmor_capable+0x126/0x170
[  994.019124][T26906]  ? bpf_lsm_capable+0x9/0x20
[  994.019153][T26906]  ? security_capable+0x7e/0x2c0
[  994.019186][T26906]  genl_rcv_msg+0x61c/0x7a0
[  994.019227][T26906]  ? __pfx_genl_rcv_msg+0x10/0x10
[  994.019260][T26906]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  994.019354][T26906]  ? __pfx_nl802154_add_llsec_key+0x10/0x10
[  994.019375][T26906]  ? __pfx_nl802154_post_doit+0x10/0x10
[  994.019413][T26906]  ? __lock_acquire+0x6b5/0x2cf0
[  994.019454][T26906]  netlink_rcv_skb+0x232/0x4b0
[  994.019484][T26906]  ? __pfx_genl_rcv_msg+0x10/0x10
[  994.019519][T26906]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  994.019567][T26906]  ? down_read+0x272/0x2e0
[  994.019589][T26906]  ? genl_rcv+0xd/0x40
[  994.019623][T26906]  genl_rcv+0x28/0x40
[  994.019654][T26906]  netlink_unicast+0x80f/0x9b0
[  994.019689][T26906]  ? __pfx_netlink_unicast+0x10/0x10
[  994.019716][T26906]  ? netlink_sendmsg+0x650/0xb40
[  994.019742][T26906]  ? skb_put+0x11b/0x210
[  994.019776][T26906]  netlink_sendmsg+0x813/0xb40
[  994.019816][T26906]  ? __pfx_netlink_sendmsg+0x10/0x10
[  994.019848][T26906]  ? aa_sock_msg_perm+0xf1/0x1b0
[  994.019876][T26906]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  994.019903][T26906]  ? __pfx_netlink_sendmsg+0x10/0x10
[  994.019931][T26906]  ____sys_sendmsg+0xa68/0xad0
[  994.019975][T26906]  ? __pfx_____sys_sendmsg+0x10/0x10
[  994.020019][T26906]  ? import_iovec+0x73/0xa0
[  994.020054][T26906]  ___sys_sendmsg+0x2a5/0x360
[  994.020095][T26906]  ? __pfx____sys_sendmsg+0x10/0x10
[  994.020167][T26906]  ? __fget_files+0x2a/0x420
[  994.020197][T26906]  ? __fget_files+0x3a0/0x420
[  994.020251][T26906]  __x64_sys_sendmsg+0x1bd/0x2a0
[  994.020309][T26906]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  994.020389][T26906]  ? __pfx_ksys_write+0x10/0x10
[  994.020431][T26906]  do_syscall_64+0x14d/0xf80
[  994.020452][T26906]  ? trace_irq_disable+0x3b/0x150
[  994.020483][T26906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  994.020512][T26906]  ? clear_bhb_loop+0x40/0x90
[  994.020540][T26906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  994.020564][T26906] RIP: 0033:0x7f9c7179c799
[  994.020584][T26906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  994.020605][T26906] RSP: 002b:00007f9c726ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  994.020630][T26906] RAX: ffffffffffffffda RBX: 00007f9c71a16090 RCX: 00007f9c7179c799
[  994.020647][T26906] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004
[  994.020661][T26906] RBP: 00007f9c726ca090 R08: 0000000000000000 R09: 0000000000000000
[  994.020675][T26906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  994.020689][T26906] R13: 00007f9c71a16128 R14: 00007f9c71a16090 R15: 00007ffdd7e651d8
[  994.020724][T26906]  </TASK>
[  994.583527][T26920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6459'.
[  994.788599][T26932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6466'.
[  994.800186][T26930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6464'.
[  994.854272][T26937] IPv6: Can't replace route, no match found
[  994.887792][T26939] Bluetooth: MGMT ver 1.23
[  995.141590][T26963] tap0: tun_chr_ioctl cmd 1074025677
[  995.159188][T26963] tap0: linktype set to 769
[  995.317722][T26975] Bluetooth: MGMT ver 1.23
[  995.805983][T27004] FAULT_INJECTION: forcing a failure.
[  995.805983][T27004] name failslab, interval 1, probability 0, space 0, times 0
[  995.820102][T27004] CPU: 1 UID: 0 PID: 27004 Comm: syz.0.6485 Not tainted syzkaller #0 PREEMPT(full) 
[  995.820131][T27004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  995.820146][T27004] Call Trace:
[  995.820154][T27004]  <TASK>
[  995.820164][T27004]  dump_stack_lvl+0xe8/0x150
[  995.820199][T27004]  should_fail_ex+0x412/0x560
[  995.820231][T27004]  should_failslab+0xa8/0x100
[  995.820259][T27004]  __kmalloc_cache_noprof+0x88/0x660
[  995.820283][T27004]  ? sctp_add_bind_addr+0x8c/0x370
[  995.820308][T27004]  ? __pfx_sctp_get_port_local+0x10/0x10
[  995.820343][T27004]  sctp_add_bind_addr+0x8c/0x370
[  995.820366][T27004]  ? sctp_auto_asconf_init+0x15c/0x1e0
[  995.820401][T27004]  sctp_do_bind+0x5b2/0x9d0
[  995.820445][T27004]  sctp_connect_new_asoc+0x270/0x6b0
[  995.820480][T27004]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  995.820518][T27004]  ? __local_bh_enable_ip+0xd0/0x130
[  995.820545][T27004]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  995.820570][T27004]  ? security_sctp_bind_connect+0x7e/0x2c0
[  995.820607][T27004]  sctp_sendmsg+0x1528/0x2c10
[  995.820654][T27004]  ? __pfx_sctp_sendmsg+0x10/0x10
[  995.820688][T27004]  ? aa_sk_perm+0x6d5/0x900
[  995.820728][T27004]  ? __pfx_aa_sk_perm+0x10/0x10
[  995.820756][T27004]  ? sock_rps_record_flow+0x19/0x350
[  995.820792][T27004]  ? inet_sendmsg+0x2f4/0x370
[  995.820828][T27004]  ____sys_sendmsg+0x894/0xad0
[  995.820871][T27004]  ? __pfx_____sys_sendmsg+0x10/0x10
[  995.820913][T27004]  ? import_iovec+0x73/0xa0
[  995.820946][T27004]  ___sys_sendmsg+0x2a5/0x360
[  995.820995][T27004]  ? __pfx____sys_sendmsg+0x10/0x10
[  995.821047][T27004]  ? kstrtouint+0x6e/0xe0
[  995.821098][T27004]  ? __fget_files+0x2a/0x420
[  995.821128][T27004]  ? __fget_files+0x3a0/0x420
[  995.821168][T27004]  __sys_sendmmsg+0x27c/0x4e0
[  995.821207][T27004]  ? __pfx___sys_sendmmsg+0x10/0x10
[  995.821237][T27004]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  995.821286][T27004]  ? ksys_write+0x242/0x270
[  995.821311][T27004]  ? __pfx_ksys_write+0x10/0x10
[  995.821340][T27004]  __x64_sys_sendmmsg+0xa0/0xc0
[  995.821375][T27004]  do_syscall_64+0x14d/0xf80
[  995.821396][T27004]  ? trace_irq_disable+0x3b/0x150
[  995.821426][T27004]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.821448][T27004]  ? clear_bhb_loop+0x40/0x90
[  995.821474][T27004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.821496][T27004] RIP: 0033:0x7f4ba6f9c799
[  995.821517][T27004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  995.821537][T27004] RSP: 002b:00007f4ba7ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  995.821561][T27004] RAX: ffffffffffffffda RBX: 00007f4ba7215fa0 RCX: 00007f4ba6f9c799
[  995.821577][T27004] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004
[  995.821591][T27004] RBP: 00007f4ba7ece090 R08: 0000000000000000 R09: 0000000000000000
[  995.821604][T27004] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000001
[  995.821617][T27004] R13: 00007f4ba7216038 R14: 00007f4ba7215fa0 R15: 00007ffcdf21ea78
[  995.821651][T27004]  </TASK>
[  996.250888][T27006] bridge_slave_0: left allmulticast mode
[  996.256705][T27006] bridge_slave_0: left promiscuous mode
[  996.262605][T27006] bridge0: port 1(bridge_slave_0) entered disabled state
[  996.626012][T27029] syzkaller1: entered promiscuous mode
[  996.654318][T27029] syzkaller1: entered allmulticast mode
[  997.173293][T27053] can: request_module (can-proto-0) failed.
[  997.301969][T18925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  997.313748][T18925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  997.322663][T18925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  997.342254][T18925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  997.352820][T18925] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  997.616143][T27077] FAULT_INJECTION: forcing a failure.
[  997.616143][T27077] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  997.680375][T27077] CPU: 1 UID: 0 PID: 27077 Comm: syz.2.6506 Not tainted syzkaller #0 PREEMPT(full) 
[  997.680408][T27077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  997.680422][T27077] Call Trace:
[  997.680431][T27077]  <TASK>
[  997.680441][T27077]  dump_stack_lvl+0xe8/0x150
[  997.680475][T27077]  should_fail_ex+0x412/0x560
[  997.680506][T27077]  _copy_from_user+0x2d/0xb0
[  997.680538][T27077]  ___sys_sendmsg+0x1c6/0x360
[  997.680576][T27077]  ? __pfx____sys_sendmsg+0x10/0x10
[  997.680640][T27077]  ? __fget_files+0x2a/0x420
[  997.680668][T27077]  ? __fget_files+0x3a0/0x420
[  997.680706][T27077]  __x64_sys_sendmsg+0x1bd/0x2a0
[  997.680740][T27077]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  997.680780][T27077]  ? __pfx_ksys_write+0x10/0x10
[  997.680812][T27077]  do_syscall_64+0x14d/0xf80
[  997.680832][T27077]  ? trace_irq_disable+0x3b/0x150
[  997.680862][T27077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.680884][T27077]  ? clear_bhb_loop+0x40/0x90
[  997.680909][T27077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.680930][T27077] RIP: 0033:0x7f9c7179c799
[  997.680950][T27077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  997.680968][T27077] RSP: 002b:00007f9c726ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  997.680990][T27077] RAX: ffffffffffffffda RBX: 00007f9c71a16090 RCX: 00007f9c7179c799
[  997.681006][T27077] RDX: 00000000000400c0 RSI: 0000200000000580 RDI: 0000000000000003
[  997.681020][T27077] RBP: 00007f9c726ca090 R08: 0000000000000000 R09: 0000000000000000
[  997.681043][T27077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  997.681055][T27077] R13: 00007f9c71a16128 R14: 00007f9c71a16090 R15: 00007ffdd7e651d8
[  997.681087][T27077]  </TASK>
[  997.888799][T27063] chnl_net:caif_netlink_parms(): no params data found
[  997.921508][ T1164] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  997.938180][ T1164] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.044111][ T1164] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  998.066753][ T1164] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.235360][ T1164] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  998.247841][ T1164] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.310752][T27094] __nla_validate_parse: 7 callbacks suppressed
[  998.310775][T27094] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6511'.
[  998.334563][T27063] bridge0: port 1(bridge_slave_0) entered blocking state
[  998.342439][T27063] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.349948][T27063] bridge_slave_0: entered allmulticast mode
[  998.359710][T27063] bridge_slave_0: entered promiscuous mode
[  998.369543][T27063] bridge0: port 2(bridge_slave_1) entered blocking state
[  998.379348][T27063] bridge0: port 2(bridge_slave_1) entered disabled state
[  998.388046][T27063] bridge_slave_1: entered allmulticast mode
[  998.424497][T27063] bridge_slave_1: entered promiscuous mode
[  998.467716][ T1164] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  998.490155][ T1164] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.513377][T27103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6512'.
[  998.544239][T27100] 8021q: VLANs not supported on lo
[  998.641789][T27063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  998.680617][T27063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  998.711872][T27109] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6516'.
[  998.772138][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms
[  998.780195][    C1] lec:lec_tx_timeout: lec0
[  998.839726][T27063] team0: Port device team_slave_0 added
[  998.868136][T27063] team0: Port device team_slave_1 added
[  998.899388][T27116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6518'.
[  998.928576][T27118] FAULT_INJECTION: forcing a failure.
[  998.928576][T27118] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  998.952341][T27118] CPU: 0 UID: 0 PID: 27118 Comm: syz.4.6519 Not tainted syzkaller #0 PREEMPT(full) 
[  998.952370][T27118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  998.952384][T27118] Call Trace:
[  998.952392][T27118]  <TASK>
[  998.952402][T27118]  dump_stack_lvl+0xe8/0x150
[  998.952437][T27118]  should_fail_ex+0x412/0x560
[  998.952469][T27118]  _copy_from_user+0x2d/0xb0
[  998.952502][T27118]  ___sys_sendmsg+0x1c6/0x360
[  998.952540][T27118]  ? __pfx____sys_sendmsg+0x10/0x10
[  998.952579][T27118]  ? kstrtouint+0x6e/0xe0
[  998.952629][T27118]  ? __fget_files+0x2a/0x420
[  998.952659][T27118]  ? __fget_files+0x3a0/0x420
[  998.952699][T27118]  __sys_sendmmsg+0x27c/0x4e0
[  998.952738][T27118]  ? __pfx___sys_sendmmsg+0x10/0x10
[  998.952768][T27118]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  998.952816][T27118]  ? ksys_write+0x242/0x270
[  998.952841][T27118]  ? __pfx_ksys_write+0x10/0x10
[  998.952870][T27118]  __x64_sys_sendmmsg+0xa0/0xc0
[  998.952906][T27118]  do_syscall_64+0x14d/0xf80
[  998.952926][T27118]  ? trace_irq_disable+0x3b/0x150
[  998.952956][T27118]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  998.952979][T27118]  ? clear_bhb_loop+0x40/0x90
[  998.953006][T27118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  998.953028][T27118] RIP: 0033:0x7f2b3e59c799
[  998.953048][T27118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  998.953068][T27118] RSP: 002b:00007f2b3f4bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  998.953092][T27118] RAX: ffffffffffffffda RBX: 00007f2b3e815fa0 RCX: 00007f2b3e59c799
[  998.953117][T27118] RDX: 0000000000000001 RSI: 0000200000001ac0 RDI: 0000000000000003
[  998.953132][T27118] RBP: 00007f2b3f4bf090 R08: 0000000000000000 R09: 0000000000000000
[  998.953146][T27118] R10: 0000000004004800 R11: 0000000000000246 R12: 0000000000000001
[  998.953159][T27118] R13: 00007f2b3e816038 R14: 00007f2b3e815fa0 R15: 00007fff84947c78
[  998.953191][T27118]  </TASK>
[  999.217795][T27063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  999.224852][T27063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  999.252430][T27063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  999.265146][T27063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  999.272166][T27063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  999.298431][T27063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  999.363876][ T1164] pimreg: left allmulticast mode
[  999.412749][ T5847] Bluetooth: hci1: command tx timeout
[  999.624522][T27134] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6525'.
[  999.639921][ T1164] gretap0 (unregistering): left promiscuous mode
[  999.648105][T27137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6526'.
[  999.670602][ T1164] bond13 (unregistering): (slave gretap1): Releasing backup interface
[  999.891841][T27146] netlink: 'syz.2.6529': attribute type 10 has an invalid length.
[ 1000.123982][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1000.135605][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1000.146304][ T1164] bond0 (unregistering): Released all slaves
[ 1000.159763][ T1164] bond1 (unregistering): Released all slaves
[ 1000.177375][ T1164] bond2 (unregistering): (slave veth3): Releasing active interface
[ 1000.186977][ T1164] bond2 (unregistering): Released all slaves
[ 1000.207890][ T1164] bond3 (unregistering): (slave veth5): Releasing active interface
[ 1000.219024][ T1164] bond3 (unregistering): Released all slaves
[ 1000.239193][ T1164] bond4 (unregistering): (slave veth7): Releasing active interface
[ 1000.253543][ T1164] bond4 (unregistering): Released all slaves
[ 1000.273276][ T1164] bond5 (unregistering): (slave veth9): Releasing active interface
[ 1000.286236][ T1164] bond5 (unregistering): Released all slaves
[ 1000.309450][ T1164] bond6 (unregistering): (slave veth11): Releasing active interface
[ 1000.319416][ T1164] bond6 (unregistering): Released all slaves
[ 1000.344664][ T1164] bond7 (unregistering): (slave batadv1): Releasing active interface
[ 1000.352926][ T1164] batadv1: left promiscuous mode
[ 1000.358028][ T1164] batadv1: left allmulticast mode
[ 1000.365883][ T1164] bond7 (unregistering): Released all slaves
[ 1000.387745][ T1164] bond8 (unregistering): (slave bond9): Releasing backup interface
[ 1000.396091][ T1164] bond9 (unregistering): left promiscuous mode
[ 1000.403312][ T1164] bond8 (unregistering): Released all slaves
[ 1000.418325][ T1164] bond9 (unregistering): Released all slaves
[ 1000.433983][ T1164] bond10 (unregistering): Released all slaves
[ 1000.448816][ T1164] bond11 (unregistering): Released all slaves
[ 1000.472429][ T1164] bond12 (unregistering): Released all slaves
[ 1000.489253][ T1164] bond13 (unregistering): (slave bond14): Releasing backup interface
[ 1000.497495][ T1164] bond14 (unregistering): left promiscuous mode
[ 1000.511791][ T1164] bond13 (unregistering): Released all slaves
[ 1000.527038][ T1164] bond14 (unregistering): Released all slaves
[ 1000.541790][ T1164] bond15 (unregistering): Released all slaves
[ 1000.557586][ T1164] bond16 (unregistering): (slave veth15): Releasing active interface
[ 1000.567329][ T1164] bond16 (unregistering): Released all slaves
[ 1000.591149][ T1164] bond17 (unregistering): Released all slaves
[ 1000.607156][ T1164] bond18 (unregistering): (slave veth17): Releasing active interface
[ 1000.627944][ T1164] bond18 (unregistering): Released all slaves
[ 1000.646087][ T1164] bond19 (unregistering): Released all slaves
[ 1000.661366][ T1164] bond20 (unregistering): (slave veth19): Releasing active interface
[ 1000.671156][ T1164] bond20 (unregistering): Released all slaves
[ 1000.693664][ T1164] bond21 (unregistering): (slave veth21): Releasing active interface
[ 1000.705028][ T1164] bond21 (unregistering): Released all slaves
[ 1000.719706][ T1164] bond22 (unregistering): Released all slaves
[ 1000.841570][T27063] hsr_slave_0: entered promiscuous mode
[ 1000.848907][T27063] hsr_slave_1: entered promiscuous mode
[ 1000.855811][T27063] debugfs: 'hsr0' already exists in 'hsr'
[ 1000.861725][T27063] Cannot create hsr debugfs directory
[ 1001.009012][T27153] netlink: 'syz.2.6531': attribute type 4 has an invalid length.
[ 1001.108999][ T1164] tipc: Left network mode
[ 1001.124454][T27159] FAULT_INJECTION: forcing a failure.
[ 1001.124454][T27159] name failslab, interval 1, probability 0, space 0, times 0
[ 1001.143685][T27159] CPU: 0 UID: 0 PID: 27159 Comm: syz.4.6533 Not tainted syzkaller #0 PREEMPT(full) 
[ 1001.143714][T27159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1001.143729][T27159] Call Trace:
[ 1001.143738][T27159]  <TASK>
[ 1001.143747][T27159]  dump_stack_lvl+0xe8/0x150
[ 1001.143784][T27159]  should_fail_ex+0x412/0x560
[ 1001.143816][T27159]  should_failslab+0xa8/0x100
[ 1001.143843][T27159]  ? sctp_get_port_local+0x6f2/0x1730
[ 1001.143877][T27159]  kmem_cache_alloc_noprof+0x87/0x650
[ 1001.143922][T27159]  sctp_get_port_local+0x6f2/0x1730
[ 1001.143969][T27159]  ? __pfx_sctp_get_port_local+0x10/0x10
[ 1001.144005][T27159]  ? sctp_bind_addr_match+0x28b/0x2b0
[ 1001.144038][T27159]  sctp_do_bind+0x4f1/0x9d0
[ 1001.144084][T27159]  sctp_connect_new_asoc+0x270/0x6b0
[ 1001.144121][T27159]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1001.144159][T27159]  ? __local_bh_enable_ip+0xd0/0x130
[ 1001.144187][T27159]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1001.144211][T27159]  ? security_sctp_bind_connect+0x7e/0x2c0
[ 1001.144250][T27159]  sctp_sendmsg+0x1528/0x2c10
[ 1001.144305][T27159]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1001.144339][T27159]  ? aa_sk_perm+0x6d5/0x900
[ 1001.144372][T27159]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1001.144400][T27159]  ? sock_rps_record_flow+0x19/0x350
[ 1001.144435][T27159]  ? inet_sendmsg+0x2f4/0x370
[ 1001.144471][T27159]  ____sys_sendmsg+0x894/0xad0
[ 1001.144513][T27159]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1001.144555][T27159]  ? import_iovec+0x73/0xa0
[ 1001.144591][T27159]  ___sys_sendmsg+0x2a5/0x360
[ 1001.144632][T27159]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1001.144673][T27159]  ? kstrtouint+0x6e/0xe0
[ 1001.144723][T27159]  ? __fget_files+0x2a/0x420
[ 1001.144751][T27159]  ? __fget_files+0x3a0/0x420
[ 1001.144791][T27159]  __sys_sendmmsg+0x27c/0x4e0
[ 1001.144831][T27159]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1001.144861][T27159]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1001.144912][T27159]  ? ksys_write+0x242/0x270
[ 1001.144938][T27159]  ? __pfx_ksys_write+0x10/0x10
[ 1001.144968][T27159]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1001.145004][T27159]  do_syscall_64+0x14d/0xf80
[ 1001.145025][T27159]  ? trace_irq_disable+0x3b/0x150
[ 1001.145057][T27159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.145080][T27159]  ? clear_bhb_loop+0x40/0x90
[ 1001.145107][T27159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.145130][T27159] RIP: 0033:0x7f2b3e59c799
[ 1001.145152][T27159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1001.145173][T27159] RSP: 002b:00007f2b3f4bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1001.145196][T27159] RAX: ffffffffffffffda RBX: 00007f2b3e815fa0 RCX: 00007f2b3e59c799
[ 1001.145212][T27159] RDX: 0000000000000002 RSI: 0000200000000940 RDI: 0000000000000003
[ 1001.145225][T27159] RBP: 00007f2b3f4bf090 R08: 0000000000000000 R09: 0000000000000000
[ 1001.145239][T27159] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[ 1001.145251][T27159] R13: 00007f2b3e816038 R14: 00007f2b3e815fa0 R15: 00007fff84947c78
[ 1001.145294][T27159]  </TASK>
[ 1001.515902][ T5847] Bluetooth: hci1: command tx timeout
[ 1001.722001][T27175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6536'.
[ 1001.946063][T27184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6535'.
[ 1002.155061][T27191] netlink: 'syz.1.6540': attribute type 10 has an invalid length.
[ 1002.278440][T27191] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1002.601921][ T1164] team0: left promiscuous mode
[ 1002.607193][ T1164] team_slave_1: left promiscuous mode
[ 1002.641272][T27198] netlink: 'syz.1.6541': attribute type 1 has an invalid length.
[ 1002.659783][ T1164] hsr_slave_0: left promiscuous mode
[ 1002.709023][ T1164] hsr_slave_1: left promiscuous mode
[ 1002.715471][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1002.731588][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1002.747610][T27200] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6542'.
[ 1002.768103][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1002.775768][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1002.800530][T27205] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6543'.
[ 1002.811394][ T1164] veth1_macvtap: left promiscuous mode
[ 1002.827663][ T1164] veth1_vlan: left promiscuous mode
[ 1002.842476][ T1164] veth0_vlan: left promiscuous mode
[ 1003.023482][T27212] netlink: 'syz.0.6545': attribute type 21 has an invalid length.
[ 1003.220861][ T1164] team0 (unregistering): Port device team_slave_1 removed
[ 1003.427304][T27203] bond6: (slave veth7): Enslaving as an active interface with a down link
[ 1003.455321][T27206] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1003.508612][T27212] netlink: 'syz.0.6545': attribute type 21 has an invalid length.
[ 1003.532905][T27212] __nla_validate_parse: 2 callbacks suppressed
[ 1003.532927][T27212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6545'.
[ 1003.583115][ T5847] Bluetooth: hci1: command tx timeout
[ 1003.592439][ T6578] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1003.602912][ T6578] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1003.656787][ T6578] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1003.686419][ T6578] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1003.702844][T27063] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1003.709971][T27220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6547'.
[ 1003.754354][T27063] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1003.807284][T27063] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1003.858882][T27063] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1003.957065][T27227] syzkaller0: entered promiscuous mode
[ 1003.972346][T27227] syzkaller0: entered allmulticast mode
[ 1004.151341][T27243] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6553'.
[ 1004.178690][ T1164] IPVS: stop unused estimator thread 0...
[ 1004.453291][T27260] netlink: 'syz.2.6559': attribute type 21 has an invalid length.
[ 1004.461182][T27260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6559'.
[ 1004.474400][T27261] syzkaller0: entered promiscuous mode
[ 1004.496610][T27261] syzkaller0: entered allmulticast mode
[ 1004.530069][T27260] netlink: 'syz.2.6559': attribute type 21 has an invalid length.
[ 1004.540551][T27261] 0: reclassify loop, rule prio 0, protocol 800
[ 1004.542655][T24153] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1004.582354][T27260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6559'.
[ 1004.591365][T24153] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1004.634084][T27063] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1004.642894][T24153] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1004.655240][T24153] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1004.708317][T27063] 8021q: adding VLAN 0 to HW filter on device team0
[ 1004.746829][  T974] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1004.754098][  T974] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1004.879176][T27273] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 129
[ 1005.023098][  T974] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1005.030389][  T974] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1005.111091][T27279] netlink: 'syz.2.6564': attribute type 4 has an invalid length.
[ 1005.124158][T27063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1005.290977][T27287] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6567'.
[ 1005.478491][T27290] netlink: 'syz.4.6566': attribute type 13 has an invalid length.
[ 1005.521768][T27290] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[ 1005.652264][ T5847] Bluetooth: hci1: command tx timeout
[ 1005.659659][T27063] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1005.773955][T27063] veth0_vlan: entered promiscuous mode
[ 1005.804333][T27063] veth1_vlan: entered promiscuous mode
[ 1005.876463][T27063] veth0_macvtap: entered promiscuous mode
[ 1005.891514][T27063] veth1_macvtap: entered promiscuous mode
[ 1005.946945][T27063] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1005.961523][T27063] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1005.976488][T24155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1006.009212][T24155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1006.033982][T27315] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6573'.
[ 1006.045686][T24155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1006.069216][ T1164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1006.162040][ T6578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1006.178068][T27317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6574'.
[ 1006.187572][ T6578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1006.235118][ T6578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1006.244692][ T6578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1006.444217][T27321] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6576'.
[ 1006.466686][T27321] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6576'.
[ 1006.574599][T27329] syzkaller0: entered promiscuous mode
[ 1006.587062][T27329] syzkaller0: entered allmulticast mode
[ 1006.666725][T27329] tipc: Started in network mode
[ 1006.682016][T27329] tipc: Node identity e2ce37cfc1d, cluster identity 4711
[ 1006.690245][T27329] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1006.711783][T27328] tipc: Resetting bearer <eth:syzkaller0>
[ 1006.739809][T27328] tipc: Disabling bearer <eth:syzkaller0>
[ 1006.876304][T24155] tipc: Subscription rejected, illegal request
[ 1006.881381][T27344] x_tables: ip6_tables: mh match: only valid for protocol 135
[ 1007.319859][T27359] FAULT_INJECTION: forcing a failure.
[ 1007.319859][T27359] name failslab, interval 1, probability 0, space 0, times 0
[ 1007.332648][T27359] CPU: 0 UID: 0 PID: 27359 Comm: syz.0.6592 Not tainted syzkaller #0 PREEMPT(full) 
[ 1007.332676][T27359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1007.332690][T27359] Call Trace:
[ 1007.332700][T27359]  <TASK>
[ 1007.332710][T27359]  dump_stack_lvl+0xe8/0x150
[ 1007.332756][T27359]  should_fail_ex+0x412/0x560
[ 1007.332789][T27359]  should_failslab+0xa8/0x100
[ 1007.332817][T27359]  ? dst_alloc+0x105/0x170
[ 1007.332839][T27359]  kmem_cache_alloc_noprof+0x87/0x650
[ 1007.332880][T27359]  ? __pfx_ip6_dst_gc+0x10/0x10
[ 1007.332904][T27359]  dst_alloc+0x105/0x170
[ 1007.332931][T27359]  ip6_pol_route+0xafb/0x13d0
[ 1007.332956][T27359]  ? ip6_pol_route+0x160/0x13d0
[ 1007.332986][T27359]  ? __pfx_ip6_pol_route+0x10/0x10
[ 1007.333009][T27359]  ? ip6_compressed_string+0xa79/0xb60
[ 1007.333047][T27359]  ? __lock_acquire+0x6b5/0x2cf0
[ 1007.333080][T27359]  ? __kernel_text_address+0xd/0x30
[ 1007.333109][T27359]  fib6_rule_lookup+0x36b/0x730
[ 1007.333137][T27359]  ? __pfx_ip6_pol_route_output+0x10/0x10
[ 1007.333164][T27359]  ? __pfx_fib6_rule_lookup+0x10/0x10
[ 1007.333187][T27359]  ? ip6_addr_string+0x259/0x300
[ 1007.333231][T27359]  ? dev_get_by_index_rcu+0xf4/0x110
[ 1007.333263][T27359]  ip6_route_output_flags+0x364/0x5d0
[ 1007.333289][T27359]  ? ip6_route_output_flags+0x2e/0x5d0
[ 1007.333318][T27359]  ip6_dst_lookup_tail+0x1c3/0x15a0
[ 1007.333360][T27359]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[ 1007.333390][T27359]  ? sk_dst_check+0x25/0x480
[ 1007.333422][T27359]  ? sk_dst_check+0x25/0x480
[ 1007.333452][T27359]  ? sk_dst_check+0x25/0x480
[ 1007.333476][T27359]  ? sk_dst_check+0x30e/0x480
[ 1007.333507][T27359]  ip6_sk_dst_lookup_flow+0x72b/0x9c0
[ 1007.333540][T27359]  ? udpv6_sendmsg+0x180e/0x2560
[ 1007.333573][T27359]  udpv6_sendmsg+0x19f0/0x2560
[ 1007.333612][T27359]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1007.333642][T27359]  ? __lock_acquire+0x6b5/0x2cf0
[ 1007.333674][T27359]  ? __pfx_udpv6_sendmsg+0x10/0x10
[ 1007.333756][T27359]  ? inet_send_prepare+0x1b9/0x270
[ 1007.333791][T27359]  ? inet_send_prepare+0x1b9/0x270
[ 1007.333827][T27359]  ? inet_send_prepare+0x1b9/0x270
[ 1007.333857][T27359]  ? __local_bh_enable_ip+0xd0/0x130
[ 1007.333886][T27359]  ? inet_send_prepare+0x1b9/0x270
[ 1007.333927][T27359]  ? inet6_sendmsg+0xe4/0x120
[ 1007.333952][T27359]  ____sys_sendmsg+0x62c/0xad0
[ 1007.333993][T27359]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1007.334037][T27359]  ? import_iovec+0x73/0xa0
[ 1007.334072][T27359]  ___sys_sendmsg+0x2a5/0x360
[ 1007.334110][T27359]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1007.334149][T27359]  ? kstrtouint+0x6e/0xe0
[ 1007.334204][T27359]  ? __fget_files+0x2a/0x420
[ 1007.334235][T27359]  ? __fget_files+0x3a0/0x420
[ 1007.334278][T27359]  __sys_sendmmsg+0x27c/0x4e0
[ 1007.334318][T27359]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1007.334349][T27359]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1007.334400][T27359]  ? ksys_write+0x242/0x270
[ 1007.334426][T27359]  ? __pfx_ksys_write+0x10/0x10
[ 1007.334456][T27359]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1007.334492][T27359]  do_syscall_64+0x14d/0xf80
[ 1007.334512][T27359]  ? trace_irq_disable+0x3b/0x150
[ 1007.334543][T27359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1007.334567][T27359]  ? clear_bhb_loop+0x40/0x90
[ 1007.334595][T27359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1007.334617][T27359] RIP: 0033:0x7f4ba6f9c799
[ 1007.334638][T27359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1007.334658][T27359] RSP: 002b:00007f4ba7ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1007.334682][T27359] RAX: ffffffffffffffda RBX: 00007f4ba7215fa0 RCX: 00007f4ba6f9c799
[ 1007.334699][T27359] RDX: 0000000000000001 RSI: 0000200000001ac0 RDI: 0000000000000003
[ 1007.334713][T27359] RBP: 00007f4ba7ece090 R08: 0000000000000000 R09: 0000000000000000
[ 1007.334727][T27359] R10: 0000000004004800 R11: 0000000000000246 R12: 0000000000000001
[ 1007.334741][T27359] R13: 00007f4ba7216038 R14: 00007f4ba7215fa0 R15: 00007ffcdf21ea78
[ 1007.334784][T27359]  </TASK>
[ 1008.200688][T27375] vlan2: entered promiscuous mode
[ 1008.206473][T27375] bridge0: entered promiscuous mode
[ 1008.233571][T27380] netlink: 'syz.4.6597': attribute type 1 has an invalid length.
[ 1008.328956][T27384] vxlan0: entered promiscuous mode
[ 1008.337040][T27384] vxlan0: entered allmulticast mode
[ 1008.355363][  T974] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1008.378858][  T974] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1008.406141][  T974] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1008.427589][  T974] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1008.560186][T27390] FAULT_INJECTION: forcing a failure.
[ 1008.560186][T27390] name failslab, interval 1, probability 0, space 0, times 0
[ 1008.586440][T27390] CPU: 1 UID: 0 PID: 27390 Comm: syz.1.6604 Not tainted syzkaller #0 PREEMPT(full) 
[ 1008.586470][T27390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1008.586486][T27390] Call Trace:
[ 1008.586495][T27390]  <TASK>
[ 1008.586505][T27390]  dump_stack_lvl+0xe8/0x150
[ 1008.586543][T27390]  should_fail_ex+0x412/0x560
[ 1008.586575][T27390]  should_failslab+0xa8/0x100
[ 1008.586605][T27390]  __kmalloc_cache_noprof+0x88/0x660
[ 1008.586631][T27390]  ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[ 1008.586737][T27390]  ? __genradix_ptr+0x1e1/0x220
[ 1008.586775][T27390]  sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[ 1008.586812][T27390]  sctp_association_new+0x15d3/0x25e0
[ 1008.586918][T27390]  sctp_connect_new_asoc+0x2e4/0x6b0
[ 1008.586953][T27390]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1008.586992][T27390]  ? __local_bh_enable_ip+0xd0/0x130
[ 1008.587019][T27390]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1008.587044][T27390]  ? security_sctp_bind_connect+0x7e/0x2c0
[ 1008.587081][T27390]  sctp_sendmsg+0x1528/0x2c10
[ 1008.587127][T27390]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1008.587160][T27390]  ? aa_sk_perm+0x6d5/0x900
[ 1008.587192][T27390]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1008.587219][T27390]  ? sock_rps_record_flow+0x19/0x350
[ 1008.587255][T27390]  ? inet_sendmsg+0x2f4/0x370
[ 1008.587290][T27390]  ____sys_sendmsg+0x894/0xad0
[ 1008.587329][T27390]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1008.587370][T27390]  ? import_iovec+0x73/0xa0
[ 1008.587405][T27390]  ___sys_sendmsg+0x2a5/0x360
[ 1008.587442][T27390]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1008.587480][T27390]  ? kstrtouint+0x6e/0xe0
[ 1008.587531][T27390]  ? __fget_files+0x2a/0x420
[ 1008.587560][T27390]  ? __fget_files+0x3a0/0x420
[ 1008.587600][T27390]  __sys_sendmmsg+0x27c/0x4e0
[ 1008.587638][T27390]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1008.587667][T27390]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1008.587724][T27390]  ? ksys_write+0x242/0x270
[ 1008.587749][T27390]  ? __pfx_ksys_write+0x10/0x10
[ 1008.587777][T27390]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1008.587812][T27390]  do_syscall_64+0x14d/0xf80
[ 1008.587831][T27390]  ? trace_irq_disable+0x3b/0x150
[ 1008.587861][T27390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.587883][T27390]  ? clear_bhb_loop+0x40/0x90
[ 1008.587910][T27390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.587931][T27390] RIP: 0033:0x7fb318d9c799
[ 1008.587952][T27390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1008.587971][T27390] RSP: 002b:00007fb319d2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1008.587994][T27390] RAX: ffffffffffffffda RBX: 00007fb319015fa0 RCX: 00007fb318d9c799
[ 1008.588010][T27390] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004
[ 1008.588024][T27390] RBP: 00007fb319d2b090 R08: 0000000000000000 R09: 0000000000000000
[ 1008.588037][T27390] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000001
[ 1008.588050][T27390] R13: 00007fb319016038 R14: 00007fb319015fa0 R15: 00007fff54034bc8
[ 1008.588084][T27390]  </TASK>
[ 1009.126350][T27398] __nla_validate_parse: 10 callbacks suppressed
[ 1009.126373][T27398] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6608'.
[ 1009.304139][T27411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6613'.
[ 1009.326676][T27412] netlink: 'syz.3.6610': attribute type 1 has an invalid length.
[ 1009.327789][T27411] netlink: 'syz.0.6613': attribute type 1 has an invalid length.
[ 1009.455604][T27407] syzkaller0: entered promiscuous mode
[ 1009.465781][T27416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6613'.
[ 1009.474920][T27407] syzkaller0: entered allmulticast mode
[ 1009.495419][T27416] netlink: 'syz.0.6613': attribute type 1 has an invalid length.
[ 1009.503780][T27418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6615'.
[ 1009.667574][T27425] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1009.719758][T27425] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1009.745522][T27430] lo speed is unknown, defaulting to 1000
[ 1009.761549][T27430] lo speed is unknown, defaulting to 1000
[ 1009.771897][T27430] lo speed is unknown, defaulting to 1000
[ 1009.826624][T27430] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1009.893077][T27425] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1009.916663][T27425] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1009.941471][T27430] lo speed is unknown, defaulting to 1000
[ 1009.955440][T27430] lo speed is unknown, defaulting to 1000
[ 1009.963613][T27430] lo speed is unknown, defaulting to 1000
[ 1009.971225][T27430] lo speed is unknown, defaulting to 1000
[ 1009.979873][T27435] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6621'.
[ 1009.993712][T27439] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1010.004659][T27430] lo speed is unknown, defaulting to 1000
[ 1010.035377][T27425] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1010.047250][T27425] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.092300][T27430] lo speed is unknown, defaulting to 1000
[ 1010.184937][T27425] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1010.197599][T27425] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.268303][T27449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6627'.
[ 1010.327350][ T1164] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1010.337064][ T1164] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1010.374936][T27453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6629'.
[ 1010.402630][T24155] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1010.422284][T24155] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1010.474544][T24155] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1010.483292][T24155] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1010.492656][T24153] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1010.512362][T24153] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1010.620894][T27461] netlink: 'syz.0.6630': attribute type 10 has an invalid length.
[ 1010.659983][T27461] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1010.717364][T27467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6635'.
[ 1010.868253][T27477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6640'.
[ 1011.227266][T27486] netlink: 'syz.2.6643': attribute type 13 has an invalid length.
[ 1011.293139][T27486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1011.352772][T13269] lo speed is unknown, defaulting to 1000
[ 1011.358583][T13269] syz2: Port: 1 Link ACTIVE
[ 1011.417812][T27501] syzkaller0: entered promiscuous mode
[ 1011.423515][T27501] syzkaller0: entered allmulticast mode
[ 1011.464995][T27501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1011.481880][T27503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6648'.
[ 1011.541041][T27498] tipc: Resetting bearer <eth:syzkaller0>
[ 1011.587755][T27498] tipc: Disabling bearer <eth:syzkaller0>
[ 1011.607645][T27507] syzkaller0: entered promiscuous mode
[ 1011.613323][T27507] syzkaller0: entered allmulticast mode
[ 1011.624291][T27507] netlink: 'syz.2.6649': attribute type 1 has an invalid length.
[ 1011.757985][T27512] bond8: (slave veth3): Enslaving as an active interface with a down link
[ 1011.845305][T27515] pimreg: tun_chr_ioctl cmd 1074025677
[ 1011.851136][T27515] pimreg: linktype set to 1
[ 1012.320392][T27538] syzkaller0: entered promiscuous mode
[ 1012.326069][T27538] syzkaller0: entered allmulticast mode
[ 1012.357547][T27538] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1012.374554][T27537] tipc: Resetting bearer <eth:syzkaller0>
[ 1012.395427][T27537] tipc: Disabling bearer <eth:syzkaller0>
[ 1012.811008][T27558] FAULT_INJECTION: forcing a failure.
[ 1012.811008][T27558] name failslab, interval 1, probability 0, space 0, times 0
[ 1012.823785][T27558] CPU: 1 UID: 0 PID: 27558 Comm: syz.0.6671 Not tainted syzkaller #0 PREEMPT(full) 
[ 1012.823813][T27558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1012.823825][T27558] Call Trace:
[ 1012.823836][T27558]  <TASK>
[ 1012.823845][T27558]  dump_stack_lvl+0xe8/0x150
[ 1012.823880][T27558]  should_fail_ex+0x412/0x560
[ 1012.823909][T27558]  should_failslab+0xa8/0x100
[ 1012.823932][T27558]  ? fib6_add_1+0x9c1/0x1460
[ 1012.823956][T27558]  kmem_cache_alloc_noprof+0x87/0x650
[ 1012.823986][T27558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1012.824014][T27558]  fib6_add_1+0x9c1/0x1460
[ 1012.824049][T27558]  fib6_add+0x211/0x18c0
[ 1012.824083][T27558]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1012.824103][T27558]  ? __pfx_fib6_add+0x10/0x10
[ 1012.824127][T27558]  ? __kmalloc_cache_noprof+0x31c/0x660
[ 1012.824150][T27558]  ? inet6_rtm_newroute+0xbf4/0x19e0
[ 1012.824173][T27558]  inet6_rtm_newroute+0xc0d/0x19e0
[ 1012.824202][T27558]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1012.824220][T27558]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1012.824272][T27558]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[ 1012.824293][T27558]  ? kmem_cache_free+0x187/0x630
[ 1012.824312][T27558]  ? nlmon_xmit+0xb0/0x100
[ 1012.824380][T27558]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1012.824436][T27558]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[ 1012.824458][T27558]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1012.824489][T27558]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1012.824514][T27558]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1012.824537][T27558]  ? ref_tracker_free+0x693/0x840
[ 1012.824560][T27558]  ? __copy_skb_header+0xa3/0x4a0
[ 1012.824593][T27558]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1012.824627][T27558]  netlink_rcv_skb+0x232/0x4b0
[ 1012.824655][T27558]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1012.824682][T27558]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1012.824718][T27558]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1012.824750][T27558]  netlink_unicast+0x80f/0x9b0
[ 1012.824781][T27558]  ? __pfx_netlink_unicast+0x10/0x10
[ 1012.824805][T27558]  ? netlink_sendmsg+0x650/0xb40
[ 1012.824829][T27558]  ? skb_put+0x11b/0x210
[ 1012.824860][T27558]  netlink_sendmsg+0x813/0xb40
[ 1012.824895][T27558]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1012.824924][T27558]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1012.824950][T27558]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1012.824973][T27558]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1012.824997][T27558]  ____sys_sendmsg+0xa68/0xad0
[ 1012.825036][T27558]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1012.825075][T27558]  ? import_iovec+0x73/0xa0
[ 1012.825107][T27558]  ___sys_sendmsg+0x2a5/0x360
[ 1012.825141][T27558]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1012.825204][T27558]  ? __fget_files+0x2a/0x420
[ 1012.825232][T27558]  ? __fget_files+0x3a0/0x420
[ 1012.825270][T27558]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1012.825303][T27558]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1012.825342][T27558]  ? __pfx_ksys_write+0x10/0x10
[ 1012.825383][T27558]  do_syscall_64+0x14d/0xf80
[ 1012.825403][T27558]  ? trace_irq_disable+0x3b/0x150
[ 1012.825431][T27558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1012.825452][T27558]  ? clear_bhb_loop+0x40/0x90
[ 1012.825476][T27558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1012.825497][T27558] RIP: 0033:0x7f4ba6f9c799
[ 1012.825519][T27558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1012.825537][T27558] RSP: 002b:00007f4ba7ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1012.825559][T27558] RAX: ffffffffffffffda RBX: 00007f4ba7215fa0 RCX: 00007f4ba6f9c799
[ 1012.825574][T27558] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1012.825588][T27558] RBP: 00007f4ba7ece090 R08: 0000000000000000 R09: 0000000000000000
[ 1012.825600][T27558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1012.825612][T27558] R13: 00007f4ba7216038 R14: 00007f4ba7215fa0 R15: 00007ffcdf21ea78
[ 1012.825644][T27558]  </TASK>
[ 1012.841256][T27559] FAULT_INJECTION: forcing a failure.
[ 1012.841256][T27559] name failslab, interval 1, probability 0, space 0, times 0
[ 1013.220296][T27559] CPU: 0 UID: 0 PID: 27559 Comm: syz.3.6670 Not tainted syzkaller #0 PREEMPT(full) 
[ 1013.220326][T27559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1013.220340][T27559] Call Trace:
[ 1013.220350][T27559]  <TASK>
[ 1013.220359][T27559]  dump_stack_lvl+0xe8/0x150
[ 1013.220396][T27559]  should_fail_ex+0x412/0x560
[ 1013.220428][T27559]  should_failslab+0xa8/0x100
[ 1013.220456][T27559]  ? dst_alloc+0x105/0x170
[ 1013.220478][T27559]  kmem_cache_alloc_noprof+0x87/0x650
[ 1013.220518][T27559]  ? __pfx_ip6_dst_gc+0x10/0x10
[ 1013.220542][T27559]  dst_alloc+0x105/0x170
[ 1013.220569][T27559]  ip6_pol_route+0xafb/0x13d0
[ 1013.220594][T27559]  ? ip6_pol_route+0x160/0x13d0
[ 1013.220624][T27559]  ? __pfx_ip6_pol_route+0x10/0x10
[ 1013.220653][T27559]  ? __lock_acquire+0x6b5/0x2cf0
[ 1013.220693][T27559]  fib6_rule_lookup+0x36b/0x730
[ 1013.220721][T27559]  ? __pfx_ip6_pol_route_output+0x10/0x10
[ 1013.220748][T27559]  ? __pfx_fib6_rule_lookup+0x10/0x10
[ 1013.220788][T27559]  ? dev_get_by_index_rcu+0xf4/0x110
[ 1013.220829][T27559]  ip6_route_output_flags+0x364/0x5d0
[ 1013.220868][T27559]  ? ip6_route_output_flags+0x2e/0x5d0
[ 1013.220896][T27559]  ip6_dst_lookup_tail+0x1c3/0x15a0
[ 1013.220939][T27559]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[ 1013.220969][T27559]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 1013.220995][T27559]  ? tomoyo_check_inet_address+0x289/0x950
[ 1013.221030][T27559]  ? ip6_datagram_dst_update+0x512/0xd20
[ 1013.221152][T27559]  ip6_dst_lookup_flow+0x47/0xe0
[ 1013.221183][T27559]  ? ip6_datagram_dst_update+0x512/0xd20
[ 1013.221211][T27559]  ip6_datagram_dst_update+0x73a/0xd20
[ 1013.221249][T27559]  __ip6_datagram_connect+0xbd1/0x1150
[ 1013.221289][T27559]  ? __pfx___ip6_datagram_connect+0x10/0x10
[ 1013.221319][T27559]  ? udpv6_connect+0x29/0x240
[ 1013.221379][T27559]  ? __local_bh_enable_ip+0xd0/0x130
[ 1013.221412][T27559]  udpv6_connect+0x36/0x240
[ 1013.221461][T27559]  __sys_connect+0x312/0x450
[ 1013.221504][T27559]  ? __pfx___sys_connect+0x10/0x10
[ 1013.221548][T27559]  ? __pfx_ksys_write+0x10/0x10
[ 1013.221581][T27559]  __x64_sys_connect+0x7a/0x90
[ 1013.221612][T27559]  do_syscall_64+0x14d/0xf80
[ 1013.221634][T27559]  ? trace_irq_disable+0x3b/0x150
[ 1013.221665][T27559]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1013.221687][T27559]  ? clear_bhb_loop+0x40/0x90
[ 1013.221714][T27559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1013.221736][T27559] RIP: 0033:0x7f6bd0b9c799
[ 1013.221758][T27559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1013.221779][T27559] RSP: 002b:00007f6bd1ae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1013.221802][T27559] RAX: ffffffffffffffda RBX: 00007f6bd0e15fa0 RCX: 00007f6bd0b9c799
[ 1013.221825][T27559] RDX: 000000000000001c RSI: 00002000000002c0 RDI: 0000000000000003
[ 1013.221840][T27559] RBP: 00007f6bd1ae0090 R08: 0000000000000000 R09: 0000000000000000
[ 1013.221855][T27559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1013.221868][T27559] R13: 00007f6bd0e16038 R14: 00007f6bd0e15fa0 R15: 00007ffcf37bfbe8
[ 1013.221904][T27559]  </TASK>
[ 1013.675599][T27571] syzkaller0: entered promiscuous mode
[ 1013.690865][T27571] syzkaller0: entered allmulticast mode
[ 1013.734422][T27575] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[ 1013.750452][T27571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1013.772319][T27570] tipc: Resetting bearer <eth:syzkaller0>
[ 1013.773050][T27575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1013.837795][T27570] tipc: Disabling bearer <eth:syzkaller0>
[ 1013.844785][T27578] FAULT_INJECTION: forcing a failure.
[ 1013.844785][T27578] name failslab, interval 1, probability 0, space 0, times 0
[ 1013.857503][T27578] CPU: 0 UID: 0 PID: 27578 Comm: syz.4.6678 Not tainted syzkaller #0 PREEMPT(full) 
[ 1013.857530][T27578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1013.857544][T27578] Call Trace:
[ 1013.857554][T27578]  <TASK>
[ 1013.857565][T27578]  dump_stack_lvl+0xe8/0x150
[ 1013.857601][T27578]  should_fail_ex+0x412/0x560
[ 1013.857635][T27578]  should_failslab+0xa8/0x100
[ 1013.857662][T27578]  ? dst_alloc+0x105/0x170
[ 1013.857684][T27578]  kmem_cache_alloc_noprof+0x87/0x650
[ 1013.857724][T27578]  ? __pfx_ip6_dst_gc+0x10/0x10
[ 1013.857748][T27578]  dst_alloc+0x105/0x170
[ 1013.857776][T27578]  ip6_pol_route+0xafb/0x13d0
[ 1013.857800][T27578]  ? ip6_pol_route+0x160/0x13d0
[ 1013.857831][T27578]  ? __pfx_ip6_pol_route+0x10/0x10
[ 1013.857855][T27578]  ? ip6_compressed_string+0xa79/0xb60
[ 1013.857892][T27578]  ? __lock_acquire+0x6b5/0x2cf0
[ 1013.857925][T27578]  ? __lock_acquire+0x6b5/0x2cf0
[ 1013.857958][T27578]  fib6_rule_lookup+0x36b/0x730
[ 1013.857986][T27578]  ? __pfx_ip6_pol_route_output+0x10/0x10
[ 1013.858013][T27578]  ? __pfx_fib6_rule_lookup+0x10/0x10
[ 1013.858036][T27578]  ? ip6_addr_string+0x259/0x300
[ 1013.858092][T27578]  ip6_route_output_flags+0x364/0x5d0
[ 1013.858120][T27578]  ? ip6_route_output_flags+0x2e/0x5d0
[ 1013.858150][T27578]  ip6_dst_lookup_tail+0x1c3/0x15a0
[ 1013.858195][T27578]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[ 1013.858225][T27578]  ? sk_dst_check+0x25/0x480
[ 1013.858257][T27578]  ? sk_dst_check+0x25/0x480
[ 1013.858288][T27578]  ? sk_dst_check+0x25/0x480
[ 1013.858319][T27578]  ? sk_dst_check+0x30e/0x480
[ 1013.858349][T27578]  ip6_sk_dst_lookup_flow+0x72b/0x9c0
[ 1013.858382][T27578]  ? udpv6_sendmsg+0x180e/0x2560
[ 1013.858415][T27578]  udpv6_sendmsg+0x19f0/0x2560
[ 1013.858454][T27578]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1013.858495][T27578]  ? __lock_acquire+0x6b5/0x2cf0
[ 1013.858544][T27578]  ? __pfx_udpv6_sendmsg+0x10/0x10
[ 1013.858601][T27578]  ? inet_send_prepare+0x1b9/0x270
[ 1013.858635][T27578]  ? inet_send_prepare+0x1b9/0x270
[ 1013.858672][T27578]  ? inet_send_prepare+0x1b9/0x270
[ 1013.858704][T27578]  ? __local_bh_enable_ip+0xd0/0x130
[ 1013.858739][T27578]  ? inet_send_prepare+0x1b9/0x270
[ 1013.858775][T27578]  ? inet6_sendmsg+0xe4/0x120
[ 1013.858797][T27578]  ____sys_sendmsg+0x62c/0xad0
[ 1013.858839][T27578]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1013.858881][T27578]  ? import_iovec+0x73/0xa0
[ 1013.858918][T27578]  ___sys_sendmsg+0x2a5/0x360
[ 1013.858958][T27578]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1013.858998][T27578]  ? kstrtouint+0x6e/0xe0
[ 1013.859053][T27578]  ? __fget_files+0x2a/0x420
[ 1013.859083][T27578]  ? __fget_files+0x3a0/0x420
[ 1013.859126][T27578]  __sys_sendmmsg+0x27c/0x4e0
[ 1013.859167][T27578]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1013.859199][T27578]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1013.859251][T27578]  ? ksys_write+0x242/0x270
[ 1013.859276][T27578]  ? __pfx_ksys_write+0x10/0x10
[ 1013.859312][T27578]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1013.859347][T27578]  do_syscall_64+0x14d/0xf80
[ 1013.859368][T27578]  ? trace_irq_disable+0x3b/0x150
[ 1013.859400][T27578]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1013.859423][T27578]  ? clear_bhb_loop+0x40/0x90
[ 1013.859451][T27578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1013.859473][T27578] RIP: 0033:0x7f2b3e59c799
[ 1013.859495][T27578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1013.859514][T27578] RSP: 002b:00007f2b3f4bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1013.859538][T27578] RAX: ffffffffffffffda RBX: 00007f2b3e815fa0 RCX: 00007f2b3e59c799
[ 1013.859555][T27578] RDX: 0000000000000001 RSI: 0000200000006b80 RDI: 0000000000000003
[ 1013.859569][T27578] RBP: 00007f2b3f4bf090 R08: 0000000000000000 R09: 0000000000000000
[ 1013.859583][T27578] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[ 1013.859597][T27578] R13: 00007f2b3e816038 R14: 00007f2b3e815fa0 R15: 00007fff84947c78
[ 1013.859634][T27578]  </TASK>
[ 1014.273483][T27580] ------------[ cut here ]------------
[ 1014.278982][T27580] i != fen6_info->nsiblings
[ 1014.279006][T27580] WARNING: drivers/net/netdevsim/fib.c:831 at nsim_fib_event_nb+0x1060/0x1210, CPU#1: syz.0.6679/27580
[ 1014.294945][T27580] Modules linked in:
[ 1014.299926][T27580] CPU: 1 UID: 0 PID: 27580 Comm: syz.0.6679 Not tainted syzkaller #0 PREEMPT(full) 
[ 1014.310315][T27580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1014.320574][T27580] RIP: 0010:nsim_fib_event_nb+0x1060/0x1210
[ 1014.326580][T27580] Code: 00 00 00 48 89 df e8 6f db 8d fd 49 bf 00 00 00 00 00 fc ff df 4c 8b 74 24 38 4c 8b 64 24 20 e9 1d f3 ff ff e8 91 3f a5 fa 90 <0f> 0b 90 e9 d3 f9 ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c b7 f0
[ 1014.346868][T27580] RSP: 0018:ffffc90003ff6fc8 EFLAGS: 00010287
[ 1014.353298][T27580] RAX: ffffffff87204c1f RBX: 0000000000000001 RCX: 0000000000080000
[ 1014.361318][T27580] RDX: ffffc90005889000 RSI: 00000000000005d6 RDI: 00000000000005d7
[ 1014.369713][T27580] RBP: ffffc90003ff7160 R08: ffff88804d01002f R09: 1ffff11009a02005
[ 1014.377852][T27580] R10: dffffc0000000000 R11: ffffed1009a02006 R12: ffff88804d010018
[ 1014.385954][T27580] R13: 0000000000000000 R14: ffffc90003ff7178 R15: dffffc0000000000
[ 1014.394066][T27580] FS:  00007f4ba7ece6c0(0000) GS:ffff888125568000(0000) knlGS:0000000000000000
[ 1014.404261][T27580] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1014.410901][T27580] CR2: 0000200000001340 CR3: 00000000859ea000 CR4: 00000000003526f0
[ 1014.419794][T27580] Call Trace:
[ 1014.423220][T27580]  <TASK>
[ 1014.426208][T27580]  notifier_call_chain+0x1be/0x400
[ 1014.431384][T27580]  ? atomic_notifier_call_chain+0x26/0x180
[ 1014.437404][T27580]  atomic_notifier_call_chain+0xda/0x180
[ 1014.443176][T27580]  call_fib_notifiers+0x31/0x60
[ 1014.448095][T27580]  call_fib6_multipath_entry_notifiers+0xf5/0x160
[ 1014.454662][T27580]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[ 1014.461751][T27580]  ? inet6_rtm_newroute+0xfb8/0x19e0
[ 1014.467245][T27580]  ? inet6_rtm_newroute+0xfb8/0x19e0
[ 1014.472643][T27580]  inet6_rtm_newroute+0x14a2/0x19e0
[ 1014.477899][T27580]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1014.483337][T27580]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1014.488659][T27580]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[ 1014.494383][T27580]  ? kmem_cache_free+0x187/0x630
[ 1014.499366][T27580]  ? nlmon_xmit+0xb0/0x100
[ 1014.504869][T27580]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1014.510143][T27580]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[ 1014.516626][T27580]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1014.521646][T27580]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1014.526999][T27580]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1014.532861][T27580]  ? ref_tracker_free+0x693/0x840
[ 1014.537948][T27580]  ? __copy_skb_header+0xa3/0x4a0
[ 1014.543101][T27580]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1014.548540][T27580]  netlink_rcv_skb+0x232/0x4b0
[ 1014.553514][T27580]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1014.559034][T27580]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1014.564437][T27580]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1014.569697][T27580]  netlink_unicast+0x80f/0x9b0
[ 1014.574600][T27580]  ? __pfx_netlink_unicast+0x10/0x10
[ 1014.579953][T27580]  ? netlink_sendmsg+0x650/0xb40
[ 1014.585055][T27580]  ? skb_put+0x11b/0x210
[ 1014.590775][T27580]  netlink_sendmsg+0x813/0xb40
[ 1014.595698][T27580]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1014.601035][T27580]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1014.607092][T27580]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1014.613642][T27580]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1014.619012][T27580]  ____sys_sendmsg+0xa68/0xad0
[ 1014.623919][T27580]  ? futex_unqueue+0x211/0x240
[ 1014.628740][T27580]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1014.634152][T27580]  ? import_iovec+0x73/0xa0
[ 1014.638711][T27580]  ___sys_sendmsg+0x2a5/0x360
[ 1014.643569][T27580]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1014.648842][T27580]  ? futex_wait+0x29a/0x380
[ 1014.653474][T27580]  ? __fget_files+0x2a/0x420
[ 1014.658118][T27580]  ? __fget_files+0x3a0/0x420
[ 1014.662951][T27580]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1014.667940][T27580]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1014.673556][T27580]  ? rcu_is_watching+0x15/0xb0
[ 1014.678379][T27580]  do_syscall_64+0x14d/0xf80
[ 1014.683058][T27580]  ? trace_irq_disable+0x3b/0x150
[ 1014.688136][T27580]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1014.694318][T27580]  ? clear_bhb_loop+0x40/0x90
[ 1014.699050][T27580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1014.705068][T27580] RIP: 0033:0x7f4ba6f9c799
[ 1014.710633][T27580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1014.731257][T27580] RSP: 002b:00007f4ba7ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1014.739828][T27580] RAX: ffffffffffffffda RBX: 00007f4ba7215fa0 RCX: 00007f4ba6f9c799
[ 1014.747898][T27580] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1014.756079][T27580] RBP: 00007f4ba7032bd9 R08: 0000000000000000 R09: 0000000000000000
[ 1014.764148][T27580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1014.772589][T27580] R13: 00007f4ba7216038 R14: 00007f4ba7215fa0 R15: 00007ffcdf21ea78
[ 1014.780596][T27580]  </TASK>
[ 1014.783777][T27580] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1014.791064][T27580] CPU: 1 UID: 0 PID: 27580 Comm: syz.0.6679 Not tainted syzkaller #0 PREEMPT(full) 
[ 1014.800438][T27580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1014.810518][T27580] Call Trace:
[ 1014.813831][T27580]  <TASK>
[ 1014.816796][T27580]  vpanic+0x56c/0xa60
[ 1014.820885][T27580]  ? __pfx__printk+0x10/0x10
[ 1014.825510][T27580]  ? __pfx_vpanic+0x10/0x10
[ 1014.830032][T27580]  ? is_bpf_text_address+0x292/0x2b0
[ 1014.835326][T27580]  ? is_bpf_text_address+0x26/0x2b0
[ 1014.840560][T27580]  panic+0xc5/0xd0
[ 1014.844339][T27580]  ? __pfx_panic+0x10/0x10
[ 1014.848834][T27580]  __warn+0x315/0x4f0
[ 1014.852860][T27580]  ? nsim_fib_event_nb+0x1060/0x1210
[ 1014.858176][T27580]  ? nsim_fib_event_nb+0x1060/0x1210
[ 1014.863493][T27580]  __report_bug+0x29a/0x540
[ 1014.868122][T27580]  ? netlink_rcv_skb+0x232/0x4b0
[ 1014.873089][T27580]  ? netlink_unicast+0x80f/0x9b0
[ 1014.878088][T27580]  ? netlink_sendmsg+0x813/0xb40
[ 1014.883088][T27580]  ? nsim_fib_event_nb+0x1060/0x1210
[ 1014.888423][T27580]  ? __pfx___report_bug+0x10/0x10
[ 1014.893505][T27580]  ? nsim_fib_event_nb+0x1060/0x1210
[ 1014.898833][T27580]  report_bug+0x16a/0x220
[ 1014.903197][T27580]  ? nsim_fib_event_nb+0x1060/0x1210
[ 1014.908511][T27580]  ? nsim_fib_event_nb+0x1062/0x1210
[ 1014.913821][T27580]  handle_bug+0x98/0x200
[ 1014.918092][T27580]  exc_invalid_op+0x1a/0x50
[ 1014.922624][T27580]  asm_exc_invalid_op+0x1a/0x20
[ 1014.927521][T27580] RIP: 0010:nsim_fib_event_nb+0x1060/0x1210
[ 1014.933446][T27580] Code: 00 00 00 48 89 df e8 6f db 8d fd 49 bf 00 00 00 00 00 fc ff df 4c 8b 74 24 38 4c 8b 64 24 20 e9 1d f3 ff ff e8 91 3f a5 fa 90 <0f> 0b 90 e9 d3 f9 ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c b7 f0
[ 1014.953165][T27580] RSP: 0018:ffffc90003ff6fc8 EFLAGS: 00010287
[ 1014.959258][T27580] RAX: ffffffff87204c1f RBX: 0000000000000001 RCX: 0000000000080000
[ 1014.967246][T27580] RDX: ffffc90005889000 RSI: 00000000000005d6 RDI: 00000000000005d7
[ 1014.975237][T27580] RBP: ffffc90003ff7160 R08: ffff88804d01002f R09: 1ffff11009a02005
[ 1014.983228][T27580] R10: dffffc0000000000 R11: ffffed1009a02006 R12: ffff88804d010018
[ 1014.991257][T27580] R13: 0000000000000000 R14: ffffc90003ff7178 R15: dffffc0000000000
[ 1014.999261][T27580]  ? nsim_fib_event_nb+0x105f/0x1210
[ 1015.004582][T27580]  ? nsim_fib_event_nb+0x105f/0x1210
[ 1015.009902][T27580]  notifier_call_chain+0x1be/0x400
[ 1015.015062][T27580]  ? atomic_notifier_call_chain+0x26/0x180
[ 1015.020908][T27580]  atomic_notifier_call_chain+0xda/0x180
[ 1015.026571][T27580]  call_fib_notifiers+0x31/0x60
[ 1015.031455][T27580]  call_fib6_multipath_entry_notifiers+0xf5/0x160
[ 1015.037904][T27580]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[ 1015.044954][T27580]  ? inet6_rtm_newroute+0xfb8/0x19e0
[ 1015.050262][T27580]  ? inet6_rtm_newroute+0xfb8/0x19e0
[ 1015.055570][T27580]  inet6_rtm_newroute+0x14a2/0x19e0
[ 1015.060790][T27580]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1015.066093][T27580]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1015.071329][T27580]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[ 1015.076895][T27580]  ? kmem_cache_free+0x187/0x630
[ 1015.081848][T27580]  ? nlmon_xmit+0xb0/0x100
[ 1015.086307][T27580]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1015.091567][T27580]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[ 1015.097134][T27580]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1015.102103][T27580]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1015.107237][T27580]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1015.112722][T27580]  ? ref_tracker_free+0x693/0x840
[ 1015.117769][T27580]  ? __copy_skb_header+0xa3/0x4a0
[ 1015.122849][T27580]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1015.128260][T27580]  netlink_rcv_skb+0x232/0x4b0
[ 1015.133068][T27580]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1015.138563][T27580]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1015.143892][T27580]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1015.149126][T27580]  netlink_unicast+0x80f/0x9b0
[ 1015.153919][T27580]  ? __pfx_netlink_unicast+0x10/0x10
[ 1015.159233][T27580]  ? netlink_sendmsg+0x650/0xb40
[ 1015.164198][T27580]  ? skb_put+0x11b/0x210
[ 1015.168472][T27580]  netlink_sendmsg+0x813/0xb40
[ 1015.173268][T27580]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1015.178584][T27580]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1015.183544][T27580]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1015.188856][T27580]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1015.194165][T27580]  ____sys_sendmsg+0xa68/0xad0
[ 1015.198961][T27580]  ? futex_unqueue+0x211/0x240
[ 1015.203757][T27580]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1015.209082][T27580]  ? import_iovec+0x73/0xa0
[ 1015.213625][T27580]  ___sys_sendmsg+0x2a5/0x360
[ 1015.218360][T27580]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1015.223604][T27580]  ? futex_wait+0x29a/0x380
[ 1015.228171][T27580]  ? __fget_files+0x2a/0x420
[ 1015.232796][T27580]  ? __fget_files+0x3a0/0x420
[ 1015.237523][T27580]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1015.242507][T27580]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1015.248032][T27580]  ? rcu_is_watching+0x15/0xb0
[ 1015.252841][T27580]  do_syscall_64+0x14d/0xf80
[ 1015.257455][T27580]  ? trace_irq_disable+0x3b/0x150
[ 1015.262515][T27580]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1015.268610][T27580]  ? clear_bhb_loop+0x40/0x90
[ 1015.273312][T27580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1015.279233][T27580] RIP: 0033:0x7f4ba6f9c799
[ 1015.283677][T27580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1015.303484][T27580] RSP: 002b:00007f4ba7ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1015.311939][T27580] RAX: ffffffffffffffda RBX: 00007f4ba7215fa0 RCX: 00007f4ba6f9c799
[ 1015.319937][T27580] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1015.327934][T27580] RBP: 00007f4ba7032bd9 R08: 0000000000000000 R09: 0000000000000000
[ 1015.335936][T27580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1015.343935][T27580] R13: 00007f4ba7216038 R14: 00007f4ba7215fa0 R15: 00007ffcdf21ea78
[ 1015.351952][T27580]  </TASK>
[ 1015.355607][T27580] Kernel Offset: disabled
[ 1015.359944][T27580] Rebooting in 86400 seconds..