last executing test programs:

8.659068315s ago: executing program 0 (id=2748):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x13}}, 0x14}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "d428d493b54539b9", "62714b65e42465c5518ccb9d7c403972", "2cbdb9e9"}, 0x28)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e26, @broadcast}, 0x10)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000001030101000002000000000005ffffff"], 0x20}}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f00000002c0)={&(0x7f0000000840)=""/4096, 0x1000, 0x1, 0x5})
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601080000000000000000440ea5372109a9b173797a31000000000500040001000000140007800500150020000000080012400000009b050005000a000000050001000600000015000300686173683a69f02c706f72742c697000"], 0x60}}, 0x0)
ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000040)=0x3)

6.024476774s ago: executing program 4 (id=2770):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1, 0xfffffffc}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x30c)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x812, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000)
r5 = socket$netlink(0x10, 0x3, 0x0)
connect$unix(r1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
getsockopt$netlink(r5, 0x10e, 0x9, 0x0, &(0x7f0000000040))

5.477454753s ago: executing program 0 (id=2773):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x40000017, [{0x7fd, 0x15, 0x40000017}]}]}, {0x0, [0x61, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x37, 0x0, 0x0, 0x1000}, 0x28)
r1 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async)
getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000))
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r4, 0xc24, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8}, @val={0xc, 0x99, {0x3ff, 0x22}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x4044015)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf250100000008000200010000ef08000100", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd700d0000000080000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r7], 0x40}}, 0x0)
ioctl(0xffffffffffffffff, 0xffffff04, &(0x7f0000000780)="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")

5.106334008s ago: executing program 0 (id=2775):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x6, {{0xa, 0x4e20, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x88)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
shutdown(r2, 0x1)
recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x82, &(0x7f0000000200)={0x2, 0x1e3, 0x1e0, 0x8001}, 0x8)
write(r1, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c)

4.764941084s ago: executing program 3 (id=2779):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c)
shutdown(r1, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x108, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0xe8, 0x12, 0x0, 0x1, @vti={{0x8}, {0xdc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x10000}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}], @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x39}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}, @IFLA_VTI_OKEY={0x8, 0x3, 0xd}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x0, 0x6, 0x80000001}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_OKEY={0x8, 0x3, 0x62}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x80000000}, @IFLA_VTI_OKEY={0x8, 0x3, 0x1}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7ff}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x1}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010102}, @IFLA_VTI_LOCAL={0x8, 0x4, @local}, @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1f}}]}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044)

4.573213026s ago: executing program 3 (id=2783):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000030000000100000f07000000030000000500000805000000004f0030"], &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28)
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) (async)
r1 = socket$inet6(0xa, 0x3, 0x89)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in6=@remote, 0x4e1f, 0x0, 0x3, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3, 0x200000}}, 0xe8) (async)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002d000b00faffffffffffffff0200000008000300040001000c00018006"], 0x28}}, 0x8000) (async, rerun: 64)
connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @none, 0xb}, 0xa) (rerun: 64)

4.204600627s ago: executing program 3 (id=2785):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xffffff10, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x7, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'bond_slave_0\x00', @local})
write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000028bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000082c"], 0x42)

2.547382472s ago: executing program 2 (id=2794):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
listen(0xffffffffffffffff, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000002000)=0x4080, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000006800011702000000fcffff7f00000000000000000c00020001000000040000000800010001"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r3 = socket$inet(0x2, 0x2, 0x1)
r4 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r5 = socket(0x2, 0x2, 0x1)
bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x24, @empty}, 0x10)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="8001000010000100000000000000000064010101000000000000000000000000fe8000000000000000000000000000bbffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000006c000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000800000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000003000000fcffffff0000000000400000020000000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480004006563622861726334"], 0x180}}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000080), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8040)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0600000014000000", @ANYRES32, @ANYBLOB="1bd8925247af8c2566d3f197cbc9fda3f1a004bbe6de9409c8eacb38ad75614c55654ad284eb71b28350733bbcf335ded476903d2662432d42069e95fd4301fb7f402cfc8d0554e8374c858adc391c3ec558382df6deda8cd2e0a5a5dfc9620bf7ab8550e1a9d76149d55ed4a64de8fab6c8e50fd8fe266e41f7a5f992a6065f5b16ce5435a8a576a3f355ebd397099bbcff334658f00f8952d3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x300f000, 0xf, 0x0, &(0x7f0000000400)="1069c2704a075e307300ac14dd46df", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000020000000000000000000000080010000000001c080019"], 0x2c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

2.200026856s ago: executing program 2 (id=2796):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001800c0010800400108004000f800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)

2.058133949s ago: executing program 1 (id=2797):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300030c000000ff0e00000000000002000900400000007026405ea9be49fa0300060000000000020032cd44500000000000000000000002000100000004d307000000000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="b58da4bebab8a964b43694eca9543d62f72f8f77bc44c38284767c341cd9f7ff9f988b1b75ac6068f9b21286af8b515aab0f0445732df762116c250e1f6dd59da636075f6a0a642f29074fdc8210c0e31236b945031ad43cb4a906d3d31cfb9f1c44a3086798bc318d4349a79a0a79030207e0321e1e353e058627af538c70b914ac0aeb809a970372d5b5f6c39f143752a99ba73954191a01e7b0fc1b4a", @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250b0000000800060005000000080004000600000008000400000000000800040004000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000085)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x400}], 0x1c)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000300))

1.872060312s ago: executing program 1 (id=2798):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]})
r3 = socket(0x2, 0x6, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000760009070300000004000000e6ee0000", @ANYRES32=0x0, @ANYBLOB="0c000d80060002000d000000"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x20000080}, 0x4000)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1)
getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040028bd7000fedbdf25030000000800020002000000080001000300002b5e2d96d938d27600080001000300000008000100010000000800010003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x240000c1)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f00000020c0)=""/4130, &(0x7f0000000000)=0x1022)
sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x24040800)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r11}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r12, 0x8922, &(0x7f0000000080)={'geneve1\x00', 0x7})
socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$XFS_IOC_ERROR_CLEARALL(r13, 0x40085875)

1.549071315s ago: executing program 4 (id=2799):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xff}, 0x1c)
bind$l2tp6(r1, &(0x7f0000001540)={0xa, 0x0, 0xc2da, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8001, 0x4}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r3, 0x8888094d5ed87de7, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x37}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9fe}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x50}}, 0x481d5)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x40000000015, 0x5, 0x0) (async)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xff}, 0x1c) (async)
bind$l2tp6(r1, &(0x7f0000001540)={0xa, 0x0, 0xc2da, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8001, 0x4}, 0x20) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r3, 0x8888094d5ed87de7, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x37}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9fe}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x50}}, 0x481d5) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async)

1.535503359s ago: executing program 1 (id=2800):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='^#$/[\x00', 0x109100, &(0x7f0000000040)={@align=0x7, {0x9, 0x8000, 0x0, 0x800}}, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0xa14})
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x20008841) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x5c}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = getpid()
sendmmsg$unix(r3, &(0x7f00000017c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x38, 0x40004}}], 0x1, 0x0)

1.355271999s ago: executing program 1 (id=2801):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r1, 0x890b, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4000000}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0x70}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x20048011)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000006580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4a20, 0x0, @mcast1, 0x1}, 0x1c)

1.354823224s ago: executing program 4 (id=2802):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=[@authinfo={0x12, 0x84, 0x6, {0x8}}, @init={0x18, 0x84, 0x0, {0x80, 0x0, 0xb, 0x140}}], 0x30, 0x4}, 0x40)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000340)={0x7, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x108)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x43, 0x8016, 0x8, 0x7, <r1=>0x0}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xffff}}, 0x9, 0x3, 0xfffffff7, 0x3ff, 0x61, 0x8, 0x8}, &(0x7f00000000c0)=0x9c)

1.295152309s ago: executing program 2 (id=2803):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x305200, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
recvmsg(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/26, 0x1a}], 0x1}, 0x40)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x10, 0xb}, {0x5, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x5f, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.252732375s ago: executing program 4 (id=2804):
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x3}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x6a0000}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)
sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="b7cad47af7a45a79391411dfba756662bf870be0f5e575e9245809c8133a6017292b44238afef9caf58eb7dd5941c6421e27fd164a54cfe38e4a183a602bd5f191f50f0d45d2c5c64f73820e4fd7c3dd30fe4aec71506cff9c9eaffcbc15638eabf6ba59c32dba764099c9d3d3e3a2321000cb6b29793818f4897cde6ccf6d2215e3d7c2bcb4b67810cbd11df05a17e7d2a67360327247bdacbcbf9adf660381a57932b0b5156e03546b292cc1ae151ae2d9ffcea7c32e7f2b44b7b0f62f41021c66e084b5ad0fa856f77536e5795127c9746c8a57f9e440e7245cc548405dfe9d1e249d2e65cec3996253f520d4ae8790b6fd3e74f53c470e77", 0xfa}, {&(0x7f0000000000)="2cf90bd3a64984c4d13e3624", 0xc}, {&(0x7f0000000d40)="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", 0x1000}], 0x3)
close(0x3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff00000042"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r6}, 0x38)

987.366883ms ago: executing program 2 (id=2805):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x5)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29)
socket$nl_generic(0x10, 0x3, 0x10)

888.20339ms ago: executing program 2 (id=2806):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
close(r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r6)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f"], 0x28}}, 0x0)

885.129587ms ago: executing program 3 (id=2807):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x400d0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0xe}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r2, &(0x7f0000000280), 0x0}, 0x20)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10)

850.077777ms ago: executing program 4 (id=2808):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0xffff, 0x7}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x1000000, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1000000}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040)

791.2408ms ago: executing program 3 (id=2809):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500001400002000002f"], 0xfdef)

787.002097ms ago: executing program 0 (id=2810):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bond0\x00', 0x2})
ioctl$TUNGETFILTER(r0, 0x801054db, 0x0)

708.114966ms ago: executing program 2 (id=2811):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
socket(0x26, 0x80000, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0x6, 0x4, 0x5, 0xa8, 0x20, 0x1, 0xff, 0xa6, 0x0, 0x8, 0x0, 0x6, 0x9}, 0xe)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)=ANY=[@ANYBLOB="e3235012a3a228c20620312fe93828b4b090f2c98241152b10061ef92cd5e80da84cb0b915f3efc41e642ade4ca5d7e6345a2c7e1aa4e463f372bb9fa5653a35617e5709e45bc31d", @ANYRES16, @ANYBLOB="819b08000000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
pipe(&(0x7f0000000600)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x38}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$inet6(r7, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r7, 0x1)
splice(r4, 0x0, r6, 0x0, 0x1100000000f336, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f00000008c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000c80)=ANY=[@ANYRES64=r7, @ANYRES16=0x0, @ANYBLOB="200027bd7000fcdbdf250800000005002a0001000000050029000100000045002e000000000006002800bf00000004aa25f7f31927e333006e86b5659387b444272fccb3d710a79ce4e3be4d2d5c5cb6f753b4fd7b270604c94688ed4569dbd3bb90b86f70dcba40207e31cdc8de07e8c5014acc90005ab033b9f99243cd30e68e7fd26e21be22c97f7919f55555e5bac59d52f95c13eeb0f593583572583b664a3e5e7bc053faf26e67793d0a9d32bcde14200ad19badc68a00b70c4f4a9322ca72477b7f0d85c5241ef0deca94444500851b5a3580e9ab9dd36a7bec6f0f4a62297dd724779101a7f563dab60f2c45", @ANYRES32=r0, @ANYRES8=r2, @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8045)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x8b, 0x8, &(0x7f0000000280)="00faffff040000002b779851adc43e0fcebd5c6a9a3e01d6c8dd52b300bfca13cfefeb2d42a67654fc284322dc16c42529c37b1f91b779da68bcc9c8ea974bea9e0b8271bb9babc21697082c22ee3f279c3123feb971cefe62896d6d0df3724ca73a630ffa4fb74bdc7852bc4497d445cd2b0029af1b69342a806071970821822a5fcc4876dbd71f429d8a", &(0x7f0000000700)=""/8, 0x2f04, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

707.051621ms ago: executing program 4 (id=2812):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="000000090000000000000000b83d69ef00ca0fd8676c4acf23ead59121000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
unshare(0x42000000)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b12050081010000240012800b00010069703667726500001400020008000100", @ANYRES32=r5, @ANYBLOB="0800050003"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e20, 0x7, @remote, 0x1ff}}, 0x0, 0x0, 0x25, 0x0, "fad11dcd73a485ae2af26b93ef6796b4bb129c3e45772e19f44d487925d1130fe38a9783c6dc076e1da85055595ce0cec39a8ae2003bd8ba62d21562ce10e42ec92ab54477516402b43b50a858aca441"}, 0xd8)

659.335552ms ago: executing program 0 (id=2813):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r8}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)

598.019482ms ago: executing program 3 (id=2814):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r1 = getpid()
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r3, &(0x7f0000003740)=ANY=[@ANYBLOB="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"], 0xfce)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0xffffffff}, [@exit]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1e, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x1b, 0x5, 0x5f8, 0xd0, 0x1c0, 0xffffffff, 0x0, 0x0, 0x528, 0x528, 0xffffffff, 0x528, 0x528, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xc, 0x5d, 0xdff}}}, {{@ipv6={@mcast1, @private2, [0xffffffff, 0xffffffff, 0xff, 0xff000000], [0xff000000, 0xffffff00, 0xff, 0xff], 'lo\x00', 'wlan1\x00', {}, {}, 0x84, 0x8, 0x2, 0x29}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv4=@multicast1, @ipv6=@mcast2, @icmp_id=0x66, @port=0x4e23}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x18}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xffffffff], 'vlan1\x00', 'nr0\x00', {0xff}, {}, 0xc, 0x1c, 0x6, 0x4}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x7], 0xfffffff9, 0x2d, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv4=@remote, @ipv4=@multicast2, @icmp_id=0x67, @port=0x4e23}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0x0, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0xff000000], 'ipvlan0\x00', 'batadv0\x00', {}, {}, 0x2b, 0x5a, 0x1, 0x1}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'nr0\x00', {0x7fffffffffffffff, 0x7, 0x39, 0x3, 0x7, 0xffff, 0xf, 0x6, 0x40, 0x18}, {0x9}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x6, @ipv4=@rand_addr=0x64010102, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x288, 0x168, 0x10, 0x0, 0xb, 0x288, 0x250, 0x250, 0x288, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)

436.131919ms ago: executing program 1 (id=2815):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
unshare(0x20000400)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4c8d0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850)
r8 = socket$inet6(0xa, 0x80001, 0x0)
read(r8, &(0x7f0000000180)=""/116, 0xffffffffffffffc3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket(0x8, 0x4, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xfff2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)

90.093272ms ago: executing program 0 (id=2816):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0xb}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680}) (async)
recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0xb}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680})
close(r1) (async)
close(r1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77f}, 0x94)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
socket$packet(0x11, 0x1, 0x300)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff})
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r4, 0x0) (async)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async)
connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
accept(r4, 0x0, 0x0) (async)
r6 = accept(r4, 0x0, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r6}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r6}, 0x20)
recvmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
bind$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000300)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10)
socket$kcm(0x29, 0x0, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async)
bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x401, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x0, 0x2}, 0xe)
splice(r3, &(0x7f0000000400)=0xa, r2, 0x0, 0x1, 0x6)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'pim6reg1\x00', @remote})

0s ago: executing program 1 (id=2817):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8008000280fe0f0500080000003e"], 0x44}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8008000280fe0f0500080000003e"], 0x44}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', <r5=>0x0, 0x700, 0x10, 0x100, 0x11b, {{0xf, 0x4, 0x1, 0x2a, 0x3c, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0xb, 0xbd, [@empty, @broadcast]}, @timestamp_addr={0x44, 0x14, 0xfa, 0x1, 0x7, [{@multicast2, 0x5b}, {@remote, 0x3}]}, @noop, @ra={0x94, 0x4}, @end, @noop]}}}}})
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000000)={'wg1\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000240)="f40ddca2a7682d00bdfb6b332c802f6a1247750177e688f27b099f6a404332b9d0aa938341268066", 0x28, 0x8084, &(0x7f0000000080)={0x11, 0xd, r8, 0x1, 0x1, 0x6, @local}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'ip_vti0\x00', <r10=>0x0, 0x8000, 0x700, 0xb, 0x4, {{0x7, 0x4, 0x2, 0x35, 0x1c, 0x67, 0x0, 0x97, 0x2f, 0x0, @multicast1, @multicast1, {[@end, @ra={0x94, 0x4}]}}}}})
socket(0x400000000010, 0x3, 0x0) (async)
r11 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async)
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdc9b, 0x1, 0x1}, {0xe0000, 0xffffff81, 0x0, 0xa, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x810)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', <r14=>0x0, 0x4, 0x80, 0x10, 0x1, 0x8, @mcast2, @local, 0x8000, 0x80, 0x6, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', <r15=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)={0x43c, r1, 0xe7606f81974916b6, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd117}}}]}}, {{0x8, 0x1, r14}, {0x1f4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x81, 0x5, 0x1}, {0x1, 0x6, 0x9, 0x2}, {0x3, 0x9, 0x0, 0x7}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0xc0) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)={0x43c, r1, 0xe7606f81974916b6, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd117}}}]}}, {{0x8, 0x1, r14}, {0x1f4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x81, 0x5, 0x1}, {0x1, 0x6, 0x9, 0x2}, {0x3, 0x9, 0x0, 0x7}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0xc0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40)

kernel console output (not intermixed with test programs):

409534][T11847] syzkaller0: entered promiscuous mode
[  254.415080][T11847] syzkaller0: entered allmulticast mode
[  254.518738][T11847] xt_cgroup: path and classid specified
[  255.113557][T11870] syzkaller0: entered promiscuous mode
[  255.119533][T11870] syzkaller0: entered allmulticast mode
[  255.471016][T11894] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  255.853165][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  257.119072][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  257.127276][    C0] lec:lec_tx_timeout: lec0
[  257.132404][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  257.194670][T11909] veth7: entered promiscuous mode
[  257.263116][T11919] batadv_slave_0: entered promiscuous mode
[  257.308642][T11917] __nla_validate_parse: 7 callbacks suppressed
[  257.308665][T11917] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1528'.
[  257.326159][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1529'.
[  257.365738][T11918] batadv_slave_0: left promiscuous mode
[  257.480161][T11929] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1531'.
[  257.500367][T11930] ip6tnl2: entered allmulticast mode
[  257.560559][T11934] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  257.739896][T11945] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1537'.
[  257.775299][T11945] netlink: 'syz.2.1537': attribute type 10 has an invalid length.
[  257.804416][T11945] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  258.156223][T11967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.199954][T11967] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1546'.
[  258.226274][T11972] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  258.237971][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'.
[  258.255653][T11971] xfrm1: entered promiscuous mode
[  258.261073][T11971] xfrm1: entered allmulticast mode
[  258.266612][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'.
[  258.280937][T11971] netlink: 'syz.3.1547': attribute type 9 has an invalid length.
[  258.288859][T11971] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.1547'.
[  258.460921][T11978] netlink: 'syz.2.1549': attribute type 24 has an invalid length.
[  259.245575][T12006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1560'.
[  259.275919][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1560'.
[  259.317023][T12008] openvswitch: netlink: VXLAN extension message has 196 unknown bytes.
[  259.450689][T12006] batadv2: entered promiscuous mode
[  259.455978][T12006] batadv2: entered allmulticast mode
[  259.464845][T12006] 8021q: adding VLAN 0 to HW filter on device batadv2
[  259.765318][T12019] lo speed is unknown, defaulting to 1000
[  259.801820][T12027] syzkaller1: entered promiscuous mode
[  259.817690][T12027] syzkaller1: entered allmulticast mode
[  260.126423][T12032] FAULT_INJECTION: forcing a failure.
[  260.126423][T12032] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  260.185543][T12032] CPU: 0 UID: 0 PID: 12032 Comm: syz.3.1567 Not tainted syzkaller #0 PREEMPT(full) 
[  260.185576][T12032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  260.185607][T12032] Call Trace:
[  260.185616][T12032]  <TASK>
[  260.185625][T12032]  dump_stack_lvl+0xe8/0x150
[  260.185663][T12032]  should_fail_ex+0x412/0x560
[  260.185699][T12032]  _copy_from_user+0x2d/0xb0
[  260.185734][T12032]  kstrtouint_from_user+0xd6/0x180
[  260.185766][T12032]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  260.185815][T12032]  proc_fail_nth_write+0x8e/0x210
[  260.185847][T12032]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  260.185894][T12032]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  260.185929][T12032]  vfs_write+0x29a/0xb90
[  260.185962][T12032]  ? __pfx_vfs_write+0x10/0x10
[  260.185988][T12032]  ? __fget_files+0x2a/0x420
[  260.186025][T12032]  ? __fget_files+0x3a0/0x420
[  260.186055][T12032]  ? __fget_files+0x2a/0x420
[  260.186096][T12032]  ksys_write+0x150/0x270
[  260.186122][T12032]  ? __pfx_ksys_write+0x10/0x10
[  260.186160][T12032]  do_syscall_64+0x14d/0xf80
[  260.186181][T12032]  ? trace_irq_disable+0x3b/0x150
[  260.186211][T12032]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.186238][T12032]  ? clear_bhb_loop+0x40/0x90
[  260.186265][T12032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.186287][T12032] RIP: 0033:0x7f56b855cfce
[  260.186307][T12032] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  260.186326][T12032] RSP: 002b:00007f56b94e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  260.186349][T12032] RAX: ffffffffffffffda RBX: 00007f56b94e46c0 RCX: 00007f56b855cfce
[  260.186366][T12032] RDX: 0000000000000001 RSI: 00007f56b94e40a0 RDI: 0000000000000005
[  260.186379][T12032] RBP: 00007f56b94e4090 R08: 0000000000000000 R09: 0000000000000000
[  260.186392][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.186405][T12032] R13: 00007f56b8816038 R14: 00007f56b8815fa0 R15: 00007fff4567f838
[  260.186442][T12032]  </TASK>
[  260.649175][T12047] FAULT_INJECTION: forcing a failure.
[  260.649175][T12047] name failslab, interval 1, probability 0, space 0, times 0
[  260.662821][T12047] CPU: 0 UID: 0 PID: 12047 Comm: syz.1.1572 Not tainted syzkaller #0 PREEMPT(full) 
[  260.662852][T12047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  260.662865][T12047] Call Trace:
[  260.662873][T12047]  <TASK>
[  260.662881][T12047]  dump_stack_lvl+0xe8/0x150
[  260.662915][T12047]  should_fail_ex+0x412/0x560
[  260.662948][T12047]  should_failslab+0xa8/0x100
[  260.662980][T12047]  __kmalloc_noprof+0xe8/0x760
[  260.663001][T12047]  ? tomoyo_encode+0x28b/0x550
[  260.663035][T12047]  tomoyo_encode+0x28b/0x550
[  260.663068][T12047]  tomoyo_realpath_from_path+0x58d/0x5d0
[  260.663110][T12047]  ? tomoyo_path_number_perm+0x219/0x630
[  260.663137][T12047]  tomoyo_path_number_perm+0x246/0x630
[  260.663165][T12047]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  260.663194][T12047]  ? __lock_acquire+0x6b5/0x2cf0
[  260.663236][T12047]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  260.663279][T12047]  ? __fget_files+0x2a/0x420
[  260.663315][T12047]  ? __fget_files+0x2a/0x420
[  260.663345][T12047]  ? __fget_files+0x3a0/0x420
[  260.663374][T12047]  ? __fget_files+0x2a/0x420
[  260.663410][T12047]  security_file_ioctl+0xc3/0x2a0
[  260.663436][T12047]  __se_sys_ioctl+0x47/0x170
[  260.663465][T12047]  do_syscall_64+0x14d/0xf80
[  260.663483][T12047]  ? trace_irq_disable+0x3b/0x150
[  260.663510][T12047]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.663529][T12047]  ? clear_bhb_loop+0x40/0x90
[  260.663550][T12047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.663568][T12047] RIP: 0033:0x7ffaa6f9c799
[  260.663585][T12047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.663601][T12047] RSP: 002b:00007ffaa51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  260.663620][T12047] RAX: ffffffffffffffda RBX: 00007ffaa7215fa0 RCX: 00007ffaa6f9c799
[  260.663633][T12047] RDX: 00002000000006c0 RSI: 0000000000008946 RDI: 0000000000000003
[  260.663658][T12047] RBP: 00007ffaa51f6090 R08: 0000000000000000 R09: 0000000000000000
[  260.663668][T12047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.663678][T12047] R13: 00007ffaa7216038 R14: 00007ffaa7215fa0 R15: 00007fff86259958
[  260.663707][T12047]  </TASK>
[  260.663729][T12047] ERROR: Out of memory at tomoyo_realpath_from_path.
[  261.774174][T12074] syzkaller0: entered promiscuous mode
[  261.780784][T12074] syzkaller0: entered allmulticast mode
[  261.935485][T12085] bridge0: port 3(bond0) entered disabled state
[  261.943248][T12085] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.951272][T12085] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.960861][T12085] bridge0: entered allmulticast mode
[  261.973005][T12085] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  262.135083][T12090] 8021q: adding VLAN 0 to HW filter on device bond4
[  262.141891][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  262.141966][    C0] lec:lec_tx_timeout: lec0
[  262.150423][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  262.269978][T12100] IPVS: set_ctl: invalid protocol: 98 172.20.20.19:20004
[  262.301019][T12101] IPVS: set_ctl: invalid protocol: 98 172.20.20.19:20004
[  262.438466][T12112] __nla_validate_parse: 6 callbacks suppressed
[  262.438497][T12112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1590'.
[  262.456722][T12112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1590'.
[  262.466503][T12112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1590'.
[  262.910085][T12140] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  263.006900][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'.
[  263.040738][T12146] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1600'.
[  263.115066][T12148] netlink: 'syz.0.1602': attribute type 1 has an invalid length.
[  263.123160][T12148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.340911][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'.
[  263.577447][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'.
[  263.782961][T12182] x_tables: duplicate underflow at hook 3
[  263.875626][T12188] netlink: 'syz.4.1614': attribute type 1 has an invalid length.
[  263.895950][T12186] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1615'.
[  263.907595][T12188] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1614'.
[  263.917767][T12188] NCSI netlink: No device for ifindex 0
[  263.926804][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'.
[  264.105179][T12190] lo speed is unknown, defaulting to 1000
[  264.134036][T12196] sctp: [Deprecated]: syz.3.1617 (pid 12196) Use of struct sctp_assoc_value in delayed_ack socket option.
[  264.134036][T12196] Use struct sctp_sack_info instead
[  264.551702][T12211] syzkaller1: entered promiscuous mode
[  264.567682][T12211] syzkaller1: entered allmulticast mode
[  264.597705][T12211] netlink: 'syz.1.1623': attribute type 1 has an invalid length.
[  264.648021][T12213] syzkaller1: entered promiscuous mode
[  264.653917][T12213] syzkaller1: entered allmulticast mode
[  265.013046][T12227] lo speed is unknown, defaulting to 1000
[  265.357814][   T30] audit: type=1800 audit(1772819259.980:6): pid=12244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1632" name="memory.events" dev="tmpfs" ino=1787 res=0 errno=0
[  266.100039][T12266] sit1: entered allmulticast mode
[  266.644443][T12274] syzkaller1: entered promiscuous mode
[  266.651613][T12274] syzkaller1: entered allmulticast mode
[  267.038023][T12296] netlink: 'syz.4.1647': attribute type 1 has an invalid length.
[  267.159305][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  267.167376][    C0] lec:lec_tx_timeout: lec0
[  267.172170][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  267.219802][T12298] netlink: 'syz.4.1648': attribute type 13 has an invalid length.
[  267.549969][T12305] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  267.702160][T12314] __nla_validate_parse: 3 callbacks suppressed
[  267.702184][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'.
[  268.520658][T12345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  268.554577][T12348] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1659'.
[  268.972203][T12367] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1663'.
[  268.981596][T12367] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  269.316212][T12376] FAULT_INJECTION: forcing a failure.
[  269.316212][T12376] name failslab, interval 1, probability 0, space 0, times 0
[  269.359272][T12376] CPU: 0 UID: 0 PID: 12376 Comm: syz.3.1666 Not tainted syzkaller #0 PREEMPT(full) 
[  269.359302][T12376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  269.359315][T12376] Call Trace:
[  269.359324][T12376]  <TASK>
[  269.359333][T12376]  dump_stack_lvl+0xe8/0x150
[  269.359368][T12376]  should_fail_ex+0x412/0x560
[  269.359400][T12376]  should_failslab+0xa8/0x100
[  269.359427][T12376]  ? dst_alloc+0x105/0x170
[  269.359450][T12376]  kmem_cache_alloc_noprof+0x87/0x650
[  269.359487][T12376]  ? __pfx_ip6_dst_gc+0x10/0x10
[  269.359512][T12376]  dst_alloc+0x105/0x170
[  269.359539][T12376]  ip6_rt_cache_alloc+0x3c3/0xa50
[  269.359576][T12376]  ? __pfx_ip6_rt_cache_alloc+0x10/0x10
[  269.359614][T12376]  ip6_pol_route+0x117d/0x13d0
[  269.359639][T12376]  ? ip6_pol_route+0x160/0x13d0
[  269.359669][T12376]  ? __pfx_ip6_pol_route+0x10/0x10
[  269.359698][T12376]  ? __lock_acquire+0x6b5/0x2cf0
[  269.359738][T12376]  fib6_rule_lookup+0x222/0x730
[  269.359765][T12376]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  269.359793][T12376]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  269.359818][T12376]  ? vsnprintf+0xe1a/0xee0
[  269.359866][T12376]  ip6_route_output_flags+0x364/0x5d0
[  269.359893][T12376]  ? ip6_route_output_flags+0x2e/0x5d0
[  269.359926][T12376]  ip6_dst_lookup_tail+0x1c3/0x15a0
[  269.359971][T12376]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  269.360001][T12376]  ? txopt_get+0x79/0x3f0
[  269.360020][T12376]  ? txopt_get+0x79/0x3f0
[  269.360037][T12376]  ? txopt_get+0x79/0x3f0
[  269.360057][T12376]  ? txopt_get+0x343/0x3f0
[  269.360079][T12376]  ? __pfx_txopt_get+0x10/0x10
[  269.360103][T12376]  ip6_dst_lookup_flow+0x47/0xe0
[  269.360136][T12376]  rawv6_sendmsg+0xe1d/0x18e0
[  269.360185][T12376]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  269.360234][T12376]  ? aa_sk_perm+0x6d5/0x900
[  269.360269][T12376]  ? __pfx_aa_sk_perm+0x10/0x10
[  269.360297][T12376]  ? sock_rps_record_flow+0x19/0x350
[  269.360333][T12376]  ? inet_sendmsg+0x2f4/0x370
[  269.360352][T12376]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  269.360380][T12376]  ____sys_sendmsg+0x80a/0x9f0
[  269.360412][T12376]  ? __pfx_____sys_sendmsg+0x10/0x10
[  269.360443][T12376]  ? import_iovec+0x73/0xa0
[  269.360488][T12376]  ___sys_sendmsg+0x2a5/0x360
[  269.360516][T12376]  ? __pfx____sys_sendmsg+0x10/0x10
[  269.360576][T12376]  ? __fget_files+0x2a/0x420
[  269.360607][T12376]  ? __fget_files+0x3a0/0x420
[  269.360650][T12376]  __x64_sys_sendmsg+0x1bd/0x2a0
[  269.360674][T12376]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  269.360706][T12376]  ? __pfx_ksys_write+0x10/0x10
[  269.360742][T12376]  do_syscall_64+0x14d/0xf80
[  269.360762][T12376]  ? trace_irq_disable+0x3b/0x150
[  269.360793][T12376]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.360814][T12376]  ? clear_bhb_loop+0x40/0x90
[  269.360840][T12376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.360882][T12376] RIP: 0033:0x7f56b859c799
[  269.360903][T12376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  269.360921][T12376] RSP: 002b:00007f56b94e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  269.360943][T12376] RAX: ffffffffffffffda RBX: 00007f56b8815fa0 RCX: 00007f56b859c799
[  269.360959][T12376] RDX: 0000000020008b88 RSI: 0000200000001c00 RDI: 0000000000000004
[  269.360972][T12376] RBP: 00007f56b94e4090 R08: 0000000000000000 R09: 0000000000000000
[  269.360986][T12376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  269.360999][T12376] R13: 00007f56b8816038 R14: 00007f56b8815fa0 R15: 00007fff4567f838
[  269.361033][T12376]  </TASK>
[  269.742348][T12382] team0: Device gtp0 is of different type
[  269.880601][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'.
[  270.179614][T12400] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  270.305180][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1674'.
[  270.606717][T12418] x_tables: duplicate underflow at hook 1
[  270.625404][T12418] No such timeout policy "syz1"
[  270.753160][T12422] lo speed is unknown, defaulting to 1000
[  270.915705][T12435] tunl0: entered promiscuous mode
[  271.162143][T12456] --map-set only usable from mangle table
[  271.382623][T12423] lo speed is unknown, defaulting to 1000
[  272.007226][T12475] netlink: 'syz.0.1695': attribute type 1 has an invalid length.
[  272.053239][T12470] netlink: 'syz.2.1693': attribute type 7 has an invalid length.
[  272.061865][T12470] netlink: 'syz.2.1693': attribute type 8 has an invalid length.
[  272.121800][T12475] bond5: entered promiscuous mode
[  272.139180][T12475] bond5: entered allmulticast mode
[  272.178838][T12475] 8021q: adding VLAN 0 to HW filter on device bond5
[  272.189095][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  272.197203][    C0] lec:lec_tx_timeout: lec0
[  272.201860][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  272.421114][T12491] FAULT_INJECTION: forcing a failure.
[  272.421114][T12491] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  272.452664][T12491] CPU: 1 UID: 0 PID: 12491 Comm: syz.1.1700 Not tainted syzkaller #0 PREEMPT(full) 
[  272.452696][T12491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  272.452710][T12491] Call Trace:
[  272.452719][T12491]  <TASK>
[  272.452728][T12491]  dump_stack_lvl+0xe8/0x150
[  272.452764][T12491]  should_fail_ex+0x412/0x560
[  272.452806][T12491]  _copy_from_user+0x2d/0xb0
[  272.452844][T12491]  btf_new_fd+0x352/0xd10
[  272.452878][T12491]  ? __pfx_btf_new_fd+0x10/0x10
[  272.452902][T12491]  ? bpf_token_put+0x143/0x160
[  272.452928][T12491]  ? bpf_btf_load+0x126/0x190
[  272.452952][T12491]  __sys_bpf+0x4e5/0x950
[  272.452988][T12491]  ? __pfx___sys_bpf+0x10/0x10
[  272.453038][T12491]  ? ksys_write+0x242/0x270
[  272.453064][T12491]  ? __pfx_ksys_write+0x10/0x10
[  272.453096][T12491]  __x64_sys_bpf+0x7c/0x90
[  272.453127][T12491]  do_syscall_64+0x14d/0xf80
[  272.453148][T12491]  ? trace_irq_disable+0x3b/0x150
[  272.453179][T12491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.453202][T12491]  ? clear_bhb_loop+0x40/0x90
[  272.453229][T12491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.453251][T12491] RIP: 0033:0x7ffaa6f9c799
[  272.453272][T12491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  272.453291][T12491] RSP: 002b:00007ffaa51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  272.453315][T12491] RAX: ffffffffffffffda RBX: 00007ffaa7215fa0 RCX: 00007ffaa6f9c799
[  272.453331][T12491] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012
[  272.453345][T12491] RBP: 00007ffaa51f6090 R08: 0000000000000000 R09: 0000000000000000
[  272.453359][T12491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.453372][T12491] R13: 00007ffaa7216038 R14: 00007ffaa7215fa0 R15: 00007fff86259958
[  272.453407][T12491]  </TASK>
[  273.100049][T12499] netlink: 'syz.3.1703': attribute type 10 has an invalid length.
[  273.260712][T12499] bond0: (slave wlan1): Opening slave failed
[  273.308960][T12509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.364030][T12507] x_tables: duplicate underflow at hook 1
[  273.413921][T12507] No such timeout policy "syz1"
[  273.755182][T12525] FAULT_INJECTION: forcing a failure.
[  273.755182][T12525] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  273.780801][T12525] CPU: 0 UID: 0 PID: 12525 Comm: syz.3.1711 Not tainted syzkaller #0 PREEMPT(full) 
[  273.780834][T12525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  273.780848][T12525] Call Trace:
[  273.780857][T12525]  <TASK>
[  273.780867][T12525]  dump_stack_lvl+0xe8/0x150
[  273.780902][T12525]  should_fail_ex+0x412/0x560
[  273.780937][T12525]  _copy_to_user+0x31/0xb0
[  273.780973][T12525]  bpf_verifier_vlog+0x3ba/0x8f0
[  273.781009][T12525]  __btf_verifier_log+0xe2/0x140
[  273.781045][T12525]  ? __pfx___btf_verifier_log+0x10/0x10
[  273.781081][T12525]  ? btf_parse_hdr+0x1e2/0x760
[  273.781108][T12525]  btf_parse_hdr+0x2c2/0x760
[  273.781136][T12525]  btf_new_fd+0x385/0xd10
[  273.781169][T12525]  ? __pfx_btf_new_fd+0x10/0x10
[  273.781193][T12525]  ? bpf_token_put+0x143/0x160
[  273.781219][T12525]  ? bpf_btf_load+0x126/0x190
[  273.781244][T12525]  __sys_bpf+0x4e5/0x950
[  273.781279][T12525]  ? __pfx___sys_bpf+0x10/0x10
[  273.781330][T12525]  ? ksys_write+0x242/0x270
[  273.781356][T12525]  ? __pfx_ksys_write+0x10/0x10
[  273.781388][T12525]  __x64_sys_bpf+0x7c/0x90
[  273.781420][T12525]  do_syscall_64+0x14d/0xf80
[  273.781440][T12525]  ? trace_irq_disable+0x3b/0x150
[  273.781471][T12525]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.781493][T12525]  ? clear_bhb_loop+0x40/0x90
[  273.781519][T12525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.781541][T12525] RIP: 0033:0x7f56b859c799
[  273.781562][T12525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.781581][T12525] RSP: 002b:00007f56b94e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  273.781612][T12525] RAX: ffffffffffffffda RBX: 00007f56b8815fa0 RCX: 00007f56b859c799
[  273.781629][T12525] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012
[  273.781643][T12525] RBP: 00007f56b94e4090 R08: 0000000000000000 R09: 0000000000000000
[  273.781657][T12525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.781669][T12525] R13: 00007f56b8816038 R14: 00007f56b8815fa0 R15: 00007fff4567f838
[  273.781704][T12525]  </TASK>
[  274.474908][T12559] xt_TCPMSS: Only works on TCP SYN packets
[  274.512444][T12559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  274.519780][T12559] IPv6: NLM_F_CREATE should be set when creating new route
[  274.527120][T12559] IPv6: NLM_F_CREATE should be set when creating new route
[  274.534474][T12559] IPv6: NLM_F_CREATE should be set when creating new route
[  274.640667][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1724'.
[  274.676332][T12567] netlink: 'syz.2.1725': attribute type 1 has an invalid length.
[  274.735414][T12567] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1725'.
[  274.895826][T12580] netlink: 'syz.3.1728': attribute type 8 has an invalid length.
[  274.977431][T12581] x_tables: duplicate underflow at hook 1
[  274.994689][T12581] No such timeout policy "syz1"
[  275.052590][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'.
[  275.229924][T12591] netlink: 'syz.2.1731': attribute type 1 has an invalid length.
[  275.359627][T12593] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  275.643381][T12605] syz_tun: entered promiscuous mode
[  275.660215][T12605] macsec1: entered allmulticast mode
[  275.665606][T12605] syz_tun: entered allmulticast mode
[  275.679871][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'.
[  275.690186][T12605] syz_tun: left allmulticast mode
[  275.695390][T12605] syz_tun: left promiscuous mode
[  275.940847][T12629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'.
[  276.144677][T12642] delete_channel: no stack
[  276.173151][T12642] netlink: 'syz.3.1744': attribute type 10 has an invalid length.
[  276.257470][T12647] netlink: 'syz.3.1744': attribute type 10 has an invalid length.
[  276.439682][T12658] nbd: must specify a size in bytes for the device
[  276.495882][T12661] openvswitch: netlink: IP tunnel dst address not specified
[  276.520079][T12661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1751'.
[  276.532631][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1751'.
[  277.073227][T12689] FAULT_INJECTION: forcing a failure.
[  277.073227][T12689] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  277.086826][T12689] CPU: 1 UID: 0 PID: 12689 Comm: syz.1.1758 Not tainted syzkaller #0 PREEMPT(full) 
[  277.086856][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  277.086870][T12689] Call Trace:
[  277.086878][T12689]  <TASK>
[  277.086887][T12689]  dump_stack_lvl+0xe8/0x150
[  277.086922][T12689]  should_fail_ex+0x412/0x560
[  277.086956][T12689]  _copy_to_user+0x31/0xb0
[  277.086992][T12689]  bpf_verifier_vlog+0x3ba/0x8f0
[  277.087027][T12689]  __btf_verifier_log+0xe2/0x140
[  277.087061][T12689]  ? __pfx___btf_verifier_log+0x10/0x10
[  277.087094][T12689]  ? btf_parse_hdr+0x1e2/0x760
[  277.087118][T12689]  btf_parse_hdr+0x366/0x760
[  277.087145][T12689]  btf_new_fd+0x385/0xd10
[  277.087178][T12689]  ? __pfx_btf_new_fd+0x10/0x10
[  277.087203][T12689]  ? bpf_token_put+0x143/0x160
[  277.087228][T12689]  ? bpf_btf_load+0x126/0x190
[  277.087253][T12689]  __sys_bpf+0x4e5/0x950
[  277.087289][T12689]  ? __pfx___sys_bpf+0x10/0x10
[  277.087340][T12689]  ? ksys_write+0x242/0x270
[  277.087367][T12689]  ? __pfx_ksys_write+0x10/0x10
[  277.087399][T12689]  __x64_sys_bpf+0x7c/0x90
[  277.087430][T12689]  do_syscall_64+0x14d/0xf80
[  277.087451][T12689]  ? trace_irq_disable+0x3b/0x150
[  277.087482][T12689]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.087505][T12689]  ? clear_bhb_loop+0x40/0x90
[  277.087531][T12689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.087552][T12689] RIP: 0033:0x7ffaa6f9c799
[  277.087572][T12689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.087591][T12689] RSP: 002b:00007ffaa51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  277.087614][T12689] RAX: ffffffffffffffda RBX: 00007ffaa7215fa0 RCX: 00007ffaa6f9c799
[  277.087630][T12689] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012
[  277.087643][T12689] RBP: 00007ffaa51f6090 R08: 0000000000000000 R09: 0000000000000000
[  277.087656][T12689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  277.087669][T12689] R13: 00007ffaa7216038 R14: 00007ffaa7215fa0 R15: 00007fff86259958
[  277.087704][T12689]  </TASK>
[  277.249161][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms
[  277.304968][    C0] lec:lec_tx_timeout: lec0
[  277.309992][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  277.734613][T12718] lo speed is unknown, defaulting to 1000
[  277.802300][T12726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1766'.
[  277.811752][T12726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1766'.
[  277.821219][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'.
[  278.003597][T12734] FAULT_INJECTION: forcing a failure.
[  278.003597][T12734] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  278.032782][T12734] CPU: 1 UID: 0 PID: 12734 Comm: syz.1.1771 Not tainted syzkaller #0 PREEMPT(full) 
[  278.032815][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  278.032829][T12734] Call Trace:
[  278.032838][T12734]  <TASK>
[  278.032847][T12734]  dump_stack_lvl+0xe8/0x150
[  278.032883][T12734]  should_fail_ex+0x412/0x560
[  278.032917][T12734]  _copy_to_user+0x31/0xb0
[  278.032954][T12734]  bpf_verifier_vlog+0x3ba/0x8f0
[  278.032990][T12734]  __btf_verifier_log+0xe2/0x140
[  278.033026][T12734]  ? __pfx___btf_verifier_log+0x10/0x10
[  278.033061][T12734]  ? btf_parse_hdr+0x1e2/0x760
[  278.033088][T12734]  btf_parse_hdr+0x39c/0x760
[  278.033116][T12734]  btf_new_fd+0x385/0xd10
[  278.033149][T12734]  ? __pfx_btf_new_fd+0x10/0x10
[  278.033173][T12734]  ? bpf_token_put+0x143/0x160
[  278.033199][T12734]  ? bpf_btf_load+0x126/0x190
[  278.033224][T12734]  __sys_bpf+0x4e5/0x950
[  278.033259][T12734]  ? __pfx___sys_bpf+0x10/0x10
[  278.033310][T12734]  ? ksys_write+0x242/0x270
[  278.033336][T12734]  ? __pfx_ksys_write+0x10/0x10
[  278.033368][T12734]  __x64_sys_bpf+0x7c/0x90
[  278.033400][T12734]  do_syscall_64+0x14d/0xf80
[  278.033420][T12734]  ? trace_irq_disable+0x3b/0x150
[  278.033452][T12734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.033474][T12734]  ? clear_bhb_loop+0x40/0x90
[  278.033501][T12734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.033523][T12734] RIP: 0033:0x7ffaa6f9c799
[  278.033543][T12734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  278.033562][T12734] RSP: 002b:00007ffaa51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  278.033585][T12734] RAX: ffffffffffffffda RBX: 00007ffaa7215fa0 RCX: 00007ffaa6f9c799
[  278.033602][T12734] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012
[  278.033615][T12734] RBP: 00007ffaa51f6090 R08: 0000000000000000 R09: 0000000000000000
[  278.033629][T12734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  278.033641][T12734] R13: 00007ffaa7216038 R14: 00007ffaa7215fa0 R15: 00007fff86259958
[  278.033684][T12734]  </TASK>
[  278.453781][T12738] lo speed is unknown, defaulting to 1000
[  278.810788][T12743] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  278.823219][T12743] bond5 (unregistering): Released all slaves
[  278.898299][T12745] lo speed is unknown, defaulting to 1000
[  279.036267][T12745] lo speed is unknown, defaulting to 1000
[  279.077402][T12745] lo speed is unknown, defaulting to 1000
[  279.318128][T12761] netlink: 'syz.2.1778': attribute type 1 has an invalid length.
[  279.757653][T12745] infiniband syz0: set active
[  279.765786][   T24] lo speed is unknown, defaulting to 1000
[  279.772672][T12745] infiniband syz0: added lo
[  279.778936][T12771] FAULT_INJECTION: forcing a failure.
[  279.778936][T12771] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  279.793027][T12745] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  279.798474][T12745] infiniband syz0: Couldn't open port 1
[  279.829157][T12771] CPU: 1 UID: 0 PID: 12771 Comm: syz.4.1782 Not tainted syzkaller #0 PREEMPT(full) 
[  279.829187][T12771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  279.829201][T12771] Call Trace:
[  279.829210][T12771]  <TASK>
[  279.829219][T12771]  dump_stack_lvl+0xe8/0x150
[  279.829257][T12771]  should_fail_ex+0x412/0x560
[  279.829290][T12771]  _copy_to_user+0x31/0xb0
[  279.829327][T12771]  bpf_verifier_vlog+0x3ba/0x8f0
[  279.829364][T12771]  __btf_verifier_log+0xe2/0x140
[  279.829398][T12771]  ? __pfx___btf_verifier_log+0x10/0x10
[  279.829434][T12771]  ? btf_parse_hdr+0x1e2/0x760
[  279.829460][T12771]  btf_parse_hdr+0x3d2/0x760
[  279.829488][T12771]  btf_new_fd+0x385/0xd10
[  279.829522][T12771]  ? __pfx_btf_new_fd+0x10/0x10
[  279.829546][T12771]  ? bpf_token_put+0x143/0x160
[  279.829572][T12771]  ? bpf_btf_load+0x126/0x190
[  279.829596][T12771]  __sys_bpf+0x4e5/0x950
[  279.829641][T12771]  ? __pfx___sys_bpf+0x10/0x10
[  279.829691][T12771]  ? ksys_write+0x242/0x270
[  279.829717][T12771]  ? __pfx_ksys_write+0x10/0x10
[  279.829749][T12771]  __x64_sys_bpf+0x7c/0x90
[  279.829780][T12771]  do_syscall_64+0x14d/0xf80
[  279.829800][T12771]  ? trace_irq_disable+0x3b/0x150
[  279.829832][T12771]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.829853][T12771]  ? clear_bhb_loop+0x40/0x90
[  279.829880][T12771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.829902][T12771] RIP: 0033:0x7f459ef9c799
[  279.829922][T12771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.829941][T12771] RSP: 002b:00007f459fe90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  279.829964][T12771] RAX: ffffffffffffffda RBX: 00007f459f215fa0 RCX: 00007f459ef9c799
[  279.829980][T12771] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012
[  279.829994][T12771] RBP: 00007f459fe90090 R08: 0000000000000000 R09: 0000000000000000
[  279.830007][T12771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  279.830020][T12771] R13: 00007f459f216038 R14: 00007f459f215fa0 R15: 00007ffd467d8d18
[  279.830055][T12771]  </TASK>
[  280.181533][T12745] RDS/IB: syz0: added
[  280.185648][T12745] smc: adding ib device syz0 with port count 1
[  280.191982][T12745] smc:    ib device syz0 port 1 has no pnetid
[  280.227838][T12784] __nla_validate_parse: 4 callbacks suppressed
[  280.227859][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1784'.
[  280.248878][   T24] lo speed is unknown, defaulting to 1000
[  280.256706][T12745] lo speed is unknown, defaulting to 1000
[  280.291314][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1784'.
[  280.437189][T12780] vlan3: entered promiscuous mode
[  280.507109][T12791] batman_adv: batadv0: Adding interface: vlan4
[  280.519463][T12791] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.549352][T12791] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active
[  280.560828][T12785] syzkaller0: entered promiscuous mode
[  280.566505][T12785] syzkaller0: entered allmulticast mode
[  280.808694][T12745] lo speed is unknown, defaulting to 1000
[  281.117320][T12815] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1790'.
[  281.271263][T12745] lo speed is unknown, defaulting to 1000
[  281.664541][T12745] lo speed is unknown, defaulting to 1000
[  281.779843][T12843] x_tables: duplicate underflow at hook 1
[  281.786486][T12843] No such timeout policy "syz1"
[  281.904113][T12745] lo speed is unknown, defaulting to 1000
[  282.074806][T12745] lo speed is unknown, defaulting to 1000
[  282.243320][T12745] lo speed is unknown, defaulting to 1000
[  282.455185][T12782] lo speed is unknown, defaulting to 1000
[  282.490284][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'.
[  282.501700][T12850] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1802'.
[  282.621320][T12848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1802'.
[  282.709976][T12850] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1802'.
[  283.026654][T12869] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  283.094062][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'.
[  283.124775][T12858] nbd: socks must be embedded in a SOCK_ITEM attr
[  283.186597][T12858] netlink: 'syz.2.1806': attribute type 1 has an invalid length.
[  283.250985][T12858] gretap1: entered allmulticast mode
[  283.365541][T12879] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.1809'.
[  283.375065][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6060 ms
[  283.375099][    C0] lec:lec_tx_timeout: lec0
[  283.384108][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  283.395307][T12879] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  283.736464][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'.
[  283.821985][T12890] ip6gretap0: entered promiscuous mode
[  283.848625][T12890] ip6gretap0: left promiscuous mode
[  283.961221][T12848] lo speed is unknown, defaulting to 1000
[  284.116134][T12904] ip6gre1: entered promiscuous mode
[  284.126404][T12904] ip6gre1: entered allmulticast mode
[  284.350687][T12912] netlink: 'syz.0.1820': attribute type 12 has an invalid length.
[  284.503563][T12917] geneve3: entered promiscuous mode
[  284.525017][T12917] geneve3: entered allmulticast mode
[  284.572151][T12919] batadv_slave_0: entered promiscuous mode
[  284.578538][T12921] FAULT_INJECTION: forcing a failure.
[  284.578538][T12921] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  284.592494][T12921] CPU: 1 UID: 0 PID: 12921 Comm: syz.1.1824 Not tainted syzkaller #0 PREEMPT(full) 
[  284.592523][T12921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  284.592537][T12921] Call Trace:
[  284.592546][T12921]  <TASK>
[  284.592554][T12921]  dump_stack_lvl+0xe8/0x150
[  284.592591][T12921]  should_fail_ex+0x412/0x560
[  284.592630][T12921]  _copy_to_user+0x31/0xb0
[  284.592664][T12921]  bpf_verifier_vlog+0x3ba/0x8f0
[  284.592705][T12921]  __btf_verifier_log+0xe2/0x140
[  284.592737][T12921]  ? __pfx___btf_verifier_log+0x10/0x10
[  284.592771][T12921]  ? btf_parse_hdr+0x1e2/0x760
[  284.592797][T12921]  btf_parse_hdr+0x44d/0x760
[  284.592825][T12921]  btf_new_fd+0x385/0xd10
[  284.592856][T12921]  ? __pfx_btf_new_fd+0x10/0x10
[  284.592879][T12921]  ? bpf_token_put+0x143/0x160
[  284.592905][T12921]  ? bpf_btf_load+0x126/0x190
[  284.592929][T12921]  __sys_bpf+0x4e5/0x950
[  284.592963][T12921]  ? __pfx___sys_bpf+0x10/0x10
[  284.593017][T12921]  ? rcu_is_watching+0x15/0xb0
[  284.593057][T12921]  __x64_sys_bpf+0x7c/0x90
[  284.593088][T12921]  do_syscall_64+0x14d/0xf80
[  284.593109][T12921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.593132][T12921]  ? clear_bhb_loop+0x40/0x90
[  284.593159][T12921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.593180][T12921] RIP: 0033:0x7ffaa6f9c799
[  284.593200][T12921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  284.593218][T12921] RSP: 002b:00007ffaa51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  284.593240][T12921] RAX: ffffffffffffffda RBX: 00007ffaa7215fa0 RCX: 00007ffaa6f9c799
[  284.593256][T12921] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012
[  284.593269][T12921] RBP: 00007ffaa51f6090 R08: 0000000000000000 R09: 0000000000000000
[  284.593282][T12921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  284.593294][T12921] R13: 00007ffaa7216038 R14: 00007ffaa7215fa0 R15: 00007fff86259958
[  284.593329][T12921]  </TASK>
[  284.883667][T12848] lo speed is unknown, defaulting to 1000
[  285.113196][T12931] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  285.335316][T12944] FAULT_INJECTION: forcing a failure.
[  285.335316][T12944] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  285.369204][T12944] CPU: 0 UID: 0 PID: 12944 Comm: syz.1.1832 Not tainted syzkaller #0 PREEMPT(full) 
[  285.369237][T12944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  285.369251][T12944] Call Trace:
[  285.369259][T12944]  <TASK>
[  285.369267][T12944]  dump_stack_lvl+0xe8/0x150
[  285.369303][T12944]  should_fail_ex+0x412/0x560
[  285.369338][T12944]  _copy_from_user+0x2d/0xb0
[  285.369372][T12944]  do_sock_getsockopt+0x165/0x3f0
[  285.369410][T12944]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  285.369449][T12944]  ? ksys_write+0x1fc/0x270
[  285.369478][T12944]  __x64_sys_getsockopt+0x1a4/0x240
[  285.369527][T12944]  do_syscall_64+0x14d/0xf80
[  285.369547][T12944]  ? trace_irq_disable+0x3b/0x150
[  285.369579][T12944]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.369602][T12944]  ? clear_bhb_loop+0x40/0x90
[  285.369628][T12944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.369650][T12944] RIP: 0033:0x7ffaa6f9c799
[  285.369670][T12944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.369689][T12944] RSP: 002b:00007ffaa51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  285.369713][T12944] RAX: ffffffffffffffda RBX: 00007ffaa7215fa0 RCX: 00007ffaa6f9c799
[  285.369728][T12944] RDX: 000000000000001d RSI: 0000000000000006 RDI: 0000000000000003
[  285.369741][T12944] RBP: 00007ffaa51f6090 R08: 0000200000000180 R09: 0000000000000000
[  285.369756][T12944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.369768][T12944] R13: 00007ffaa7216038 R14: 00007ffaa7215fa0 R15: 00007fff86259958
[  285.369804][T12944]  </TASK>
[  285.628909][T12947] __nla_validate_parse: 1 callbacks suppressed
[  285.628934][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1831'.
[  285.748343][T12956] FAULT_INJECTION: forcing a failure.
[  285.748343][T12956] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  285.769264][T12956] CPU: 0 UID: 0 PID: 12956 Comm: syz.4.1836 Not tainted syzkaller #0 PREEMPT(full) 
[  285.769296][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  285.769310][T12956] Call Trace:
[  285.769318][T12956]  <TASK>
[  285.769327][T12956]  dump_stack_lvl+0xe8/0x150
[  285.769364][T12956]  should_fail_ex+0x412/0x560
[  285.769404][T12956]  _copy_to_user+0x31/0xb0
[  285.769439][T12956]  bpf_verifier_vlog+0x3ba/0x8f0
[  285.769471][T12956]  __btf_verifier_log+0xe2/0x140
[  285.769502][T12956]  ? __pfx___btf_verifier_log+0x10/0x10
[  285.769541][T12956]  __btf_verifier_log_type+0x3c6/0x690
[  285.769581][T12956]  ? __pfx___btf_verifier_log_type+0x10/0x10
[  285.769612][T12956]  ? __pfx_btf_sec_info_cmp+0x10/0x10
[  285.769634][T12956]  ? sort+0xb0/0x100
[  285.769669][T12956]  btf_func_proto_check_meta+0xed/0x160
[  285.769706][T12956]  btf_parse_type_sec+0x446/0x24f0
[  285.769739][T12956]  ? __pfx_btf_check_sec_info+0x10/0x10
[  285.769766][T12956]  ? btf_parse_str_sec+0x212/0x2a0
[  285.769790][T12956]  btf_new_fd+0x426/0xd10
[  285.769824][T12956]  ? __pfx_btf_new_fd+0x10/0x10
[  285.769848][T12956]  ? bpf_token_put+0x143/0x160
[  285.769874][T12956]  ? bpf_btf_load+0x126/0x190
[  285.769898][T12956]  __sys_bpf+0x4e5/0x950
[  285.769934][T12956]  ? __pfx___sys_bpf+0x10/0x10
[  285.770014][T12956]  ? ksys_write+0x242/0x270
[  285.770039][T12956]  ? __pfx_ksys_write+0x10/0x10
[  285.770072][T12956]  __x64_sys_bpf+0x7c/0x90
[  285.770103][T12956]  do_syscall_64+0x14d/0xf80
[  285.770123][T12956]  ? trace_irq_disable+0x3b/0x150
[  285.770154][T12956]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.770176][T12956]  ? clear_bhb_loop+0x40/0x90
[  285.770203][T12956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.770225][T12956] RIP: 0033:0x7f459ef9c799
[  285.770246][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.770265][T12956] RSP: 002b:00007f459fe90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  285.770288][T12956] RAX: ffffffffffffffda RBX: 00007f459f215fa0 RCX: 00007f459ef9c799
[  285.770304][T12956] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012
[  285.770318][T12956] RBP: 00007f459fe90090 R08: 0000000000000000 R09: 0000000000000000
[  285.770331][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  285.770343][T12956] R13: 00007f459f216038 R14: 00007f459f215fa0 R15: 00007ffd467d8d18
[  285.770378][T12956]  </TASK>
[  286.184797][T12958] netlink: 'syz.1.1835': attribute type 1 has an invalid length.
[  286.259351][T12958] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1835'.
[  286.740128][T12986] FAULT_INJECTION: forcing a failure.
[  286.740128][T12986] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  286.763052][T12986] CPU: 0 UID: 0 PID: 12986 Comm: syz.1.1845 Not tainted syzkaller #0 PREEMPT(full) 
[  286.763081][T12986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  286.763095][T12986] Call Trace:
[  286.763103][T12986]  <TASK>
[  286.763112][T12986]  dump_stack_lvl+0xe8/0x150
[  286.763149][T12986]  should_fail_ex+0x412/0x560
[  286.763182][T12986]  _copy_from_user+0x2d/0xb0
[  286.763216][T12986]  do_tcp_getsockopt+0x227/0x2940
[  286.763256][T12986]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[  286.763282][T12986]  ? sock_recv_errqueue+0x500/0x590
[  286.763335][T12986]  ? register_lock_class+0x31/0x2e0
[  286.763361][T12986]  ? is_bpf_text_address+0x26/0x2b0
[  286.763389][T12986]  ? __lock_acquire+0x6b5/0x2cf0
[  286.763423][T12986]  ? aa_file_perm+0x192/0x15e0
[  286.763465][T12986]  ? __lock_acquire+0x6b5/0x2cf0
[  286.763511][T12986]  ? __mutex_trylock_common+0x158/0x260
[  286.763548][T12986]  ? __pfx___mutex_trylock_common+0x10/0x10
[  286.763585][T12986]  ? rcu_is_watching+0x15/0xb0
[  286.763615][T12986]  ? trace_contention_end+0x3d/0x150
[  286.763651][T12986]  ? __mutex_lock+0x319/0x1300
[  286.763682][T12986]  ? __lock_acquire+0x6b5/0x2cf0
[  286.763711][T12986]  ? smc_getsockopt+0x14d/0x3c0
[  286.763747][T12986]  ? __pfx___mutex_lock+0x10/0x10
[  286.763780][T12986]  tcp_getsockopt+0x83/0x130
[  286.763808][T12986]  ? sock_recv_errqueue+0x500/0x590
[  286.763835][T12986]  ? sock_recv_errqueue+0x500/0x590
[  286.763865][T12986]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  286.763892][T12986]  smc_getsockopt+0x1e4/0x3c0
[  286.763933][T12986]  ? __pfx_smc_getsockopt+0x10/0x10
[  286.763969][T12986]  ? __pfx_smc_getsockopt+0x10/0x10
[  286.764001][T12986]  do_sock_getsockopt+0x2d3/0x3f0
[  286.764038][T12986]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  286.764074][T12986]  ? ksys_write+0x1fc/0x270
[  286.764102][T12986]  __x64_sys_getsockopt+0x1a4/0x240
[  286.764147][T12986]  do_syscall_64+0x14d/0xf80
[  286.764167][T12986]  ? trace_irq_disable+0x3b/0x150
[  286.764199][T12986]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.764222][T12986]  ? clear_bhb_loop+0x40/0x90
[  286.764249][T12986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.764270][T12986] RIP: 0033:0x7ffaa6f9c799
[  286.764292][T12986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  286.764310][T12986] RSP: 002b:00007ffaa51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  286.764334][T12986] RAX: ffffffffffffffda RBX: 00007ffaa7215fa0 RCX: 00007ffaa6f9c799
[  286.764350][T12986] RDX: 000000000000001d RSI: 0000000000000006 RDI: 0000000000000003
[  286.764364][T12986] RBP: 00007ffaa51f6090 R08: 0000200000000180 R09: 0000000000000000
[  286.764378][T12986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.764390][T12986] R13: 00007ffaa7216038 R14: 00007ffaa7215fa0 R15: 00007fff86259958
[  286.764424][T12986]  </TASK>
[  287.236405][T12997] lo speed is unknown, defaulting to 1000
[  287.334175][T13002] netlink: 'syz.1.1850': attribute type 1 has an invalid length.
[  287.906299][T12997] lo speed is unknown, defaulting to 1000
[  287.999603][T13026] lo speed is unknown, defaulting to 1000
[  288.018827][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1854'.
[  288.358663][T13040] netlink: 'syz.2.1857': attribute type 4 has an invalid length.
[  288.402903][   T24] lo speed is unknown, defaulting to 1000
[  288.408844][   T24] sqz0: Port: 1 Link DOWN
[  288.417981][   T29] lo speed is unknown, defaulting to 1000
[  288.425713][T13043] netlink: 'syz.2.1857': attribute type 4 has an invalid length.
[  288.500250][ T5887] lo speed is unknown, defaulting to 1000
[  288.509473][ T5887] sqz0: Port: 1 Link ACTIVE
[  288.524114][ T5887] lo speed is unknown, defaulting to 1000
[  288.671553][T13050] FAULT_INJECTION: forcing a failure.
[  288.671553][T13050] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  288.705265][T13050] CPU: 0 UID: 0 PID: 13050 Comm: syz.0.1859 Not tainted syzkaller #0 PREEMPT(full) 
[  288.705296][T13050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  288.705309][T13050] Call Trace:
[  288.705318][T13050]  <TASK>
[  288.705328][T13050]  dump_stack_lvl+0xe8/0x150
[  288.705363][T13050]  should_fail_ex+0x412/0x560
[  288.705396][T13050]  _copy_from_user+0x2d/0xb0
[  288.705429][T13050]  copy_from_sockptr_offset+0x66/0xa0
[  288.705462][T13050]  do_tcp_getsockopt+0xe76/0x2940
[  288.705500][T13050]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[  288.705528][T13050]  ? sock_recv_errqueue+0x500/0x590
[  288.705554][T13050]  ? register_lock_class+0x31/0x2e0
[  288.705580][T13050]  ? is_bpf_text_address+0x26/0x2b0
[  288.705608][T13050]  ? __lock_acquire+0x6b5/0x2cf0
[  288.705654][T13050]  ? aa_file_perm+0x192/0x15e0
[  288.705690][T13050]  ? __lock_acquire+0x6b5/0x2cf0
[  288.705720][T13050]  ? __mutex_trylock_common+0x158/0x260
[  288.705757][T13050]  ? __pfx___mutex_trylock_common+0x10/0x10
[  288.705794][T13050]  ? rcu_is_watching+0x15/0xb0
[  288.705825][T13050]  ? trace_contention_end+0x3d/0x150
[  288.705861][T13050]  ? __mutex_lock+0x319/0x1300
[  288.705892][T13050]  ? __lock_acquire+0x6b5/0x2cf0
[  288.705921][T13050]  ? smc_getsockopt+0x14d/0x3c0
[  288.705958][T13050]  ? __pfx___mutex_lock+0x10/0x10
[  288.705992][T13050]  tcp_getsockopt+0x83/0x130
[  288.706019][T13050]  ? sock_recv_errqueue+0x500/0x590
[  288.706047][T13050]  ? sock_recv_errqueue+0x500/0x590
[  288.706076][T13050]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  288.706103][T13050]  smc_getsockopt+0x1e4/0x3c0
[  288.706138][T13050]  ? __pfx_smc_getsockopt+0x10/0x10
[  288.706176][T13050]  ? __pfx_smc_getsockopt+0x10/0x10
[  288.706208][T13050]  do_sock_getsockopt+0x2d3/0x3f0
[  288.706253][T13050]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  288.706288][T13050]  ? ksys_write+0x1fc/0x270
[  288.706316][T13050]  __x64_sys_getsockopt+0x1a4/0x240
[  288.706357][T13050]  do_syscall_64+0x14d/0xf80
[  288.706375][T13050]  ? trace_irq_disable+0x3b/0x150
[  288.706404][T13050]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.706424][T13050]  ? clear_bhb_loop+0x40/0x90
[  288.706449][T13050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.706469][T13050] RIP: 0033:0x7f8f2bb9c799
[  288.706489][T13050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  288.706508][T13050] RSP: 002b:00007f8f2ca7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  288.706529][T13050] RAX: ffffffffffffffda RBX: 00007f8f2be15fa0 RCX: 00007f8f2bb9c799
[  288.706544][T13050] RDX: 000000000000001d RSI: 0000000000000006 RDI: 0000000000000003
[  288.706555][T13050] RBP: 00007f8f2ca7c090 R08: 0000200000000180 R09: 0000000000000000
[  288.706568][T13050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  288.706580][T13050] R13: 00007f8f2be16038 R14: 00007f8f2be15fa0 R15: 00007fff0ee9d558
[  288.706613][T13050]  </TASK>
[  289.074506][T13026] lo speed is unknown, defaulting to 1000
[  289.125299][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  289.133424][    C0] lec:lec_tx_timeout: lec0
[  289.138362][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  289.816907][T13079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1862'.
[  291.401155][T13101] netlink: 'syz.2.1868': attribute type 1 has an invalid length.
[  291.475740][T13095] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  291.510504][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'.
[  291.552258][T13095] bond5 (unregistering): Released all slaves
[  291.742620][T13116] IPv6: NLM_F_CREATE should be specified when creating new route
[  291.916909][T13101] 8021q: adding VLAN 0 to HW filter on device bond5
[  291.984594][T13105] bond5 (unregistering): Released all slaves
[  292.024922][T13113] "syz.2.1868" (13113) uses obsolete ecb(arc4) skcipher
[  292.134924][T13128] FAULT_INJECTION: forcing a failure.
[  292.134924][T13128] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  292.151096][T13128] CPU: 0 UID: 0 PID: 13128 Comm: syz.0.1870 Not tainted syzkaller #0 PREEMPT(full) 
[  292.151128][T13128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  292.151142][T13128] Call Trace:
[  292.151151][T13128]  <TASK>
[  292.151159][T13128]  dump_stack_lvl+0xe8/0x150
[  292.151195][T13128]  should_fail_ex+0x412/0x560
[  292.151228][T13128]  _copy_to_user+0x31/0xb0
[  292.151264][T13128]  simple_read_from_buffer+0xe1/0x170
[  292.151300][T13128]  proc_fail_nth_read+0x1bb/0x230
[  292.151334][T13128]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  292.151368][T13128]  ? rw_verify_area+0x2a6/0x4d0
[  292.151391][T13128]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  292.151424][T13128]  vfs_read+0x20c/0xa70
[  292.151450][T13128]  ? smc_getsockopt+0x1ee/0x3c0
[  292.151484][T13128]  ? __pfx_vfs_read+0x10/0x10
[  292.151520][T13128]  ? __pfx_smc_getsockopt+0x10/0x10
[  292.151552][T13128]  ? do_sock_getsockopt+0x2d3/0x3f0
[  292.151598][T13128]  ksys_read+0x150/0x270
[  292.151623][T13128]  ? __pfx_ksys_read+0x10/0x10
[  292.151646][T13128]  ? __x64_sys_getsockopt+0x1a4/0x240
[  292.151690][T13128]  do_syscall_64+0x14d/0xf80
[  292.151709][T13128]  ? trace_irq_disable+0x3b/0x150
[  292.151741][T13128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.151763][T13128]  ? clear_bhb_loop+0x40/0x90
[  292.151790][T13128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.151811][T13128] RIP: 0033:0x7f8f2bb5cfce
[  292.151831][T13128] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  292.151850][T13128] RSP: 002b:00007f8f2ca7bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  292.151874][T13128] RAX: ffffffffffffffda RBX: 00007f8f2ca7c6c0 RCX: 00007f8f2bb5cfce
[  292.151890][T13128] RDX: 000000000000000f RSI: 00007f8f2ca7c0a0 RDI: 0000000000000004
[  292.151904][T13128] RBP: 00007f8f2ca7c090 R08: 0000000000000000 R09: 0000000000000000
[  292.151917][T13128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.151930][T13128] R13: 00007f8f2be16038 R14: 00007f8f2be15fa0 R15: 00007fff0ee9d558
[  292.151965][T13128]  </TASK>
[  292.533527][T13132] lo speed is unknown, defaulting to 1000
[  292.574779][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1872'.
[  292.979385][T13132] lo speed is unknown, defaulting to 1000
[  292.979425][T13142] lo speed is unknown, defaulting to 1000
[  293.209661][T13147] delete_channel: no stack
[  293.521762][T13159] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1880'.
[  293.561874][T13160] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1881'.
[  293.901689][T13173] netlink: 'syz.0.1883': attribute type 30 has an invalid length.
[  293.960471][T13177] FAULT_INJECTION: forcing a failure.
[  293.960471][T13177] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.977786][T13142] lo speed is unknown, defaulting to 1000
[  294.047962][T13179] syzkaller1: entered promiscuous mode
[  294.054118][T13179] syzkaller1: entered allmulticast mode
[  294.060227][T13177] CPU: 1 UID: 0 PID: 13177 Comm: syz.1.1885 Not tainted syzkaller #0 PREEMPT(full) 
[  294.060257][T13177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  294.060270][T13177] Call Trace:
[  294.060279][T13177]  <TASK>
[  294.060288][T13177]  dump_stack_lvl+0xe8/0x150
[  294.060323][T13177]  should_fail_ex+0x412/0x560
[  294.060358][T13177]  _copy_to_user+0x31/0xb0
[  294.060395][T13177]  bpf_verifier_vlog+0x3ba/0x8f0
[  294.060433][T13177]  __btf_verifier_log+0xe2/0x140
[  294.060460][T13177]  ? __kvmalloc_node_noprof+0x528/0x8a0
[  294.060485][T13177]  ? btf_parse_type_sec+0x588/0x24f0
[  294.060506][T13177]  ? btf_new_fd+0x426/0xd10
[  294.060527][T13177]  ? __sys_bpf+0x4e5/0x950
[  294.060563][T13177]  ? __pfx___btf_verifier_log+0x10/0x10
[  294.060606][T13177]  __btf_verifier_log_type+0x3c6/0x690
[  294.060650][T13177]  ? __pfx___btf_verifier_log_type+0x10/0x10
[  294.060687][T13177]  ? rcu_is_watching+0x15/0xb0
[  294.060722][T13177]  btf_struct_check_meta+0x400/0xcf0
[  294.060755][T13177]  ? rcu_is_watching+0x15/0xb0
[  294.060785][T13177]  ? kfree+0x4d/0x630
[  294.060804][T13177]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  294.060866][T13177]  btf_parse_type_sec+0x446/0x24f0
[  294.060899][T13177]  ? __pfx_btf_check_sec_info+0x10/0x10
[  294.060927][T13177]  ? btf_parse_str_sec+0x212/0x2a0
[  294.060952][T13177]  btf_new_fd+0x426/0xd10
[  294.060985][T13177]  ? __pfx_btf_new_fd+0x10/0x10
[  294.061009][T13177]  ? bpf_token_put+0x143/0x160
[  294.061035][T13177]  ? bpf_btf_load+0x126/0x190
[  294.061059][T13177]  __sys_bpf+0x4e5/0x950
[  294.061093][T13177]  ? __pfx___sys_bpf+0x10/0x10
[  294.061143][T13177]  ? ksys_write+0x242/0x270
[  294.061170][T13177]  ? __pfx_ksys_write+0x10/0x10
[  294.061202][T13177]  __x64_sys_bpf+0x7c/0x90
[  294.061233][T13177]  do_syscall_64+0x14d/0xf80
[  294.061254][T13177]  ? trace_irq_disable+0x3b/0x150
[  294.061286][T13177]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.061309][T13177]  ? clear_bhb_loop+0x40/0x90
[  294.061337][T13177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.061358][T13177] RIP: 0033:0x7ffaa6f9c799
[  294.061379][T13177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  294.061398][T13177] RSP: 002b:00007ffaa51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  294.061421][T13177] RAX: ffffffffffffffda RBX: 00007ffaa7215fa0 RCX: 00007ffaa6f9c799
[  294.061438][T13177] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012
[  294.061451][T13177] RBP: 00007ffaa51f6090 R08: 0000000000000000 R09: 0000000000000000
[  294.061465][T13177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  294.061479][T13177] R13: 00007ffaa7216038 R14: 00007ffaa7215fa0 R15: 00007fff86259958
[  294.061513][T13177]  </TASK>
[  294.179172][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms
[  294.348966][    C0] lec:lec_tx_timeout: lec0
[  294.354362][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  294.792871][T13197] x_tables: ip_tables: ah match: only valid for protocol 51
[  294.810936][T13181] lo speed is unknown, defaulting to 1000
[  295.118540][T13208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1897'.
[  295.215769][T13182] lo speed is unknown, defaulting to 1000
[  295.544625][T13221] netlink: 'syz.2.1901': attribute type 1 has an invalid length.
[  295.681113][T13221] 8021q: adding VLAN 0 to HW filter on device bond5
[  295.769489][T13223] bond5: (slave gretap1): making interface the new active one
[  295.778824][T13223] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  296.122501][T13183] lo speed is unknown, defaulting to 1000
[  296.228716][T13241] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  296.248591][T13241] bond6: (slave lo): Enslaving as an active interface with an up link
[  296.260962][T13241] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  296.279584][   T24] lo speed is unknown, defaulting to 1000
[  296.286455][   T29] lo speed is unknown, defaulting to 1000
[  296.299386][   T24] lo speed is unknown, defaulting to 1000
[  296.408901][T13244] netlink: 'syz.2.1906': attribute type 21 has an invalid length.
[  296.419473][T13244] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1906'.
[  296.457461][T13244] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  296.469181][T13244] bond7 (unregistering): Released all slaves
[  296.489998][T13183] lo speed is unknown, defaulting to 1000
[  296.795157][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'.
[  296.814783][T13254] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1909'.
[  296.829823][T13254] openvswitch: netlink: VXLAN extension message has 196 unknown bytes.
[  296.881167][T13181] lo speed is unknown, defaulting to 1000
[  297.030290][T13226] lo speed is unknown, defaulting to 1000
[  297.409866][T13182] lo speed is unknown, defaulting to 1000
[  297.732664][T13226] lo speed is unknown, defaulting to 1000
[  298.066595][T13267] bond1: entered allmulticast mode
[  298.099599][T13267] 8021q: adding VLAN 0 to HW filter on device bond1
[  298.295536][T13275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.724590][T13286] syzkaller1: entered promiscuous mode
[  298.737601][T13286] syzkaller1: entered allmulticast mode
[  298.781593][T13296] FAULT_INJECTION: forcing a failure.
[  298.781593][T13296] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  298.798796][T13296] CPU: 1 UID: 0 PID: 13296 Comm: syz.4.1921 Not tainted syzkaller #0 PREEMPT(full) 
[  298.798823][T13296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  298.798835][T13296] Call Trace:
[  298.798842][T13296]  <TASK>
[  298.798850][T13296]  dump_stack_lvl+0xe8/0x150
[  298.798884][T13296]  should_fail_ex+0x412/0x560
[  298.798914][T13296]  _copy_to_user+0x31/0xb0
[  298.798948][T13296]  bpf_verifier_vlog+0x3ba/0x8f0
[  298.798980][T13296]  __btf_verifier_log+0xe2/0x140
[  298.799015][T13296]  ? __pfx___btf_verifier_log+0x10/0x10
[  298.799052][T13296]  btf_verifier_log_member+0x43e/0x800
[  298.799089][T13296]  ? __pfx_btf_verifier_log_member+0x10/0x10
[  298.799123][T13296]  ? rcu_is_watching+0x15/0xb0
[  298.799157][T13296]  btf_struct_check_meta+0xb42/0xcf0
[  298.799190][T13296]  ? rcu_is_watching+0x15/0xb0
[  298.799230][T13296]  btf_parse_type_sec+0x446/0x24f0
[  298.799262][T13296]  ? __pfx_btf_check_sec_info+0x10/0x10
[  298.799289][T13296]  ? btf_parse_str_sec+0x212/0x2a0
[  298.799315][T13296]  btf_new_fd+0x426/0xd10
[  298.799348][T13296]  ? __pfx_btf_new_fd+0x10/0x10
[  298.799386][T13296]  ? bpf_token_put+0x143/0x160
[  298.799411][T13296]  ? bpf_btf_load+0x126/0x190
[  298.799436][T13296]  __sys_bpf+0x4e5/0x950
[  298.799472][T13296]  ? __pfx___sys_bpf+0x10/0x10
[  298.799522][T13296]  ? ksys_write+0x242/0x270
[  298.799548][T13296]  ? __pfx_ksys_write+0x10/0x10
[  298.799580][T13296]  __x64_sys_bpf+0x7c/0x90
[  298.799611][T13296]  do_syscall_64+0x14d/0xf80
[  298.799632][T13296]  ? trace_irq_disable+0x3b/0x150
[  298.799662][T13296]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.799684][T13296]  ? clear_bhb_loop+0x40/0x90
[  298.799711][T13296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.799732][T13296] RIP: 0033:0x7f459ef9c799
[  298.799753][T13296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.799772][T13296] RSP: 002b:00007f459fe90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  298.799795][T13296] RAX: ffffffffffffffda RBX: 00007f459f215fa0 RCX: 00007f459ef9c799
[  298.799811][T13296] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012
[  298.799825][T13296] RBP: 00007f459fe90090 R08: 0000000000000000 R09: 0000000000000000
[  298.799838][T13296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  298.799851][T13296] R13: 00007f459f216038 R14: 00007f459f215fa0 R15: 00007ffd467d8d18
[  298.799886][T13296]  </TASK>
[  299.437740][T13298] netlink: 'syz.4.1922': attribute type 29 has an invalid length.
[  299.464395][T13306] netlink: 'syz.4.1922': attribute type 29 has an invalid length.
[  299.569549][T13309] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1924'.
[  300.009049][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5650 ms
[  300.010329][T13319] syzkaller0: entered promiscuous mode
[  300.017111][    C0] lec:lec_tx_timeout: lec0
[  300.018072][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  300.040562][T13319] syzkaller0: entered allmulticast mode
[  300.071563][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1927'.
[  300.091697][T13317] lo speed is unknown, defaulting to 1000
[  300.698777][T13335] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1931'.
[  300.866059][T13317] lo speed is unknown, defaulting to 1000
[  300.880438][T13346] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  300.928374][T13346] team0: Mode changed to "loadbalance"
[  300.966334][T13343] lo speed is unknown, defaulting to 1000
[  301.388712][T13364] netlink: 'syz.4.1939': attribute type 1 has an invalid length.
[  301.672641][T13366] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  301.684704][T13366] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  301.703519][T13343] lo speed is unknown, defaulting to 1000
[  302.574201][T13416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1947'.
[  302.740512][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1950'.
[  303.004214][T13439] x_tables: duplicate underflow at hook 1
[  303.046385][T13439] No such timeout policy "syz1"
[  303.202174][T13447] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  303.217462][T13443] syzkaller0: entered promiscuous mode
[  303.242586][T13443] syzkaller0: entered allmulticast mode
[  303.266317][T13443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.334417][T13440] tipc: Resetting bearer <eth:syzkaller0>
[  303.400758][T13440] tipc: Disabling bearer <eth:syzkaller0>
[  303.818384][T13464] IPv6: NLM_F_CREATE should be specified when creating new route
[  303.932601][T13461] lo speed is unknown, defaulting to 1000
[  304.377205][T13476] syzkaller0: entered promiscuous mode
[  304.391983][T13476] syzkaller0: entered allmulticast mode
[  304.562979][T13487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1966'.
[  304.600029][T13461] lo speed is unknown, defaulting to 1000
[  304.851528][T13495] netlink: 'syz.2.1969': attribute type 29 has an invalid length.
[  304.933109][T13497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  304.965313][   T24] lo speed is unknown, defaulting to 1000
[  304.975437][   T24] syz0: Port: 1 Link DOWN
[  304.985570][T13497] netlink: 'syz.0.1970': attribute type 4 has an invalid length.
[  305.049193][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  305.057324][    C0] lec:lec_tx_timeout: lec0
[  305.062850][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  305.101857][T13501] "syz.1.1971" (13501) uses obsolete ecb(arc4) skcipher
[  305.156668][   T29] lo speed is unknown, defaulting to 1000
[  305.201393][T13498] netlink: 'syz.2.1969': attribute type 29 has an invalid length.
[  306.060436][T13517] netlink: set zone limit has 4 unknown bytes
[  308.301564][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1985'.
[  308.468468][T13568] vxcan4: entered allmulticast mode
[  308.515612][T13570] geneve2: entered promiscuous mode
[  308.531225][T13570] geneve2: entered allmulticast mode
[  308.733931][T13585] netlink: 'syz.2.1994': attribute type 1 has an invalid length.
[  308.742204][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'.
[  309.015831][T13600] sch_fq: defrate 4294967293 ignored.
[  309.179918][T13602] ip6tnl3: entered allmulticast mode
[  309.428073][T13624] lo speed is unknown, defaulting to 1000
[  309.533596][T13627] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  309.606625][T13630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2003'.
[  309.938789][T13624] lo speed is unknown, defaulting to 1000
[  309.969296][T13645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2008'.
[  310.069038][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  310.077172][    C0] lec:lec_tx_timeout: lec0
[  310.081937][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  310.095480][T13649] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2009'.
[  310.122659][T13653] Unsupported ieee802154 address type: 0
[  311.402104][T13707] bridge_slave_0: left allmulticast mode
[  311.422616][T13707] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.889315][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'.
[  311.963019][T13707] bridge_slave_1: left allmulticast mode
[  311.968952][T13707] bridge_slave_1: left promiscuous mode
[  311.988334][T13707] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.010471][T13707] team0: Port device team_slave_0 removed
[  312.017922][T13707] team0: Port device team_slave_1 removed
[  312.024436][T13707] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  312.137864][T13732] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2031'.
[  312.318692][T13736] IPVS: Scheduler module ip_vs_ not found
[  312.363580][T13736] syzkaller0: entered promiscuous mode
[  312.378152][T13736] syzkaller0: entered allmulticast mode
[  312.414788][T13745] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2033'.
[  312.572098][T13759] bridge5: entered allmulticast mode
[  312.600386][T13759] team0: Failed to send port change of device bridge5 via netlink (err -105)
[  312.609544][T13759] team0: Failed to send options change via netlink (err -105)
[  312.627575][T13759] team0: Port device bridge5 added
[  312.885393][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2042'.
[  313.475704][T13789] bond7: option arp_all_targets: invalid value (129)
[  313.491703][T13793] netlink: 'syz.4.2048': attribute type 4 has an invalid length.
[  313.503867][T13789] bond7 (unregistering): Released all slaves
[  313.550790][T13794] netlink: 'syz.4.2048': attribute type 4 has an invalid length.
[  313.714761][T13799] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  314.041448][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'.
[  314.064524][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2053'.
[  314.172452][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'.
[  314.210978][T13819] ieee802154 phy0 wpan0: encryption failed: -22
[  315.089063][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  315.097140][    C0] lec:lec_tx_timeout: lec0
[  315.101844][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  315.197672][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2064'.
[  315.219500][T13848] netlink: 'syz.4.2062': attribute type 3 has an invalid length.
[  315.268065][T13851] hsr_slave_0: left promiscuous mode
[  315.315111][T13851] hsr_slave_1: left promiscuous mode
[  315.591589][T13864] netlink: 'syz.1.2069': attribute type 3 has an invalid length.
[  315.688032][T13867] 8021q: VLANs not supported on ip6_vti0
[  315.893207][T13881] netlink: 'syz.2.2073': attribute type 1 has an invalid length.
[  315.959656][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2073'.
[  315.968450][T13881] bond7: entered promiscuous mode
[  315.976051][T13881] 8021q: adding VLAN 0 to HW filter on device bond7
[  315.984476][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2073'.
[  316.084139][T13881] bond7: (slave bridge29): making interface the new active one
[  316.121004][T13894] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2077'.
[  316.129433][T13881] bridge29: entered promiscuous mode
[  316.142797][T13881] bond7: (slave bridge29): Enslaving as an active interface with an up link
[  316.185166][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2078'.
[  316.414505][T13901] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2082'.
[  316.592007][T13914] lo speed is unknown, defaulting to 1000
[  316.699230][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'.
[  316.924401][T13914] lo speed is unknown, defaulting to 1000
[  317.288149][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  317.315587][T13938] vti0: entered promiscuous mode
[  317.320770][T13938] vti0: entered allmulticast mode
[  317.426530][T13947] xt_policy: neither incoming nor outgoing policy selected
[  317.482828][T13943] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  317.484073][T13944] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  317.682538][T13957] openvswitch: netlink: EtherType 0 is less than min 600
[  317.920379][T13970] netlink: 'syz.2.2101': attribute type 21 has an invalid length.
[  318.076083][T13973] netlink: 'syz.4.2098': attribute type 2 has an invalid length.
[  318.169367][T13970] geneve3: entered promiscuous mode
[  318.174787][T13970] geneve3: entered allmulticast mode
[  318.277829][T13974] ip6gretap2: entered promiscuous mode
[  318.301488][T13974] ip6gretap2: entered allmulticast mode
[  318.535300][T13996] netlink: 'syz.3.2108': attribute type 1 has an invalid length.
[  318.642925][T13996] 8021q: adding VLAN 0 to HW filter on device bond2
[  318.712468][T14009] bond2: (slave batadv0): Opening slave failed
[  318.856898][T14003] bond2: (slave veth5): Enslaving as an active interface with a down link
[  318.868589][T14011] netlink: 'syz.4.2110': attribute type 1 has an invalid length.
[  318.886183][T14014] IPVS: Unknown mcast interface: netdevsim0
[  319.050515][T14021] syzkaller0: entered promiscuous mode
[  319.060711][T14021] syzkaller0: entered allmulticast mode
[  319.268590][T14034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.729591][T14059] __nla_validate_parse: 13 callbacks suppressed
[  319.729615][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2124'.
[  319.810769][T14059] ip6tnl3: entered allmulticast mode
[  319.816152][T14062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2128'.
[  320.119023][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  320.127170][    C0] lec:lec_tx_timeout: lec0
[  320.132146][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  320.449754][T14084] lo speed is unknown, defaulting to 1000
[  320.499228][T14090] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2136'.
[  320.728212][T14104] syzkaller0: entered promiscuous mode
[  320.736112][T14103] xt_CT: No such helper "netbios-ns"
[  320.741588][T14104] syzkaller0: entered allmulticast mode
[  320.950407][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'.
[  320.983683][T14115] syzkaller1: tun_chr_ioctl cmd 35111
[  321.021845][T14084] lo speed is unknown, defaulting to 1000
[  321.423529][T14141] syzkaller0: entered promiscuous mode
[  321.429484][T14141] syzkaller0: entered allmulticast mode
[  321.452758][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2151'.
[  321.681331][T14150] FAULT_INJECTION: forcing a failure.
[  321.681331][T14150] name failslab, interval 1, probability 0, space 0, times 0
[  321.728459][T14150] CPU: 1 UID: 0 PID: 14150 Comm: syz.4.2154 Not tainted syzkaller #0 PREEMPT(full) 
[  321.728493][T14150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  321.728507][T14150] Call Trace:
[  321.728515][T14150]  <TASK>
[  321.728524][T14150]  dump_stack_lvl+0xe8/0x150
[  321.728560][T14150]  should_fail_ex+0x412/0x560
[  321.728594][T14150]  should_failslab+0xa8/0x100
[  321.728623][T14150]  ? skb_clone+0x212/0x3a0
[  321.728645][T14150]  kmem_cache_alloc_noprof+0x87/0x650
[  321.728677][T14150]  skb_clone+0x212/0x3a0
[  321.728704][T14150]  __netlink_deliver_tap+0x404/0x850
[  321.728748][T14150]  ? netlink_deliver_tap+0x2e/0x1b0
[  321.728779][T14150]  netlink_deliver_tap+0x19c/0x1b0
[  321.728811][T14150]  netlink_sendskb+0x68/0x140
[  321.728840][T14150]  netlink_unicast+0x3a3/0x9b0
[  321.728885][T14150]  ? __pfx_netlink_unicast+0x10/0x10
[  321.728924][T14150]  netlink_rcv_skb+0x2b6/0x4b0
[  321.728954][T14150]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  321.728988][T14150]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  321.729029][T14150]  ? netlink_deliver_tap+0x2e/0x1b0
[  321.729068][T14150]  netlink_unicast+0x80f/0x9b0
[  321.729104][T14150]  ? __pfx_netlink_unicast+0x10/0x10
[  321.729133][T14150]  ? netlink_sendmsg+0x650/0xb40
[  321.729161][T14150]  ? skb_put+0x11b/0x210
[  321.729197][T14150]  netlink_sendmsg+0x813/0xb40
[  321.729238][T14150]  ? __pfx_netlink_sendmsg+0x10/0x10
[  321.729272][T14150]  ? aa_sock_msg_perm+0xf1/0x1b0
[  321.729302][T14150]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  321.729331][T14150]  ____sys_sendmsg+0x972/0x9f0
[  321.729363][T14150]  ? __pfx_____sys_sendmsg+0x10/0x10
[  321.729396][T14150]  ? import_iovec+0x73/0xa0
[  321.729433][T14150]  ___sys_sendmsg+0x2a5/0x360
[  321.729461][T14150]  ? __pfx____sys_sendmsg+0x10/0x10
[  321.729524][T14150]  ? __fget_files+0x2a/0x420
[  321.729554][T14150]  ? __fget_files+0x3a0/0x420
[  321.729598][T14150]  __x64_sys_sendmsg+0x1bd/0x2a0
[  321.729623][T14150]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  321.729656][T14150]  ? __pfx_ksys_write+0x10/0x10
[  321.729693][T14150]  do_syscall_64+0x14d/0xf80
[  321.729712][T14150]  ? trace_irq_disable+0x3b/0x150
[  321.729743][T14150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.729766][T14150]  ? clear_bhb_loop+0x40/0x90
[  321.729792][T14150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.729814][T14150] RIP: 0033:0x7f459ef9c799
[  321.729834][T14150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  321.729853][T14150] RSP: 002b:00007f459fe90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  321.729883][T14150] RAX: ffffffffffffffda RBX: 00007f459f215fa0 RCX: 00007f459ef9c799
[  321.729899][T14150] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  321.729912][T14150] RBP: 00007f459fe90090 R08: 0000000000000000 R09: 0000000000000000
[  321.729925][T14150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.729938][T14150] R13: 00007f459f216038 R14: 00007f459f215fa0 R15: 00007ffd467d8d18
[  321.729975][T14150]  </TASK>
[  322.093908][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'.
[  322.114105][T14156] gretap0: entered promiscuous mode
[  322.548240][T14174] x_tables: duplicate underflow at hook 1
[  322.562845][T14174] No such timeout policy "syz1"
[  323.089755][T14199] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2168'.
[  323.303154][T14206] syzkaller0: entered promiscuous mode
[  323.309535][T14206] syzkaller0: entered allmulticast mode
[  323.364959][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2171'.
[  323.422965][T14213] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16)
[  323.434846][T14213] openvswitch: netlink: Message has 8 unknown bytes.
[  323.489764][T14219] Cannot find del_set index 2 as target
[  323.892734][T14246] netlink: 'syz.3.2179': attribute type 10 has an invalid length.
[  324.187589][T14258] FAULT_INJECTION: forcing a failure.
[  324.187589][T14258] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.203342][T14262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2183'.
[  324.233414][T14258] CPU: 1 UID: 0 PID: 14258 Comm: syz.3.2182 Not tainted syzkaller #0 PREEMPT(full) 
[  324.233445][T14258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  324.233459][T14258] Call Trace:
[  324.233467][T14258]  <TASK>
[  324.233476][T14258]  dump_stack_lvl+0xe8/0x150
[  324.233517][T14258]  should_fail_ex+0x412/0x560
[  324.233551][T14258]  _copy_to_user+0x31/0xb0
[  324.233589][T14258]  simple_read_from_buffer+0xe1/0x170
[  324.233626][T14258]  proc_fail_nth_read+0x1bb/0x230
[  324.233661][T14258]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  324.233696][T14258]  ? rw_verify_area+0x2a6/0x4d0
[  324.233719][T14258]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  324.233751][T14258]  vfs_read+0x20c/0xa70
[  324.233773][T14258]  ? fdget_pos+0x246/0x320
[  324.233811][T14258]  ? __pfx___mutex_lock+0x10/0x10
[  324.233835][T14258]  ? __pfx_vfs_read+0x10/0x10
[  324.233860][T14258]  ? __fget_files+0x2a/0x420
[  324.233896][T14258]  ? __fget_files+0x3a0/0x420
[  324.233926][T14258]  ? __fget_files+0x2a/0x420
[  324.233968][T14258]  ksys_read+0x150/0x270
[  324.233994][T14258]  ? __pfx_ksys_read+0x10/0x10
[  324.234031][T14258]  do_syscall_64+0x14d/0xf80
[  324.234051][T14258]  ? trace_irq_disable+0x3b/0x150
[  324.234083][T14258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.234105][T14258]  ? clear_bhb_loop+0x40/0x90
[  324.234133][T14258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.234163][T14258] RIP: 0033:0x7f56b855cfce
[  324.234183][T14258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  324.234202][T14258] RSP: 002b:00007f56b94e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  324.234226][T14258] RAX: ffffffffffffffda RBX: 00007f56b94e46c0 RCX: 00007f56b855cfce
[  324.234242][T14258] RDX: 000000000000000f RSI: 00007f56b94e40a0 RDI: 0000000000000007
[  324.234253][T14258] RBP: 00007f56b94e4090 R08: 0000000000000000 R09: 0000000000000000
[  324.234266][T14258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.234278][T14258] R13: 00007f56b8816038 R14: 00007f56b8815fa0 R15: 00007fff4567f838
[  324.234313][T14258]  </TASK>
[  324.491664][T14269] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.2186'.
[  324.629523][T14269] batman_adv: batadv0: Removing interface: vlan4
[  324.983911][T14291] netlink: 'syz.0.2193': attribute type 1 has an invalid length.
[  325.052372][T14285] netlink: 'syz.1.2189': attribute type 4 has an invalid length.
[  325.082900][T14291] __nla_validate_parse: 1 callbacks suppressed
[  325.082922][T14291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2193'.
[  325.139040][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  325.147192][    C0] lec:lec_tx_timeout: lec0
[  325.152028][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  325.254934][T14291] 8021q: adding VLAN 0 to HW filter on device bond7
[  325.285136][T14297] FAULT_INJECTION: forcing a failure.
[  325.285136][T14297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  325.357214][T14297] CPU: 0 UID: 0 PID: 14297 Comm: syz.1.2195 Not tainted syzkaller #0 PREEMPT(full) 
[  325.357245][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  325.357259][T14297] Call Trace:
[  325.357267][T14297]  <TASK>
[  325.357276][T14297]  dump_stack_lvl+0xe8/0x150
[  325.357313][T14297]  should_fail_ex+0x412/0x560
[  325.357347][T14297]  _copy_from_user+0x2d/0xb0
[  325.357381][T14297]  do_sock_getsockopt+0x165/0x3f0
[  325.357419][T14297]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  325.357457][T14297]  ? ksys_write+0x1fc/0x270
[  325.357487][T14297]  __x64_sys_getsockopt+0x1a4/0x240
[  325.357530][T14297]  do_syscall_64+0x14d/0xf80
[  325.357551][T14297]  ? trace_irq_disable+0x3b/0x150
[  325.357582][T14297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.357605][T14297]  ? clear_bhb_loop+0x40/0x90
[  325.357631][T14297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.357653][T14297] RIP: 0033:0x7ffaa6f9c799
[  325.357673][T14297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  325.357693][T14297] RSP: 002b:00007ffaa51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  325.357717][T14297] RAX: ffffffffffffffda RBX: 00007ffaa7215fa0 RCX: 00007ffaa6f9c799
[  325.357733][T14297] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000003
[  325.357745][T14297] RBP: 00007ffaa51f6090 R08: 0000000000000000 R09: 0000000000000000
[  325.357759][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.357771][T14297] R13: 00007ffaa7216038 R14: 00007ffaa7215fa0 R15: 00007fff86259958
[  325.357813][T14297]  </TASK>
[  325.739236][T14292] netlink: 'syz.4.2194': attribute type 3 has an invalid length.
[  326.166030][T14313] ipvlan1: entered promiscuous mode
[  326.187131][T14313] ipvlan1: left promiscuous mode
[  326.216686][T14316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2201'.
[  326.366399][T14323] Cannot find del_set index 4 as target
[  326.922769][T14350] lo: entered promiscuous mode
[  326.940770][T14350] tunl0: entered promiscuous mode
[  326.961968][T14350] gre0: entered promiscuous mode
[  326.973812][T14355] netlink: 'syz.4.2213': attribute type 1 has an invalid length.
[  327.006992][T14350] erspan0: entered promiscuous mode
[  327.017566][T14350] ip_vti0: entered promiscuous mode
[  327.044271][T14350] ip6_vti0: entered promiscuous mode
[  327.052929][T14350] sit0: entered promiscuous mode
[  327.064403][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2213'.
[  327.074339][T14350] ip6tnl0: entered promiscuous mode
[  327.094202][T14350] ip6gre0: entered promiscuous mode
[  327.123765][T14350] syz_tun: entered promiscuous mode
[  327.134970][T14350] ip6gretap0: entered promiscuous mode
[  327.156494][T14350] vcan0: entered promiscuous mode
[  327.184463][T14350] .`: entered promiscuous mode
[  327.194032][T14350] bridge_slave_1: entered promiscuous mode
[  327.215027][T14350] team0: entered promiscuous mode
[  327.236927][T14350] nlmon0: entered promiscuous mode
[  327.245687][T14350] caif0: entered promiscuous mode
[  327.254356][T14350] batadv0: entered promiscuous mode
[  327.272443][T14350] veth0: entered promiscuous mode
[  327.292235][T14350] veth1: left allmulticast mode
[  327.310215][T14350] wg0: entered promiscuous mode
[  327.317788][T14350] wg1: entered promiscuous mode
[  327.338299][T14350] wg2: entered promiscuous mode
[  327.346059][T14350] veth0_to_bridge: entered promiscuous mode
[  327.360077][T14350] bridge_slave_0: entered promiscuous mode
[  327.371470][T14350] veth1_to_bridge: entered promiscuous mode
[  327.382916][T14350] veth0_to_bond: entered promiscuous mode
[  327.397172][T14350] bond_slave_0: entered promiscuous mode
[  327.413817][T14350] veth1_to_bond: entered promiscuous mode
[  327.444187][T14350] bond_slave_1: entered promiscuous mode
[  327.461361][T14350] veth1_to_team: entered promiscuous mode
[  327.485363][T14350] team_slave_1: entered promiscuous mode
[  327.496510][T14350] veth0_to_batadv: entered promiscuous mode
[  327.506124][T14350] batadv_slave_0: entered promiscuous mode
[  327.515629][T14350] veth1_to_batadv: entered promiscuous mode
[  327.530605][T14350] batadv_slave_1: entered promiscuous mode
[  327.551821][T14350] xfrm0: entered promiscuous mode
[  327.571175][T14350] veth0_to_hsr: entered promiscuous mode
[  327.588512][T14350] veth1_to_hsr: entered promiscuous mode
[  327.606166][T14350] hsr0: entered promiscuous mode
[  327.616833][T14350] veth1_virt_wifi: entered promiscuous mode
[  327.638701][T14350] veth0_virt_wifi: entered promiscuous mode
[  327.649478][T14350] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  327.675649][T14350] vlan0: entered promiscuous mode
[  327.683420][T14350] vlan1: entered promiscuous mode
[  327.692345][T14350] macvlan0: entered promiscuous mode
[  327.710848][T14350] macvlan1: entered promiscuous mode
[  327.719491][T14350] ipvlan0: entered promiscuous mode
[  327.725123][T14350] ipvlan1: entered promiscuous mode
[  327.778112][T14350] macvtap0: entered promiscuous mode
[  327.798284][T14350] macsec0: entered promiscuous mode
[  327.816090][T14350] geneve0: entered promiscuous mode
[  327.830482][T14350] geneve1: entered promiscuous mode
[  327.841668][T14350] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  327.860266][T14350] vxlan0: entered promiscuous mode
[  327.870307][T14350] geneve2: entered promiscuous mode
[  327.875694][T14350] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  327.899335][T14350] vxlan1: entered promiscuous mode
[  327.904833][T14350] macvtap1: entered promiscuous mode
[  327.911108][T14350] ip6tnl1: entered promiscuous mode
[  327.920430][T14350] geneve3: entered promiscuous mode
[  327.927239][T14350] syztnl1: entered promiscuous mode
[  327.933303][T14350] erspan1: entered promiscuous mode
[  327.939505][T14350] ipip0: entered promiscuous mode
[  327.945863][T14350] veth2: entered promiscuous mode
[  327.951925][T14350] veth3: entered promiscuous mode
[  327.957829][T14350] bridge1: entered promiscuous mode
[  327.966052][T14350] syztnl0: entered promiscuous mode
[  327.972184][T14350] ipvlan2: entered promiscuous mode
[  327.977832][T14350] ip6gre1: entered promiscuous mode
[  327.983812][T14350] mac80211_hwsim hwsim20 wlan2: entered promiscuous mode
[  327.994098][T14350] veth4: entered promiscuous mode
[  327.999575][T14350] bridge2: entered promiscuous mode
[  328.005240][T14350] mac80211_hwsim hwsim24 wlan3: entered promiscuous mode
[  328.013324][T14350] bond0: left allmulticast mode
[  328.018477][T14350] dummy0: left allmulticast mode
[  328.024927][T14350] bond2: entered promiscuous mode
[  328.031447][T14350] bridge3: entered promiscuous mode
[  328.037298][T14350] bond3: entered promiscuous mode
[  328.044321][T14350] netdevsim netdevsim0 eth0: entered promiscuous mode
[  328.051794][T14350] netdevsim netdevsim0 eth1: entered promiscuous mode
[  328.059406][T14350] netdevsim netdevsim0 eth2: entered promiscuous mode
[  328.066536][T14350] netdevsim netdevsim0 eth3: entered promiscuous mode
[  328.074216][T14350] geneve4: entered promiscuous mode
[  328.080243][T14350] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode
[  328.088463][T14350] bridge4: entered promiscuous mode
[  328.097225][T14350] bridge5: entered promiscuous mode
[  328.107539][T14350] ipip1: entered promiscuous mode
[  328.114705][T14350] bond4: entered promiscuous mode
[  328.121447][T14350] sit1: entered promiscuous mode
[  328.126585][T14350] sit1: left allmulticast mode
[  328.156466][T14350] bond5: left allmulticast mode
[  328.163289][T14350] ip6tnl2: entered promiscuous mode
[  328.168776][T14350] bond6: entered promiscuous mode
[  328.177057][T14350] veth6: entered promiscuous mode
[  328.182566][T14350] veth7: entered promiscuous mode
[  328.193194][T14350] bridge0: entered promiscuous mode
[  328.201214][T14350] veth0.0: entered promiscuous mode
[  328.206911][T14350] vti0: left allmulticast mode
[  328.213897][T14350] macsec1: entered promiscuous mode
[  328.221551][T14350] veth8: entered promiscuous mode
[  328.226957][T14350] veth9: entered promiscuous mode
[  328.233157][T14350] bond7: entered promiscuous mode
[  328.240451][T14355] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  328.326525][ T8566] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.374781][ T8566] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.393145][ T8566] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.425051][ T8566] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.449087][ T8566] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.483585][ T8566] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.514845][ T8566] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.529211][ T8566] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.570156][T14375] netlink: 'syz.1.2218': attribute type 1 has an invalid length.
[  328.609880][T14376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2218'.
[  328.984016][T14394] xt_CT: No such helper "snmp_trap"
[  329.109542][T14404] netlink: 'syz.0.2224': attribute type 12 has an invalid length.
[  329.907274][T14439] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  330.159145][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  330.167278][    C0] lec:lec_tx_timeout: lec0
[  330.172061][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  330.326002][T14446] lo speed is unknown, defaulting to 1000
[  330.427113][T14467] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  330.554161][T14469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2248'.
[  330.579841][T14477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2249'.
[  330.613003][T14474] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2249'.
[  330.724890][T14484] netlink: 'syz.2.2252': attribute type 6 has an invalid length.
[  330.899965][T14489] lo speed is unknown, defaulting to 1000
[  331.349304][T14489] lo speed is unknown, defaulting to 1000
[  331.455712][T14533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2265'.
[  331.543932][T14538] x_tables: duplicate underflow at hook 1
[  331.762843][T14543] rdma_rxe: rxe_newlink: failed to add wg1
[  331.922742][T14553] syzkaller0: entered allmulticast mode
[  332.219302][T14562] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2273'.
[  332.620231][T14579] syzkaller1: entered promiscuous mode
[  332.625791][T14579] syzkaller1: entered allmulticast mode
[  332.697054][T14580] lo speed is unknown, defaulting to 1000
[  333.053961][T14591] syzkaller0: entered promiscuous mode
[  333.075619][T14591] syzkaller0: entered allmulticast mode
[  333.092975][T14580] lo speed is unknown, defaulting to 1000
[  333.109150][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2282'.
[  333.158801][T14594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2282'.
[  333.183467][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2282'.
[  333.192936][T14594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2282'.
[  333.202404][T14594] netlink: 'syz.1.2282': attribute type 6 has an invalid length.
[  335.005048][T14606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.015882][T14606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.097720][T14617] netlink: 'syz.3.2290': attribute type 1 has an invalid length.
[  335.122209][T14617] netlink: 'syz.3.2290': attribute type 1 has an invalid length.
[  335.179132][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  335.187290][    C0] lec:lec_tx_timeout: lec0
[  335.192155][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  335.200635][T14606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.219147][T14606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.273459][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2291'.
[  335.416908][T14606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.448398][T14606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.474855][T14626] syzkaller1: entered promiscuous mode
[  335.480753][T14626] syzkaller1: entered allmulticast mode
[  335.578163][T14606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.609425][T14606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.816738][T14645] x_tables: duplicate underflow at hook 1
[  335.823216][T14645] No such timeout policy "syz1"
[  335.972058][ T1155] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  335.980559][ T1155] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.035422][ T8553] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  336.045394][ T8553] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.054292][ T8553] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  336.063146][ T8553] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.088278][ T1155] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  336.096964][ T1155] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.408819][T14658] __nla_validate_parse: 1 callbacks suppressed
[  336.408840][T14658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2301'.
[  336.625370][T14672] syzkaller1: entered promiscuous mode
[  336.631141][T14672] syzkaller1: entered allmulticast mode
[  337.089828][T14702] xt_CT: You must specify a L4 protocol and not use inversions on it
[  337.114360][T14712] bridge0: entered allmulticast mode
[  337.162541][T14711] lo speed is unknown, defaulting to 1000
[  337.204745][T14714] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2315'.
[  337.214887][T14714] netlink: 'syz.1.2315': attribute type 9 has an invalid length.
[  337.223058][T14714] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2315'.
[  337.232814][T14714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2315'.
[  337.673825][T14731] x_tables: duplicate underflow at hook 1
[  337.684490][T14731] No such timeout policy "syz1"
[  337.748454][T14711] lo speed is unknown, defaulting to 1000
[  337.781490][T14733] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode
[  337.814524][T14726] tls_set_device_offload: netdev not found
[  337.993584][T14736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2320'.
[  338.021412][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2320'.
[  338.078893][T14740] syzkaller1: entered promiscuous mode
[  338.099296][T14740] syzkaller1: entered allmulticast mode
[  338.566353][T14754] xt_hashlimit: size too large, truncated to 1048576
[  338.700357][T14758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'.
[  339.133544][T14770] dummy0: entered promiscuous mode
[  339.139564][T14770] vlan3: entered promiscuous mode
[  339.293674][T14775] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2332'.
[  339.304494][T14773] lo speed is unknown, defaulting to 1000
[  339.321166][T14775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2332'.
[  339.355221][T14775] bond3: entered promiscuous mode
[  339.586761][T14791] x_tables: duplicate underflow at hook 1
[  339.593595][T14791] No such timeout policy "syz1"
[  339.634279][T14773] lo speed is unknown, defaulting to 1000
[  339.986233][T14808] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2342'.
[  340.199053][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  340.207163][    C0] lec:lec_tx_timeout: lec0
[  340.212076][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  340.244944][T14818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.365897][ T7501] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  340.407276][ T7501] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  340.417620][ T7501] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  340.426714][ T7501] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  341.498386][T14845] __nla_validate_parse: 9 callbacks suppressed
[  341.498407][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'.
[  341.559460][T14845] vlan5: entered promiscuous mode
[  341.569057][T14845] bridge0: entered promiscuous mode
[  341.720894][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2357'.
[  342.435830][T14888] netlink: 'syz.3.2367': attribute type 4 has an invalid length.
[  344.017593][T14876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.026204][T14877] syzkaller0: entered promiscuous mode
[  344.039208][T14877] syzkaller0: entered allmulticast mode
[  344.065223][T14891] tipc: Resetting bearer <eth:syzkaller0>
[  344.161484][T14907] netlink: 'syz.2.2370': attribute type 15 has an invalid length.
[  344.202159][T14910] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2372'.
[  344.213759][T14891] tipc: Resetting bearer <eth:syzkaller0>
[  344.280545][T14891] tipc: Disabling bearer <eth:syzkaller0>
[  344.313416][T14916] netlink: 'syz.2.2374': attribute type 10 has an invalid length.
[  344.329185][T14916] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2374'.
[  344.422429][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2375'.
[  344.433041][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2376'.
[  344.489202][T14921] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2375'.
[  344.524044][T14921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2375'.
[  344.591464][T14921] lo speed is unknown, defaulting to 1000
[  344.599925][T14932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2378'.
[  344.626959][T14932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2378'.
[  344.682006][T14938] netlink: 'syz.4.2381': attribute type 21 has an invalid length.
[  344.699521][T14938] IPv6: NLM_F_CREATE should be specified when creating new route
[  344.707638][T14938] netlink: 'syz.4.2381': attribute type 1 has an invalid length.
[  344.718393][T14938] xt_nat: multiple ranges no longer supported
[  345.009260][T14921] lo speed is unknown, defaulting to 1000
[  345.037495][T14952] x_tables: duplicate underflow at hook 1
[  345.050363][T14952] No such timeout policy "syz1"
[  345.999014][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  346.007126][    C0] lec:lec_tx_timeout: lec0
[  346.012013][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  346.202287][T14986] lo speed is unknown, defaulting to 1000
[  346.416956][T15007] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  346.709349][T15022] __nla_validate_parse: 4 callbacks suppressed
[  346.709371][T15022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2406'.
[  346.742244][T15022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2406'.
[  346.803780][T15004] lo speed is unknown, defaulting to 1000
[  346.805125][T14986] lo speed is unknown, defaulting to 1000
[  347.119544][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2410'.
[  347.338321][T15037] lo speed is unknown, defaulting to 1000
[  347.338377][T15004] lo speed is unknown, defaulting to 1000
[  347.773145][T15037] lo speed is unknown, defaulting to 1000
[  348.692130][T15062] lo speed is unknown, defaulting to 1000
[  348.965737][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2421'.
[  349.218554][T15075] syzkaller0: entered promiscuous mode
[  349.226253][T15075] syzkaller0: entered allmulticast mode
[  349.244120][T15075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.259759][T15074] tipc: Resetting bearer <eth:syzkaller0>
[  349.285389][T15074] tipc: Disabling bearer <eth:syzkaller0>
[  349.752327][T15062] lo speed is unknown, defaulting to 1000
[  350.156772][T15104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.185161][T15106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2431'.
[  350.194650][T15106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2431'.
[  350.204380][T15106] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2431'.
[  350.260179][T15109] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2432'.
[  350.373753][T15110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2429'.
[  350.832519][T15122] lo speed is unknown, defaulting to 1000
[  350.869641][T15137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2438'.
[  350.990371][T15137] bond4: entered promiscuous mode
[  350.996234][T15137] 8021q: adding VLAN 0 to HW filter on device bond4
[  351.039059][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  351.047132][    C0] lec:lec_tx_timeout: lec0
[  351.052054][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  351.846183][T15187] syzkaller0: entered promiscuous mode
[  351.851969][T15187] syzkaller0: entered allmulticast mode
[  351.911342][T15187] macsec1: entered promiscuous mode
[  351.948594][T15191] __nla_validate_parse: 1 callbacks suppressed
[  351.948616][T15191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2452'.
[  351.964044][T15190] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2453'.
[  351.974036][T15122] lo speed is unknown, defaulting to 1000
[  352.177225][T15201] nbd: must specify at least one socket
[  352.229947][T15201] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  352.239321][T15201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2454'.
[  352.843176][T15217] xt_l2tp: v2 doesn't support IP mode
[  353.411801][T15237] syzkaller1: entered promiscuous mode
[  353.417347][T15237] syzkaller1: entered allmulticast mode
[  353.439230][T15236] x_tables: duplicate underflow at hook 1
[  353.445960][T15236] No such timeout policy "syz1"
[  353.469180][T15241] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2468'.
[  353.489857][T15241] netlink: Unknown conntrack attr (0)
[  353.665895][T15250] lo speed is unknown, defaulting to 1000
[  353.736195][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2474'.
[  353.989876][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'.
[  354.011377][T15270] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  354.027190][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'.
[  354.244090][T15250] lo speed is unknown, defaulting to 1000
[  354.261488][T15278] syzkaller0: entered promiscuous mode
[  354.287517][T15278] syzkaller0: entered allmulticast mode
[  354.471629][T15278] nftables ruleset with unbound chain
[  354.993666][T15299] netlink: 'syz.3.2486': attribute type 5 has an invalid length.
[  355.003337][T15299] netlink: 'syz.3.2486': attribute type 9 has an invalid length.
[  355.105480][T15300] syzkaller1: entered promiscuous mode
[  355.119554][T15300] syzkaller1: entered allmulticast mode
[  355.357774][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'.
[  355.468071][T15306] syzkaller0: entered promiscuous mode
[  355.479836][T15306] syzkaller0: entered allmulticast mode
[  355.680173][   T30] audit: type=1800 audit(1772819350.310:7): pid=15323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2491" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2631 res=0 errno=0
[  355.797642][T15328] x_tables: duplicate underflow at hook 1
[  355.827910][T15328] No such timeout policy "syz1"
[  356.059004][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  356.067107][    C0] lec:lec_tx_timeout: lec0
[  356.072116][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  356.180420][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'.
[  356.226401][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2497'.
[  356.273317][T15351] lo speed is unknown, defaulting to 1000
[  356.492073][T15368] syzkaller0: entered promiscuous mode
[  356.497627][T15368] syzkaller0: entered allmulticast mode
[  356.760992][T15378] netlink: 'syz.3.2505': attribute type 30 has an invalid length.
[  356.774382][T15351] lo speed is unknown, defaulting to 1000
[  357.427714][T15417] "syz.1.2519" (15417) uses obsolete ecb(arc4) skcipher
[  357.455714][T15418] x_tables: duplicate underflow at hook 1
[  357.462609][T15418] No such timeout policy "syz1"
[  358.276142][T15443] __nla_validate_parse: 2 callbacks suppressed
[  358.276163][T15443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2526'.
[  358.347558][T15445] netlink: 'syz.0.2527': attribute type 11 has an invalid length.
[  358.458582][T15457] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  358.557533][T15453] lo speed is unknown, defaulting to 1000
[  358.775296][T15474] ipvlan3: entered allmulticast mode
[  358.783946][T15474] veth0_vlan: entered allmulticast mode
[  358.896278][T15459] lo speed is unknown, defaulting to 1000
[  358.903273][T15453] lo speed is unknown, defaulting to 1000
[  358.936100][T15479] x_tables: duplicate underflow at hook 1
[  358.943434][T15479] No such timeout policy "syz1"
[  359.615548][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2541'.
[  359.653999][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2541'.
[  359.665861][T15496] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2542'.
[  359.675487][T15496] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2542'.
[  359.857086][T15459] lo speed is unknown, defaulting to 1000
[  359.884523][T15504] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2542'.
[  359.896470][T15504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2542'.
[  359.940607][T15503] syzkaller0: entered promiscuous mode
[  359.946313][T15503] syzkaller0: entered allmulticast mode
[  360.336264][T15524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2549'.
[  360.481734][T15529] netlink: 'syz.0.2551': attribute type 2 has an invalid length.
[  360.708818][T15526] lo speed is unknown, defaulting to 1000
[  360.971714][T15549] x_tables: duplicate underflow at hook 1
[  360.980343][T15549] No such timeout policy "syz1"
[  361.049255][T15539] netpci0: tun_chr_ioctl cmd 1074025678
[  361.055186][T15539] netpci0: group set to 0
[  361.079029][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  361.087099][    C0] lec:lec_tx_timeout: lec0
[  361.092286][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  361.430344][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2559'.
[  361.491991][T15526] lo speed is unknown, defaulting to 1000
[  361.721586][T15571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2561'.
[  361.785165][T15563] lo speed is unknown, defaulting to 1000
[  362.055970][T15565] lo speed is unknown, defaulting to 1000
[  362.055970][T15563] lo speed is unknown, defaulting to 1000
[  362.648245][T15565] lo speed is unknown, defaulting to 1000
[  362.904046][T15555] rdma_rxe: rxe_newlink: failed to add wg1
[  363.192360][T15604] x_tables: duplicate underflow at hook 1
[  363.217801][T15603] No such timeout policy "syz1"
[  363.277608][T15606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.149541][T15621] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  364.293524][T15632] Cannot find add_set index 3 as target
[  364.304846][T15632] Cannot find add_set index 3 as target
[  364.538512][T15640] __nla_validate_parse: 1 callbacks suppressed
[  364.538534][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'.
[  364.941922][T15648] x_tables: duplicate underflow at hook 1
[  364.955253][T15648] No such timeout policy "syz1"
[  365.006469][T15655] netlink: 'syz.4.2586': attribute type 10 has an invalid length.
[  365.016878][T15655] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2586'.
[  365.218780][T15662] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  365.230107][T15660] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2587'.
[  365.331657][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2591'.
[  365.410025][T15665] lo speed is unknown, defaulting to 1000
[  365.772554][T15700] sctp: [Deprecated]: syz.3.2596 (pid 15700) Use of struct sctp_assoc_value in delayed_ack socket option.
[  365.772554][T15700] Use struct sctp_sack_info instead
[  365.973623][T15665] lo speed is unknown, defaulting to 1000
[  365.992147][T15710] x_tables: duplicate underflow at hook 1
[  366.008037][T15710] No such timeout policy "syz1"
[  366.067038][T15712] netlink: 'syz.0.2601': attribute type 1 has an invalid length.
[  366.109044][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  366.117127][    C0] lec:lec_tx_timeout: lec0
[  366.121947][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  366.133429][T15714] bond8: entered promiscuous mode
[  366.138910][T15714] 8021q: adding VLAN 0 to HW filter on device bond8
[  366.153843][T15716] pim6reg: entered allmulticast mode
[  366.194850][T15714] pim6reg: left allmulticast mode
[  366.247184][T15712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2601'.
[  366.915798][T15744] atomic_op ffff888054e3b198 conn xmit_atomic 0000000000000000
[  367.055366][T15754] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  367.102363][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2610'.
[  367.176913][T15755] lo speed is unknown, defaulting to 1000
[  368.018353][T15755] lo speed is unknown, defaulting to 1000
[  368.260254][T15793] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2618'.
[  368.299885][T15793] xt_hashlimit: size too large, truncated to 1048576
[  368.412576][T15798] syzkaller1: entered promiscuous mode
[  368.418125][T15798] syzkaller1: entered allmulticast mode
[  368.487550][T15795] syzkaller1: left promiscuous mode
[  368.512309][T15795] syzkaller1: left allmulticast mode
[  368.651018][T15800] netlink: 'syz.0.2620': attribute type 21 has an invalid length.
[  368.671199][T15800] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2620'.
[  368.724194][T15800] netlink: 'syz.0.2620': attribute type 3 has an invalid length.
[  368.739070][T15800] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2620'.
[  369.023730][T15819] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  369.054169][T15820] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2622'.
[  369.463086][T15828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  369.673139][T15834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2629'.
[  369.822278][T15834] ip6gre2: entered promiscuous mode
[  369.827574][T15834] ip6gre2: entered allmulticast mode
[  370.731939][T15871] syzkaller1: entered promiscuous mode
[  370.743715][T15871] syzkaller1: entered allmulticast mode
[  370.886488][T15881] netlink: 'syz.4.2640': attribute type 39 has an invalid length.
[  371.129033][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  371.137116][    C0] lec:lec_tx_timeout: lec0
[  371.141776][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  371.287584][T15846] lec:lec_atm_close: lec0: Shut down!
[  371.762066][T15900] lo speed is unknown, defaulting to 1000
[  372.320989][T15929] IPVS: set_ctl: invalid protocol: 25972 95.115.108.97:30309
[  372.435699][T15900] lo speed is unknown, defaulting to 1000
[  372.469212][T15933] syzkaller0: entered promiscuous mode
[  372.474756][T15933] syzkaller0: entered allmulticast mode
[  372.866783][T15949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2657'.
[  374.207183][T16006] syzkaller0: entered promiscuous mode
[  374.216935][T16006] syzkaller0: entered allmulticast mode
[  375.007351][T16038] xt_hashlimit: max too large, truncated to 1048576
[  375.022203][T16038] xt_hashlimit: overflow, try lower: 18446744073709551608/8
[  375.188099][T16045] syzkaller0: entered promiscuous mode
[  375.198293][T16045] syzkaller0: entered allmulticast mode
[  375.255257][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2684'.
[  375.754718][T16075] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2691'.
[  375.903460][T16079] x_tables: ip_tables: icmp match: only valid for protocol 1
[  376.060347][T16084] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  376.081592][T16086] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  376.207822][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2695'.
[  376.227205][T16086] netlink: 261 bytes leftover after parsing attributes in process `syz.2.2695'.
[  376.447454][T16101] lo speed is unknown, defaulting to 1000
[  376.454083][T16101] lo speed is unknown, defaulting to 1000
[  376.461420][T16101] lo speed is unknown, defaulting to 1000
[  376.482090][T16101] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  376.514533][T16101] lo speed is unknown, defaulting to 1000
[  376.524477][T16101] lo speed is unknown, defaulting to 1000
[  376.533207][T16101] lo speed is unknown, defaulting to 1000
[  376.553399][T16101] lo speed is unknown, defaulting to 1000
[  376.569880][T16101] lo speed is unknown, defaulting to 1000
[  376.601823][T16106] syzkaller0: entered promiscuous mode
[  376.607439][T16106] syzkaller0: entered allmulticast mode
[  376.632252][T16112] netlink: 'syz.1.2705': attribute type 39 has an invalid length.
[  376.980805][T16130] x_tables: duplicate underflow at hook 1
[  376.987330][T16130] No such timeout policy "syz1"
[  377.039011][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms
[  377.047133][    C0] lec:lec_tx_timeout: lec0
[  377.052079][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  377.341910][T16146] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2716'.
[  377.352177][T16146] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2716'.
[  377.366359][T16146] netlink: 'syz.4.2716': attribute type 5 has an invalid length.
[  377.374566][T16146] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2716'.
[  377.407010][T16142] lo speed is unknown, defaulting to 1000
[  377.431674][T16149] syzkaller1: entered promiscuous mode
[  377.437223][T16149] syzkaller1: entered allmulticast mode
[  377.491774][T16151] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2718'.
[  377.540335][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'.
[  377.863024][T16164] ip6tnl0: Caught tx_queue_len zero misconfig
[  377.917551][T16171] syz0: rxe_newlink: already configured on lo
[  378.077843][T16142] lo speed is unknown, defaulting to 1000
[  378.087659][T16179] x_tables: duplicate underflow at hook 1
[  378.110447][T16152] lo speed is unknown, defaulting to 1000
[  378.118195][T16179] No such timeout policy "syz1"
[  378.213783][T16184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  378.360496][T16190] syzkaller1: entered promiscuous mode
[  378.366169][T16190] syzkaller1: entered allmulticast mode
[  378.663283][T16154] lo speed is unknown, defaulting to 1000
[  378.669190][T16152] lo speed is unknown, defaulting to 1000
[  378.672568][T16142] lo speed is unknown, defaulting to 1000
[  378.726577][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  378.763030][T16198] sctp: [Deprecated]: syz.4.2733 (pid 16198) Use of struct sctp_assoc_value in delayed_ack socket option.
[  378.763030][T16198] Use struct sctp_sack_info instead
[  379.129413][T16212] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  379.165426][T16215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2738'.
[  379.367179][T16226] x_tables: duplicate underflow at hook 1
[  379.493707][T16236] netlink: 'syz.2.2742': attribute type 1 has an invalid length.
[  379.509679][T16236] netlink: 'syz.2.2742': attribute type 3 has an invalid length.
[  379.527866][T16236] NCSI netlink: No device for ifindex 813332851
[  379.813722][T16242] team0 (unregistering): Port device C removed
[  379.858612][T16242] team0 (unregistering): Port device team_slave_1 removed
[  379.912928][T16242] team0 (unregistering): Port device bridge5 removed
[  379.935464][T16230] syzkaller1: entered promiscuous mode
[  379.941311][T16230] syzkaller1: entered allmulticast mode
[  379.954008][T16152] lo speed is unknown, defaulting to 1000
[  380.009497][T16154] lo speed is unknown, defaulting to 1000
[  380.055899][T16253] x_tables: duplicate underflow at hook 1
[  380.088765][T16253] No such timeout policy "syz1"
[  380.137453][T16255] netlink: 'syz.4.2745': attribute type 11 has an invalid length.
[  380.396011][T16266] __nla_validate_parse: 3 callbacks suppressed
[  380.396034][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2748'.
[  380.416537][T16263] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2748'.
[  380.472479][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2748'.
[  380.572506][T16266] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2748'.
[  380.606144][T16269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2750'.
[  380.623164][T16269] xfrm1: entered allmulticast mode
[  380.628649][T16263] lo speed is unknown, defaulting to 1000
[  380.799468][T16263] lo speed is unknown, defaulting to 1000
[  381.189910][T16283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2754'.
[  381.213174][T16284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2754'.
[  381.258117][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2754'.
[  381.380428][T16263] lo speed is unknown, defaulting to 1000
[  381.433666][T16154] lo speed is unknown, defaulting to 1000
[  381.789609][T16294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.798711][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2757'.
[  382.003978][T16290] tipc: Resetting bearer <eth:syzkaller0>
[  382.059024][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  382.067102][    C0] lec:lec_tx_timeout: lec0
[  382.071895][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  382.104630][T16289] tipc: Disabling bearer <eth:syzkaller0>
[  382.655343][T16324] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2764'.
[  383.414870][T16382] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  383.657330][T16393] gtp2: entered promiscuous mode
[  383.662483][T16393] gtp2: entered allmulticast mode
[  383.823487][T16397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.884761][T16397] tipc: Resetting bearer <eth:syzkaller0>
[  383.957088][T16396] tipc: Disabling bearer <eth:syzkaller0>
[  384.341243][T16421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.361263][T16421] syzkaller0: entered promiscuous mode
[  384.368907][T16421] syzkaller0: entered allmulticast mode
[  384.472900][T16427] netlink: 'syz.3.2783': attribute type 1 has an invalid length.
[  384.490369][T16427] netlink: 'syz.3.2783': attribute type 1 has an invalid length.
[  384.505298][T16427] netlink: 'syz.3.2783': attribute type 1 has an invalid length.
[  384.546922][T16427] netlink: 'syz.3.2783': attribute type 1 has an invalid length.
[  384.566863][T16427] netlink: 'syz.3.2783': attribute type 1 has an invalid length.
[  384.589823][T16427] netlink: 'syz.3.2783': attribute type 1 has an invalid length.
[  384.606828][T16427] netlink: 'syz.3.2783': attribute type 1 has an invalid length.
[  384.628750][T16427] netlink: 'syz.3.2783': attribute type 1 has an invalid length.
[  384.651982][T16427] netlink: 'syz.3.2783': attribute type 1 has an invalid length.
[  384.679693][T16427] netlink: 'syz.3.2783': attribute type 1 has an invalid length.
[  385.144266][T16420] tipc: Resetting bearer <eth:syzkaller0>
[  385.228099][T16420] tipc: Disabling bearer <eth:syzkaller0>
[  385.735225][T16450] __nla_validate_parse: 10 callbacks suppressed
[  385.735249][T16450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2789'.
[  385.759400][T16450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2789'.
[  385.859606][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'.
[  385.868686][T16454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2790'.
[  385.878406][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'.
[  385.887757][T16454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2790'.
[  386.132785][T16461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2792'.
[  386.268733][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2793'.
[  386.302634][T16463] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2793'.
[  386.327811][T16464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2793'.
[  386.578244][T16469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  386.826494][ T5192] udevd[5192]: worker [5886] /devices/virtual/block/nbd0 timeout; kill it
[  386.836829][ T5192] udevd[5192]: seq 11573 '/devices/virtual/block/nbd0' killed
[  387.079074][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  387.087228][    C0] lec:lec_tx_timeout: lec0
[  387.092042][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  387.462468][T16488] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  387.487753][T16488] : entered promiscuous mode
[  387.497213][T16488] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  387.731740][T16500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.751405][T16500] syzkaller0: entered promiscuous mode
[  387.756955][T16500] syzkaller0: entered allmulticast mode
[  387.796435][T16498] tipc: Resetting bearer <eth:syzkaller0>
[  387.853678][T16498] tipc: Disabling bearer <eth:syzkaller0>
[  388.294554][T16519] lo speed is unknown, defaulting to 1000
[  388.441093][T16523] macvlan2: entered promiscuous mode
[  388.446716][T16523] macvlan2: entered allmulticast mode
[  388.484978][T16523] bond8: entered promiscuous mode
[  388.532386][T16523] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  388.672130][T16523] bond8: left promiscuous mode
[  388.680385][T16537] x_tables: duplicate underflow at hook 1
[  388.687593][T16537] No such timeout policy "syz1"
[  388.771561][T16519] lo speed is unknown, defaulting to 1000
[  388.965004][   T31] INFO: task kworker/0:0H:11 blocked for more than 143 seconds.
[  388.972942][   T31]       Not tainted syzkaller #0
[  388.979350][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  388.996851][   T31] task:kworker/0:0H    state:D stack:26536 pid:11    tgid:11    ppid:2      task_flags:0x4208060 flags:0x00080000
[  389.038030][   T31] Workqueue: kblockd blk_mq_requeue_work
[  389.052408][   T31] Call Trace:
[  389.059141][   T31]  <TASK>
[  389.159086][   T31]  __schedule+0x15dd/0x52d0
[  389.163881][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  389.171872][T16519] lo speed is unknown, defaulting to 1000
[  389.179057][   T31]  ? __pfx___schedule+0x10/0x10
[  389.184175][   T31]  ? schedule+0x90/0x360
[  389.188462][   T31]  schedule+0x164/0x360
[  389.192757][   T31]  schedule_timeout+0x158/0x2c0
[  389.197763][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  389.203867][   T31]  ? __pfx_process_timeout+0x10/0x10
[  389.209612][   T31]  ? _raw_spin_unlock_irqrestore+0x74/0x80
[  389.215491][   T31]  ? prepare_to_wait_event+0x436/0x480
[  389.221528][   T31]  nbd_queue_rq+0x857/0x1100
[  389.226347][   T31]  ? __pfx_nbd_queue_rq+0x10/0x10
[  389.231892][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  389.238049][   T31]  blk_mq_dispatch_rq_list+0xa70/0x1910
[  389.244133][   T31]  ? sbitmap_get+0x229/0x390
[  389.248947][   T31]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  389.255944][   T31]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  389.262200][   T31]  __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  389.268748][   T31]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  389.276046][   T31]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  389.287115][   T31]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  389.293073][   T31]  blk_mq_run_hw_queue+0x348/0x4f0
[  389.298271][   T31]  blk_mq_run_hw_queues+0x26c/0x3f0
[  389.304045][   T31]  blk_mq_requeue_work+0x71c/0x780
[  389.309543][   T31]  ? __pfx_blk_mq_requeue_work+0x10/0x10
[  389.315277][   T31]  ? process_scheduled_works+0xa25/0x1830
[  389.321559][   T31]  ? process_scheduled_works+0xa25/0x1830
[  389.327367][   T31]  process_scheduled_works+0xb02/0x1830
[  389.333665][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  389.340053][   T31]  ? assign_work+0x3d5/0x5e0
[  389.344724][   T31]  worker_thread+0xa50/0xfc0
[  389.349853][   T31]  kthread+0x388/0x470
[  389.353994][   T31]  ? __pfx_worker_thread+0x10/0x10
[  389.360240][   T31]  ? __pfx_kthread+0x10/0x10
[  389.365010][   T31]  ret_from_fork+0x51e/0xb90
[  389.370195][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  389.375469][   T31]  ? __switch_to+0xc7d/0x1450
[  389.380833][   T31]  ? __pfx_kthread+0x10/0x10
[  389.385579][   T31]  ret_from_fork_asm+0x1a/0x30
[  389.390921][   T31]  </TASK>
[  389.394790][   T31] 
[  389.394790][   T31] Showing all locks held in the system:
[  389.404099][   T31] 4 locks held by kworker/0:0H/11:
[  389.409696][   T31]  #0: ffff888020280d48 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  389.421229][   T31]  #1: ffffc90000107c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  389.434724][   T31]  #2: ffff8880258cb718 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0
[  389.446607][   T31]  #3: ffff888026d88580 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  389.456214][   T31] 4 locks held by kworker/1:1/29:
[  389.461659][   T31]  #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[  389.472704][   T31]  #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  389.482055][   T31]  #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0
[  389.492487][   T31]  #3: ffff88801ded0a90 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x66/0x1390
[  389.502197][   T31] 1 lock held by khungtaskd/31:
[  389.507300][   T31]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  389.518464][   T31] 2 locks held by getty/5590:
[  389.523649][   T31]  #0: ffff8880341db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  389.534708][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  389.545437][   T31] 1 lock held by udevd/5886:
[  389.550602][   T31]  #0: ffff888026ce6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  389.560480][   T31] 3 locks held by syz.4.2812/16519:
[  389.565821][   T31] 1 lock held by syz.3.2814/16526:
[  389.571891][   T31]  #0: ffffffff8fbc7508 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  389.581477][   T31] 4 locks held by syz.1.2817/16548:
[  389.586730][   T31]  #0: ffff888049abbb88 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  389.597514][   T31]  #1: ffffffff8fc33970 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  389.609091][   T31]  #2: ffff8880344174d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0
[  389.620274][   T31]  #3: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  389.631557][   T31] 
[  389.633969][   T31] =============================================
[  389.633969][   T31] 
[  389.648838][   T31] NMI backtrace for cpu 0
[  389.648866][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  389.648889][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  389.648902][   T31] Call Trace:
[  389.648910][   T31]  <TASK>
[  389.648920][   T31]  dump_stack_lvl+0xe8/0x150
[  389.648960][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  389.649074][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  389.649105][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  389.649137][   T31]  sys_info+0x135/0x170
[  389.649187][   T31]  watchdog+0xfd9/0x1030
[  389.649234][   T31]  ? watchdog+0x21a/0x1030
[  389.649275][   T31]  kthread+0x388/0x470
[  389.649297][   T31]  ? __pfx_watchdog+0x10/0x10
[  389.649326][   T31]  ? __pfx_kthread+0x10/0x10
[  389.649349][   T31]  ret_from_fork+0x51e/0xb90
[  389.649380][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  389.649406][   T31]  ? __switch_to+0xc7d/0x1450
[  389.649434][   T31]  ? __pfx_kthread+0x10/0x10
[  389.649456][   T31]  ret_from_fork_asm+0x1a/0x30
[  389.649505][   T31]  </TASK>
[  389.754356][   T31] Sending NMI from CPU 0 to CPUs 1:
[  389.759688][    C1] NMI backtrace for cpu 1
[  389.759705][    C1] CPU: 1 UID: 0 PID: 5174 Comm: syslogd Not tainted syzkaller #0 PREEMPT(full) 
[  389.759726][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  389.759753][    C1] RIP: 0010:lockdep_hardirqs_off+0x81/0xd0
[  389.759777][    C1] Code: c7 05 f7 3d 6d 07 00 00 00 00 49 89 9e 00 0b 00 00 41 8b 86 f0 0a 00 00 ff c0 41 89 86 f0 0a 00 00 41 89 86 0c 0b 00 00 eb 17 <48> c7 c7 f8 ee f5 8d e8 53 19 00 00 65 8b 05 3c 41 6d 07 85 c0 74
[  389.759793][    C1] RSP: 0018:ffffc90002fa7830 EFLAGS: 00000046
[  389.759809][    C1] RAX: 0000000080000000 RBX: ffffffff822fe8cf RCX: 0000000000000000
[  389.759822][    C1] RDX: ffff88805729e400 RSI: ffff88805729e400 RDI: ffffffff822fe8cf
[  389.759836][    C1] RBP: 0000000000000000 R08: 000000006b20c98b R09: 000000002947302c
[  389.759847][    C1] R10: 000000000000000d R11: ffffffff81b0bb70 R12: ffff88805729e400
[  389.759860][    C1] R13: 0000000000000000 R14: ffff88813fe00140 R15: 0000000000000286
[  389.759871][    C1] FS:  00007fcdf7d21c80(0000) GS:ffff888125565000(0000) knlGS:0000000000000000
[  389.759890][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  389.759902][    C1] CR2: 0000001b31009ff8 CR3: 0000000030436000 CR4: 00000000003526f0
[  389.759917][    C1] Call Trace:
[  389.759924][    C1]  <TASK>
[  389.759930][    C1]  ? kasan_quarantine_put+0x2f/0x1f0
[  389.760014][    C1]  trace_hardirqs_off+0x12/0x40
[  389.760049][    C1]  kasan_quarantine_put+0x2f/0x1f0
[  389.760069][    C1]  kfree+0x1c1/0x630
[  389.760084][    C1]  ? skb_release_data+0x6f0/0x940
[  389.760221][    C1]  skb_release_data+0x6f0/0x940
[  389.760260][    C1]  __kfree_skb+0x5d/0x210
[  389.760287][    C1]  __unix_dgram_recvmsg+0x9d0/0xd50
[  389.760354][    C1]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[  389.760370][    C1]  ? aa_file_perm+0x192/0x15e0
[  389.760467][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  389.760491][    C1]  ? aa_sock_msg_perm+0xda/0x1b0
[  389.760514][    C1]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  389.760544][    C1]  ? unix_dgram_recvmsg+0xae/0xd0
[  389.760566][    C1]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[  389.760587][    C1]  sock_recvmsg+0x172/0x1b0
[  389.760633][    C1]  sock_read_iter+0x251/0x320
[  389.760655][    C1]  ? __pfx_sock_read_iter+0x10/0x10
[  389.760682][    C1]  ? bpf_lsm_file_permission+0x9/0x20
[  389.760704][    C1]  ? security_file_permission+0x75/0x260
[  389.760755][    C1]  vfs_read+0x582/0xa70
[  389.760789][    C1]  ? __pfx_vfs_read+0x10/0x10
[  389.760805][    C1]  ? ktime_get+0x45/0x200
[  389.760823][    C1]  ? ktime_get+0x1d2/0x200
[  389.760850][    C1]  ksys_read+0x150/0x270
[  389.760869][    C1]  ? __pfx_ksys_read+0x10/0x10
[  389.760895][    C1]  do_syscall_64+0x14d/0xf80
[  389.760912][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.760949][    C1]  ? clear_bhb_loop+0x40/0x90
[  389.760970][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.760988][    C1] RIP: 0033:0x7fcdf7e71407
[  389.761005][    C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  389.761021][    C1] RSP: 002b:00007ffc16d91b50 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  389.761040][    C1] RAX: ffffffffffffffda RBX: 00007fcdf7d21c80 RCX: 00007fcdf7e71407
[  389.761053][    C1] RDX: 00000000000000ff RSI: 000055feaca17950 RDI: 0000000000000000
[  389.761064][    C1] RBP: 000055feaca17910 R08: 0000000000000000 R09: 0000000000000000
[  389.761076][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055feaca1799c
[  389.761087][    C1] R13: 0000000000000000 R14: 000055feaca17950 R15: 000055fe91c00d98
[  389.761111][    C1]  </TASK>
[  390.118259][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  390.125202][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  390.134356][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  390.144445][   T31] Call Trace:
[  390.147757][   T31]  <TASK>
[  390.150712][   T31]  vpanic+0x56c/0xa60
[  390.154726][   T31]  ? __pfx___schedule+0x10/0x10
[  390.159609][   T31]  ? __pfx_vpanic+0x10/0x10
[  390.164145][   T31]  ? __pfx_console_unlock+0x10/0x10
[  390.169403][   T31]  panic+0xc5/0xd0
[  390.173159][   T31]  ? __pfx_panic+0x10/0x10
[  390.177612][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  390.183068][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  390.189261][   T31]  watchdog+0x1023/0x1030
[  390.193643][   T31]  ? watchdog+0x21a/0x1030
[  390.198103][   T31]  kthread+0x388/0x470
[  390.202197][   T31]  ? __pfx_watchdog+0x10/0x10
[  390.206910][   T31]  ? __pfx_kthread+0x10/0x10
[  390.211529][   T31]  ret_from_fork+0x51e/0xb90
[  390.216165][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  390.221308][   T31]  ? __switch_to+0xc7d/0x1450
[  390.226018][   T31]  ? __pfx_kthread+0x10/0x10
[  390.230637][   T31]  ret_from_fork_asm+0x1a/0x30
[  390.235452][   T31]  </TASK>
[  390.239121][   T31] Kernel Offset: disabled
[  390.243549][   T31] Rebooting in 86400 seconds..