last executing test programs:

3m36.606139705s ago: executing program 4 (id=10526):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000))

3m36.466435753s ago: executing program 4 (id=10530):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x9, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x7, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0x9, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

3m36.202958113s ago: executing program 4 (id=10533):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff1, 0x3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

3m35.794691047s ago: executing program 4 (id=10540):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0xafa7}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)

3m35.451416943s ago: executing program 4 (id=10545):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf250600000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800)

3m35.244203107s ago: executing program 4 (id=10549):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x24048000)

3m20.218388503s ago: executing program 32 (id=10549):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x24048000)

2m33.948201599s ago: executing program 0 (id=11452):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x2, 0x0, 0x0, 0x5, {[@sack={0x5, 0x12, [0x4, 0x6, 0x81, 0x5]}]}}}}}}}, 0x0)

2m33.483805312s ago: executing program 0 (id=11457):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0x7f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400000000000600000000000000000000000000000000000085dc9d9839dc1336", 0xfdbd}], 0x1}, 0x4005)

2m32.946073214s ago: executing program 0 (id=11461):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdc9b, 0x1, 0x1}, {0xe0000, 0xffffff81, 0x0, 0xa, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x810)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="1e", 0x1}], 0x1}, 0x4c00c)

2m32.579854225s ago: executing program 0 (id=11465):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x23b}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db130dc9a9e82dae807b69f57202e694041d85a70a98ed38e10b116d2249a8746d54c19d053605f35cb085edc1b1df8f487d1e1835a9037d94fdb5777403217fb9cd018ee14185b10e413a1095995d75f8c23e88f9e6026228f9516745e87f63b7cc0f59573b3fd06bd33f1879451a9d20e08", 0xc0}], 0x2}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)

2m32.399504148s ago: executing program 0 (id=11466):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "1be3c09e19debc63", "88ceaf988af00cb633de316f804f021508edc0dcd0cd938d7671a308442dcee5", "7006458a", "e65de1197305e1bc"}, 0x38)

2m32.34374968s ago: executing program 0 (id=11467):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x24048000)

2m17.300872948s ago: executing program 33 (id=11467):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x24048000)

1.758241745s ago: executing program 5 (id=13510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x14, 0x1, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}}, 0x800)

1.755018691s ago: executing program 1 (id=13512):
r0 = socket(0x1e, 0x4, 0x0)
connect$llc(r0, &(0x7f0000000440)={0x1a, 0x304, 0x9, 0x3, 0x7, 0x7, @local}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x48}}, 0x0)

1.651659071s ago: executing program 2 (id=13514):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24044080}, 0x40804)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44002}, 0x40080d4)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r0, 0x402, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x68}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd4e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x71}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f0000000900)={&(0x7f0000000880)=[{&(0x7f0000000480)="219bac288e64b8e87662d2e7b8cdce855a88ba3cd0fae02ef0ffcd8a862b61ba701a1a5017882e482c40065a0c37df7979442d895865745ef74db5a3a1d5181a326f11979f7189dad1a6a12243a62a741350f2d4c2e7b772abc8a241c7f8dd41f448799a21f3087b0c48eed0e58d164d90494cbb03b99bc9d6d7d6e2c32fc83ba643a10cd85943f4bfe1e296bfc3b7cd8cc1e171f90dd3314719132beae778dc1208df8295aae41a9dd4bda888b6ce978b0151ee5394fb5dfe97ee1761f0126ea6026994c9a2c6c7d540ee91eca4a03d8f873778a84f3d6cde7f6a448f930610a0a6e1", 0xe3}, {&(0x7f0000000580)="43dc37d4488bf9a0fe6e9add1514821c3ae6db3ba175cdd340fd6e5f6d05311aa1da1c761b2ba8ce472200a14d1a15a9b59d973c379da3142cb692c2865f3744350d820fb00b3a5dfb3d893fa4e3de38c4a8961a03298ca75cbd38b8725d80975bfa7a0c4d8f3a6a5d1d11831bcf28e5200d69f0ccc324b35d332fac02a921e690960fe167a7a8474ac872749e50b9a408d31b1baa1cbee33300ee2ebc9eb783", 0xa0}, {&(0x7f0000000640)="d61598439057", 0x6}, {&(0x7f0000000680)="d332944cb0771ea9c9f843681b9f1a0105ba3c22c1f0bc7f4f277c263a39f4135ebc3938770c2a9a9b1d11459dc7552f35a352004a8933125573f499514e3fff60f9a040f47a6a2e24f6e39188cd7d2546bda97b8694123512ff4873b74b542e5f7dab062b8fe8b01565deed0b561a5f184704acfa78c6ba972757807dc998987616d2ff1e559a5ea528790990fff00df119e1c6f84824d3c680bebb7eb12dc328f3384632b199a9b2f389950ca363cc91f847a96626a6238a07427d8895de0df8005e8638820ec7a78607364d7fb9beaca934e1ce97703cd78590f238b7bceae8d2a302148195dd6beed30a01bae28dc5b5d9e7ec34132175b7", 0xfa}, {&(0x7f0000000780)="ad451cb715042be1fa8fbc79b76d5caa89511f9172a41d26811ebfcb0c9e6edd2ef00cd5c7a1f3956cb85fc0162059672f826ead80b042b48454186b81aa28932e11a2ea395dedca20600af418a3bcd4f891e00b3853e434b45c4cc4e3", 0x5d}, {&(0x7f0000000800)="148e5e9740cb7caccdad2560fde7c150ca5434b0f4289021c864a5589e1bac8497576b4e6bdcff09f90fb4d1f8186aef24cc012d40b999c6f49589ef92cd19462087288599681e33d7c78e175514c4cc1f570ea0e5947c226a85e235ab9387", 0x5f}], 0x6, 0x401, 0x0, 0x13, 0x4, 0x8000, 0x3, 0x5})
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000e40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f00000009c0)={0x43c, 0x3f3, 0x300, 0x70bd26, 0x25dfdbfd, {0x10, 0x3, 0x2f, [0x5, 0xf, 0x3ff, 0x7, 0x9, 0x1, 0x3, 0x7, 0x200, 0x3, 0x3, 0x5, 0xb86d, 0x3, 0x0, 0x0, 0x10, 0x4, 0x4, 0x3, 0x4, 0x101, 0x4, 0x8, 0x9, 0x7fff, 0x7f, 0x9, 0x9, 0x5, 0x4, 0xa, 0x8, 0x5, 0xcd1, 0x9, 0x6, 0x80000001, 0x2762, 0x2641, 0x5, 0x2, 0x7fffffff, 0x40, 0x7ff, 0x7, 0x1000, 0x0, 0xc00000, 0x1, 0x3, 0x1, 0x5, 0xe, 0x80, 0x22, 0x2, 0x8, 0x9, 0x1, 0x6, 0x16f, 0xd45, 0x3], [0xa9f, 0x1, 0x3, 0xfffffffd, 0xf4, 0x1, 0x51, 0x8, 0x404, 0x0, 0x81, 0x10000, 0x6, 0x5, 0xffffffff, 0x8, 0x5, 0x1, 0x80, 0x4, 0x10000, 0x9, 0x6, 0x2, 0x1, 0x6, 0xffffffff, 0x6, 0x100, 0x8, 0x0, 0x5, 0x2, 0x5e, 0x80, 0xbd8, 0x9, 0x15c44f7f, 0xfff, 0x4, 0x68cc, 0x99ed, 0xfffffc00, 0xc, 0x4, 0x0, 0x200, 0x6, 0xfffffffa, 0xfffffff7, 0x10000, 0xe, 0x5ea, 0x74f2, 0xfffffffd, 0x6, 0xb6, 0x9, 0x2, 0x5, 0xefb, 0xe312, 0x4, 0xfff], [0x4, 0x2e, 0x7, 0x0, 0x7, 0x6b580000, 0xfffffff9, 0x9, 0x4571ad87, 0x1, 0x7, 0x6, 0xe2d3, 0xffffffc5, 0x2, 0xd, 0x5, 0x5, 0x7, 0x349, 0x7, 0xe3, 0xf, 0x1, 0x4, 0xe5, 0x5, 0x2, 0xf8d2, 0x40000, 0x6, 0xc, 0x3, 0x293, 0x1, 0x6, 0x1, 0x1, 0x6, 0x1, 0x0, 0x3, 0x1, 0x9, 0x900, 0xb56, 0x7350, 0x2, 0x8, 0x7, 0x4, 0x0, 0x2, 0x8, 0x8, 0x8, 0x3, 0x7f, 0x1e7f122d, 0x4, 0x40, 0xfffffff9, 0x4], [0x6, 0xde63, 0x8, 0x4, 0x317, 0x40, 0x400, 0xf, 0x101, 0x7, 0x6, 0x8, 0xfffffffe, 0x5, 0x9, 0x4, 0x8, 0x81, 0x1000, 0x0, 0x5, 0x8, 0x1ff, 0x6, 0xff, 0xffff, 0x8, 0x2d, 0x5de7, 0x5, 0x6, 0x7, 0xc, 0x45, 0x3, 0x0, 0x2, 0x6, 0x80000001, 0xeb, 0x37d, 0x6, 0x6, 0x0, 0x6, 0xfffffffd, 0x1, 0x1, 0xaa3, 0x6000, 0x10001, 0x4ccf, 0x6, 0x2bd, 0x4175, 0x6, 0x0, 0x4, 0x8001, 0x8, 0x2, 0x2, 0xff8, 0x9], 0x1a, ['+-^.\x00', '-^\x00', '.+:-,\\#(*\x00', ' \x01\x00', 'IPVS\x00']}, ["", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x40}, 0x4060000)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000e80)={0x4, 0x3, 0x0, 0xdf, 0x7, 0x0, [{0xc6e4, 0x3ff, 0x8000, '\x00', 0x2100}, {0x4, 0x5}, {0x6, 0x101, 0xd, '\x00', 0x2080}, {0x5, 0x9, 0x3e, '\x00', 0x1001}, {0x6, 0x2, 0x3, '\x00', 0x4}, {0x2, 0x8, 0x8, '\x00', 0x200}, {0x10000, 0x1b, 0xfffffffffffffff9, '\x00', 0x40c}]})
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000001040))
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000010c0)=0x14, 0x80800)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000001100)=@req={0x40, 0x8, 0x4, 0x2}, 0x10)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001140)={<r4=>0x0, 0x7ff}, &(0x7f0000001180)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000011c0)={<r5=>r4, 0x40, 0x9, 0x8000, 0x5, 0x5}, &(0x7f0000001200)=0x14)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001280), r1)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x2, &(0x7f0000001380)=@raw=[@alu={0x4, 0x0, 0xb, 0xb, 0x6, 0xfffffffffffffff4, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x6, 0x9, 0x7, 0xffffffffffffffff, 0x4}], &(0x7f00000013c0)='GPL\x00', 0x2201, 0x81, &(0x7f0000001400)=""/129, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x5, 0x2, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001540)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001580)=[{0x3, 0x4, 0xd, 0x5}, {0x1, 0x1, 0x10, 0x7}, {0x2, 0x1, 0x4, 0x4}], 0x10, 0x14}, 0x94)
writev(r7, &(0x7f0000002940)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="de0b0143b7ce38f113eb4241aff951055b07e5d0abd3bc30ecdc1fdc9eec4757d62df84101ad62fd63463a9f1e812a828f07142754de0655b0b283133976da66db47b9a2e3c33498bbf52ecfb3419d56c324932b1473849e7299243db7851e3dd79d248c1fc89cd3d681e13c20709e25c591fba473ce91d911acf0b511e9c8b511ae496a45bc9504aaf0297cb67aadc002bfd74a97f4e08376afcbbf42fc1c469d7908d9817042", 0xa7}, {&(0x7f0000002740)="31195e0526f37cbb40518a6a1d30e22d0c6259a1b6027e3188552c2423e63e8ec8d1595bb0254675a4160015a9c4e51e6658975f6f52b8685e4a05ad99f87e68cbba2582f3a9cc7cc6d4f4854e7b4dc1eb1224c988a7fe87cf8a345af53c50e3e71fda898f2ed87cf1507dcf2eddba84977972c3f2e6c7a5a97ca14706ef9bc4b9a363da0997d6a986f071f989d09ac9cbd6052228dd46c9565282237e139189637a7d7b1bf38add3acdb5a1a336423786b5c1d306101b827d1e5b985a13a9044758f74b4c838b63b31f5b12c39026282f409204d2a21d4b2e9d83c04d7d2972e2abac49794bb910cba1ca0d5c9b3d8e4377f6e1c6071fc6", 0xf8}, {&(0x7f0000002840)="5a491393a82b2ab7ba3692337d2f835b99f88e73f59e4203c69b0382d824b80bf4d031e63dea59c161a28552543add4f6558cf6d14ecffe619a93764bfbd30bfc6c0af819df212ff55f548ebddf12048c6f391cb8948063ae56dc5ec3f109eeb52708aba2512c2d5226bb7542924be22ee3383e29d", 0x75}, {&(0x7f00000028c0)="daf8a27f4081a600dfbb070a2c7f9c047761323a4675b82f27eede317665d97577ceb53aad948e3725d92f2ec1201c1135d56a7169682f4c7dc118ddb8fdc534d423f9fe8c21f29bed92b622", 0x4c}], 0x5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000029c0))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000002a00)={0x0, 0xb, 0x6, 0x401, 0x1, 0x3, 0x2, 0x942, r5}, &(0x7f0000002a40)=0x20)
r9 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$nl_generic(r9, &(0x7f0000003040)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003000)={&(0x7f0000002ac0)={0x528, 0x39, 0x2, 0x70bd2c, 0x25dfdbfc, {0x13}, [@generic="909a09088353b8c7876b648c24eae8dc7f50e246d47211ab6ffcb4fc003e17245682bba9a4a025718417fc73c9", @nested={0x27b, 0x4c, 0x0, 0x1, [@typed={0x8, 0x135, 0x0, 0x0, @uid}, @nested={0x4, 0x76}, @generic="cacb4d3bb9fdebfaa1f8a006c07df470f807640ba96d45bf4fd67acd367416ae568eaaf0a236cd70ea99cd2b0084f5a6fa9ea787932803973d7a3b32cc40674f0835e84f17201fcabfa4530ca9d24dfc870da2c0f511dd2ffc588470e3786561108892f73f95c5c2844409acc31c0058d419f754c0829f44bcd4d1c4ff3d888df680a692030f8784409cf97146f57faf6fb4dddf8a7714ef44aecf10f177120b8a1a3f9f283ea66da8655bc2a5e59c8ed9396a91a22149cd0611763e23b9ceb53b", @typed={0x8, 0x111, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0x34}, @generic="f790036b70c92e0dda429f6ddb85105c4b03dda967515130fd16ff178cbdc59cb09e1e24b24766823bf696dd7e7cd1d579bb5602635bd332e67b79ac1b5fd738db7182e2bc8e04102761c5ac3c8786bd6c10bf480346550b36942fd07268127b6085595cd8ba3678c753bedc55e2bf586cc84dcf31a321bb545fd2c465c5cefd6ca2da571bd22009081597452371375ff3bf8d578249e5ee3b1f46988a6ed248a4d9dba526f411674476ada287330f1112f0fac81bbccac7ac63aa2279a72b6296c56d26e9e851de271b41c30a78592b94d2e7f1485a09fad93f3c6d385cbb1741849d64d2e5ba4612fc", @generic="1f3fd6da17a125ebef092aa1072a7ab792b3b8739b4d92a007847ea8aefe4a650c02e5e69b370fcd49b3af3a6bdda8755fd9c924d36e41368b3c3a0d7c66e25d6130d7471f9ad221b3857ea692795287231df746fed252762c756ecb77f6df753acd1e360cfcdf4cdc2a3611aaeada32dead77d74055a6e1df19464b2b31b9132b7a0e40385ea820dbb5ac69a4f280a6202ffa126ab447702a44287cd15342bc6c29daa6d9e79aa6f24ced407d2c459bb11c2802"]}, @typed={0xe0, 0xe8, 0x0, 0x0, @binary="ccdd72e2a030443385defdabbd1b5e283210c588c00fd7717eb0a7a9864aeb57a8a39c23426cc2c19f80a2d3920b506b2997aa768d63b5bef540954252530fd8c424e221a7b67e454f85314a35c6d1d9ea9e256687e87b709787d9e96c709243eaaf3dd74ed795701fc00ad47f4ba20e2542a4b832a4765420076c82afc96a6b451c3b4847017a5dc74b1c1d73a4b7d5f275af3054178353fba9c1cee0495b0fca833e4432e16cfa84513738d025c4ae39776ca97aea0578b117c660433af97ab5eabcf7330f175d4a42be77d9c82bac5e5d11ef875ef1a3ff8271fd"}, @generic="17a3445d2aa4f57d6fa294a5054b29bca329ab02744f062a69cc216e8839c271904497274da51e908654a5a475e03529b52d1919f797f26133df6b15882776024269a97c63374343156c7883b68d32ffbf6f434c74d859e4a3140bf2fe10f8801af35c7b9fd4058dca03149bf7", @generic="4ad7330efbf4f3f20d645946d8c1d4b2bae2314f95de1bb9008114ce0758b1109825282cfeb0b1e3ca832dabdf74f5178bffc12d7db5918d40c83dc70bef08aaef20028d1377011bff3b5c497ecf7618609f3a7fb98a7d7560548199bcf75d5c2346c8b1891af9cfb6", @generic="0b60e64944b65c2a2470565a8d25390c5ecde8f62048336d1c93c32d9f1fa8b0104a47317ec4740505841c5109941a6f3da888bbe34418b228a29ad4f2a96fb3db114808088053e2141e39e15c477a9846c88f68536f5ede7378d7d8a4b2cfb4e5ae3edd4a90e3c5829c8a7307540e6527f3dbbe726cadd1f8348a85ff8296532a8f75cca6b1bc318cf1049e80553033f5289df7c2360a6d6a5fe8f120f3186f77c4c6264ceb07774280d2f09eca80b86f0bd29a3b"]}, 0x528}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003080), 0xffffffffffffffff)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f00000030c0)={r4, 0x8}, &(0x7f0000003100)=0x8)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x2c, r10, 0x121, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}]}, 0x2c}}, 0x4008000)

1.651179568s ago: executing program 5 (id=13515):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r1, 0xb03, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x10000000000, 0x4000}, 0x20040880)

1.506661889s ago: executing program 2 (id=13517):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r3 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
close(0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x12, 0x1, 0xb6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@fallback=r2, 0xffffffffffffffff, 0xc, 0x2004, 0x0, @value, @void, @void, @void, r4}, 0x20)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r10=>0xffffffffffffffff})
r11 = gettid()
ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000000)=r11)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x13c, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24000020}, 0x24000000)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r12, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a971f12e3a0000000000000001000000024000007f0000010204"], 0x110)
r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14050000360001002dbd70000300000002"], 0x514}], 0x1, 0x0, 0x0, 0x24008080}, 0x0)

1.480212911s ago: executing program 5 (id=13518):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="2400ffff", @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0)

1.344107783s ago: executing program 5 (id=13520):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_buf(r0, 0x29, 0x7, 0x0, &(0x7f0000000180)) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x108, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x960}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffffc, @private2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9499}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40880}, 0x44000) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) (async)
getsockopt$inet6_tcp_int(r5, 0x6, 0x5, 0x0, &(0x7f00000009c0)) (async)
pipe(&(0x7f0000000180)={<r6=>0xffffffffffffffff})
sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000440), &(0x7f0000000480)=0x4)

1.343733644s ago: executing program 2 (id=13521):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000010002104ef000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2)

1.251272439s ago: executing program 1 (id=13523):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x810)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="1e", 0x1}], 0x1}, 0x4c00c)

1.232072166s ago: executing program 6 (id=13525):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8)
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28f94174f9f5ffff07003d"], 0x28}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r2], 0x50}}, 0xc0)

1.132068369s ago: executing program 2 (id=13526):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
listen(r0, 0x80)
accept$netrom(r0, 0x0, 0x0) (async)
pipe(0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000029bd9cb3000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async)
bind$tipc(r2, 0x0, 0x0) (async)
sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) (async)
close(0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0)

1.130280666s ago: executing program 6 (id=13527):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1c, r3, 0x2, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x400c011) (async)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000600)=""/86, 0x56}], 0x2}, 0x10100) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4)

1.12984874s ago: executing program 1 (id=13528):
r0 = socket$inet6(0xa, 0x7, 0x87)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r2=>0x0})
sendmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4e34, 0x5, 0x4e23, 0x0, 0xa, 0x10}, {0x9, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0x400000000006, 0x2, 0x40000000000000}, {0xffffffffffffdfff, 0xfffffffffffffff7, 0x1, 0x20}, 0xfffffff7, 0x101, 0x1, 0x0, 0x3, 0x2}, {{@in=@broadcast, 0x1, 0x33}, 0xa, @in=@private=0xa010100, 0x1502, 0x3, 0x0, 0x0, 0xc36}}, 0xe8)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000180)='ns/uts\x00')
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)

952.273791ms ago: executing program 2 (id=13530):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="2400ffff", @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0)

793.690799ms ago: executing program 6 (id=13532):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
listen(r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
r3 = socket$netlink(0x10, 0x3, 0x9)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000440)="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"}], 0x1)

736.032597ms ago: executing program 2 (id=13533):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$kcm(0x10, 0x400000002, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

735.781711ms ago: executing program 1 (id=13534):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a00000800", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

695.984659ms ago: executing program 3 (id=13535):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000007f00"/21, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000540)={0x276a7ece4bfa0994})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

663.771882ms ago: executing program 6 (id=13536):
r0 = bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000004080)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7e}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0xa3, &(0x7f00000000c0)=""/163, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[r0, r0, r0, r0, r0], &(0x7f0000000200)=[{0x3, 0x5, 0x9, 0xb}], 0x10, 0x4}, 0x94) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r3 = socket(0x11, 0x80a, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) (async, rerun: 32)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r4, 0x25, 0x8, @val=@perf_event={0x40}}, 0x18) (rerun: 32)

605.060437ms ago: executing program 3 (id=13537):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000010002104f0000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2)

604.000143ms ago: executing program 1 (id=13538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="c2c45a1f3cd194c9f00000000000b4db000000000000006038c027adaaf763f16f4a53a26882ec0e5f49be50bad49ccc8be912cae553098d651ea6fb8ab6b35d78d14b78c4e9ed8ba5f78a01e06fa3cd3d7908f84f162ee16938dabf3ce9b524f647eabdd088ce8d69e3cb3232af3f08e98f141a5f4f30d5c12b8e75667283e66970784a472f560d680ef0f2af44a9"], 0x14}, 0x1, 0x0, 0x0, 0x10041}, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0100000000e40000001c0012b1a9cfb395e2b627038e388009000100626f6e64000000000c00028005ea00"], 0x3c}}, 0x40800)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x24, 0x0, &(0x7f0000000180))
syz_genetlink_get_family_id$nl802154(&(0x7f0000002f80), r2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c)
close(r5)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtclass={0x2c, 0x28, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0xe, 0xfff2}, {0xfff2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc4)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r8)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x23}, 0x1, 0x1, [@multicast2]}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r11, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4000)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
accept4(r6, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x4, 0x4}, &(0x7f0000000180)=0x8)

523.353766ms ago: executing program 5 (id=13539):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000700000032490000ff"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000001000000000000003000000186b00000f000000000000000700000018420000fcffffff0000000000000000252bfeffffffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000240)='GPL\x00', 0x6877, 0x41, &(0x7f00000003c0)=""/65, 0x41100, 0x4c, '\x00', 0x0, @cgroup_sock=0x2, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x9, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000500)=[r0], &(0x7f0000000540)=[{0x2, 0x4, 0xa, 0x3}], 0x10, 0x3f5}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_pid(r7, &(0x7f0000000140), 0x12)

416.345389ms ago: executing program 3 (id=13540):
r0 = socket$inet(0x2, 0x4000000805, 0x0)
sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000006120000044ffffff00e87f8d1cf34b635104465fcb55597c3bf2661733a8826367fca9edac0853472c2890ed8bbdd2ab6ca61fd542c9dc13146f79231aea090c704447764700ae2fe4c5464c022a89afc71a63e0b717d01bc99f074587f5f6e6e84c01b9d765f85cdc955e3bdf2555af087f9f258a699bfe3569242263afb044ca766792d513dec4643749aad244535ec2d8b3c2"], 0x10}}], 0x2, 0x0)

403.017694ms ago: executing program 5 (id=13541):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="18080000000000000000000000000000181100009d1c5aba43ff", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000019000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r6, {0x300, 0x3}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x40, 0xfc, 0x4, 0x1}]}}]}}]}, 0x44}}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', <r8=>r6, 0x29, 0x4, 0x4, 0x80, 0x20, @local, @empty, 0x40, 0x700, 0x47, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0xd4, r7, 0x18, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2000d040}, 0x44005)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000)=0x7, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}})
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x34, 0x6, 0x9, 0x80000001, 0x13, r5, 0x9, '\x00', r10, r11, 0x3, 0x4, 0x3}, 0x50)

343.885968ms ago: executing program 1 (id=13542):
r0 = socket$kcm(0x2, 0x3, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x1}]}, {0x0, [0x5f, 0x2e, 0xe32b8cec5ab8c040]}}, 0x0, 0x29}, 0x20)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000080)={0x7, 'syzkaller1\x00', {0x7f}, 0xf8})
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000100)="aee7fd6e95dc89d4f5e45e51c4495d26b2cab67c9c9bcd5196737d88b6256aadb10453a7dd491bb47f9eb4c0608a4653a8a716c11a8a9fe4b491aa84ecdcf025fe031e1963c2d30761ff50285a7a10356a56e4a873218aea08d44814388e0784992060cc8c41af0768280cfbed783e0a0294447d55c7a80577e883ba7479dd037ac7f117913b52ac2be3a32aae7814fd3acbfacae7282925337374db8a8476746a0c2a85c50ec92d11fdb95ca114ffa7e73a057001c5", 0xb6}], 0x2}, 0x20040000)

275.070219ms ago: executing program 3 (id=13543):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401002abd700002dcdf250800010041000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)

226.730282ms ago: executing program 3 (id=13544):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x20000000, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
close(0x3)

118.536356ms ago: executing program 3 (id=13545):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020007b0af8ff00000000bfa100000000000007010400f8ffffffb702800108000000b7ff000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000014c0)={{r1, &(0x7f0000000000)='#[@\x00', 0x20400, &(0x7f0000000040)={@align=0x10001, {0x81, 0x8, 0x800, 0xfffffffffffffff9}}, 0x4, &(0x7f0000000080), &(0x7f0000000180)=0x800}, 0x2, &(0x7f00000003c0)=[{0x2, 0x2, &(0x7f00000001c0)='\x00', &(0x7f00000004c0)="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", 0x1000, 0x20}, {0x2, 0x9, &(0x7f0000000200)='\x00', &(0x7f0000000300)="cc96a98d2ed8063759061644d425b9bce0f0dde512149d4791da9cb43e4842420e8e587e24ce59846a254bae61b0f931fa35bb79cf4d07596542e7d0d9d79f3a759c0154dee2a1694c8c91d84f77199b6aedf2a6c359e419e312f1ade57a254f765a37b074dcf01f8f6bf51d7cba6083191fa35f9ab4cc702a42bc1667c554d5cb6f95b6f9775cce98fe9e", 0x8b, 0x2e}]})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000206010800000000000000000000000005000400000000000900020073797a31000000000c0007800800114000000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x58}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56542, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048080)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x7, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000380)=@qipcrtr={0x2a, 0x2, 0x3fff}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="270302000002141063815a79af0f698bba39b99f9c00012fb96dffff1144ee163cddcb008000008276000000000000000000", 0x32}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5)
r12 = socket$kcm(0x10, 0x2, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x8}, 0x8)
sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x20040000)
r13 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r13, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

70.480281ms ago: executing program 6 (id=13546):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xa4, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_USERDATA={0x6a, 0xd, 0x1, 0x0, "22af61ce683dc50eb55dd91e1d9d7290dd9b31416575d2e491d4208b0eb5aa05742a92554b4c9f0cba8870cb1f6520a2b7ce095ec75c58a664c1fb47a9f9b024eb93ea015f79c1e5e6baf0534ff5158226a83eecbac8e9150efd7d573680014d320b1a5fd1c1"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x10c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvfrom(r2, 0x0, 0x0, 0x2120, 0x0, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002680)=ANY=[@ANYBLOB="18000000520001c700001000000000101c"], 0x18}}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8981f23689eb65be16f4264404ead3486d8a823382092e64c0800d8de6d01309d6", 0x21)

0s ago: executing program 6 (id=13547):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x101}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, [], [0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x2ca9570ab73812e0, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000283300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30d)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', <r6=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

kernel console output (not intermixed with test programs):

  595.020027][  T837]  skb_clone+0x212/0x3a0
[  595.020056][  T837]  __netlink_deliver_tap+0x404/0x850
[  595.020091][  T837]  ? netlink_deliver_tap+0x2e/0x1b0
[  595.020115][  T837]  netlink_deliver_tap+0x19c/0x1b0
[  595.020139][  T837]  netlink_unicast+0x7e3/0x9b0
[  595.020169][  T837]  ? __pfx_netlink_unicast+0x10/0x10
[  595.020192][  T837]  ? netlink_sendmsg+0x650/0xb40
[  595.020212][  T837]  ? skb_put+0x11b/0x210
[  595.020240][  T837]  netlink_sendmsg+0x813/0xb40
[  595.020270][  T837]  ? __pfx_netlink_sendmsg+0x10/0x10
[  595.020297][  T837]  ? aa_sock_msg_perm+0xf1/0x1b0
[  595.020322][  T837]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  595.020346][  T837]  ____sys_sendmsg+0x972/0x9f0
[  595.020373][  T837]  ? __pfx_____sys_sendmsg+0x10/0x10
[  595.020400][  T837]  ? import_iovec+0x73/0xa0
[  595.020429][  T837]  ___sys_sendmsg+0x2a5/0x360
[  595.020453][  T837]  ? __pfx____sys_sendmsg+0x10/0x10
[  595.020507][  T837]  ? __fget_files+0x2a/0x420
[  595.020531][  T837]  ? __fget_files+0x3a0/0x420
[  595.020565][  T837]  __x64_sys_sendmsg+0x1bd/0x2a0
[  595.020586][  T837]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  595.020613][  T837]  ? __pfx_ksys_write+0x10/0x10
[  595.020644][  T837]  do_syscall_64+0x14d/0xf80
[  595.020661][  T837]  ? trace_irq_disable+0x3b/0x150
[  595.020685][  T837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.020704][  T837]  ? clear_bhb_loop+0x40/0x90
[  595.020726][  T837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.020744][  T837] RIP: 0033:0x7fbb3559c799
[  595.020762][  T837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  595.020777][  T837] RSP: 002b:00007fbb337ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  595.020795][  T837] RAX: ffffffffffffffda RBX: 00007fbb35815fa0 RCX: 00007fbb3559c799
[  595.020809][  T837] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  595.020823][  T837] RBP: 00007fbb337ee090 R08: 0000000000000000 R09: 0000000000000000
[  595.020834][  T837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  595.020845][  T837] R13: 00007fbb35816038 R14: 00007fbb35815fa0 R15: 00007fff323391b8
[  595.020875][  T837]  </TASK>
[  595.345167][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  595.409421][  T846] syzkaller0: entered promiscuous mode
[  595.415032][  T846] syzkaller0: entered allmulticast mode
[  595.458154][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  595.533912][  T855] FAULT_INJECTION: forcing a failure.
[  595.533912][  T855] name failslab, interval 1, probability 0, space 0, times 0
[  595.550180][  T855] CPU: 1 UID: 0 PID: 855 Comm: syz.3.12002 Not tainted syzkaller #0 PREEMPT(full) 
[  595.550205][  T855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  595.550215][  T855] Call Trace:
[  595.550223][  T855]  <TASK>
[  595.550230][  T855]  dump_stack_lvl+0xe8/0x150
[  595.550260][  T855]  should_fail_ex+0x412/0x560
[  595.550287][  T855]  should_failslab+0xa8/0x100
[  595.550309][  T855]  ? ptlock_alloc+0x20/0x70
[  595.550326][  T855]  kmem_cache_alloc_noprof+0x87/0x650
[  595.550352][  T855]  ptlock_alloc+0x20/0x70
[  595.550368][  T855]  pte_alloc_one+0x7a/0x370
[  595.550392][  T855]  ? __pte_alloc+0x1d/0x430
[  595.550414][  T855]  __pte_alloc+0x25/0x430
[  595.550438][  T855]  do_pte_missing+0x2e9a/0x3750
[  595.550459][  T855]  ? mtree_range_walk+0x6a7/0x840
[  595.550491][  T855]  handle_mm_fault+0x1bec/0x3310
[  595.550530][  T855]  ? handle_mm_fault+0xee/0x3310
[  595.550564][  T855]  ? __pfx_handle_mm_fault+0x10/0x10
[  595.550610][  T855]  ? lock_mm_and_find_vma+0xa7/0x340
[  595.550633][  T855]  do_user_addr_fault+0x75b/0x1340
[  595.550671][  T855]  exc_page_fault+0x6a/0xc0
[  595.550698][  T855]  asm_exc_page_fault+0x26/0x30
[  595.550713][  T855] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  595.550735][  T855] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  595.550749][  T855] RSP: 0018:ffffc9000481f778 EFLAGS: 00050206
[  595.550765][  T855] RAX: 00007ffffffff001 RBX: 0000000000000090 RCX: 0000000000000090
[  595.550777][  T855] RDX: 0000000000000001 RSI: 0000200000034000 RDI: ffffc9000481f810
[  595.550788][  T855] RBP: ffffc9000481f9b0 R08: ffffc9000481f89f R09: 1ffff92000903f13
[  595.550801][  T855] R10: dffffc0000000000 R11: fffff52000903f14 R12: 0000000000000000
[  595.550813][  T855] R13: f8f8f8f8f8f8f8f8 R14: ffffc9000481f810 R15: 0000200000034000
[  595.550842][  T855]  _copy_from_user+0x7a/0xb0
[  595.550870][  T855]  ipv6_get_msfilter+0x150/0x360
[  595.550888][  T855]  ? __lock_acquire+0x6b5/0x2cf0
[  595.550916][  T855]  ? __pfx_ipv6_get_msfilter+0x10/0x10
[  595.550974][  T855]  do_ipv6_getsockopt+0xe3f/0x2620
[  595.551009][  T855]  ? __pfx_do_ipv6_getsockopt+0x10/0x10
[  595.551025][  T855]  ? aa_label_sk_perm+0x532/0x6e0
[  595.551051][  T855]  ? kstrtoull+0x12f/0x1d0
[  595.551072][  T855]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  595.551092][  T855]  ? kstrtouint+0x6e/0xe0
[  595.551118][  T855]  ? get_pid_task+0x20/0x1f0
[  595.551141][  T855]  ? __lock_acquire+0x6b5/0x2cf0
[  595.551181][  T855]  ? aa_sk_perm+0x6d5/0x900
[  595.551210][  T855]  ipv6_getsockopt+0xbd/0x2b0
[  595.551232][  T855]  ? __pfx_ipv6_getsockopt+0x10/0x10
[  595.551254][  T855]  ? sock_common_getsockopt+0x2d/0xb0
[  595.551276][  T855]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  595.551300][  T855]  do_sock_getsockopt+0x2d3/0x3f0
[  595.551330][  T855]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  595.551362][  T855]  ? __fget_files+0x3a0/0x420
[  595.551385][  T855]  ? __fget_files+0x2a/0x420
[  595.551413][  T855]  __x64_sys_getsockopt+0x1a4/0x240
[  595.551453][  T855]  do_syscall_64+0x14d/0xf80
[  595.551469][  T855]  ? trace_irq_disable+0x3b/0x150
[  595.551498][  T855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.551517][  T855]  ? clear_bhb_loop+0x40/0x90
[  595.551539][  T855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.551556][  T855] RIP: 0033:0x7f4d3f99c799
[  595.551573][  T855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  595.551587][  T855] RSP: 002b:00007f4d407f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  595.551605][  T855] RAX: ffffffffffffffda RBX: 00007f4d3fc15fa0 RCX: 00007f4d3f99c799
[  595.551618][  T855] RDX: 0010000000000030 RSI: 0000000000000029 RDI: 0000000000000003
[  595.551633][  T855] RBP: 00007f4d407f4090 R08: 0000200000e5f000 R09: 0000000000000000
[  595.551645][  T855] R10: 0000200000034000 R11: 0000000000000246 R12: 0000000000000001
[  595.551655][  T855] R13: 00007f4d3fc16038 R14: 00007f4d3fc15fa0 R15: 00007ffc74a4d718
[  595.551685][  T855]  </TASK>
[  595.957914][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms
[  595.965945][    C1] lec:lec_tx_timeout: lec0
[  595.971882][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  596.076397][  T863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12004'.
[  596.085799][  T863] netlink: 43 bytes leftover after parsing attributes in process `syz.3.12004'.
[  596.095371][  T863] netlink: 'syz.3.12004': attribute type 6 has an invalid length.
[  596.106653][  T863] netlink: 'syz.3.12004': attribute type 5 has an invalid length.
[  596.732037][  T904] FAULT_INJECTION: forcing a failure.
[  596.732037][  T904] name failslab, interval 1, probability 0, space 0, times 0
[  596.798410][  T904] CPU: 1 UID: 0 PID: 904 Comm: syz.6.12014 Not tainted syzkaller #0 PREEMPT(full) 
[  596.798436][  T904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  596.798447][  T904] Call Trace:
[  596.798454][  T904]  <TASK>
[  596.798462][  T904]  dump_stack_lvl+0xe8/0x150
[  596.798492][  T904]  should_fail_ex+0x412/0x560
[  596.798520][  T904]  should_failslab+0xa8/0x100
[  596.798541][  T904]  ? skb_clone+0x212/0x3a0
[  596.798559][  T904]  kmem_cache_alloc_noprof+0x87/0x650
[  596.798576][  T904]  ? apparmor_capable+0x126/0x170
[  596.798686][  T904]  skb_clone+0x212/0x3a0
[  596.798703][  T904]  ? nfnetlink_rcv+0x4b0/0x27b0
[  596.798772][  T904]  nfnetlink_rcv+0x4e2/0x27b0
[  596.798803][  T904]  ? lockdep_hardirqs_on+0x7a/0x110
[  596.798827][  T904]  ? __dev_queue_xmit+0x277/0x3890
[  596.798905][  T904]  ? __local_bh_enable_ip+0xd0/0x130
[  596.798928][  T904]  ? __dev_queue_xmit+0x1e78/0x3890
[  596.798942][  T904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.798966][  T904]  ? __dev_queue_xmit+0x277/0x3890
[  596.798986][  T904]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  596.799017][  T904]  ? ref_tracker_free+0x693/0x840
[  596.799065][  T904]  ? __copy_skb_header+0xa3/0x4a0
[  596.799082][  T904]  ? __pfx_ref_tracker_free+0x10/0x10
[  596.799115][  T904]  ? skb_clone+0x246/0x3a0
[  596.799135][  T904]  ? __netlink_deliver_tap+0x807/0x850
[  596.799156][  T904]  ? netlink_deliver_tap+0x2e/0x1b0
[  596.799188][  T904]  netlink_unicast+0x80f/0x9b0
[  596.799212][  T904]  ? __pfx_netlink_unicast+0x10/0x10
[  596.799233][  T904]  ? netlink_sendmsg+0x650/0xb40
[  596.799252][  T904]  ? skb_put+0x11b/0x210
[  596.799277][  T904]  netlink_sendmsg+0x813/0xb40
[  596.799306][  T904]  ? __pfx_netlink_sendmsg+0x10/0x10
[  596.799330][  T904]  ? aa_sock_msg_perm+0xf1/0x1b0
[  596.799352][  T904]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  596.799373][  T904]  ____sys_sendmsg+0x972/0x9f0
[  596.799397][  T904]  ? __pfx_____sys_sendmsg+0x10/0x10
[  596.799422][  T904]  ? import_iovec+0x73/0xa0
[  596.799451][  T904]  ___sys_sendmsg+0x2a5/0x360
[  596.799470][  T904]  ? __pfx____sys_sendmsg+0x10/0x10
[  596.799513][  T904]  ? __fget_files+0x2a/0x420
[  596.799537][  T904]  ? __fget_files+0x3a0/0x420
[  596.799569][  T904]  __x64_sys_sendmsg+0x1bd/0x2a0
[  596.799589][  T904]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  596.799613][  T904]  ? __pfx_ksys_write+0x10/0x10
[  596.799640][  T904]  do_syscall_64+0x14d/0xf80
[  596.799656][  T904]  ? trace_irq_disable+0x3b/0x150
[  596.799680][  T904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.799698][  T904]  ? clear_bhb_loop+0x40/0x90
[  596.799719][  T904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.799733][  T904] RIP: 0033:0x7fd83079c799
[  596.799751][  T904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.799764][  T904] RSP: 002b:00007fd831588028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  596.799782][  T904] RAX: ffffffffffffffda RBX: 00007fd830a15fa0 RCX: 00007fd83079c799
[  596.799794][  T904] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003
[  596.799803][  T904] RBP: 00007fd831588090 R08: 0000000000000000 R09: 0000000000000000
[  596.799812][  T904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  596.799820][  T904] R13: 00007fd830a16038 R14: 00007fd830a15fa0 R15: 00007fff73d94608
[  596.799847][  T904]  </TASK>
[  597.606791][  T953] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  597.628427][  T954] netlink: 'syz.3.12029': attribute type 21 has an invalid length.
[  597.693712][  T958] __nla_validate_parse: 1 callbacks suppressed
[  597.693730][  T958] netlink: 224 bytes leftover after parsing attributes in process `syz.6.12030'.
[  597.732445][  T963] netlink: 'syz.3.12029': attribute type 1 has an invalid length.
[  597.781937][  T963] netlink: 228 bytes leftover after parsing attributes in process `syz.3.12029'.
[  597.805503][  T954] bond13: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  597.821188][  T954] bond13 (unregistering): Released all slaves
[  597.848061][  T974] 8021q: VLANs not supported on ip_vti0
[  597.918890][  T974] 8021q: VLANs not supported on ip_vti0
[  598.331588][ T1001] FAULT_INJECTION: forcing a failure.
[  598.331588][ T1001] name failslab, interval 1, probability 0, space 0, times 0
[  598.343841][ T1003] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  598.378305][ T1001] CPU: 1 UID: 0 PID: 1001 Comm: syz.1.12039 Not tainted syzkaller #0 PREEMPT(full) 
[  598.378330][ T1001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  598.378341][ T1001] Call Trace:
[  598.378349][ T1001]  <TASK>
[  598.378357][ T1001]  dump_stack_lvl+0xe8/0x150
[  598.378388][ T1001]  should_fail_ex+0x412/0x560
[  598.378418][ T1001]  should_failslab+0xa8/0x100
[  598.378442][ T1001]  __kmalloc_noprof+0xe8/0x760
[  598.378463][ T1001]  ? nft_set_elem_expr_clone+0xe8/0xa90
[  598.378581][ T1001]  nft_set_elem_expr_clone+0xe8/0xa90
[  598.378614][ T1001]  nf_tables_newsetelem+0x14c8/0x4450
[  598.378631][ T1001]  ? is_bpf_text_address+0x26/0x2b0
[  598.378691][ T1001]  ? __pfx_nf_tables_newsetelem+0x10/0x10
[  598.378708][ T1001]  ? __lock_acquire+0x6b5/0x2cf0
[  598.378750][ T1001]  ? nla_validate_array+0xfc/0x260
[  598.378805][ T1001]  ? __pfx___nla_validate_parse+0x10/0x10
[  598.378835][ T1001]  ? nfnetlink_rcv+0x8ba/0x27b0
[  598.378860][ T1001]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  598.378884][ T1001]  ? nfnl_pernet+0x23/0x240
[  598.378914][ T1001]  ? __nla_parse+0x40/0x60
[  598.378942][ T1001]  nfnetlink_rcv+0x1240/0x27b0
[  598.378998][ T1001]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  598.379035][ T1001]  ? ref_tracker_free+0x693/0x840
[  598.379086][ T1001]  ? __netlink_deliver_tap+0x807/0x850
[  598.379110][ T1001]  ? netlink_deliver_tap+0x2e/0x1b0
[  598.379150][ T1001]  netlink_unicast+0x80f/0x9b0
[  598.379180][ T1001]  ? __pfx_netlink_unicast+0x10/0x10
[  598.379202][ T1001]  ? netlink_sendmsg+0x650/0xb40
[  598.379223][ T1001]  ? skb_put+0x11b/0x210
[  598.379253][ T1001]  netlink_sendmsg+0x813/0xb40
[  598.379289][ T1001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  598.379313][ T1001]  ? aa_sock_msg_perm+0xf1/0x1b0
[  598.379338][ T1001]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  598.379361][ T1001]  ____sys_sendmsg+0x972/0x9f0
[  598.379389][ T1001]  ? __pfx_____sys_sendmsg+0x10/0x10
[  598.379416][ T1001]  ? import_iovec+0x73/0xa0
[  598.379447][ T1001]  ___sys_sendmsg+0x2a5/0x360
[  598.379471][ T1001]  ? __pfx____sys_sendmsg+0x10/0x10
[  598.379525][ T1001]  ? __fget_files+0x2a/0x420
[  598.379550][ T1001]  ? __fget_files+0x3a0/0x420
[  598.379585][ T1001]  __x64_sys_sendmsg+0x1bd/0x2a0
[  598.379605][ T1001]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  598.379634][ T1001]  ? __pfx_ksys_write+0x10/0x10
[  598.379666][ T1001]  do_syscall_64+0x14d/0xf80
[  598.379682][ T1001]  ? trace_irq_disable+0x3b/0x150
[  598.379706][ T1001]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.379731][ T1001]  ? clear_bhb_loop+0x40/0x90
[  598.379754][ T1001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.379772][ T1001] RIP: 0033:0x7fbb3559c799
[  598.379790][ T1001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  598.379805][ T1001] RSP: 002b:00007fbb337ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  598.379826][ T1001] RAX: ffffffffffffffda RBX: 00007fbb35815fa0 RCX: 00007fbb3559c799
[  598.379839][ T1001] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003
[  598.379851][ T1001] RBP: 00007fbb337ee090 R08: 0000000000000000 R09: 0000000000000000
[  598.379862][ T1001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  598.379872][ T1001] R13: 00007fbb35816038 R14: 00007fbb35815fa0 R15: 00007fff323391b8
[  598.379903][ T1001]  </TASK>
[  598.760550][   T36] net_ratelimit: 21 callbacks suppressed
[  598.760569][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  598.884041][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  598.901557][ T1015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12043'.
[  598.922744][ T1019] netlink: 'syz.2.12041': attribute type 3 has an invalid length.
[  599.095652][ T1029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12044'.
[  599.177694][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  599.210627][ T1039] syzkaller0: entered promiscuous mode
[  599.230223][ T1039] syzkaller0: entered allmulticast mode
[  599.254591][ T1039] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[  599.378953][ T1051] netem: change failed
[  599.407780][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  599.527046][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  599.627637][ T1068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12055'.
[  599.632466][ T1071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12056'.
[  599.646211][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  599.757356][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  599.891552][ T1079] FAULT_INJECTION: forcing a failure.
[  599.891552][ T1079] name failslab, interval 1, probability 0, space 0, times 0
[  599.898929][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  599.925712][ T1079] CPU: 1 UID: 0 PID: 1079 Comm: syz.2.12058 Not tainted syzkaller #0 PREEMPT(full) 
[  599.925738][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  599.925749][ T1079] Call Trace:
[  599.925757][ T1079]  <TASK>
[  599.925764][ T1079]  dump_stack_lvl+0xe8/0x150
[  599.925795][ T1079]  should_fail_ex+0x412/0x560
[  599.925824][ T1079]  should_failslab+0xa8/0x100
[  599.925849][ T1079]  __kmalloc_noprof+0xe8/0x760
[  599.925869][ T1079]  ? cfg80211_mlme_register_mgmt+0x2bf/0x890
[  599.925992][ T1079]  ? __pfx_netdev_run_todo+0x10/0x10
[  599.926017][ T1079]  cfg80211_mlme_register_mgmt+0x2bf/0x890
[  599.926048][ T1079]  ? __nla_parse+0x40/0x60
[  599.926077][ T1079]  nl80211_register_mgmt+0x40d/0x500
[  599.926157][ T1079]  genl_family_rcv_msg_doit+0x22a/0x330
[  599.926213][ T1079]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  599.926245][ T1079]  ? bpf_lsm_capable+0x9/0x20
[  599.926269][ T1079]  ? security_capable+0x7e/0x2c0
[  599.926328][ T1079]  genl_rcv_msg+0x61c/0x7a0
[  599.926353][ T1079]  ? __pfx_genl_rcv_msg+0x10/0x10
[  599.926370][ T1079]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  599.926387][ T1079]  ? __pfx_nl80211_register_mgmt+0x10/0x10
[  599.926408][ T1079]  ? __pfx_nl80211_post_doit+0x10/0x10
[  599.926426][ T1079]  ? __lock_acquire+0x6b5/0x2cf0
[  599.926461][ T1079]  netlink_rcv_skb+0x232/0x4b0
[  599.926485][ T1079]  ? __pfx_genl_rcv_msg+0x10/0x10
[  599.926505][ T1079]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  599.926545][ T1079]  ? down_read+0x272/0x2e0
[  599.926563][ T1079]  ? genl_rcv+0xd/0x40
[  599.926582][ T1079]  genl_rcv+0x28/0x40
[  599.926597][ T1079]  netlink_unicast+0x80f/0x9b0
[  599.926628][ T1079]  ? __pfx_netlink_unicast+0x10/0x10
[  599.926651][ T1079]  ? netlink_sendmsg+0x650/0xb40
[  599.926672][ T1079]  ? skb_put+0x11b/0x210
[  599.926700][ T1079]  netlink_sendmsg+0x813/0xb40
[  599.926733][ T1079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  599.926760][ T1079]  ? aa_sock_msg_perm+0xf1/0x1b0
[  599.926785][ T1079]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  599.926808][ T1079]  ____sys_sendmsg+0x972/0x9f0
[  599.926836][ T1079]  ? __pfx_____sys_sendmsg+0x10/0x10
[  599.926864][ T1079]  ? import_iovec+0x73/0xa0
[  599.926894][ T1079]  ___sys_sendmsg+0x2a5/0x360
[  599.926915][ T1079]  ? __pfx____sys_sendmsg+0x10/0x10
[  599.926958][ T1079]  ? __fget_files+0x2a/0x420
[  599.926981][ T1079]  ? __fget_files+0x3a0/0x420
[  599.927013][ T1079]  __x64_sys_sendmsg+0x1bd/0x2a0
[  599.927031][ T1079]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  599.927064][ T1079]  ? __pfx_ksys_write+0x10/0x10
[  599.927096][ T1079]  do_syscall_64+0x14d/0xf80
[  599.927112][ T1079]  ? trace_irq_disable+0x3b/0x150
[  599.927137][ T1079]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.927155][ T1079]  ? clear_bhb_loop+0x40/0x90
[  599.927178][ T1079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.927196][ T1079] RIP: 0033:0x7f06c819c799
[  599.927213][ T1079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  599.927228][ T1079] RSP: 002b:00007f06c90a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  599.927248][ T1079] RAX: ffffffffffffffda RBX: 00007f06c8415fa0 RCX: 00007f06c819c799
[  599.927261][ T1079] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003
[  599.927273][ T1079] RBP: 00007f06c90a7090 R08: 0000000000000000 R09: 0000000000000000
[  599.927284][ T1079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  599.927295][ T1079] R13: 00007f06c8416038 R14: 00007f06c8415fa0 R15: 00007ffd25d49df8
[  599.927326][ T1079]  </TASK>
[  600.310786][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  600.437528][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  600.480852][ T1096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  600.986984][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  600.995079][    C1] lec:lec_tx_timeout: lec0
[  600.999791][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  601.139359][ T1132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12079'.
[  601.598408][ T1162] syzkaller0: entered promiscuous mode
[  601.604095][ T1162] syzkaller0: entered allmulticast mode
[  601.805901][ T1177] syzkaller0: entered promiscuous mode
[  601.811726][ T1177] syzkaller0: entered allmulticast mode
[  601.917512][ T1182] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  601.949661][ T1185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12097'.
[  602.379419][ T1204] syzkaller0: entered promiscuous mode
[  602.385126][ T1204] syzkaller0: entered allmulticast mode
[  602.398983][ T1206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12105'.
[  602.428359][ T1214] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12107'.
[  604.624996][ T1236] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  604.647506][   T36] net_ratelimit: 15 callbacks suppressed
[  604.647527][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  604.797393][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  604.917222][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  604.984173][ T1255] xt_l2tp: v2 doesn't support IP mode
[  605.128845][ T1251] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  605.136433][ T1251] team0: Device macvlan2 is already an upper device of the team interface
[  605.559639][ T1255] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  605.577716][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  605.748798][ T1275] tipc: Started in network mode
[  605.757343][ T1275] tipc: Node identity 080211000001, cluster identity 255
[  605.771056][ T1275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  605.783336][ T1273] syzkaller0: entered promiscuous mode
[  605.790870][ T1273] syzkaller0: entered allmulticast mode
[  605.804595][ T1278] : renamed from veth1_virt_wifi (while UP)
[  605.885994][ T1281] syzkaller0: entered promiscuous mode
[  605.907311][ T1281] syzkaller0: entered allmulticast mode
[  606.007034][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  606.015121][    C1] lec:lec_tx_timeout: lec0
[  606.021222][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  606.067181][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  606.163766][ T1292] : entered promiscuous mode
[  606.171750][ T1297] netlink: 'syz.1.12130': attribute type 178 has an invalid length.
[  606.182491][ T1294] syzkaller0: entered promiscuous mode
[  606.188461][ T1294] syzkaller0: entered allmulticast mode
[  606.207815][   T35] bond5: (slave bridge4): failed to get link speed/duplex
[  606.241411][ T1294] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[  606.339941][ T1306] wg1 speed is unknown, defaulting to 1000
[  606.347576][   T35] bond5: (slave bridge4): failed to get link speed/duplex
[  606.368713][ T1309] lo: entered allmulticast mode
[  606.414304][ T1314] FAULT_INJECTION: forcing a failure.
[  606.414304][ T1314] name failslab, interval 1, probability 0, space 0, times 0
[  606.427720][ T1314] CPU: 0 UID: 0 PID: 1314 Comm: syz.2.12138 Not tainted syzkaller #0 PREEMPT(full) 
[  606.427745][ T1314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  606.427756][ T1314] Call Trace:
[  606.427764][ T1314]  <TASK>
[  606.427771][ T1314]  dump_stack_lvl+0xe8/0x150
[  606.427801][ T1314]  should_fail_ex+0x412/0x560
[  606.427828][ T1314]  should_failslab+0xa8/0x100
[  606.427850][ T1314]  ? security_file_alloc+0x34/0x310
[  606.427868][ T1314]  kmem_cache_alloc_noprof+0x87/0x650
[  606.427886][ T1314]  ? rcu_is_watching+0x15/0xb0
[  606.427911][ T1314]  ? trace_kmem_cache_alloc+0x29/0xf0
[  606.427931][ T1314]  security_file_alloc+0x34/0x310
[  606.427952][ T1314]  init_file+0x90/0x2b0
[  606.427979][ T1314]  alloc_empty_file+0x6e/0x1d0
[  606.428003][ T1314]  alloc_file_pseudo+0x155/0x240
[  606.428030][ T1314]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  606.428052][ T1314]  ? do_raw_spin_unlock+0xf5/0x210
[  606.428073][ T1314]  ? _raw_spin_unlock+0x28/0x50
[  606.428105][ T1314]  sock_alloc_file+0xb8/0x2e0
[  606.428125][ T1314]  ? __sys_socket+0x12b/0x1b0
[  606.428149][ T1314]  __sys_socket+0x13c/0x1b0
[  606.428175][ T1314]  __x64_sys_socket+0x7a/0x90
[  606.428198][ T1314]  do_syscall_64+0x14d/0xf80
[  606.428213][ T1314]  ? trace_irq_disable+0x3b/0x150
[  606.428237][ T1314]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.428255][ T1314]  ? clear_bhb_loop+0x40/0x90
[  606.428277][ T1314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.428295][ T1314] RIP: 0033:0x7f06c819e007
[  606.428311][ T1314] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  606.428326][ T1314] RSP: 002b:00007f06c90a5f38 EFLAGS: 00000293 ORIG_RAX: 0000000000000029
[  606.428344][ T1314] RAX: ffffffffffffffda RBX: 00007f06c8415fa0 RCX: 00007f06c819e007
[  606.428365][ T1314] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  606.428375][ T1314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  606.428386][ T1314] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000006
[  606.428397][ T1314] R13: 00007f06c8416038 R14: 0000200000000040 R15: 0000200000000080
[  606.428427][ T1314]  </TASK>
[  606.431363][ T1314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  606.478069][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  606.690425][ T1309] lo: left allmulticast mode
[  606.708781][ T1315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12135'.
[  606.801126][ T1315] bond12: option xmit_hash_policy: invalid value (64)
[  606.812598][ T1315] bond12 (unregistering): Released all slaves
[  606.841909][ T5925] tipc: Node number set to 134418688
[  606.991806][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  607.246884][ T1337] syzkaller0: entered promiscuous mode
[  607.260618][ T1337] syzkaller0: entered allmulticast mode
[  609.542522][ T1370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  609.674693][ T1374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  609.710846][ T1378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12154'.
[  609.743895][ T1385] FAULT_INJECTION: forcing a failure.
[  609.743895][ T1385] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  609.762536][ T1385] CPU: 1 UID: 0 PID: 1385 Comm: syz.6.12155 Not tainted syzkaller #0 PREEMPT(full) 
[  609.762563][ T1385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  609.762575][ T1385] Call Trace:
[  609.762582][ T1385]  <TASK>
[  609.762589][ T1385]  dump_stack_lvl+0xe8/0x150
[  609.762619][ T1385]  should_fail_ex+0x412/0x560
[  609.762647][ T1385]  _copy_from_user+0x2d/0xb0
[  609.762675][ T1385]  __sys_sendto+0x2b0/0x710
[  609.762703][ T1385]  ? __pfx___sys_sendto+0x10/0x10
[  609.762767][ T1385]  __x64_sys_sendto+0xde/0x100
[  609.762795][ T1385]  do_syscall_64+0x14d/0xf80
[  609.762812][ T1385]  ? trace_irq_disable+0x3b/0x150
[  609.762837][ T1385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.762855][ T1385]  ? clear_bhb_loop+0x40/0x90
[  609.762878][ T1385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.762895][ T1385] RIP: 0033:0x7fd83075cfce
[  609.762913][ T1385] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  609.762927][ T1385] RSP: 002b:00007fd831586e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  609.762946][ T1385] RAX: ffffffffffffffda RBX: 00007fd8315886c0 RCX: 00007fd83075cfce
[  609.762959][ T1385] RDX: 0000000000000020 RSI: 00007fd831586fe0 RDI: 0000000000000004
[  609.762971][ T1385] RBP: 0000000000000000 R08: 00007fd831586ea4 R09: 000000000000000c
[  609.762982][ T1385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  609.762992][ T1385] R13: 00007fd831586ef8 R14: 00007fd831586fe0 R15: 0000000000000000
[  609.763030][ T1385]  </TASK>
[  609.763087][ T1378] hsr_slave_0 (unregistering): left promiscuous mode
[  609.792093][ T1388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  609.875557][ T1387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12156'.
[  609.958583][ T1168] net_ratelimit: 4 callbacks suppressed
[  609.958601][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  610.084020][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  610.207250][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  610.327522][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  610.420686][ T1418] vlan2: entered promiscuous mode
[  610.425964][ T1418] bridge0: entered promiscuous mode
[  610.440732][ T1421] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12169'.
[  610.457182][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  610.628010][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  610.752049][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  610.798254][ T1370] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  610.878146][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  610.959383][ T1453] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12182'.
[  610.969712][ T1453] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12182'.
[  610.998239][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  611.012132][ T1460] ip6tnl0: Caught tx_queue_len zero misconfig
[  611.032467][ T1460] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12184'.
[  611.036439][ T1453] can: request_module (can-proto-0) failed.
[  611.041598][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  611.041627][    C1] lec:lec_tx_timeout: lec0
[  611.047951][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  611.075339][ T1457] : entered promiscuous mode
[  611.117036][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  611.616002][ T1503] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  611.627608][ T5828] Bluetooth: hci2: command 0x0406 tx timeout
[  611.645704][ T1503] Cannot find add_set index 65532 as target
[  612.010733][ T1531] IPv6: NLM_F_CREATE should be specified when creating new route
[  612.086144][ T1477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  612.268582][ T1543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  612.284352][ T1541] syzkaller0: entered promiscuous mode
[  612.295077][ T1541] syzkaller0: entered allmulticast mode
[  612.364235][ T1546] syzkaller0: entered promiscuous mode
[  612.371026][ T1546] syzkaller0: entered allmulticast mode
[  612.386060][ T1548] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  612.395083][ T1546] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12210'.
[  612.406176][ T1546] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12210'.
[  612.530451][ T1554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12213'.
[  612.606244][ T1559] netlink: 'syz.3.12215': attribute type 46 has an invalid length.
[  612.849489][ T1569] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12218'.
[  612.914996][ T1574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12220'.
[  613.251824][ T1589] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  613.314006][ T1591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12226'.
[  613.323395][ T1593] netlink: 'syz.1.12227': attribute type 46 has an invalid length.
[  613.444018][ T1600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12229'.
[  613.461350][ T1602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  613.472580][ T1600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12229'.
[  613.489831][ T1602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  613.759820][ T1618] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  613.898010][ T1620] netlink: 'syz.3.12238': attribute type 1 has an invalid length.
[  614.065042][ T1631] FAULT_INJECTION: forcing a failure.
[  614.065042][ T1631] name failslab, interval 1, probability 0, space 0, times 0
[  614.092595][ T1631] CPU: 1 UID: 0 PID: 1631 Comm: syz.5.12243 Not tainted syzkaller #0 PREEMPT(full) 
[  614.092624][ T1631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  614.092635][ T1631] Call Trace:
[  614.092642][ T1631]  <TASK>
[  614.092650][ T1631]  dump_stack_lvl+0xe8/0x150
[  614.092681][ T1631]  should_fail_ex+0x412/0x560
[  614.092730][ T1631]  should_failslab+0xa8/0x100
[  614.092751][ T1631]  ? ptlock_alloc+0x20/0x70
[  614.092768][ T1631]  kmem_cache_alloc_noprof+0x87/0x650
[  614.092796][ T1631]  ptlock_alloc+0x20/0x70
[  614.092811][ T1631]  pte_alloc_one+0x7a/0x370
[  614.092834][ T1631]  ? __pte_alloc+0x1d/0x430
[  614.092856][ T1631]  __pte_alloc+0x25/0x430
[  614.092880][ T1631]  do_pte_missing+0x2e9a/0x3750
[  614.092910][ T1631]  ? mtree_range_walk+0x6a7/0x840
[  614.092936][ T1631]  handle_mm_fault+0x1bec/0x3310
[  614.092962][ T1631]  ? mt_find+0x186/0x630
[  614.092991][ T1631]  ? handle_mm_fault+0xee/0x3310
[  614.093024][ T1631]  ? __pfx_handle_mm_fault+0x10/0x10
[  614.093077][ T1631]  __get_user_pages+0x165b/0x29d0
[  614.093136][ T1631]  __gup_longterm_locked+0xdcf/0x1630
[  614.093171][ T1631]  ? gup_fast_fallback+0x201/0x22e0
[  614.093196][ T1631]  ? sanity_check_pinned_pages+0x1219/0x12d0
[  614.093230][ T1631]  gup_fast_fallback+0x1d82/0x22e0
[  614.093283][ T1631]  ? rcu_is_watching+0x15/0xb0
[  614.093310][ T1631]  ? __pfx_gup_fast_fallback+0x10/0x10
[  614.093337][ T1631]  ? is_valid_gup_args+0x11f/0x200
[  614.093364][ T1631]  ? pin_user_pages_fast+0x4d/0xb0
[  614.093392][ T1631]  rds_info_getsockopt+0x20e/0x4a0
[  614.093520][ T1631]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  614.093542][ T1631]  ? __might_fault+0xaf/0x130
[  614.093573][ T1631]  ? rds_getsockopt+0x31d/0x500
[  614.093625][ T1631]  ? __pfx_rds_getsockopt+0x10/0x10
[  614.093652][ T1631]  do_sock_getsockopt+0x2d3/0x3f0
[  614.093683][ T1631]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  614.093710][ T1631]  ? __fget_files+0x3a0/0x420
[  614.093734][ T1631]  ? __fget_files+0x2a/0x420
[  614.093778][ T1631]  __x64_sys_getsockopt+0x1a4/0x240
[  614.093814][ T1631]  do_syscall_64+0x14d/0xf80
[  614.093831][ T1631]  ? trace_irq_disable+0x3b/0x150
[  614.093854][ T1631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.093869][ T1631]  ? clear_bhb_loop+0x40/0x90
[  614.093888][ T1631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.093910][ T1631] RIP: 0033:0x7fc1d159c799
[  614.093926][ T1631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.093939][ T1631] RSP: 002b:00007fc1d24db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  614.093956][ T1631] RAX: ffffffffffffffda RBX: 00007fc1d1815fa0 RCX: 00007fc1d159c799
[  614.093968][ T1631] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003
[  614.093978][ T1631] RBP: 00007fc1d24db090 R08: 0000200000000000 R09: 0000000000000000
[  614.093988][ T1631] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001
[  614.093999][ T1631] R13: 00007fc1d1816038 R14: 00007fc1d1815fa0 R15: 00007ffe92226c88
[  614.094029][ T1631]  </TASK>
[  614.430169][ T1636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  614.551810][ T1642] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  614.599919][ T1646] FAULT_INJECTION: forcing a failure.
[  614.599919][ T1646] name failslab, interval 1, probability 0, space 0, times 0
[  614.615917][ T1646] CPU: 0 UID: 0 PID: 1646 Comm: syz.5.12250 Not tainted syzkaller #0 PREEMPT(full) 
[  614.615935][ T1646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  614.615941][ T1646] Call Trace:
[  614.615946][ T1646]  <TASK>
[  614.615952][ T1646]  dump_stack_lvl+0xe8/0x150
[  614.615972][ T1646]  should_fail_ex+0x412/0x560
[  614.615990][ T1646]  should_failslab+0xa8/0x100
[  614.616009][ T1646]  __kvmalloc_node_noprof+0x178/0x8a0
[  614.616022][ T1646]  ? __nf_hook_entries_try_shrink+0x328/0x700
[  614.616109][ T1646]  __nf_hook_entries_try_shrink+0x328/0x700
[  614.616130][ T1646]  __nf_unregister_net_hook+0x4cc/0x6f0
[  614.616149][ T1646]  nf_unregister_net_hooks+0xcb/0x140
[  614.616165][ T1646]  nf_defrag_ipv6_disable+0x95/0xe0
[  614.616251][ T1646]  nf_ct_netns_put+0x375/0x520
[  614.616307][ T1646]  ? __pfx_nft_connlimit_destroy+0x10/0x10
[  614.616369][ T1646]  nft_connlimit_destroy+0x5a/0xb0
[  614.616382][ T1646]  ? __pfx_nft_connlimit_destroy+0x10/0x10
[  614.616395][ T1646]  nft_set_elem_expr_setup+0x5f7/0x840
[  614.616437][ T1646]  nf_tables_newsetelem+0x2650/0x4450
[  614.616447][ T1646]  ? is_bpf_text_address+0x26/0x2b0
[  614.616482][ T1646]  ? __pfx_nf_tables_newsetelem+0x10/0x10
[  614.616491][ T1646]  ? __lock_acquire+0x6b5/0x2cf0
[  614.616518][ T1646]  ? nla_validate_array+0xfc/0x260
[  614.616550][ T1646]  ? __pfx___nla_validate_parse+0x10/0x10
[  614.616566][ T1646]  ? nfnetlink_rcv+0x8ba/0x27b0
[  614.616580][ T1646]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  614.616594][ T1646]  ? nfnl_pernet+0x23/0x240
[  614.616610][ T1646]  ? __nla_parse+0x40/0x60
[  614.616626][ T1646]  nfnetlink_rcv+0x1240/0x27b0
[  614.616658][ T1646]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  614.616678][ T1646]  ? ref_tracker_free+0x693/0x840
[  614.616714][ T1646]  ? __netlink_deliver_tap+0x807/0x850
[  614.616735][ T1646]  ? netlink_deliver_tap+0x2e/0x1b0
[  614.616772][ T1646]  netlink_unicast+0x80f/0x9b0
[  614.616798][ T1646]  ? __pfx_netlink_unicast+0x10/0x10
[  614.616811][ T1646]  ? netlink_sendmsg+0x650/0xb40
[  614.616823][ T1646]  ? skb_put+0x11b/0x210
[  614.616840][ T1646]  netlink_sendmsg+0x813/0xb40
[  614.616858][ T1646]  ? __pfx_netlink_sendmsg+0x10/0x10
[  614.616874][ T1646]  ? aa_sock_msg_perm+0xf1/0x1b0
[  614.616889][ T1646]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  614.616913][ T1646]  ____sys_sendmsg+0x972/0x9f0
[  614.616937][ T1646]  ? __pfx_____sys_sendmsg+0x10/0x10
[  614.616961][ T1646]  ? import_iovec+0x73/0xa0
[  614.616989][ T1646]  ___sys_sendmsg+0x2a5/0x360
[  614.617011][ T1646]  ? __pfx____sys_sendmsg+0x10/0x10
[  614.617066][ T1646]  ? __fget_files+0x2a/0x420
[  614.617089][ T1646]  ? __fget_files+0x3a0/0x420
[  614.617125][ T1646]  __x64_sys_sendmsg+0x1bd/0x2a0
[  614.617146][ T1646]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  614.617174][ T1646]  ? __pfx_ksys_write+0x10/0x10
[  614.617204][ T1646]  do_syscall_64+0x14d/0xf80
[  614.617220][ T1646]  ? trace_irq_disable+0x3b/0x150
[  614.617243][ T1646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.617261][ T1646]  ? clear_bhb_loop+0x40/0x90
[  614.617282][ T1646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.617300][ T1646] RIP: 0033:0x7fc1d159c799
[  614.617318][ T1646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.617332][ T1646] RSP: 002b:00007fc1d24db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  614.617351][ T1646] RAX: ffffffffffffffda RBX: 00007fc1d1815fa0 RCX: 00007fc1d159c799
[  614.617364][ T1646] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003
[  614.617374][ T1646] RBP: 00007fc1d24db090 R08: 0000000000000000 R09: 0000000000000000
[  614.617384][ T1646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  614.617395][ T1646] R13: 00007fc1d1816038 R14: 00007fc1d1815fa0 R15: 00007ffe92226c88
[  614.617427][ T1646]  </TASK>
[  615.003997][   T36] net_ratelimit: 28 callbacks suppressed
[  615.004017][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  615.091657][ T1653] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12252'.
[  615.102783][ T1653] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12252'.
[  615.137451][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  615.247249][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  615.338797][ T1671] syzkaller0: entered promiscuous mode
[  615.344622][ T1671] syzkaller0: entered allmulticast mode
[  615.388442][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  615.436020][ T1674] net  ������: renamed from virt_wifi0
[  615.497095][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  615.607073][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  615.771108][ T1692] FAULT_INJECTION: forcing a failure.
[  615.771108][ T1692] name failslab, interval 1, probability 0, space 0, times 0
[  615.786653][ T1692] CPU: 1 UID: 0 PID: 1692 Comm: syz.6.12264 Not tainted syzkaller #0 PREEMPT(full) 
[  615.786679][ T1692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  615.786690][ T1692] Call Trace:
[  615.786698][ T1692]  <TASK>
[  615.786705][ T1692]  dump_stack_lvl+0xe8/0x150
[  615.786735][ T1692]  should_fail_ex+0x412/0x560
[  615.786764][ T1692]  should_failslab+0xa8/0x100
[  615.786788][ T1692]  __kmalloc_cache_noprof+0x88/0x660
[  615.786810][ T1692]  ? route4_change+0xb5f/0x2210
[  615.786915][ T1692]  route4_change+0xb5f/0x2210
[  615.786943][ T1692]  ? __pfx_route4_change+0x10/0x10
[  615.786977][ T1692]  tc_new_tfilter+0xff8/0x1780
[  615.787103][ T1692]  ? __pfx_tc_new_tfilter+0x10/0x10
[  615.787163][ T1692]  ? __pfx_tc_new_tfilter+0x10/0x10
[  615.787187][ T1692]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  615.787276][ T1692]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  615.787297][ T1692]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  615.787319][ T1692]  ? ref_tracker_free+0x693/0x840
[  615.787349][ T1692]  ? __copy_skb_header+0xa3/0x4a0
[  615.787369][ T1692]  ? __pfx_ref_tracker_free+0x10/0x10
[  615.787400][ T1692]  netlink_rcv_skb+0x232/0x4b0
[  615.787424][ T1692]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  615.787445][ T1692]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  615.787472][ T1692]  ? netlink_deliver_tap+0x2e/0x1b0
[  615.787500][ T1692]  netlink_unicast+0x80f/0x9b0
[  615.787530][ T1692]  ? __pfx_netlink_unicast+0x10/0x10
[  615.787551][ T1692]  ? netlink_sendmsg+0x650/0xb40
[  615.787572][ T1692]  ? skb_put+0x11b/0x210
[  615.787600][ T1692]  netlink_sendmsg+0x813/0xb40
[  615.787632][ T1692]  ? __pfx_netlink_sendmsg+0x10/0x10
[  615.787659][ T1692]  ? aa_sock_msg_perm+0xf1/0x1b0
[  615.787684][ T1692]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  615.787708][ T1692]  ____sys_sendmsg+0x972/0x9f0
[  615.787732][ T1692]  ? __pfx_____sys_sendmsg+0x10/0x10
[  615.787758][ T1692]  ? import_iovec+0x73/0xa0
[  615.787789][ T1692]  ___sys_sendmsg+0x2a5/0x360
[  615.787812][ T1692]  ? __pfx____sys_sendmsg+0x10/0x10
[  615.787862][ T1692]  ? __fget_files+0x2a/0x420
[  615.787886][ T1692]  ? __fget_files+0x3a0/0x420
[  615.787921][ T1692]  __x64_sys_sendmsg+0x1bd/0x2a0
[  615.787942][ T1692]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  615.787970][ T1692]  ? __pfx_ksys_write+0x10/0x10
[  615.788001][ T1692]  do_syscall_64+0x14d/0xf80
[  615.788016][ T1692]  ? trace_irq_disable+0x3b/0x150
[  615.788039][ T1692]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.788056][ T1692]  ? clear_bhb_loop+0x40/0x90
[  615.788079][ T1692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.788097][ T1692] RIP: 0033:0x7fd83079c799
[  615.788115][ T1692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  615.788129][ T1692] RSP: 002b:00007fd831588028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  615.788149][ T1692] RAX: ffffffffffffffda RBX: 00007fd830a15fa0 RCX: 00007fd83079c799
[  615.788162][ T1692] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000004
[  615.788174][ T1692] RBP: 00007fd831588090 R08: 0000000000000000 R09: 0000000000000000
[  615.788185][ T1692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  615.788195][ T1692] R13: 00007fd830a16038 R14: 00007fd830a15fa0 R15: 00007fff73d94608
[  615.788225][ T1692]  </TASK>
[  616.108030][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms
[  616.116081][    C1] lec:lec_tx_timeout: lec0
[  616.122375][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  616.143675][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  616.287754][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  616.397743][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  616.507438][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  616.542922][ T1716] netlink: 'syz.6.12271': attribute type 12 has an invalid length.
[  616.551462][ T1716] netlink: 'syz.6.12271': attribute type 29 has an invalid length.
[  616.944537][ T1746] vlan2: entered promiscuous mode
[  616.958366][ T1746] vlan2: entered allmulticast mode
[  616.971422][ T1746] hsr_slave_1: entered allmulticast mode
[  617.025918][ T1749] netlink: 'syz.1.12279': attribute type 8 has an invalid length.
[  617.036685][ T1751] netlink: 'syz.6.12280': attribute type 1 has an invalid length.
[  617.092341][ T1755] netlink: 'syz.6.12280': attribute type 1 has an invalid length.
[  617.103019][ T1749] bond0: entered promiscuous mode
[  617.109361][ T1749] bond0: left promiscuous mode
[  617.463485][ T1770] syzkaller0: entered promiscuous mode
[  617.483753][ T1770] syzkaller0: entered allmulticast mode
[  617.902117][ T1798] __nla_validate_parse: 10 callbacks suppressed
[  617.902137][ T1798] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12291'.
[  617.935721][ T1799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  617.962910][ T1799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  617.975087][ T1801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  618.201680][ T1816] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  618.410999][ T1830] syzkaller0: entered promiscuous mode
[  618.416557][ T1830] syzkaller0: entered allmulticast mode
[  618.545603][ T1833] netlink: 'syz.6.12301': attribute type 21 has an invalid length.
[  618.561294][ T1833] netlink: 128 bytes leftover after parsing attributes in process `syz.6.12301'.
[  618.573952][ T1833] netlink: 'syz.6.12301': attribute type 4 has an invalid length.
[  618.583014][ T1833] netlink: 'syz.6.12301': attribute type 5 has an invalid length.
[  618.605089][ T1836] netlink: 'syz.6.12301': attribute type 21 has an invalid length.
[  618.613457][ T1833] netlink: 3 bytes leftover after parsing attributes in process `syz.6.12301'.
[  618.623008][ T1836] netlink: 128 bytes leftover after parsing attributes in process `syz.6.12301'.
[  618.633035][ T1836] netlink: 'syz.6.12301': attribute type 4 has an invalid length.
[  618.641089][ T1836] netlink: 'syz.6.12301': attribute type 5 has an invalid length.
[  618.649147][ T1836] netlink: 3 bytes leftover after parsing attributes in process `syz.6.12301'.
[  618.743013][ T1838] syzkaller0: entered promiscuous mode
[  618.749245][ T1838] syzkaller0: entered allmulticast mode
[  618.756531][ T1835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12302'.
[  619.043760][ T1847] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12305'.
[  619.100066][ T1848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12305'.
[  619.109447][ T1848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12305'.
[  620.757511][ T1844] syzkaller0: entered promiscuous mode
[  620.763081][ T1844] syzkaller0: entered allmulticast mode
[  620.780028][ T1847] .` (unregistering): Released all slaves
[  620.878088][ T1857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12309'.
[  620.917078][   T13] net_ratelimit: 15 callbacks suppressed
[  620.917099][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  621.058201][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  621.095495][  T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.105451][  T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.124060][ T1867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  621.163018][ T1873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  621.183989][ T1873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  621.189731][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  621.337084][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  621.447137][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  621.609088][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  621.738169][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  621.887342][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  621.947088][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  621.955396][    C1] lec:lec_tx_timeout: lec0
[  621.961117][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  621.998779][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  622.137530][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  622.904588][ T1979] syzkaller0: entered promiscuous mode
[  622.920513][ T1979] syzkaller0: entered allmulticast mode
[  623.169372][ T2001] netlink: 'syz.1.12360': attribute type 43 has an invalid length.
[  623.183482][ T2005] syzkaller0: entered promiscuous mode
[  623.191395][ T2005] syzkaller0: entered allmulticast mode
[  623.238122][ T2005] __nla_validate_parse: 9 callbacks suppressed
[  623.238140][ T2005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12361'.
[  623.406704][ T2017] netlink: 112 bytes leftover after parsing attributes in process `syz.1.12366'.
[  623.461366][ T2022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.602004][ T2036] syzkaller0: entered promiscuous mode
[  623.608076][ T2036] syzkaller0: entered allmulticast mode
[  623.860627][ T2045] netlink: 'syz.2.12374': attribute type 6 has an invalid length.
[  624.141396][ T2056] netlink: 'syz.6.12375': attribute type 1 has an invalid length.
[  624.228191][ T2058] bond1: (slave gretap1): making interface the new active one
[  624.236325][ T2058] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  624.434232][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL
[  625.927386][ T1138] net_ratelimit: 31 callbacks suppressed
[  625.927407][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  626.047958][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  626.157132][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  626.277241][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  626.387254][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  626.394783][ T2020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  626.508771][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  626.613942][ T2064] syzkaller0: entered promiscuous mode
[  626.627313][ T2064] syzkaller0: entered allmulticast mode
[  626.659508][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  626.690904][ T2064] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[  626.845889][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  626.961309][ T2088] netlink: 'syz.5.12389': attribute type 1 has an invalid length.
[  626.965195][ T2090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  626.979292][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  626.979323][    C1] lec:lec_tx_timeout: lec0
[  626.988406][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  627.018420][ T2090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  627.092143][ T2098] netlink: 'syz.3.12392': attribute type 2 has an invalid length.
[  627.109461][ T2088] bond1: entered promiscuous mode
[  627.115078][ T2088] 8021q: adding VLAN 0 to HW filter on device bond1
[  627.127151][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  627.144586][ T2101] xt_hashlimit: size too large, truncated to 1048576
[  627.165942][ T2095] macvtap1: entered allmulticast mode
[  627.181629][ T2098] �9: entered promiscuous mode
[  627.235590][ T2099] bond1: (slave bridge2): making interface the new active one
[  627.277383][ T2099] bridge2: entered promiscuous mode
[  627.289962][ T2099] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  627.467225][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  627.710132][ T2126] vlan2: entered promiscuous mode
[  627.726388][ T2126] vlan2: entered allmulticast mode
[  627.732825][ T2126] hsr_slave_1: entered allmulticast mode
[  627.850608][ T2137] x_tables: ip_tables: icmp match: only valid for protocol 1
[  628.186740][ T2163] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12415'.
[  628.217159][ T2163] netlink: 35 bytes leftover after parsing attributes in process `syz.6.12415'.
[  628.241726][ T2163] netlink: 'syz.6.12415': attribute type 5 has an invalid length.
[  628.280089][ T2163] netlink: 'syz.6.12415': attribute type 6 has an invalid length.
[  628.317082][ T2163] netlink: 35 bytes leftover after parsing attributes in process `syz.6.12415'.
[  628.340447][ T2170] syzkaller1: entered promiscuous mode
[  628.352024][ T2170] syzkaller1: entered allmulticast mode
[  628.565313][ T2189] netlink: 'syz.3.12423': attribute type 1 has an invalid length.
[  628.573503][ T2189] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12423'.
[  628.742237][ T2202] bond0: (slave gre0): Error: Device type is different from other slaves
[  628.837049][ T2208] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.12428'.
[  629.070411][ T2224] vlan3: entered promiscuous mode
[  629.075695][ T2224] vlan3: entered allmulticast mode
[  629.103159][ T2224] hsr_slave_1: entered allmulticast mode
[  629.311470][ T2232] netlink: 'syz.3.12433': attribute type 3 has an invalid length.
[  629.378927][ T2236] wg1 speed is unknown, defaulting to 1000
[  629.397810][ T2232] netlink: 'syz.3.12433': attribute type 1 has an invalid length.
[  629.430392][ T2232] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.12433'.
[  629.509975][ T2257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12442'.
[  629.544075][ T2259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12442'.
[  630.033679][ T2281] xt_CT: You must specify a L4 protocol and not use inversions on it
[  630.310179][ T2299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  630.314549][ T2292] syzkaller0: entered promiscuous mode
[  630.326441][ T2292] syzkaller0: entered allmulticast mode
[  630.407569][ T2300] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.12456'.
[  630.420985][ T2300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12456'.
[  630.507569][ T2303] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12456'.
[  630.654288][ T2309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12461'.
[  631.003018][ T2331] syzkaller0: entered promiscuous mode
[  631.009578][ T2331] syzkaller0: entered allmulticast mode
[  631.037792][ T2334] net_ratelimit: 22 callbacks suppressed
[  631.037802][ T2334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  631.118033][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  631.230310][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  631.345545][ T2359] netlink: 'syz.3.12479': attribute type 3 has an invalid length.
[  631.347342][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  631.505351][ T2362] bond2: ARP target 1.0.0.0 is already present
[  631.537956][ T2362] bond2: option arp_ip_target: invalid value (1)
[  631.566477][ T2362] bond2 (unregistering): Released all slaves
[  631.657422][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  631.767072][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  631.796192][ T2378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  631.889396][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  631.958424][ T2384] syzkaller0: entered promiscuous mode
[  631.970638][ T2384] syzkaller0: entered allmulticast mode
[  631.996984][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  632.005051][    C1] lec:lec_tx_timeout: lec0
[  632.009745][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  632.067027][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  632.136764][ T2393] sctp: [Deprecated]: syz.5.12495 (pid 2393) Use of struct sctp_assoc_value in delayed_ack socket option.
[  632.136764][ T2393] Use struct sctp_sack_info instead
[  632.189634][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  632.451916][ T2417] netlink: 'syz.3.12503': attribute type 3 has an invalid length.
[  632.648395][ T2432] syzkaller0: entered promiscuous mode
[  632.656985][ T2432] syzkaller0: entered allmulticast mode
[  633.083689][ T2467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  633.123909][ T2467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  633.171752][ T2467] bond0 (unregistering): Released all slaves
[  633.212334][ T2480] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20000
[  633.234247][ T2482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.286828][ T2482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.350843][ T2487] netlink: 'syz.3.12523': attribute type 11 has an invalid length.
[  633.359578][ T2487] __nla_validate_parse: 6 callbacks suppressed
[  633.359596][ T2487] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12523'.
[  633.497261][ T2499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.520234][ T2499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.823765][ T2532] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  633.937324][ T2538] syzkaller0: entered promiscuous mode
[  633.956430][ T2538] syzkaller0: entered allmulticast mode
[  634.040456][ T2538] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12536'.
[  634.052124][ T2538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12536'.
[  634.291470][ T2561] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.12543'.
[  634.392081][ T2567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  634.463109][ T2579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  635.042827][ T2607] syzkaller0: entered promiscuous mode
[  635.050571][ T2607] syzkaller0: entered allmulticast mode
[  635.059389][ T2609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12557'.
[  635.087086][ T2609] netlink: 'syz.3.12557': attribute type 5 has an invalid length.
[  635.095238][ T2609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12557'.
[  635.111892][ T2609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12557'.
[  635.261389][ T2614] netlink: 'syz.3.12559': attribute type 1 has an invalid length.
[  635.283538][ T2614] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12559'.
[  635.681628][ T2642] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.12565'.
[  635.808700][ T2657] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12564'.
[  635.999431][ T2673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  636.033066][ T2673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  636.080180][ T1168] net_ratelimit: 35 callbacks suppressed
[  636.080200][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  636.209090][ T2691] FAULT_INJECTION: forcing a failure.
[  636.209090][ T2691] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  636.222436][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  636.257343][ T2691] CPU: 0 UID: 0 PID: 2691 Comm: syz.3.12577 Not tainted syzkaller #0 PREEMPT(full) 
[  636.257367][ T2691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  636.257378][ T2691] Call Trace:
[  636.257385][ T2691]  <TASK>
[  636.257392][ T2691]  dump_stack_lvl+0xe8/0x150
[  636.257422][ T2691]  should_fail_ex+0x412/0x560
[  636.257459][ T2691]  _copy_from_iter+0x1d3/0x1670
[  636.257488][ T2691]  ? rcu_is_watching+0x15/0xb0
[  636.257518][ T2691]  ? __pfx__copy_from_iter+0x10/0x10
[  636.257550][ T2691]  ? netlink_sendmsg+0x650/0xb40
[  636.257572][ T2691]  ? skb_put+0x11b/0x210
[  636.257602][ T2691]  netlink_sendmsg+0x6c0/0xb40
[  636.257634][ T2691]  ? __pfx_netlink_sendmsg+0x10/0x10
[  636.257661][ T2691]  ? aa_sock_msg_perm+0xf1/0x1b0
[  636.257685][ T2691]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  636.257708][ T2691]  ____sys_sendmsg+0x972/0x9f0
[  636.257735][ T2691]  ? __pfx_____sys_sendmsg+0x10/0x10
[  636.257762][ T2691]  ? import_iovec+0x73/0xa0
[  636.257791][ T2691]  ___sys_sendmsg+0x2a5/0x360
[  636.257814][ T2691]  ? __pfx____sys_sendmsg+0x10/0x10
[  636.257868][ T2691]  ? __fget_files+0x2a/0x420
[  636.257892][ T2691]  ? __fget_files+0x3a0/0x420
[  636.257927][ T2691]  __x64_sys_sendmsg+0x1bd/0x2a0
[  636.257948][ T2691]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  636.257975][ T2691]  ? __pfx_ksys_write+0x10/0x10
[  636.258007][ T2691]  do_syscall_64+0x14d/0xf80
[  636.258023][ T2691]  ? trace_irq_disable+0x3b/0x150
[  636.258048][ T2691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.258067][ T2691]  ? clear_bhb_loop+0x40/0x90
[  636.258089][ T2691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.258107][ T2691] RIP: 0033:0x7f4d3f99c799
[  636.258125][ T2691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.258140][ T2691] RSP: 002b:00007f4d407f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  636.258160][ T2691] RAX: ffffffffffffffda RBX: 00007f4d3fc15fa0 RCX: 00007f4d3f99c799
[  636.258180][ T2691] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  636.258192][ T2691] RBP: 00007f4d407f4090 R08: 0000000000000000 R09: 0000000000000000
[  636.258203][ T2691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.258213][ T2691] R13: 00007f4d3fc16038 R14: 00007f4d3fc15fa0 R15: 00007ffc74a4d718
[  636.258244][ T2691]  </TASK>
[  636.320326][ T2695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  636.419354][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  636.523239][ T2705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  636.637616][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  636.746408][ T2715] sctp: [Deprecated]: syz.6.12585 (pid 2715) Use of struct sctp_assoc_value in delayed_ack socket option.
[  636.746408][ T2715] Use struct sctp_sack_info instead
[  636.748552][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  636.813548][ T2725] netlink: 'syz.3.12588': attribute type 1 has an invalid length.
[  636.879076][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  636.886457][ T2725] block nbd3: NBD_DISCONNECT
[  636.901902][ T2726] nbd: device at index 3 is going down
[  636.950820][ T2725] netlink: 'syz.3.12588': attribute type 1 has an invalid length.
[  636.990424][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  637.016926][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  637.025054][    C1] lec:lec_tx_timeout: lec0
[  637.029744][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  637.282611][ T2762] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  637.294845][ T2762] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  637.314988][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  637.447697][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  637.597452][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  637.622456][ T2786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  637.660175][ T2783] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  637.716707][ T2786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  638.062077][ T2831] netlink: 'syz.1.12616': attribute type 1 has an invalid length.
[  638.434024][ T2873] IPVS: length: 8 != 1152
[  638.513198][ T2880] netlink: 'syz.6.12632': attribute type 2 has an invalid length.
[  638.721326][ T2898] netlink: 'syz.3.12639': attribute type 1 has an invalid length.
[  638.814593][ T2903] __nla_validate_parse: 9 callbacks suppressed
[  638.814614][ T2903] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12640'.
[  638.901403][ T2905] veth9: entered allmulticast mode
[  639.097576][ T2920] Cannot find del_set index 49151 as target
[  639.134592][ T2923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  639.208701][ T2928] netlink: 'syz.3.12652': attribute type 1 has an invalid length.
[  639.235172][ T2924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12651'.
[  639.358276][ T2935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12655'.
[  639.502442][ T2941] netlink: 312 bytes leftover after parsing attributes in process `syz.2.12658'.
[  639.632264][ T2951] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12663'.
[  640.275818][ T3003] netlink: 'syz.3.12676': attribute type 1 has an invalid length.
[  640.318038][ T3003] netlink: 'syz.3.12676': attribute type 1 has an invalid length.
[  640.326830][ T3003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12676'.
[  640.348319][ T3004] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  640.360939][ T3004] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  640.463720][ T3012] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  640.481784][ T3012] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  640.496651][ T3016] bond0: (slave gre0): Error: Device type is different from other slaves
[  640.563458][ T3020] sctp: [Deprecated]: syz.2.12685 (pid 3020) Use of int in maxseg socket option.
[  640.563458][ T3020] Use struct sctp_assoc_value instead
[  640.789777][ T3039] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12691'.
[  640.810824][ T3039] netlink: 19 bytes leftover after parsing attributes in process `syz.5.12691'.
[  640.848924][ T3043] FAULT_INJECTION: forcing a failure.
[  640.848924][ T3043] name failslab, interval 1, probability 0, space 0, times 0
[  640.874728][ T3043] CPU: 0 UID: 0 PID: 3043 Comm: syz.1.12692 Not tainted syzkaller #0 PREEMPT(full) 
[  640.874755][ T3043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  640.874767][ T3043] Call Trace:
[  640.874774][ T3043]  <TASK>
[  640.874782][ T3043]  dump_stack_lvl+0xe8/0x150
[  640.874812][ T3043]  should_fail_ex+0x412/0x560
[  640.874842][ T3043]  should_failslab+0xa8/0x100
[  640.874867][ T3043]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  640.874889][ T3043]  ? __alloc_skb+0x1d0/0x7d0
[  640.874912][ T3043]  ? __local_bh_enable_ip+0xd0/0x130
[  640.874941][ T3043]  __alloc_skb+0x1d0/0x7d0
[  640.874971][ T3043]  netlink_dump+0x1ef/0xe80
[  640.875001][ T3043]  ? __netlink_lookup+0xc6/0x8b0
[  640.875029][ T3043]  ? __pfx_netlink_dump+0x10/0x10
[  640.875048][ T3043]  ? __netlink_lookup+0x7e4/0x8b0
[  640.875088][ T3043]  ? netlink_lookup+0x30/0x200
[  640.875109][ T3043]  ? netlink_lookup+0x30/0x200
[  640.875129][ T3043]  ? netlink_lookup+0x30/0x200
[  640.875156][ T3043]  __netlink_dump_start+0x5cb/0x7e0
[  640.875188][ T3043]  rtnetlink_rcv_msg+0xa3a/0xbe0
[  640.875214][ T3043]  ? __pfx_mpls_netconf_dump_devconf+0x10/0x10
[  640.875352][ T3043]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  640.875376][ T3043]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  640.875406][ T3043]  ? ref_tracker_free+0x693/0x840
[  640.875428][ T3043]  ? __pfx_mpls_netconf_dump_devconf+0x10/0x10
[  640.875470][ T3043]  netlink_rcv_skb+0x232/0x4b0
[  640.875494][ T3043]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  640.875520][ T3043]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  640.875555][ T3043]  ? netlink_deliver_tap+0x2e/0x1b0
[  640.875587][ T3043]  netlink_unicast+0x80f/0x9b0
[  640.875617][ T3043]  ? __pfx_netlink_unicast+0x10/0x10
[  640.875640][ T3043]  ? netlink_sendmsg+0x650/0xb40
[  640.875661][ T3043]  ? skb_put+0x11b/0x210
[  640.875689][ T3043]  netlink_sendmsg+0x813/0xb40
[  640.875722][ T3043]  ? __pfx_netlink_sendmsg+0x10/0x10
[  640.875748][ T3043]  ? aa_sock_msg_perm+0xf1/0x1b0
[  640.875773][ T3043]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  640.875797][ T3043]  ____sys_sendmsg+0x972/0x9f0
[  640.875824][ T3043]  ? __pfx_____sys_sendmsg+0x10/0x10
[  640.875852][ T3043]  ? import_iovec+0x73/0xa0
[  640.875882][ T3043]  ___sys_sendmsg+0x2a5/0x360
[  640.875906][ T3043]  ? __pfx____sys_sendmsg+0x10/0x10
[  640.875961][ T3043]  ? __fget_files+0x2a/0x420
[  640.875985][ T3043]  ? __fget_files+0x3a0/0x420
[  640.876021][ T3043]  __x64_sys_sendmsg+0x1bd/0x2a0
[  640.876042][ T3043]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  640.876071][ T3043]  ? __pfx_ksys_write+0x10/0x10
[  640.876102][ T3043]  do_syscall_64+0x14d/0xf80
[  640.876119][ T3043]  ? trace_irq_disable+0x3b/0x150
[  640.876143][ T3043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.876162][ T3043]  ? clear_bhb_loop+0x40/0x90
[  640.876184][ T3043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.876202][ T3043] RIP: 0033:0x7fbb3559c799
[  640.876218][ T3043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  640.876232][ T3043] RSP: 002b:00007fbb337ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  640.876258][ T3043] RAX: ffffffffffffffda RBX: 00007fbb35815fa0 RCX: 00007fbb3559c799
[  640.876271][ T3043] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  640.876282][ T3043] RBP: 00007fbb337ee090 R08: 0000000000000000 R09: 0000000000000000
[  640.876293][ T3043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  640.876303][ T3043] R13: 00007fbb35816038 R14: 00007fbb35815fa0 R15: 00007fff323391b8
[  640.876335][ T3043]  </TASK>
[  641.232347][ T3052] netlink: 'syz.3.12695': attribute type 1 has an invalid length.
[  641.245370][  T146] net_ratelimit: 31 callbacks suppressed
[  641.245391][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  641.370691][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  641.518189][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  641.627660][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.636555][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  641.753670][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  641.877011][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  641.957663][ T3097] bond0: (slave gre0): Error: Device type is different from other slaves
[  641.987303][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  642.036988][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  642.045042][    C1] lec:lec_tx_timeout: lec0
[  642.051478][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  642.171806][ T3101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12714'.
[  642.212846][ T3101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12714'.
[  642.348220][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  642.457605][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  642.636177][ T3144] FAULT_INJECTION: forcing a failure.
[  642.636177][ T3144] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  642.666690][ T3144] CPU: 0 UID: 0 PID: 3144 Comm: syz.2.12727 Not tainted syzkaller #0 PREEMPT(full) 
[  642.666716][ T3144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  642.666726][ T3144] Call Trace:
[  642.666734][ T3144]  <TASK>
[  642.666741][ T3144]  dump_stack_lvl+0xe8/0x150
[  642.666770][ T3144]  should_fail_ex+0x412/0x560
[  642.666799][ T3144]  _copy_from_iter+0x1d3/0x1670
[  642.666826][ T3144]  ? rcu_is_watching+0x15/0xb0
[  642.666856][ T3144]  ? __pfx__copy_from_iter+0x10/0x10
[  642.666889][ T3144]  ? netlink_sendmsg+0x650/0xb40
[  642.666909][ T3144]  ? skb_put+0x11b/0x210
[  642.666934][ T3144]  netlink_sendmsg+0x6c0/0xb40
[  642.666963][ T3144]  ? __pfx_netlink_sendmsg+0x10/0x10
[  642.666988][ T3144]  ? aa_sock_msg_perm+0xf1/0x1b0
[  642.667012][ T3144]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  642.667035][ T3144]  ____sys_sendmsg+0x972/0x9f0
[  642.667060][ T3144]  ? __pfx_____sys_sendmsg+0x10/0x10
[  642.667085][ T3144]  ? import_iovec+0x73/0xa0
[  642.667112][ T3144]  ___sys_sendmsg+0x2a5/0x360
[  642.667134][ T3144]  ? __pfx____sys_sendmsg+0x10/0x10
[  642.667179][ T3144]  ? __fget_files+0x2a/0x420
[  642.667202][ T3144]  ? __fget_files+0x3a0/0x420
[  642.667232][ T3144]  __x64_sys_sendmsg+0x1bd/0x2a0
[  642.667252][ T3144]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  642.667278][ T3144]  ? __pfx_ksys_write+0x10/0x10
[  642.667307][ T3144]  do_syscall_64+0x14d/0xf80
[  642.667323][ T3144]  ? trace_irq_disable+0x3b/0x150
[  642.667347][ T3144]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.667365][ T3144]  ? clear_bhb_loop+0x40/0x90
[  642.667387][ T3144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.667405][ T3144] RIP: 0033:0x7f06c819c799
[  642.667422][ T3144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  642.667438][ T3144] RSP: 002b:00007f06c90a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  642.667456][ T3144] RAX: ffffffffffffffda RBX: 00007f06c8415fa0 RCX: 00007f06c819c799
[  642.667468][ T3144] RDX: 0000000000000000 RSI: 0000200000002a40 RDI: 0000000000000004
[  642.667479][ T3144] RBP: 00007f06c90a7090 R08: 0000000000000000 R09: 0000000000000000
[  642.667490][ T3144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  642.667501][ T3144] R13: 00007f06c8416038 R14: 00007f06c8415fa0 R15: 00007ffd25d49df8
[  642.667529][ T3144]  </TASK>
[  642.903609][ T3148] xt_hashlimit: size too large, truncated to 1048576
[  642.962784][ T3146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  643.040416][ T3146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  643.120910][ T3153] netlink: 'syz.2.12730': attribute type 1 has an invalid length.
[  643.180334][ T3153] bond18: entered promiscuous mode
[  643.186237][ T3153] 8021q: adding VLAN 0 to HW filter on device bond18
[  643.228733][ T3153] bond18: (slave bridge0): making interface the new active one
[  643.236377][ T3153] bridge0: entered promiscuous mode
[  643.243557][ T3153] bond18: (slave bridge0): Enslaving as an active interface with an up link
[  643.350271][ T3170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  643.374842][ T3170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  643.450938][ T3176] hsr_slave_0: left promiscuous mode
[  643.514717][ T3181] FAULT_INJECTION: forcing a failure.
[  643.514717][ T3181] name failslab, interval 1, probability 0, space 0, times 0
[  643.530880][ T3181] CPU: 0 UID: 0 PID: 3181 Comm: syz.3.12738 Not tainted syzkaller #0 PREEMPT(full) 
[  643.530904][ T3181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  643.530914][ T3181] Call Trace:
[  643.530920][ T3181]  <TASK>
[  643.530927][ T3181]  dump_stack_lvl+0xe8/0x150
[  643.530969][ T3181]  should_fail_ex+0x412/0x560
[  643.530997][ T3181]  should_failslab+0xa8/0x100
[  643.531022][ T3181]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  643.531041][ T3181]  ? __alloc_skb+0x186/0x7d0
[  643.531065][ T3181]  ? __alloc_skb+0x1d0/0x7d0
[  643.531084][ T3181]  ? __local_bh_enable_ip+0xd0/0x130
[  643.531110][ T3181]  __alloc_skb+0x1d0/0x7d0
[  643.531138][ T3181]  netlink_sendmsg+0x5d4/0xb40
[  643.531168][ T3181]  ? __pfx_netlink_sendmsg+0x10/0x10
[  643.531192][ T3181]  ? aa_sock_msg_perm+0xf1/0x1b0
[  643.531215][ T3181]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  643.531237][ T3181]  ____sys_sendmsg+0x972/0x9f0
[  643.531260][ T3181]  ? __pfx_____sys_sendmsg+0x10/0x10
[  643.531285][ T3181]  ? import_iovec+0x73/0xa0
[  643.531314][ T3181]  ___sys_sendmsg+0x2a5/0x360
[  643.531336][ T3181]  ? __pfx____sys_sendmsg+0x10/0x10
[  643.531387][ T3181]  ? __fget_files+0x2a/0x420
[  643.531411][ T3181]  ? __fget_files+0x3a0/0x420
[  643.531446][ T3181]  __x64_sys_sendmsg+0x1bd/0x2a0
[  643.531465][ T3181]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  643.531491][ T3181]  ? __pfx_ksys_write+0x10/0x10
[  643.531520][ T3181]  do_syscall_64+0x14d/0xf80
[  643.531537][ T3181]  ? trace_irq_disable+0x3b/0x150
[  643.531561][ T3181]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.531578][ T3181]  ? clear_bhb_loop+0x40/0x90
[  643.531601][ T3181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.531618][ T3181] RIP: 0033:0x7f4d3f99c799
[  643.531635][ T3181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  643.531650][ T3181] RSP: 002b:00007f4d407f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  643.531669][ T3181] RAX: ffffffffffffffda RBX: 00007f4d3fc15fa0 RCX: 00007f4d3f99c799
[  643.531681][ T3181] RDX: 0000000000040810 RSI: 0000200000000140 RDI: 0000000000000003
[  643.531693][ T3181] RBP: 00007f4d407f4090 R08: 0000000000000000 R09: 0000000000000000
[  643.531703][ T3181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  643.531714][ T3181] R13: 00007f4d3fc16038 R14: 00007f4d3fc15fa0 R15: 00007ffc74a4d718
[  643.531743][ T3181]  </TASK>
[  643.777941][ T3179] netlink: 'syz.1.12737': attribute type 11 has an invalid length.
[  643.793400][ T3185] netlink: 'syz.1.12737': attribute type 11 has an invalid length.
[  643.990874][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.998894][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.023760][ T3201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  644.078544][ T3205] syzkaller0: entered promiscuous mode
[  644.084491][ T3205] syzkaller0: entered allmulticast mode
[  644.171392][ T3209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  644.263464][ T3215] syzkaller0: entered promiscuous mode
[  644.270716][ T3215] syzkaller0: entered allmulticast mode
[  644.323114][ T3218] netlink: 'syz.5.12751': attribute type 9 has an invalid length.
[  644.340365][ T3218] netlink: 'syz.5.12751': attribute type 6 has an invalid length.
[  644.364401][ T3218] dvmrp0: entered allmulticast mode
[  644.418580][ T3220] FAULT_INJECTION: forcing a failure.
[  644.418580][ T3220] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  644.437073][ T3220] CPU: 1 UID: 0 PID: 3220 Comm: syz.6.12752 Not tainted syzkaller #0 PREEMPT(full) 
[  644.437099][ T3220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  644.437110][ T3220] Call Trace:
[  644.437117][ T3220]  <TASK>
[  644.437124][ T3220]  dump_stack_lvl+0xe8/0x150
[  644.437158][ T3220]  should_fail_ex+0x412/0x560
[  644.437186][ T3220]  _copy_from_iter+0x1d3/0x1670
[  644.437215][ T3220]  ? rcu_is_watching+0x15/0xb0
[  644.437244][ T3220]  ? __pfx__copy_from_iter+0x10/0x10
[  644.437276][ T3220]  ? netlink_sendmsg+0x650/0xb40
[  644.437298][ T3220]  ? skb_put+0x11b/0x210
[  644.437327][ T3220]  netlink_sendmsg+0x6c0/0xb40
[  644.437359][ T3220]  ? __pfx_netlink_sendmsg+0x10/0x10
[  644.437384][ T3220]  ? aa_sock_msg_perm+0xf1/0x1b0
[  644.437407][ T3220]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  644.437431][ T3220]  ____sys_sendmsg+0x972/0x9f0
[  644.437456][ T3220]  ? __pfx_____sys_sendmsg+0x10/0x10
[  644.437483][ T3220]  ? import_iovec+0x73/0xa0
[  644.437511][ T3220]  ___sys_sendmsg+0x2a5/0x360
[  644.437535][ T3220]  ? __pfx____sys_sendmsg+0x10/0x10
[  644.437587][ T3220]  ? __fget_files+0x2a/0x420
[  644.437612][ T3220]  ? __fget_files+0x3a0/0x420
[  644.437647][ T3220]  __x64_sys_sendmsg+0x1bd/0x2a0
[  644.437668][ T3220]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  644.437695][ T3220]  ? __pfx_ksys_write+0x10/0x10
[  644.437726][ T3220]  do_syscall_64+0x14d/0xf80
[  644.437743][ T3220]  ? trace_irq_disable+0x3b/0x150
[  644.437767][ T3220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.437785][ T3220]  ? clear_bhb_loop+0x40/0x90
[  644.437807][ T3220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.437824][ T3220] RIP: 0033:0x7fd83079c799
[  644.437842][ T3220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.437856][ T3220] RSP: 002b:00007fd831588028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  644.437883][ T3220] RAX: ffffffffffffffda RBX: 00007fd830a15fa0 RCX: 00007fd83079c799
[  644.437896][ T3220] RDX: 0000000000040810 RSI: 0000200000000140 RDI: 0000000000000003
[  644.437907][ T3220] RBP: 00007fd831588090 R08: 0000000000000000 R09: 0000000000000000
[  644.437919][ T3220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.437928][ T3220] R13: 00007fd830a16038 R14: 00007fd830a15fa0 R15: 00007fff73d94608
[  644.437959][ T3220]  </TASK>
[  644.779018][ T3227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  644.836582][ T3231] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  644.874024][ T3231] Cannot find add_set index 65532 as target
[  644.982013][ T3238] syzkaller0: entered promiscuous mode
[  644.989492][ T3238] syzkaller0: entered allmulticast mode
[  645.016305][ T3240] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  645.018500][ T3242] __nla_validate_parse: 7 callbacks suppressed
[  645.018518][ T3242] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12761'.
[  645.062919][ T3240] veth0: entered promiscuous mode
[  645.205438][ T3239] veth0: left promiscuous mode
[  645.382943][ T3258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12768'.
[  645.470872][ T3262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12769'.
[  645.516613][ T3266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  645.951253][ T3297] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12782'.
[  645.968494][ T3298] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  645.996536][ T3298] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  646.099557][ T3300] syzkaller0: entered promiscuous mode
[  646.112463][ T3300] syzkaller0: entered allmulticast mode
[  646.123386][ T3298] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12783'.
[  646.198701][ T3313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12787'.
[  646.530350][ T3324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12790'.
[  646.831367][T11011] net_ratelimit: 32 callbacks suppressed
[  646.831381][T11011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.067197][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  647.075280][    C1] lec:lec_tx_timeout: lec0
[  647.080053][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  647.150683][T11013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.190125][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.409168][ T3330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12791'.
[  648.431545][ T3330] veth0: Caught tx_queue_len zero misconfig
[  648.458222][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  648.492853][ T3333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12791'.
[  648.496055][ T3336] netlink: 'syz.6.12794': attribute type 1 has an invalid length.
[  648.556284][ T3336] bond0: (slave gre0): Error: Device type is different from other slaves
[  648.597509][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  648.714960][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  648.728161][ T3346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  648.748420][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.762984][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.776916][T11011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.785314][ T3352] syzkaller0: entered promiscuous mode
[  648.791087][ T3354] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12803'.
[  648.807174][ T3352] syzkaller0: entered allmulticast mode
[  648.874427][ T3358] netlink: 'syz.3.12803': attribute type 7 has an invalid length.
[  648.957094][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  649.109674][ T3367] hsr_slave_0 (unregistering): left promiscuous mode
[  649.202222][ T3372] syzkaller0: entered promiscuous mode
[  649.211592][ T3372] syzkaller0: entered allmulticast mode
[  649.222078][ T3371] nbd: must specify at least one socket
[  649.809893][ T3431] sctp: [Deprecated]: syz.3.12828 (pid 3431) Use of int in max_burst socket option.
[  649.809893][ T3431] Use struct sctp_assoc_value instead
[  649.883908][ T3436] netlink: 'syz.3.12828': attribute type 1 has an invalid length.
[  650.178116][ T3448] __nla_validate_parse: 5 callbacks suppressed
[  650.178130][ T3448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12834'.
[  650.404190][ T3466] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12840'.
[  650.452304][ T3474] xt_hashlimit: size too large, truncated to 1048576
[  650.577303][ T3479] netlink: 104 bytes leftover after parsing attributes in process `syz.6.12845'.
[  650.782930][ T3486] bond0: (slave gretap0): Device is not bonding slave
[  650.794072][ T3486] bond0: option active_slave: invalid value (gretap0)
[  650.811211][ T3486] bond0 (unregistering): Released all slaves
[  650.945250][ T3499] ipt_REJECT: TCP_RESET invalid for non-tcp
[  651.076333][ T3508] syzkaller1: entered promiscuous mode
[  651.096130][ T3508] syzkaller1: entered allmulticast mode
[  651.116015][ T3508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12858'.
[  651.586521][ T3536] netlink: 'syz.1.12867': attribute type 5 has an invalid length.
[  651.857054][   T12] net_ratelimit: 25 callbacks suppressed
[  651.857075][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  651.970540][ T3558] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode
[  651.977886][ T3558] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode
[  652.026635][ T3550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12873'.
[  652.038136][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  652.087080][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  652.095182][    C1] lec:lec_tx_timeout: lec0
[  652.099935][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  652.178301][ T3550] ipt_REJECT: TCP_RESET invalid for non-tcp
[  652.187036][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  652.298254][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  652.408446][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  652.516579][ T3584] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode
[  652.539915][ T3584] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode
[  652.568517][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  652.698977][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  652.752331][ T3595] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode
[  652.782937][ T3595] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode
[  652.827213][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  652.992119][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  653.051294][ T3611] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12896'.
[  653.117731][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  653.174990][ T3615] syzkaller0: entered promiscuous mode
[  653.184868][ T3615] syzkaller0: entered allmulticast mode
[  653.232152][ T3618] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode
[  653.240764][ T3618] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode
[  653.751292][ T3632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12901'.
[  654.160111][ T3660] netlink: 'syz.2.12913': attribute type 1 has an invalid length.
[  654.174783][ T3660] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12913'.
[  654.190588][ T3649] bridge0: port 1(gretap0) entered disabled state
[  654.199878][ T3660] netlink: 658 bytes leftover after parsing attributes in process `syz.2.12913'.
[  654.227562][ T3660] netlink: 1 bytes leftover after parsing attributes in process `syz.2.12913'.
[  654.375299][ T3649] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.832485][ T3649] tipc: Resetting bearer <eth:syzkaller0>
[  655.206492][ T1168] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.256531][ T1168] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.288860][   T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.322729][   T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.493125][ T3709] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12923'.
[  655.533949][ T3709] ip6gre2: entered promiscuous mode
[  655.540411][ T3712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12924'.
[  655.548094][ T3709] ip6gre2: entered allmulticast mode
[  655.564419][ T3712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12924'.
[  655.600841][ T3719] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  655.694359][ T3725] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12927'.
[  655.763340][ T3725] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12927'.
[  655.789118][ T3725] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12927'.
[  655.823236][ T3734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12927'.
[  656.405729][ T3769] sch_fq: defrate 0 ignored.
[  656.811307][ T3797] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.12948'.
[  656.968213][ T1168] net_ratelimit: 21 callbacks suppressed
[  656.968232][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  657.107063][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  657.115187][    C1] lec:lec_tx_timeout: lec0
[  657.120166][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  657.178749][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  657.218228][ T3811] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12953'.
[  657.259926][ T3811] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.268722][ T3811] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.317016][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  657.364701][ T3820] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12953'.
[  657.617065][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  657.738156][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  657.752285][ T3837] syzkaller0: entered promiscuous mode
[  657.759129][ T3837] syzkaller0: entered allmulticast mode
[  657.870163][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  658.029683][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  658.327362][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  658.442093][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  658.589610][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  658.920236][ T3919] netlink: 'syz.2.12981': attribute type 2 has an invalid length.
[  659.336321][ T3954] x_tables: duplicate underflow at hook 3
[  659.392439][ T3958] syzkaller1: entered promiscuous mode
[  659.398120][ T3958] syzkaller1: entered allmulticast mode
[  659.450522][ T3962] netlink: 'syz.2.12994': attribute type 1 has an invalid length.
[  659.532851][ T3973] netlink: 'syz.1.12992': attribute type 1 has an invalid length.
[  659.749749][ T3989] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  660.354713][ T4028] bridge0: port 1(gretap0) entered blocking state
[  660.361355][ T4028] bridge0: port 1(gretap0) entered forwarding state
[  660.382033][ T4028] 8021q: adding VLAN 0 to HW filter on device .`
[  660.405666][ T4028] 8021q: adding VLAN 0 to HW filter on device team0
[  660.441050][ T4028] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  660.464626][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.471867][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  661.040153][ T4072] lo speed is unknown, defaulting to 1000
[  661.049486][ T4072] lo speed is unknown, defaulting to 1000
[  661.056117][ T4072] lo speed is unknown, defaulting to 1000
[  661.290658][ T4072] infiniband syz0: set active
[  661.295501][ T4072] infiniband syz0: added lo
[  661.303735][T19472] lo speed is unknown, defaulting to 1000
[  661.344849][ T4072] RDS/IB: syz0: added
[  661.349133][ T4072] smc: adding ib device syz0 with port count 1
[  661.355315][ T4072] smc:    ib device syz0 port 1 has no pnetid
[  661.393619][ T4084] __nla_validate_parse: 5 callbacks suppressed
[  661.393641][ T4084] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13036'.
[  661.411060][ T4072] lo speed is unknown, defaulting to 1000
[  661.421620][ T4090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13035'.
[  661.436988][T19472] lo speed is unknown, defaulting to 1000
[  661.448252][ T4090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13035'.
[  661.535021][ T4093] syzkaller0: entered promiscuous mode
[  661.547877][ T4093] syzkaller0: entered allmulticast mode
[  661.582956][ T4098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13041'.
[  661.650275][ T4101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13041'.
[  662.129877][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  662.138217][    C1] lec:lec_tx_timeout: lec0
[  662.143215][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  663.479807][   T12] net_ratelimit: 22 callbacks suppressed
[  663.479830][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  663.516080][ T4072] lo speed is unknown, defaulting to 1000
[  663.617018][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  663.688913][ T4129] netlink: 'syz.1.13050': attribute type 10 has an invalid length.
[  663.724545][ T4129] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  663.768610][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  663.836270][ T4137] sch_tbf: burst 0 is lower than device lo mtu (1294) !
[  663.897059][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  663.926332][ T4128] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13052'.
[  663.971971][ T4072] lo speed is unknown, defaulting to 1000
[  664.008139][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  664.130399][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  664.171080][ T4153] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13058'.
[  664.257352][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  664.315609][ T4072] lo speed is unknown, defaulting to 1000
[  664.367048][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  664.385955][ T4161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  664.404553][ T4161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13060'.
[  664.527324][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  664.650893][ T4170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13065'.
[  664.832876][ T4175] bond12: down delay (2) is not a multiple of miimon (100), value rounded to 0 ms
[  664.859416][ T4175] bond12: entered promiscuous mode
[  664.869723][ T4175] bond12: entered allmulticast mode
[  664.875507][ T4175] 8021q: adding VLAN 0 to HW filter on device bond12
[  664.897454][ T4072] lo speed is unknown, defaulting to 1000
[  665.041025][ T4191] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13074'.
[  665.110781][ T4187] syzkaller0: entered promiscuous mode
[  665.116426][ T4187] syzkaller0: entered allmulticast mode
[  666.934256][ T4072] lo speed is unknown, defaulting to 1000
[  666.936965][ T4204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13075'.
[  667.174184][ T4228] netdevsim netdevsim2: Direct firmware load for . failed with error -2
[  667.185518][ T4228] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  667.233261][ T4233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13082'.
[  667.243420][ T4233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13082'.
[  667.330038][ T4072] lo speed is unknown, defaulting to 1000
[  667.337639][ T4233] netlink: 'syz.2.13082': attribute type 1 has an invalid length.
[  667.419741][ T4233] 8021q: adding VLAN 0 to HW filter on device bond20
[  667.477561][ T5821] Bluetooth: hci5: command 0x0405 tx timeout
[  667.748993][ T4249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13086'.
[  667.758551][ T4249] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13086'.
[  667.786602][ T4249] geneve2: entered promiscuous mode
[  667.794113][ T4249] geneve2: entered allmulticast mode
[  667.816584][ T4252] netlink: 'syz.3.13087': attribute type 1 has an invalid length.
[  667.824723][ T4252] netlink: 236 bytes leftover after parsing attributes in process `syz.3.13087'.
[  667.911563][ T4255] syzkaller0: entered promiscuous mode
[  667.918934][ T4255] syzkaller0: entered allmulticast mode
[  667.946914][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms
[  667.954990][    C1] lec:lec_tx_timeout: lec0
[  667.960255][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  668.558370][ T4293] Unknown options in mask b7f2
[  669.811195][ T4267] ip6tnl0: Caught tx_queue_len zero misconfig
[  669.847082][  T146] net_ratelimit: 14 callbacks suppressed
[  669.847102][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  669.945094][ T4299] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  669.997264][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  670.107428][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  670.217442][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  670.327354][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  670.437473][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  670.547791][ T1360] bond5: (slave bridge4): failed to get link speed/duplex
[  670.657166][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  670.767263][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  670.820177][ T4314] syzkaller0: entered promiscuous mode
[  670.825749][ T4314] syzkaller0: entered allmulticast mode
[  670.877602][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  670.968779][ T4317] syzkaller0: entered promiscuous mode
[  670.974402][ T4317] syzkaller0: entered allmulticast mode
[  670.983158][ T4317] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[  671.042480][ T4272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  671.456416][ T4332] syzkaller0: entered promiscuous mode
[  671.462251][ T4332] syzkaller0: entered allmulticast mode
[  671.471119][ T4336] veth1_to_bond: entered allmulticast mode
[  671.487755][ T4338] veth1_to_bond: left allmulticast mode
[  672.175463][ T4365] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13117'.
[  672.967144][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  672.975285][    C1] lec:lec_tx_timeout: lec0
[  672.979990][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  673.533846][ T4374] netlink: 'syz.3.13120': attribute type 21 has an invalid length.
[  673.551531][ T4374] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13120'.
[  673.579193][ T4374] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13120'.
[  673.608145][ T4374] netlink: 'syz.3.13120': attribute type 1 has an invalid length.
[  673.622719][ T4374] netlink: 'syz.3.13120': attribute type 1 has an invalid length.
[  673.754462][ T4389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13127'.
[  673.764783][ T4391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13125'.
[  673.921955][ T4400] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13132'.
[  674.015855][ T4408] netlink: 'syz.2.13135': attribute type 32 has an invalid length.
[  674.058965][ T4412] syzkaller0: entered promiscuous mode
[  674.065657][ T4412] syzkaller0: entered allmulticast mode
[  674.465315][ T4430] syzkaller0: entered promiscuous mode
[  674.476044][ T4430] syzkaller0: entered allmulticast mode
[  674.486193][ T4435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13142'.
[  674.930603][ T4465] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13150'.
[  675.069488][T19472] net_ratelimit: 12 callbacks suppressed
[  675.069502][T19472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.309022][T11011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.365783][ T4474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13151'.
[  675.473490][ T4475] netlink: 'syz.1.13151': attribute type 1 has an invalid length.
[  675.550307][ T4476] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13151'.
[  676.108224][T19472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.767423][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  676.862320][ T4479] geneve2: entered promiscuous mode
[  676.869604][  T127] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 34605 - 0
[  676.887358][  T127] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 34605 - 0
[  676.917253][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  676.948623][  T127] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 34605 - 0
[  676.965149][  T127] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 34605 - 0
[  677.053138][ T4489] set match dimension is over the limit!
[  677.062361][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  677.104217][ T4489] netlink: 'syz.3.13156': attribute type 9 has an invalid length.
[  677.113166][ T4489] netlink: 'syz.3.13156': attribute type 11 has an invalid length.
[  677.122783][ T4489] netlink: 'syz.3.13156': attribute type 12 has an invalid length.
[  677.148927][T19472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.188110][ T4496] netlink: 'syz.6.13158': attribute type 1 has an invalid length.
[  677.195998][ T4496] __nla_validate_parse: 2 callbacks suppressed
[  677.196016][ T4496] netlink: 224 bytes leftover after parsing attributes in process `syz.6.13158'.
[  677.240989][ T4490] wg1 speed is unknown, defaulting to 1000
[  677.247439][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  677.377059][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  677.407424][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13164'.
[  677.423905][ T4507] vlan5: entered allmulticast mode
[  677.431699][ T4507] bond0: entered allmulticast mode
[  677.471305][ T4507] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13163'.
[  677.500592][ T4511] team1: entered promiscuous mode
[  677.545224][ T4511] team1: entered allmulticast mode
[  677.569176][ T4512] sit0: entered allmulticast mode
[  677.663546][ T4507] bond0 (unregistering): Released all slaves
[  677.717018][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  677.831714][ T4530] netlink: 'syz.6.13168': attribute type 1 has an invalid length.
[  677.846203][ T4490] lo speed is unknown, defaulting to 1000
[  677.986957][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  677.995155][    C1] lec:lec_tx_timeout: lec0
[  678.003240][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  678.009729][ T4540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  678.027966][ T4540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  678.957642][ T4572] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13185'.
[  678.957642][ T4573] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13185'.
[  679.293157][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.300904][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.311964][ T4591] netlink: 'syz.6.13193': attribute type 11 has an invalid length.
[  679.322503][ T4592] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13191'.
[  679.353057][ T4592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13191'.
[  679.509550][ T4603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13198'.
[  679.541769][ T4597] bond0 (unregistering): Released all slaves
[  679.756687][ T4612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13202'.
[  679.811746][ T4618] netlink: 1280 bytes leftover after parsing attributes in process `syz.6.13204'.
[  679.883057][ T4624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  680.098135][   T12] net_ratelimit: 19 callbacks suppressed
[  680.098155][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  680.257302][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  680.268972][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.350048][   T29] audit: type=1800 audit(1773241634.927:3): pid=4657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13217" name="memory.events" dev="tmpfs" ino=13648 res=0 errno=0
[  680.381330][ T4655] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  680.387203][   T29] audit: type=1804 audit(1773241634.927:4): pid=4657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.13217" name="/newroot/2709/memory.events" dev="tmpfs" ino=13648 res=1 errno=0
[  680.415598][ T4655] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  680.437476][ T4655] gretap1: entered promiscuous mode
[  680.442807][ T4655] gretap1: entered allmulticast mode
[  680.579488][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.586758][ T4659] bridge0: port 2(bridge_slave_1) entered listening state
[  680.594219][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.601474][ T4659] bridge0: port 1(bridge_slave_0) entered listening state
[  680.615501][  T796] lo speed is unknown, defaulting to 1000
[  680.616536][ T4666] nbd: illegal input index 2958377
[  680.627307][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  680.737472][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  680.803306][ T4676] validate_nla: 1 callbacks suppressed
[  680.803325][ T4676] netlink: 'syz.3.13223': attribute type 3 has an invalid length.
[  680.857038][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  680.880243][ T4679] ip6t_srh: unknown srh invflags 4000
[  680.902614][ T4679] openvswitch: netlink: IP tunnel dst address not specified
[  680.918518][ T4653] erspan1: entered allmulticast mode
[  680.954295][ T4683] xfrm1: entered promiscuous mode
[  680.987500][ T4683] xfrm1: entered allmulticast mode
[  681.007375][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  681.151078][  T146] bond5: (slave bridge4): failed to get link speed/duplex
[  681.310474][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.412991][ T4706] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  681.431940][ T4706] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  681.559633][ T4719] gre2: entered promiscuous mode
[  681.569908][ T4719] gre2: entered allmulticast mode
[  681.620615][ T4723] IPVS: set_ctl: invalid protocol: 0 100.1.1.5:20004
[  681.723496][ T4732] netlink: 'syz.1.13248': attribute type 33 has an invalid length.
[  681.781866][ T4732] bond13: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  681.808730][ T4732] bond13 (unregistering): Released all slaves
[  682.150703][ T4760] 8021q: VLANs not supported on ip6_vti0
[  682.229426][ T4764] __nla_validate_parse: 8 callbacks suppressed
[  682.229442][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13251'.
[  682.522974][ T4785] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13259'.
[  682.683284][ T4791] netlink: 1280 bytes leftover after parsing attributes in process `syz.6.13261'.
[  682.706238][ T4803] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  682.734497][ T4791] FAULT_INJECTION: forcing a failure.
[  682.734497][ T4791] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  682.759033][ T4809] netlink: 'syz.1.13264': attribute type 1 has an invalid length.
[  682.789443][ T4791] CPU: 0 UID: 0 PID: 4791 Comm: syz.6.13261 Not tainted syzkaller #0 PREEMPT(full) 
[  682.789468][ T4791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  682.789479][ T4791] Call Trace:
[  682.789486][ T4791]  <TASK>
[  682.789493][ T4791]  dump_stack_lvl+0xe8/0x150
[  682.789527][ T4791]  should_fail_ex+0x412/0x560
[  682.789559][ T4791]  _copy_to_user+0x31/0xb0
[  682.789589][ T4791]  simple_read_from_buffer+0xe1/0x170
[  682.789620][ T4791]  proc_fail_nth_read+0x1bb/0x230
[  682.789647][ T4791]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  682.789674][ T4791]  ? rw_verify_area+0x2a6/0x4d0
[  682.789691][ T4791]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  682.789716][ T4791]  vfs_read+0x20c/0xa70
[  682.789733][ T4791]  ? fdget_pos+0x246/0x320
[  682.789766][ T4791]  ? __pfx___mutex_lock+0x10/0x10
[  682.789787][ T4791]  ? __pfx_vfs_read+0x10/0x10
[  682.789806][ T4791]  ? __fget_files+0x2a/0x420
[  682.789833][ T4791]  ? __fget_files+0x3a0/0x420
[  682.789864][ T4791]  ? __fget_files+0x2a/0x420
[  682.789897][ T4791]  ksys_read+0x150/0x270
[  682.789917][ T4791]  ? __pfx_ksys_read+0x10/0x10
[  682.789947][ T4791]  do_syscall_64+0x14d/0xf80
[  682.789963][ T4791]  ? trace_irq_disable+0x3b/0x150
[  682.789986][ T4791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.790004][ T4791]  ? clear_bhb_loop+0x40/0x90
[  682.790027][ T4791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.790044][ T4791] RIP: 0033:0x7fd83075cfce
[  682.790060][ T4791] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  682.790075][ T4791] RSP: 002b:00007fd831587fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  682.790093][ T4791] RAX: ffffffffffffffda RBX: 00007fd8315886c0 RCX: 00007fd83075cfce
[  682.790105][ T4791] RDX: 000000000000000f RSI: 00007fd8315880a0 RDI: 0000000000000003
[  682.790116][ T4791] RBP: 00007fd831588090 R08: 0000000000000000 R09: 0000000000000000
[  682.790126][ T4791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  682.790136][ T4791] R13: 00007fd830a16038 R14: 00007fd830a15fa0 R15: 00007fff73d94608
[  682.790166][ T4791]  </TASK>
[  683.016921][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  683.025005][    C1] lec:lec_tx_timeout: lec0
[  683.036993][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  683.204455][ T4827] PKCS7: Unknown OID: [4] (bad)
[  683.209470][ T4827] PKCS7: Only support pkcs7_signedData type
[  683.859940][ T4872] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13280'.
[  683.953147][ T4885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13281'.
[  684.058831][ T4889] xt_hashlimit: size too large, truncated to 1048576
[  684.376273][ T4910] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.13288'.
[  684.411918][ T4912] netlink: 64 bytes leftover after parsing attributes in process `syz.6.13289'.
[  684.462196][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13288'.
[  684.913083][ T4944] wg1 speed is unknown, defaulting to 1000
[  685.063442][ T4955] netlink: 'syz.5.13304': attribute type 3 has an invalid length.
[  685.171252][ T4957] vlan5: entered allmulticast mode
[  685.197136][ T1138] net_ratelimit: 43 callbacks suppressed
[  685.197156][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  685.317008][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  685.345718][ T4944] lo speed is unknown, defaulting to 1000
[  685.398559][ T4971] netlink: 'syz.5.13307': attribute type 64 has an invalid length.
[  685.427254][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  685.450199][ T4973] netlink: 1280 bytes leftover after parsing attributes in process `syz.6.13309'.
[  685.468169][ T4971] netlink: 'syz.5.13307': attribute type 64 has an invalid length.
[  685.516070][ T4971] netlink: 'syz.5.13307': attribute type 64 has an invalid length.
[  685.534789][ T4971] netlink: 'syz.5.13307': attribute type 64 has an invalid length.
[  685.541342][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  685.595569][ T4971] netlink: 'syz.5.13307': attribute type 64 has an invalid length.
[  685.623757][ T4971] netlink: 'syz.5.13307': attribute type 64 has an invalid length.
[  685.667986][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  685.749233][ T4992] netlink: 380 bytes leftover after parsing attributes in process `syz.5.13316'.
[  685.791614][ T4992] IPVS: length: 1152 != 8
[  685.808152][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  685.874418][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL
[  685.958105][ T4998] bond0: Error: Cannot enslave bond to itself.
[  686.015861][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  686.139465][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  686.317564][ T1168] bond5: (slave bridge4): failed to get link speed/duplex
[  686.423056][ T5027] erspan0: entered allmulticast mode
[  686.527057][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  687.223222][ T5064] validate_nla: 59 callbacks suppressed
[  687.223244][ T5064] netlink: 'syz.5.13339': attribute type 10 has an invalid length.
[  687.265507][ T5064] team0: Device vxcan1 is of different type
[  687.451844][ T5079] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  687.566806][ T5086] __nla_validate_parse: 2 callbacks suppressed
[  687.566827][ T5086] netlink: 1280 bytes leftover after parsing attributes in process `syz.6.13346'.
[  687.681255][ T5094] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13347'.
[  687.824712][ T5100] netlink: 116 bytes leftover after parsing attributes in process `syz.6.13349'.
[  688.043631][ T5110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13353'.
[  688.046961][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  688.060793][    C1] lec:lec_tx_timeout: lec0
[  688.065723][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  688.074044][ T5110] xfrm1: entered promiscuous mode
[  688.092704][ T5110] xfrm1: entered allmulticast mode
[  688.099843][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13353'.
[  688.234065][ T5119] bridge0: port 3(veth0_to_bridge) entered blocking state
[  688.242662][ T5119] bridge0: port 3(veth0_to_bridge) entered disabled state
[  688.258935][ T5119] veth0_to_bridge: entered allmulticast mode
[  688.269939][ T5119] veth0_to_bridge: entered promiscuous mode
[  688.375994][ T5129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13356'.
[  688.414982][ T5132] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.13360'.
[  688.511006][ T5144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13364'.
[  688.566302][ T5144] bond13: entered promiscuous mode
[  688.577992][ T5144] 8021q: adding VLAN 0 to HW filter on device bond13
[  688.594367][ T5151] macvlan0: entered promiscuous mode
[  688.602985][ T5151] macvlan0: entered allmulticast mode
[  688.610408][ T5151] bond13: (slave macvlan0): Opening slave failed
[  688.832242][ T5178] netlink: 'syz.2.13372': attribute type 1 has an invalid length.
[  688.851175][ T5178] netlink: 'syz.2.13372': attribute type 2 has an invalid length.
[  688.860175][ T5178] netlink: 'syz.2.13372': attribute type 1 has an invalid length.
[  688.869093][ T5178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13372'.
[  688.872827][ T5182] syzkaller0: entered promiscuous mode
[  688.883793][ T5182] syzkaller0: entered allmulticast mode
[  689.093906][ T5190] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13374'.
[  689.103548][ T5190] netlink: 'syz.6.13374': attribute type 7 has an invalid length.
[  689.118147][ T5190] erspan0: entered promiscuous mode
[  689.124949][ T5190] gretap0: entered promiscuous mode
[  690.267863][ T1138] net_ratelimit: 29 callbacks suppressed
[  690.267884][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  690.397367][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  690.508248][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  690.617466][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  690.727256][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  690.837279][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  690.947268][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  691.057060][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  691.167263][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  691.277122][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  691.794389][ T5170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  692.003074][ T5217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.448214][ T5252] netlink: 'syz.2.13396': attribute type 21 has an invalid length.
[  692.458833][ T5252] netlink: 'syz.2.13396': attribute type 22 has an invalid length.
[  692.468672][ T5252] netlink: 'syz.2.13396': attribute type 23 has an invalid length.
[  692.476758][ T5252] netlink: 'syz.2.13396': attribute type 25 has an invalid length.
[  692.495440][ T5256] netem: incorrect ge model size
[  692.522308][ T5252] workqueue: name exceeds WQ_NAME_LEN. Truncating to: K��u�cr��K:����̥�B����|���
[  692.843501][ T5277] __nla_validate_parse: 6 callbacks suppressed
[  692.843521][ T5277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13405'.
[  692.864431][ T5281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13404'.
[  693.056062][ T5296] netlink: 88 bytes leftover after parsing attributes in process `syz.5.13408'.
[  693.077119][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  693.085228][    C1] lec:lec_tx_timeout: lec0
[  693.090026][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  693.768048][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13423'.
[  693.768056][ T5339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13423'.
[  694.310490][ T5378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13438'.
[  694.335748][ T5378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13438'.
[  694.359553][ T5378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13438'.
[  694.375757][ T5378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13438'.
[  694.683558][ T5402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13444'.
[  694.854471][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  694.875744][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_0
[  694.903960][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  694.921725][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_1
[  695.199073][ T5417] syzkaller0: entered promiscuous mode
[  695.209682][ T5417] syzkaller0: entered allmulticast mode
[  695.245506][ T5430] netlink: 'syz.2.13453': attribute type 1 has an invalid length.
[  696.018741][ T5444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.113964][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  696.122978][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  697.303889][ T5430] netlink: 'syz.2.13453': attribute type 1 has an invalid length.
[  697.333935][  T127] net_ratelimit: 37 callbacks suppressed
[  697.333956][  T127] bond5: (slave bridge4): failed to get link speed/duplex
[  697.467371][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  697.531075][ T5455] 0: reclassify loop, rule prio 0, protocol 800
[  697.587075][ T1360] bond5: (slave bridge4): failed to get link speed/duplex
[  697.707102][ T1360] bond5: (slave bridge4): failed to get link speed/duplex
[  697.837571][ T1360] bond5: (slave bridge4): failed to get link speed/duplex
[  697.871276][ T5482] syzkaller0: entered promiscuous mode
[  697.876806][ T5482] syzkaller0: entered allmulticast mode
[  697.996172][ T5497] __nla_validate_parse: 2 callbacks suppressed
[  697.996192][ T5497] netlink: 294 bytes leftover after parsing attributes in process `syz.2.13477'.
[  698.014981][   T36] bond5: (slave bridge4): failed to get link speed/duplex
[  698.022505][ T5497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  698.048342][ T5498] 0: reclassify loop, rule prio 0, protocol 800
[  698.096934][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  698.104985][    C1] lec:lec_tx_timeout: lec0
[  698.109740][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  698.130573][ T1138] bond5: (slave bridge4): failed to get link speed/duplex
[  698.191727][ T5821] Bluetooth: hci6: command 0x041b tx timeout
[  698.454650][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13489'.
[  698.465191][ T5522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13488'.
[  698.566239][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13490'.
[  698.577451][ T5535] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13491'.
[  698.734845][ T5540] IPv6: sit1: Disabled Multicast RS
[  698.865991][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13499'.
[  699.022582][ T5548] 8021q: adding VLAN 0 to HW filter on device bond15
[  699.168437][ T5558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13503'.
[  699.361778][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13509'.
[  699.499723][ T5582] netlink: 'syz.1.13512': attribute type 1 has an invalid length.
[  699.532462][ T5582] 8021q: adding VLAN 0 to HW filter on device bond13
[  699.553149][ T5584] pim6reg: entered allmulticast mode
[  699.623702][ T5582] bond13: (slave veth15): Enslaving as an active interface with a down link
[  699.677766][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv1
[  699.688246][ T5593] bond13: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  700.171736][ T5638] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13527'.
[  700.191573][ T5638] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13527'.
[  700.235556][ T5638] gretap2: entered promiscuous mode
[  700.253562][ T5638] gretap2: entered allmulticast mode
[  700.603970][ T5659] syzkaller0: entered promiscuous mode
[  700.627110][ T5659] syzkaller0: entered allmulticast mode
[  701.229939][   T30] INFO: task syz.0.11467:31750 blocked for more than 143 seconds.
[  701.238348][   T30]       Not tainted syzkaller #0
[  701.247253][ T5704] xt_hashlimit: size too large, truncated to 1048576
[  701.247788][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  701.263650][   T30] task:syz.0.11467     state:D stack:26712 pid:31750 tgid:31749 ppid:5823   task_flags:0x400140 flags:0x00080002
[  701.276555][ T5706] netlink: 'syz.3.13545': attribute type 10 has an invalid length.
[  701.285361][   T30] Call Trace:
[  701.289464][   T30]  <TASK>
[  701.292617][   T30]  __schedule+0x15dd/0x52d0
[  701.297993][   T30]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  701.304247][   T30]  ? __pfx___schedule+0x10/0x10
[  701.310448][   T30]  ? schedule+0x90/0x360
[  701.314869][   T30]  schedule+0x164/0x360
[  701.319568][   T30]  schedule_preempt_disabled+0x13/0x30
[  701.325345][   T30]  __mutex_lock+0x7fe/0x1300
[  701.332520][   T30]  ? __mutex_lock+0x5ac/0x1300
[  701.338006][   T30]  ? nfsd_nl_listener_set_doit+0x141/0x1670
[  701.344035][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  701.349569][   T30]  ? __asan_memset+0x22/0x50
[  701.354386][   T30]  nfsd_nl_listener_set_doit+0x141/0x1670
[  701.360804][   T30]  ? __pfx___nla_validate_parse+0x10/0x10
[  701.366670][   T30]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  701.373321][   T30]  ? __nla_parse+0x40/0x60
[  701.378130][   T30]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  701.384569][   T30]  genl_family_rcv_msg_doit+0x22a/0x330
[  701.390556][   T30]  ? __asan_memcpy+0x40/0x70
[  701.395382][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  701.401993][   T30]  ? bpf_lsm_capable+0x9/0x20
[  701.406822][   T30]  ? security_capable+0x7e/0x2c0
[  701.411873][   T30]  genl_rcv_msg+0x61c/0x7a0
[  701.416442][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  701.421893][   T30]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  701.428731][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  701.433946][   T30]  netlink_rcv_skb+0x232/0x4b0
[  701.444052][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  701.456948][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  701.462325][   T30]  ? down_read+0x272/0x2e0
[  701.466782][   T30]  ? genl_rcv+0xd/0x40
[  701.482659][   T30]  genl_rcv+0x28/0x40
[  701.486714][   T30]  netlink_unicast+0x80f/0x9b0
[  701.492119][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  701.507070][   T30]  ? netlink_sendmsg+0x650/0xb40
[  701.512083][   T30]  ? skb_put+0x11b/0x210
[  701.516378][   T30]  netlink_sendmsg+0x813/0xb40
[  701.521297][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  701.526755][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  701.531838][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  701.537445][   T30]  ____sys_sendmsg+0x972/0x9f0
[  701.542272][   T30]  ? futex_unqueue+0x211/0x240
[  701.547510][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  701.552815][   T30]  ? import_iovec+0x73/0xa0
[  701.557420][   T30]  ___sys_sendmsg+0x2a5/0x360
[  701.562131][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  701.567621][   T30]  ? futex_wait+0x29a/0x380
[  701.572173][   T30]  ? __fget_files+0x2a/0x420
[  701.576805][   T30]  ? __fget_files+0x3a0/0x420
[  701.581808][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[  701.586777][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  701.592724][   T30]  ? rcu_is_watching+0x15/0xb0
[  701.597933][   T30]  do_syscall_64+0x14d/0xf80
[  701.602712][   T30]  ? trace_irq_disable+0x3b/0x150
[  701.607914][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.614030][   T30]  ? clear_bhb_loop+0x40/0x90
[  701.618885][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.624820][   T30] RIP: 0033:0x7f028fb9c799
[  701.629559][   T30] RSP: 002b:00007f028ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  701.638057][   T30] RAX: ffffffffffffffda RBX: 00007f028fe15fa0 RCX: 00007f028fb9c799
[  701.646077][   T30] RDX: 0000000024048000 RSI: 0000200000000080 RDI: 0000000000000003
[  701.654249][   T30] RBP: 00007f028fc32c99 R08: 0000000000000000 R09: 0000000000000000
[  701.662362][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  701.670535][   T30] R13: 00007f028fe16038 R14: 00007f028fe15fa0 R15: 00007fffd17bfc68
[  701.678653][   T30]  </TASK>
[  701.681802][   T30] 
[  701.681802][   T30] Showing all locks held in the system:
[  701.690146][   T30] 1 lock held by khungtaskd/30:
[  701.695061][   T30]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  701.705075][   T30] 2 locks held by getty/5575:
[  701.710057][   T30]  #0: ffff8880366580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  701.720351][   T30]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  701.731040][   T30] 2 locks held by syz.4.10549/29094:
[  701.736451][   T30]  #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  701.745358][   T30]  #1: ffffffff8ea875e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  701.755690][   T30] 2 locks held by syz.0.11467/31750:
[  701.761162][   T30]  #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  701.769669][   T30]  #1: ffffffff8ea875e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  701.780425][   T30] 3 locks held by kworker/u8:4/1360:
[  701.785743][   T30]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  701.798317][   T30]  #1: ffffc90004147c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  701.809471][   T30]  #2: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  701.818577][   T30] 2 locks held by syz.2.13533/5658:
[  701.823962][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  701.833614][   T30]  #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  701.844676][   T30] 1 lock held by syz.5.13541/5682:
[  701.849830][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[  701.859731][   T30] 1 lock held by syz.5.13541/5685:
[  701.864888][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: tc_new_tfilter+0x4dd/0x1780
[  701.875038][   T30] 1 lock held by syz.5.13541/5689:
[  701.880349][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150
[  701.889890][   T30] 1 lock held by syz.5.13541/5692:
[  701.895096][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150
[  701.904357][   T30] 2 locks held by syz.1.13542/5683:
[  701.910991][   T30]  #0: ffffffff8fbaed08 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x641/0x7f0
[  701.921121][   T30]  #1: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630
[  701.930840][   T30] 2 locks held by syz.3.13545/5693:
[  701.936330][   T30]  #0: ffff888058e19908 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  701.946772][   T30]  #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  701.958585][   T30] 1 lock held by syz.3.13545/5694:
[  701.963722][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  701.973165][   T30] 1 lock held by syz.3.13545/5698:
[  701.978498][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  701.987561][   T30] 1 lock held by syz.3.13545/5700:
[  701.992689][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30
[  702.002176][   T30] 1 lock held by syz.3.13545/5703:
[  702.007666][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: tc_new_tfilter+0x4dd/0x1780
[  702.017143][   T30] 1 lock held by syz.3.13545/5706:
[  702.022269][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  702.031917][   T30] 1 lock held by syz.6.13547/5701:
[  702.037365][   T30]  #0: ffff88808e617ac8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  702.047989][   T30] 1 lock held by syz.6.13547/5702:
[  702.053193][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  702.062665][   T30] 1 lock held by syz.6.13547/5704:
[  702.067954][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30
[  702.077236][   T30] 1 lock held by syz.6.13547/5708:
[  702.082357][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  702.091744][   T30] 1 lock held by syz.6.13547/5710:
[  702.097174][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  702.106202][   T30] 1 lock held by syz.6.13547/5711:
[  702.111538][   T30]  #0: ffffffff8fbcd7c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  702.120512][   T30] 
[  702.122886][   T30] =============================================
[  702.122886][   T30] 
[  702.143697][   T30] NMI backtrace for cpu 0
[  702.143718][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  702.143737][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  702.143747][   T30] Call Trace:
[  702.143754][   T30]  <TASK>
[  702.143763][   T30]  dump_stack_lvl+0xe8/0x150
[  702.143801][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  702.143823][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  702.143846][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  702.143870][   T30]  sys_info+0x135/0x170
[  702.143886][   T30]  watchdog+0xfd9/0x1030
[  702.143941][   T30]  ? watchdog+0x21a/0x1030
[  702.143971][   T30]  kthread+0x388/0x470
[  702.143998][   T30]  ? __pfx_watchdog+0x10/0x10
[  702.144019][   T30]  ? __pfx_kthread+0x10/0x10
[  702.144036][   T30]  ret_from_fork+0x51e/0xb90
[  702.144066][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  702.144085][   T30]  ? __switch_to+0xc7d/0x1450
[  702.144118][   T30]  ? __pfx_kthread+0x10/0x10
[  702.144135][   T30]  ret_from_fork_asm+0x1a/0x30
[  702.144173][   T30]  </TASK>
[  702.144180][   T30] Sending NMI from CPU 0 to CPUs 1:
[  702.258444][    C1] NMI backtrace for cpu 1
[  702.258463][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  702.258481][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  702.258491][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  702.258519][    C1] Code: fe 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 90 1b 00 fb f4 <e9> fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  702.258533][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246
[  702.258548][    C1] RAX: 00000000001813d1 RBX: ffffffff819a88ed RCX: 0000000080000001
[  702.258560][    C1] RDX: 0000000000000001 RSI: ffffffff8def3a64 RDI: ffffffff8c27b280
[  702.258571][    C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b
[  702.258583][    C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901197b0
[  702.258595][    C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001
[  702.258605][    C1] FS:  0000000000000000(0000) GS:ffff888125561000(0000) knlGS:0000000000000000
[  702.258618][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  702.258628][    C1] CR2: 000000110c3cc500 CR3: 000000007dfbe000 CR4: 00000000003526f0
[  702.258643][    C1] Call Trace:
[  702.258652][    C1]  <TASK>
[  702.258658][    C1]  default_idle+0x9/0x20
[  702.258680][    C1]  default_idle_call+0x72/0xb0
[  702.258704][    C1]  do_idle+0x1bd/0x500
[  702.258738][    C1]  ? __pfx_do_idle+0x10/0x10
[  702.258759][    C1]  ? do_idle+0x4d6/0x500
[  702.258780][    C1]  cpu_startup_entry+0x43/0x60
[  702.258804][    C1]  start_secondary+0x101/0x110
[  702.258821][    C1]  common_startup_64+0x13e/0x147
[  702.258842][    C1]  </TASK>
[  702.426115][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  702.433002][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  702.442166][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  702.452324][   T30] Call Trace:
[  702.455620][   T30]  <TASK>
[  702.458602][   T30]  vpanic+0x56c/0xa60
[  702.462647][   T30]  ? __pfx___schedule+0x10/0x10
[  702.467517][   T30]  ? __pfx_vpanic+0x10/0x10
[  702.472022][   T30]  ? __pfx_console_unlock+0x10/0x10
[  702.477234][   T30]  panic+0xc5/0xd0
[  702.480984][   T30]  ? __pfx_panic+0x10/0x10
[  702.485423][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  702.490801][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  702.496982][   T30]  watchdog+0x1023/0x1030
[  702.501619][   T30]  ? watchdog+0x21a/0x1030
[  702.506267][   T30]  kthread+0x388/0x470
[  702.510358][   T30]  ? __pfx_watchdog+0x10/0x10
[  702.515062][   T30]  ? __pfx_kthread+0x10/0x10
[  702.519657][   T30]  ret_from_fork+0x51e/0xb90
[  702.524259][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  702.529370][   T30]  ? __switch_to+0xc7d/0x1450
[  702.534082][   T30]  ? __pfx_kthread+0x10/0x10
[  702.539097][   T30]  ret_from_fork_asm+0x1a/0x30
[  702.543871][   T30]  </TASK>
[  702.547154][   T30] Kernel Offset: disabled
[  702.551490][   T30] Rebooting in 86400 seconds..