last executing test programs:

19.128770906s ago: executing program 3 (id=6992):
bpf$MAP_LOOKUP_ELEM(0x1d, 0x0, 0x0)
ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd47, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000090000000000000020000000000a3bc464c5a3712d5c5b07afb6e68900000000000000000000020900010073797a3000000000140000001b80010000000000000000000000b80a449a0be61ba9847d8f184fdb765ffb64d37428d9c4c0af197e9c5647"], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)
r4 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)
ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000340)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null]})
recvmmsg(r1, &(0x7f0000004f40), 0x0, 0x40000102, 0x0)

19.12841523s ago: executing program 4 (id=6993):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000004100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c02000008000640"], 0x6c}}, 0x0)

18.998735198s ago: executing program 0 (id=6995):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe)
preadv(r1, &(0x7f0000000100), 0xa, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x12, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
pipe(&(0x7f00000001c0))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x8, 0x7, 0xc, 0x0, {{0x11, 0x4, 0x3, 0xa, 0x44, 0x66, 0x0, 0x17, 0x2f, 0x0, @broadcast, @loopback, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x84, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0xe}, 0xb1}, {@remote, 0x4}]}, @timestamp_addr={0x44, 0x4, 0x81, 0x1, 0x2}, @timestamp_prespec={0x44, 0xc, 0xf2, 0x3, 0x5, [{@private=0xa010100, 0x7}]}, @noop, @cipso={0x86, 0x6, 0x2}]}}}}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x2, [@func_proto, @volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {0xe}]}, @func={0xc, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x9}}, @float={0x4}]}}, &(0x7f00000006c0)=""/218, 0x7e, 0xda, 0x1, 0x7275, 0x10000}, 0x28)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, <r5=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, 0x0, &(0x7f0000000480)=@udp6=r4, 0x2}, 0x20)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

18.969173042s ago: executing program 4 (id=6997):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x14}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xe, 0x0, 0x7fff, 0x38f7}, {0x9, 0x1, 0x0, 0xfffe, 0x8, 0x401}, 0x1, 0x80000001, 0x210e}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee3ce641f2ef5769}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8910, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

18.911129466s ago: executing program 3 (id=6998):
unshare(0x400)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000a0000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

18.907256222s ago: executing program 0 (id=6999):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="050028bd700000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="5aa3297c0000000800", @ANYRES32=r6, @ANYBLOB="0a000600ffffffffffff00000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="341800007f2458eaad96f4d74cd0d8f8a41fc0d16dd26f8123bb58243a55209dcfa8ca738fe2ac322a49301af740192b0bcafa7a52550a3ebfff8a4e", @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf2505000000080009000200000008000c00a50a000008000b00000000000600010005000000"], 0x34}}, 0x20)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r9)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r9, 0x9)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)

18.857962421s ago: executing program 3 (id=7000):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100ffff00000400000000000000", @ANYRES32, @ANYBLOB="520300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6c}, {@in=@local, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {0xfffffffffffffffe}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'streebog256-generic\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000001440), 0x0}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10)
write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
write$cgroup_int(r5, &(0x7f00000001c0)=0x2, 0x12)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
splice(r7, 0x0, r5, 0x0, 0x31a, 0x1)
close(0xffffffffffffffff)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
close(r8)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3b071, r2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, <r9=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80000001}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x45ee}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r4, 0x0, r8, 0x0, 0x1100000000f336, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r10 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_int(r10, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)

18.650754867s ago: executing program 4 (id=7003):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x1}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x1)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000008c0)=0x400002)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x1048, 0x7, 0xc0, 0xc}, {0x6, 0xd, 0x6}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x40000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r7=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000100)={r7, 0x5}, 0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000003c0)={r7, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}}}, &(0x7f0000000000)=0x84)
bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r2, 0x3, {0x2, 0xf0, 0x1}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r2, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)

18.58752399s ago: executing program 1 (id=7004):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="c80000000001050500000000000000000a000005940002802c00018014000300fe8000000000000000000000000000bb140004000000000000000000000000000000000006000340000400000600034000000000140001"], 0xc8}}, 0x0)
bind$ax25(r0, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$ax25(r0, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000100))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c80"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

18.414152629s ago: executing program 1 (id=7005):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x14}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xe, 0x0, 0x7fff, 0x38f7}, {0x9, 0x1, 0x0, 0xfffe, 0x8, 0x401}, 0x1, 0x80000001, 0x210e}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee3ce641f2ef5769}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000340)={'erspan0\x00', r10, 0x7, 0x1, 0xf6, 0x2, {{0x21, 0x4, 0x1, 0x2, 0x84, 0x66, 0x0, 0x9, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@timestamp={0x44, 0x18, 0x8f, 0x0, 0x6, [0x7, 0x0, 0x8, 0x5c80a044, 0xffff4320]}, @timestamp_prespec={0x44, 0x1c, 0x9f, 0x3, 0x4, [{@remote, 0xffff}, {@multicast1, 0x1ff}, {@local, 0xfffffff9}]}, @cipso={0x86, 0x39, 0x2, [{0x5, 0x2}, {0x0, 0xc, "f959056c4b9cbe0bcf3e"}, {0x6, 0x2}, {0x1, 0x10, "a9a423dc1b6c0fabe598085a9db5"}, {0x1, 0x6, "6fd0b5b8"}, {0x1, 0x4, "788a"}, {0x6, 0x7, "34648a89d3"}, {0x2, 0x2}]}, @noop]}}}}})

18.302874432s ago: executing program 4 (id=7006):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x4, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=@allocspi={0xf8, 0x16, 0x10, 0x70b52d, 0x25dfdbfe, {{{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0xa0, 0x80, 0x87}, {@in6=@empty, 0x4d3, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xffffffffffffffc0, 0x3, 0xb, 0x7fffffffffffffff, 0x8000, 0x1, 0x94, 0x1}, {0x7fff, 0x4, 0x9, 0x4ba15d0a}, {0x200, 0x401, 0x3}, 0x70bd25, 0x0, 0x2, 0x0, 0x20, 0x3a}, 0x13b, 0x8}}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x48001)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4)
r5 = accept$alg(r0, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendto$netrom(r7, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast]}, 0x48)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r8 = accept$alg(r6, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="57cd4e", 0x3}, {&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02f9dd6c745471c8d92cad4f85986908a8", 0x1e}], 0x2, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000801}], 0x1, 0x40)
recvmmsg(r8, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0)
sendmmsg$alg(r5, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="c16a22213bc7", 0x6}, {&(0x7f0000000a80)="7ba863ad0844e1bd4dbef819ad938d2eee02cc1497ea33634963307c75b71ef12b9fbbea39f886b64512ad1872b4a443bc9cc208de87c837a95fd97febf6075d78c0403a08a84d9a3ba8cbb6ea4a407c45d4dc24888128c42aa1d6717e0edd917db8439b8b5f51eee2dceaab1ef9d195286d1b5764996c37012da4", 0x7b}], 0x2, 0x0, 0x0, 0x4c004}], 0x1, 0x51)
recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0)

18.044783427s ago: executing program 1 (id=7007):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="f4000000000101040000000000000000020000002400018014000180080001840000000008000200ac1414160c00028005000100000000002400028014000180080001000000000008000200ac1414bb0c0002800500010000000000080007400000000024000f80080001"], 0xf4}}, 0x0)

17.989074872s ago: executing program 2 (id=7008):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) (async, rerun: 64)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) (async)
bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xa, 0x17, &(0x7f0000001a80)=ANY=[@ANYBLOB="183000000400000000000000000000009966ffff08000000000000000200000000182a00"/52, @ANYRES32=0x1, @ANYBLOB="0000000006000000b7080000000000007b8af8ff00000000b7080000ff0700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYRES8=0x0], &(0x7f0000001680)='GPL\x00', 0x1ff, 0x98, &(0x7f00000016c0)=""/152, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000017c0)={0x1, 0x2, 0x8, 0x7f}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001800)=[0x1, r0, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xfffffdb7}, 0x94) (async, rerun: 64)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (rerun: 64)
openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x710, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x770) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001940)={r5, r6, 0x1e, 0x0, @val=@iter={&(0x7f0000001900)=@map_fd=0x1, 0x10}}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0x168, 0x168, 0x98, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 'syz_tun\x00', 'vlan1\x00', {0xff}, {0xff}, 0x0, 0x5, 0x10}, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x2}, {0x2, [0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x62, 0x2, 0x47}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xb1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001580)={&(0x7f0000000340)="46ba97457759fb3391acd2f6fde32789e469ee8157820b9d4e221443f03c851660d93d1e4b1e63ccf43b3fd31ca5a6720b6b24f9aba15cc4954494cfaf79b0c60d6202983e50d5700712f6c8b30948d293069e5825bb2c17823aaca166ca976342aae46898513027a37e4427af07b64789890e462c67d9f73eb8bf426870f675c1098b4718203553f40c592a79d06619e541646509c00e17cb0d38ede0b066056faeddb3bb169a9f173e7e48", &(0x7f0000000400)=""/4096, &(0x7f0000001400)="021e14c8c11dd976221fd24d94fab42c0dbc9690de763e5db3eacb547e4cf0881e7417088e5e1bf3770fb7affaa7d6e22fbeb3114decd8f9e0716e6f9e0fa7db71e160b787ca835393cf3efc455da7e9e09a673d8024ea9b33d5eead044b39212d0201789ee6e1301d4e8337401f98c46b1f7449fbd719affc07ab446492f11941334a82400ac1e5955c3450a2a080250a6ed1597a846de4755449aa777c18178a91857c12bd6ac02d1b9c172619dd6b51bc21d924927467e3a7", &(0x7f00000014c0)="8bed01d7b7b4a3255baa0c76f2f9a44c45dac64565731cd03f868bd468657385eeb10d3a00836fba2873bc0251e9f06fb1f9d148d2b38fe63b98bea4cfdbe19b270e33770d78acdf40214d97fdcc63df40463ea60c07e73686da8f30cb5f2bba75ca4f5802fab35ff9c59a180661795376ff02d9e8c347b7d89bfa0ea3718991d9f6d3b153d998a9e8ee3aa86f22ce150c11c91a6d610590f51bbd085f3fc1984601b4234de3b7bb4fb3f5a8ce", 0x5, 0xffffffffffffffff, 0x4}, 0x38)

17.971630888s ago: executing program 1 (id=7009):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000e80)=@ethtool_perm_addr={0x4b, 0x44}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRESDEC=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}, 0x3}, 0x1c)

17.970945117s ago: executing program 0 (id=7010):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f0000006e40)={&(0x7f00000002c0)=@generic={0x5, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x9d, 0x0}, 0x4004010)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x408001, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)
ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000080)=0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000ff6000"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0efc71b5fef6ae76e760b3e7e92615413e"], 0x48}, 0x1, 0x0, 0x0, 0x20008818}, 0x800)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007ffffffed7f700004c0012802700010069703667726500003c000280050008000e00000006000f00090000000500160001000000080015005d300a0006000e000100000006000e00000000fe0500160004000000040014"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)

17.866824919s ago: executing program 4 (id=7011):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095", @ANYRESDEC], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0x11)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendfile(r2, r3, 0x0, 0xffffffff000)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r8=>0x0})
sendmsg$AUDIT_USER(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x3ed, 0x100, 0x70bd28, 0x25dfdbfd, "3107798e0bfb51a01d0b4841", ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000041}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0xffff, 0x7}, 0x5, 0x0, 0xff, 0x0, 0x8, 0x17, 0xe, 0x1d, 0x8, 0x2, {0x7411, 0xfffffff7, 0x6, 0x810000, 0xe}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x154, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x128, 0x2, [@TCA_U32_SEL={0x124, 0x5, {0x2, 0x5, 0x5, 0xfffd, 0x6, 0x25a2, 0x9, 0x1000, [{0xf, 0xe, 0xffffffa0, 0x10001}, {0x7fffffff, 0x7, 0x7ff, 0x6}, {0x1, 0x1, 0x3, 0x10}, {0x2, 0xc, 0x9, 0x87d}, {0x16, 0xfffff1ec, 0xb}, {0x3, 0xcd2, 0x7, 0x7}, {0xb102, 0x40, 0x1ff, 0x90c1}, {0x9, 0x3, 0x9, 0x8000}, {0x3, 0x5, 0x8ca1997, 0x6}, {0x4, 0xca71, 0x1}, {0x1, 0x8, 0x4, 0xffffffff}, {0xf, 0x2000, 0x4, 0x7634293a}, {0x800, 0x9, 0x5, 0x4}, {0x8, 0xe6, 0xfffffff6, 0x1}, {0x7, 0x9, 0x8, 0x8}, {0x80, 0x1, 0x0, 0xdaa}, {0x3ff, 0x2, 0x6, 0x7fffffff}]}}]}}]}, 0x154}}, 0x404c004)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r10, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40000000)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r11}, 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r12, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88)

17.834518867s ago: executing program 1 (id=7012):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x179}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000002240)="6e2ebb87dca38cb8b3378e86c02cafa0bd62c7a2cddda54f6a0a1c1b92bae9731f4063d80b5110c9d03f91a7a36de1b85a723f5902e290250ad0f1ba3a09733260816749c0336324", 0x48}], 0x2}}], 0x2, 0x2090)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt(0xffffffffffffffff, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40)
sendto$inet(r0, &(0x7f0000000580)="04", 0x2bc, 0x10008095, 0x0, 0x4102)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

17.771114767s ago: executing program 2 (id=7013):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c00"], 0x70}, 0x1, 0x3000000, 0x0, 0x800}, 0x40)

17.62246655s ago: executing program 0 (id=7014):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa8cb0ae75887fa983de"], 0x3c}}, 0x0)
unshare(0x22020600)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
r5 = socket(0x2, 0x5, 0xe6)
write(r5, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001500010000000000ffffffff0d0000000800010011d93fb9b18be8d87807fdc033b03e18fcda7c84d517d36503e8e50adcabcd98f91ea15ada25f55c034c90fc804d5b71fbc1c654c43287e958383fad29967ff6edf52a59fc98c408f94faf2b2a7c63636a00"/117, @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

17.597600624s ago: executing program 3 (id=7015):
socket(0x10, 0x3, 0x0)
shutdown(0xffffffffffffffff, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44851}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffd7f)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
syz_emit_ethernet(0x4a, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c2000090780000"], 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="0010000005000000000000000200003495e9ffffff0000ccdbdba66a6504f08b1e84947666c629d31359000000"], &(0x7f0000000100)='syzkaller\x00', 0xf088, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0xad6b, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r0, 0xffffffffffffffff, r0, r0, r0, r0, r0], 0x0, 0x10, 0x7f}, 0x94)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e22, 0x3, 'wlc\x00', 0x1, 0x0, 0x407b}, 0x2c)
r7 = socket$kcm(0xa, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2, 0x1ff, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

17.539175131s ago: executing program 2 (id=7016):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, &(0x7f0000000040)) (fail_nth: 7)

16.994464933s ago: executing program 1 (id=7017):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x4000000000000000)

16.922439236s ago: executing program 0 (id=7018):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x8040)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x41}, 0x800)
r6 = socket(0x2b, 0x80801, 0x1)
syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x800, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0)
shutdown(r6, 0x1)

16.848291148s ago: executing program 3 (id=7019):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8100, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0)

16.680676339s ago: executing program 4 (id=7020):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f0000000500)=""/16, 0x3a, 0x10, 0x1}, 0x28)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {0x2}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0xfffffffc}, {}, {0x2}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfffffffe}, {}, {0x6}, {}, {}, {}, {0x9}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000}, {0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x5}, {0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18, 0x2}, {}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async, rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
r0 = socket$packet(0x11, 0x2, 0x300) (async)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async, rerun: 64)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1, 0x11, r0, 0x0) (rerun: 64)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000001700)={0xfffffff9, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}}}, 0x108) (async)
unshare(0x20000400) (async)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={<r2=>r1})
bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x2, 0x0, 0x100000e, r2}, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32)
r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000090a010400000000000000000a0000040900010073797a310000000008000a0000020900020073797a3100000000080001400000011c08000640ffffff000c000b400000000000000090140000001100010000000000000000000700000a00"/128], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)

16.619064996s ago: executing program 2 (id=7021):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="050028bd700000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="5aa3297c0000000800", @ANYRES32=r6, @ANYBLOB="0a000600ffffffffffff00000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="341800007f2458eaad96f4d74cd0d8f8a41fc0d16dd26f8123bb58243a55209dcfa8ca738fe2ac322a49301af740192b0bcafa7a52550a3ebfff8a4e", @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf2505000000080009000200000008000c00a50a000008000b00000000000600010005000000"], 0x34}}, 0x20)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r9)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r9, 0x9)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)

16.516798284s ago: executing program 2 (id=7022):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbdd600fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e32b359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0493121eec3e05eacbe7835e79", 0x179}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000002240)="6e2ebb87dca38cb8b3378e86c02cafa0bd62c7a2cddda54f6a0a1c1b92bae9731f4063d80b5110c9d03f91a7a36de1b85a723f5902e290250ad0f1ba3a09733260816749c0336324", 0x48}], 0x2}}], 0x2, 0x2090)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt(0xffffffffffffffff, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40)
sendto$inet(r0, &(0x7f0000000580)="04", 0x2bc, 0x10008095, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000022c0)="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", 0x1000}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x8000)

15.832248143s ago: executing program 0 (id=7023):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x8000042, 0x1, 0x2}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x3, 0x3}, 0x10)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0xb0}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000180092800b0001006772657461700000080002800400120008000a00", @ANYRES32=r10, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0)
r14 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r14, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x4, 0x1, 0xff, 0x1, 0x0, 0xc}, &(0x7f0000000080)=0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c891}, 0x4000814)

15.731130332s ago: executing program 3 (id=7024):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0)
shutdown(r1, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000)
select(0x40, &(0x7f0000000000)={0x3, 0x8000000000000000, 0x8001, 0x8000000000000000, 0x4, 0x1000, 0x1}, 0x0, 0x0, &(0x7f00000000c0)={0x77359400})
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20)

15.329098935s ago: executing program 2 (id=7025):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000600))
r2 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0xb2, "0e729ecae98e4e56e2b0d0b997da9c4f4032bbd63b7fe5511b77a44bc0c3c904ebc679bfdba61194148656c95c9a96c2e948889122a9204edf008bb46645ef1f0d09b08421b48eaf408ce5b4c3f3af16e478809956fc1d7a838867e5632770354d39d31183335d60632a558bb31e83f96261e36ba549a4309f6998cf2c230ddd3518b82ad82df14e4ad5fffd7e9626b4146b4b900ff3838755f6d873b5cd93300fbf41667395b7fd82206a7c9684a0d67127"}, &(0x7f0000000140)=0xd6)

1.98814258s ago: executing program 32 (id=7017):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x4000000000000000)

1.49033615s ago: executing program 33 (id=7020):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f0000000500)=""/16, 0x3a, 0x10, 0x1}, 0x28)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {0x2}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0xfffffffc}, {}, {0x2}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfffffffe}, {}, {0x6}, {}, {}, {}, {0x9}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000}, {0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x5}, {0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18, 0x2}, {}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async, rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
r0 = socket$packet(0x11, 0x2, 0x300) (async)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async, rerun: 64)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1, 0x11, r0, 0x0) (rerun: 64)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000001700)={0xfffffff9, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}}}, 0x108) (async)
unshare(0x20000400) (async)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={<r2=>r1})
bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x2, 0x0, 0x100000e, r2}, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32)
r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000090a010400000000000000000a0000040900010073797a310000000008000a0000020900020073797a3100000000080001400000011c08000640ffffff000c000b400000000000000090140000001100010000000000000000000700000a00"/128], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)

497.468449ms ago: executing program 34 (id=7023):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x8000042, 0x1, 0x2}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x3, 0x3}, 0x10)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0xb0}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000180092800b0001006772657461700000080002800400120008000a00", @ANYRES32=r10, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0)
r14 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r14, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x4, 0x1, 0xff, 0x1, 0x0, 0xc}, &(0x7f0000000080)=0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c891}, 0x4000814)

449.403412ms ago: executing program 35 (id=7024):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0)
shutdown(r1, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000)
select(0x40, &(0x7f0000000000)={0x3, 0x8000000000000000, 0x8001, 0x8000000000000000, 0x4, 0x1000, 0x1}, 0x0, 0x0, &(0x7f00000000c0)={0x77359400})
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20)

0s ago: executing program 36 (id=7025):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000600))
r2 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0xb2, "0e729ecae98e4e56e2b0d0b997da9c4f4032bbd63b7fe5511b77a44bc0c3c904ebc679bfdba61194148656c95c9a96c2e948889122a9204edf008bb46645ef1f0d09b08421b48eaf408ce5b4c3f3af16e478809956fc1d7a838867e5632770354d39d31183335d60632a558bb31e83f96261e36ba549a4309f6998cf2c230ddd3518b82ad82df14e4ad5fffd7e9626b4146b4b900ff3838755f6d873b5cd93300fbf41667395b7fd82206a7c9684a0d67127"}, &(0x7f0000000140)=0xd6)

kernel console output (not intermixed with test programs):

]  ? import_iovec+0x74/0xa0
[ 1155.995223][T29442]  ___sys_sendmsg+0x21f/0x2a0
[ 1155.995250][T29442]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1155.995308][T29442]  ? __fget_files+0x2a/0x420
[ 1155.995341][T29442]  ? __fget_files+0x3a0/0x420
[ 1155.995373][T29442]  __x64_sys_sendmsg+0x19b/0x260
[ 1155.995400][T29442]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1155.995435][T29442]  ? __pfx_ksys_write+0x10/0x10
[ 1155.995464][T29442]  do_syscall_64+0xec/0xf80
[ 1155.995483][T29442]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1155.995500][T29442]  ? trace_irq_disable+0x37/0x100
[ 1155.995522][T29442]  ? clear_bhb_loop+0x60/0xb0
[ 1155.995546][T29442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1155.995565][T29442] RIP: 0033:0x7f7c16f8f749
[ 1155.995583][T29442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1155.995600][T29442] RSP: 002b:00007f7c17d77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1155.995621][T29442] RAX: ffffffffffffffda RBX: 00007f7c171e5fa0 RCX: 00007f7c16f8f749
[ 1155.995636][T29442] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003
[ 1155.995649][T29442] RBP: 00007f7c17d77090 R08: 0000000000000000 R09: 0000000000000000
[ 1155.995663][T29442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1155.995674][T29442] R13: 00007f7c171e6038 R14: 00007f7c171e5fa0 R15: 00007ffe1b82c008
[ 1155.995704][T29442]  </TASK>
[ 1156.039568][T29448] openvswitch: netlink: Unknown key attributes 2
[ 1156.262881][T23345] block nbd21: Receive control failed (result -32)
[ 1156.364463][T29453] netlink: 'syz.4.5996': attribute type 2 has an invalid length.
[ 1158.056923][T29526] syzkaller0: left promiscuous mode
[ 1158.062370][T29526] syzkaller0: left allmulticast mode
[ 1158.214842][T23345] block nbd22: Receive control failed (result -32)
[ 1158.290260][T29531] FAULT_INJECTION: forcing a failure.
[ 1158.290260][T29531] name failslab, interval 1, probability 0, space 0, times 0
[ 1158.386226][T29531] CPU: 0 UID: 0 PID: 29531 Comm: syz.0.6022 Not tainted syzkaller #0 PREEMPT(full) 
[ 1158.386257][T29531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1158.386270][T29531] Call Trace:
[ 1158.386280][T29531]  <TASK>
[ 1158.386290][T29531]  dump_stack_lvl+0xe8/0x150
[ 1158.386329][T29531]  should_fail_ex+0x414/0x560
[ 1158.386365][T29531]  should_failslab+0xa8/0x100
[ 1158.386391][T29531]  __kvmalloc_node_noprof+0x175/0x920
[ 1158.386419][T29531]  ? rhashtable_init_noprof+0x52e/0xa70
[ 1158.386438][T29531]  ? rhashtable_init_noprof+0x12d/0xa70
[ 1158.386464][T29531]  rhashtable_init_noprof+0x52e/0xa70
[ 1158.386486][T29531]  ? __init_waitqueue_head+0xa9/0x150
[ 1158.386519][T29531]  rhltable_init_noprof+0x1e/0x60
[ 1158.386542][T29531]  sta_info_init+0x28/0x130
[ 1158.386573][T29531]  ieee80211_alloc_hw_nm+0x818/0x1f60
[ 1158.386597][T29531]  ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10
[ 1158.386628][T29531]  mac80211_hwsim_new_radio+0x1e1/0x52f0
[ 1158.386655][T29531]  ? stack_trace_save+0x9c/0xe0
[ 1158.386683][T29531]  ? __pfx_stack_trace_save+0x10/0x10
[ 1158.386714][T29531]  ? stack_depot_save_flags+0x33/0x810
[ 1158.386744][T29531]  ? unwind_next_frame+0xa5/0x23d0
[ 1158.386769][T29531]  ? kasan_save_track+0x4f/0x80
[ 1158.386787][T29531]  ? kasan_save_track+0x3e/0x80
[ 1158.386812][T29531]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1158.386831][T29531]  ? __nla_validate_parse+0x2400/0x2d40
[ 1158.386853][T29531]  ? __x64_sys_sendmsg+0x19b/0x260
[ 1158.386887][T29531]  hwsim_new_radio_nl+0xf5b/0x1bd0
[ 1158.386915][T29531]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1158.386951][T29531]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1158.386979][T29531]  ? rcu_is_watching+0x15/0xb0
[ 1158.387007][T29531]  ? __nla_parse+0x40/0x60
[ 1158.387033][T29531]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1158.387062][T29531]  genl_family_rcv_msg_doit+0x215/0x300
[ 1158.387089][T29531]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1158.387121][T29531]  ? bpf_lsm_capable+0x9/0x20
[ 1158.387142][T29531]  ? security_capable+0x7e/0x2e0
[ 1158.387173][T29531]  genl_rcv_msg+0x60e/0x790
[ 1158.387199][T29531]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1158.387218][T29531]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1158.387254][T29531]  netlink_rcv_skb+0x208/0x470
[ 1158.387281][T29531]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1158.387302][T29531]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1158.387332][T29531]  ? genl_rcv+0x19/0x40
[ 1158.387368][T29531]  ? down_read+0x274/0x2e0
[ 1158.387390][T29531]  ? genl_rcv+0xd/0x40
[ 1158.387409][T29531]  genl_rcv+0x28/0x40
[ 1158.387426][T29531]  netlink_unicast+0x82f/0x9e0
[ 1158.387457][T29531]  ? __pfx_netlink_unicast+0x10/0x10
[ 1158.387479][T29531]  ? __alloc_skb+0x198/0x3a0
[ 1158.387500][T29531]  ? netlink_sendmsg+0x642/0xb30
[ 1158.387524][T29531]  ? skb_put+0x11b/0x210
[ 1158.387550][T29531]  netlink_sendmsg+0x805/0xb30
[ 1158.387586][T29531]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1158.387616][T29531]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1158.387643][T29531]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1158.387662][T29531]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1158.387688][T29531]  __sock_sendmsg+0x21c/0x270
[ 1158.387721][T29531]  ____sys_sendmsg+0x505/0x820
[ 1158.387772][T29531]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1158.387806][T29531]  ? import_iovec+0x74/0xa0
[ 1158.387834][T29531]  ___sys_sendmsg+0x21f/0x2a0
[ 1158.387860][T29531]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1158.387946][T29531]  ? __fget_files+0x2a/0x420
[ 1158.387969][T29531]  ? __fget_files+0x3a0/0x420
[ 1158.388004][T29531]  __x64_sys_sendmsg+0x19b/0x260
[ 1158.388031][T29531]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1158.388063][T29531]  ? __pfx_ksys_write+0x10/0x10
[ 1158.388095][T29531]  do_syscall_64+0xec/0xf80
[ 1158.388116][T29531]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1158.388136][T29531]  ? trace_irq_disable+0x37/0x100
[ 1158.388161][T29531]  ? clear_bhb_loop+0x60/0xb0
[ 1158.388186][T29531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1158.388206][T29531] RIP: 0033:0x7fb89138f749
[ 1158.388224][T29531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1158.388242][T29531] RSP: 002b:00007fb89230c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1158.388264][T29531] RAX: ffffffffffffffda RBX: 00007fb8915e5fa0 RCX: 00007fb89138f749
[ 1158.388279][T29531] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003
[ 1158.388293][T29531] RBP: 00007fb89230c090 R08: 0000000000000000 R09: 0000000000000000
[ 1158.388312][T29531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1158.388324][T29531] R13: 00007fb8915e6038 R14: 00007fb8915e5fa0 R15: 00007fff602a0cc8
[ 1158.388356][T29531]  </TASK>
[ 1158.882767][T29536] __nla_validate_parse: 24 callbacks suppressed
[ 1158.882788][T29536] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6023'.
[ 1158.986461][T29539] ip6tnl0: entered allmulticast mode
[ 1159.016604][T29539] netlink: 'syz.0.6025': attribute type 1 has an invalid length.
[ 1159.042907][T29543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6028'.
[ 1159.069783][T29539] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1159.101556][T29546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6026'.
[ 1159.110986][T29546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6026'.
[ 1159.120104][T29546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6026'.
[ 1159.130243][T29546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6026'.
[ 1159.230805][T29554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6029'.
[ 1159.243433][T29543] bridge18: port 1(veth17) entered blocking state
[ 1159.254436][T29543] bridge18: port 1(veth17) entered disabled state
[ 1159.263656][T29543] veth17: entered allmulticast mode
[ 1159.276006][T29543] veth17: entered promiscuous mode
[ 1159.323227][T29551] vlan0: entered allmulticast mode
[ 1159.330836][T29551] veth1: entered allmulticast mode
[ 1159.337642][T29551] bond13: (slave vlan0): Opening slave failed
[ 1159.359534][T29550] veth0_to_bond: left allmulticast mode
[ 1159.380013][T29550] veth0_to_bond: left promiscuous mode
[ 1159.394613][T29550] bridge14: port 2(veth0_to_bond) entered disabled state
[ 1159.421875][T29550] bridge18: port 2(veth0_to_bond) entered blocking state
[ 1159.429217][T29550] bridge18: port 2(veth0_to_bond) entered disabled state
[ 1159.438474][T29550] veth0_to_bond: entered allmulticast mode
[ 1159.449309][T29550] veth0_to_bond: entered promiscuous mode
[ 1159.491189][T29556] bridge18: port 3(veth19) entered blocking state
[ 1159.498549][T29556] bridge18: port 3(veth19) entered disabled state
[ 1159.505670][T29556] veth19: entered allmulticast mode
[ 1159.517401][T29556] veth19: entered promiscuous mode
[ 1159.764806][T29584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6039'.
[ 1159.774291][T29584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6039'.
[ 1159.801774][T29584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6039'.
[ 1160.267787][T29621] openvswitch: netlink: IP tunnel TTL not specified.
[ 1160.381344][T29623] netlink: 'syz.3.6052': attribute type 2 has an invalid length.
[ 1161.205451][T29667] netlink: 'syz.2.6066': attribute type 1 has an invalid length.
[ 1161.503450][T29692] netlink: 'syz.2.6075': attribute type 2 has an invalid length.
[ 1162.032684][T29722] netlink: 'syz.2.6083': attribute type 2 has an invalid length.
[ 1162.869847][T29738] geneve2: entered promiscuous mode
[ 1162.945949][ T9055] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1163.014370][ T9055] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1163.044725][ T9055] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1163.053446][ T9055] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1163.634603][T29777] syzkaller0: entered promiscuous mode
[ 1163.641227][T29777] syzkaller0: entered allmulticast mode
[ 1163.888508][T29790] __nla_validate_parse: 28 callbacks suppressed
[ 1163.888521][T29790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6107'.
[ 1163.939638][T29790] bridge19: port 1(veth21) entered blocking state
[ 1163.946625][T29790] bridge19: port 1(veth21) entered disabled state
[ 1163.953319][T29790] veth21: entered allmulticast mode
[ 1163.960156][T29790] veth21: entered promiscuous mode
[ 1163.977338][T29790] veth0_to_bond: left allmulticast mode
[ 1163.983277][T29790] veth0_to_bond: left promiscuous mode
[ 1163.989254][T29790] bridge18: port 2(veth0_to_bond) entered disabled state
[ 1163.999775][T29790] bridge19: port 2(veth0_to_bond) entered blocking state
[ 1164.007219][T29790] bridge19: port 2(veth0_to_bond) entered disabled state
[ 1164.014646][T29790] veth0_to_bond: entered allmulticast mode
[ 1164.021902][T29790] veth0_to_bond: entered promiscuous mode
[ 1164.041568][T29794] bridge19: port 3(veth23) entered blocking state
[ 1164.048527][T29794] bridge19: port 3(veth23) entered disabled state
[ 1164.055587][T29794] veth23: entered allmulticast mode
[ 1164.062451][T29794] veth23: entered promiscuous mode
[ 1164.355089][T29805] FAULT_INJECTION: forcing a failure.
[ 1164.355089][T29805] name failslab, interval 1, probability 0, space 0, times 0
[ 1164.368003][T29805] CPU: 0 UID: 0 PID: 29805 Comm: syz.2.6113 Not tainted syzkaller #0 PREEMPT(full) 
[ 1164.368031][T29805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1164.368044][T29805] Call Trace:
[ 1164.368061][T29805]  <TASK>
[ 1164.368072][T29805]  dump_stack_lvl+0xe8/0x150
[ 1164.368102][T29805]  should_fail_ex+0x414/0x560
[ 1164.368139][T29805]  should_failslab+0xa8/0x100
[ 1164.368166][T29805]  __kmalloc_node_track_caller_noprof+0xe2/0x820
[ 1164.368190][T29805]  ? kasprintf+0xd4/0x120
[ 1164.368220][T29805]  kvasprintf+0xdc/0x190
[ 1164.368243][T29805]  ? get_random_u32+0x45e/0x8d0
[ 1164.368268][T29805]  ? __pfx_kvasprintf+0x10/0x10
[ 1164.368305][T29805]  kasprintf+0xd4/0x120
[ 1164.368325][T29805]  ? pcpu_alloc+0x10/0x360
[ 1164.368355][T29805]  ? __pfx_kasprintf+0x10/0x10
[ 1164.368384][T29805]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1164.368423][T29805]  ieee80211_alloc_led_names+0xa4/0x2b0
[ 1164.368451][T29805]  ieee80211_alloc_hw_nm+0x18f2/0x1f60
[ 1164.368486][T29805]  mac80211_hwsim_new_radio+0x1e1/0x52f0
[ 1164.368513][T29805]  ? stack_trace_save+0x9c/0xe0
[ 1164.368542][T29805]  ? __pfx_stack_trace_save+0x10/0x10
[ 1164.368573][T29805]  ? stack_depot_save_flags+0x33/0x810
[ 1164.368610][T29805]  ? kasan_save_track+0x4f/0x80
[ 1164.368628][T29805]  ? kasan_save_track+0x3e/0x80
[ 1164.368652][T29805]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1164.368670][T29805]  ? __nla_validate_parse+0x2400/0x2d40
[ 1164.368692][T29805]  ? __x64_sys_sendmsg+0x19b/0x260
[ 1164.368733][T29805]  hwsim_new_radio_nl+0xf5b/0x1bd0
[ 1164.368761][T29805]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1164.368799][T29805]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1164.368826][T29805]  ? rcu_is_watching+0x15/0xb0
[ 1164.368854][T29805]  ? __nla_parse+0x40/0x60
[ 1164.368881][T29805]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1164.368911][T29805]  genl_family_rcv_msg_doit+0x215/0x300
[ 1164.368939][T29805]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1164.368974][T29805]  ? bpf_lsm_capable+0x9/0x20
[ 1164.368996][T29805]  ? security_capable+0x7e/0x2e0
[ 1164.369028][T29805]  genl_rcv_msg+0x60e/0x790
[ 1164.369054][T29805]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1164.369073][T29805]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1164.369110][T29805]  netlink_rcv_skb+0x208/0x470
[ 1164.369138][T29805]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1164.369159][T29805]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1164.369181][T29805]  ? genl_rcv+0x19/0x40
[ 1164.369218][T29805]  ? down_read+0x274/0x2e0
[ 1164.369239][T29805]  ? genl_rcv+0xd/0x40
[ 1164.369259][T29805]  genl_rcv+0x28/0x40
[ 1164.369276][T29805]  netlink_unicast+0x82f/0x9e0
[ 1164.369309][T29805]  ? __pfx_netlink_unicast+0x10/0x10
[ 1164.369331][T29805]  ? __alloc_skb+0x198/0x3a0
[ 1164.369353][T29805]  ? netlink_sendmsg+0x642/0xb30
[ 1164.369376][T29805]  ? skb_put+0x11b/0x210
[ 1164.369402][T29805]  netlink_sendmsg+0x805/0xb30
[ 1164.369439][T29805]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1164.369469][T29805]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1164.369496][T29805]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1164.369514][T29805]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1164.369541][T29805]  __sock_sendmsg+0x21c/0x270
[ 1164.369575][T29805]  ____sys_sendmsg+0x505/0x820
[ 1164.369606][T29805]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1164.369641][T29805]  ? import_iovec+0x74/0xa0
[ 1164.369670][T29805]  ___sys_sendmsg+0x21f/0x2a0
[ 1164.369697][T29805]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1164.369766][T29805]  ? __fget_files+0x2a/0x420
[ 1164.369791][T29805]  ? __fget_files+0x3a0/0x420
[ 1164.369827][T29805]  __x64_sys_sendmsg+0x19b/0x260
[ 1164.369855][T29805]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1164.369890][T29805]  ? __pfx_ksys_write+0x10/0x10
[ 1164.369913][T29805]  do_syscall_64+0xec/0xf80
[ 1164.369932][T29805]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1164.369951][T29805]  ? trace_irq_disable+0x37/0x100
[ 1164.369976][T29805]  ? clear_bhb_loop+0x60/0xb0
[ 1164.370001][T29805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1164.370021][T29805] RIP: 0033:0x7ff430d8f749
[ 1164.370040][T29805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1164.370058][T29805] RSP: 002b:00007ff431c61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1164.370080][T29805] RAX: ffffffffffffffda RBX: 00007ff430fe5fa0 RCX: 00007ff430d8f749
[ 1164.370096][T29805] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003
[ 1164.370110][T29805] RBP: 00007ff431c61090 R08: 0000000000000000 R09: 0000000000000000
[ 1164.370123][T29805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1164.370134][T29805] R13: 00007ff430fe6038 R14: 00007ff430fe5fa0 R15: 00007ffc7f5f0738
[ 1164.370168][T29805]  </TASK>
[ 1164.990412][T29814] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1165.298230][T29830] delete_channel: no stack
[ 1165.664740][T29838] netem: incorrect gi model size
[ 1165.774321][T29838] netem: change failed
[ 1166.059564][T29845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6121'.
[ 1166.104247][T29845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6121'.
[ 1166.136474][T29848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6121'.
[ 1166.423945][T29853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6124'.
[ 1166.529219][T29855] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6126'.
[ 1166.669428][T29861] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6128'.
[ 1166.828535][T29867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6129'.
[ 1166.976538][T29870] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1167.477726][T29891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6132'.
[ 1167.519065][T29887] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6132'.
[ 1167.673247][T29897] bond9: Removing last arp target with arp_interval on
[ 1168.046041][T29914] netlink: 'syz.1.6146': attribute type 1 has an invalid length.
[ 1168.430002][T29936] SET target dimension over the limit!
[ 1168.999850][T29963] __nla_validate_parse: 10 callbacks suppressed
[ 1168.999870][T29963] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6165'.
[ 1169.206395][T29970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6168'.
[ 1169.235296][T29970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6168'.
[ 1169.264307][T29974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6168'.
[ 1169.461101][T29981] syzkaller0: entered promiscuous mode
[ 1169.467365][T29981] syzkaller0: entered allmulticast mode
[ 1169.489957][T29987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6171'.
[ 1169.503494][T29987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6171'.
[ 1169.691632][T30000] netlink: 308 bytes leftover after parsing attributes in process `syz.3.6176'.
[ 1169.702492][T30000] netlink: 308 bytes leftover after parsing attributes in process `syz.3.6176'.
[ 1170.068947][T30019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6180'.
[ 1170.072918][T30020] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6182'.
[ 1170.434747][T30038] bpq0: entered promiscuous mode
[ 1170.915746][T30068] netlink: 'syz.0.6195': attribute type 4 has an invalid length.
[ 1171.415152][T30098] netlink: 'syz.0.6206': attribute type 6 has an invalid length.
[ 1171.423824][T30098] netlink: 'syz.0.6206': attribute type 5 has an invalid length.
[ 1171.437414][T30098] netlink: 'syz.0.6206': attribute type 4 has an invalid length.
[ 1171.448329][T30098] netlink: 'syz.0.6206': attribute type 4 has an invalid length.
[ 1172.507995][T30122] netlink: 'syz.4.6211': attribute type 2 has an invalid length.
[ 1172.725529][T30131] FAULT_INJECTION: forcing a failure.
[ 1172.725529][T30131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1172.775079][T30131] CPU: 0 UID: 0 PID: 30131 Comm: syz.1.6214 Not tainted syzkaller #0 PREEMPT(full) 
[ 1172.775109][T30131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1172.775121][T30131] Call Trace:
[ 1172.775128][T30131]  <TASK>
[ 1172.775137][T30131]  dump_stack_lvl+0xe8/0x150
[ 1172.775167][T30131]  should_fail_ex+0x414/0x560
[ 1172.775201][T30131]  _copy_from_user+0x2d/0xb0
[ 1172.775227][T30131]  ___sys_sendmsg+0x158/0x2a0
[ 1172.775254][T30131]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1172.775312][T30131]  ? __fget_files+0x2a/0x420
[ 1172.775334][T30131]  ? __fget_files+0x3a0/0x420
[ 1172.775368][T30131]  __x64_sys_sendmsg+0x19b/0x260
[ 1172.775395][T30131]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1172.775429][T30131]  ? __pfx_ksys_write+0x10/0x10
[ 1172.775460][T30131]  do_syscall_64+0xec/0xf80
[ 1172.775480][T30131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.775506][T30131]  ? trace_irq_disable+0x37/0x100
[ 1172.775531][T30131]  ? clear_bhb_loop+0x60/0xb0
[ 1172.775555][T30131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.775575][T30131] RIP: 0033:0x7f9667b8f749
[ 1172.775592][T30131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1172.775610][T30131] RSP: 002b:00007f966897d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1172.775630][T30131] RAX: ffffffffffffffda RBX: 00007f9667de5fa0 RCX: 00007f9667b8f749
[ 1172.775646][T30131] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1172.775659][T30131] RBP: 00007f966897d090 R08: 0000000000000000 R09: 0000000000000000
[ 1172.775671][T30131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1172.775682][T30131] R13: 00007f9667de6038 R14: 00007f9667de5fa0 R15: 00007ffe42ddcdd8
[ 1172.775711][T30131]  </TASK>
[ 1174.637480][T30192] __nla_validate_parse: 14 callbacks suppressed
[ 1174.637493][T30192] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6230'.
[ 1174.706106][T30197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6231'.
[ 1174.717391][T30191] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6231'.
[ 1174.907839][T30205] netlink: 'syz.3.6235': attribute type 2 has an invalid length.
[ 1174.965486][T23345] block nbd23: Receive control failed (result -32)
[ 1175.060522][T30209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6235'.
[ 1176.658554][T30258] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6247'.
[ 1176.806220][T30261] netlink: 'syz.0.6248': attribute type 2 has an invalid length.
[ 1177.017493][T30279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6248'.
[ 1177.465800][T30298] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6253'.
[ 1177.721156][T30303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6256'.
[ 1178.184679][T30314] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[ 1178.410850][T30326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6265'.
[ 1178.519717][T30331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6267'.
[ 1178.880375][T30359] netlink: 'syz.4.6275': attribute type 2 has an invalid length.
[ 1179.065664][T30373] FAULT_INJECTION: forcing a failure.
[ 1179.065664][T30373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1179.082476][T30373] CPU: 1 UID: 0 PID: 30373 Comm: syz.1.6277 Not tainted syzkaller #0 PREEMPT(full) 
[ 1179.082505][T30373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1179.082518][T30373] Call Trace:
[ 1179.082526][T30373]  <TASK>
[ 1179.082535][T30373]  dump_stack_lvl+0xe8/0x150
[ 1179.082565][T30373]  should_fail_ex+0x414/0x560
[ 1179.082601][T30373]  _copy_from_user+0x2d/0xb0
[ 1179.082626][T30373]  ___sys_recvmsg+0x12e/0x510
[ 1179.082650][T30373]  ? ktime_get_ts64+0xa9/0x3d0
[ 1179.082684][T30373]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1179.082714][T30373]  ? __fget_files+0x2a/0x420
[ 1179.082755][T30373]  ? __fget_files+0x3a0/0x420
[ 1179.082790][T30373]  do_recvmmsg+0x307/0x770
[ 1179.082834][T30373]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1179.082872][T30373]  ? _copy_from_user+0x94/0xb0
[ 1179.082911][T30373]  __x64_sys_recvmmsg+0x1af/0x240
[ 1179.082939][T30373]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1179.082976][T30373]  do_syscall_64+0xec/0xf80
[ 1179.082998][T30373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1179.083016][T30373]  ? trace_irq_disable+0x37/0x100
[ 1179.083041][T30373]  ? clear_bhb_loop+0x60/0xb0
[ 1179.083063][T30373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1179.083082][T30373] RIP: 0033:0x7f9667b8f749
[ 1179.083100][T30373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1179.083118][T30373] RSP: 002b:00007f966897d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1179.083140][T30373] RAX: ffffffffffffffda RBX: 00007f9667de5fa0 RCX: 00007f9667b8f749
[ 1179.083156][T30373] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[ 1179.083170][T30373] RBP: 00007f966897d090 R08: 0000200000003700 R09: 0000000000000000
[ 1179.083184][T30373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1179.083197][T30373] R13: 00007f9667de6038 R14: 00007f9667de5fa0 R15: 00007ffe42ddcdd8
[ 1179.083230][T30373]  </TASK>
[ 1179.323236][T23345] block nbd24: Receive control failed (result -32)
[ 1179.521849][T30382] openvswitch: netlink: IP tunnel dst address not specified
[ 1179.723627][T30396] __nla_validate_parse: 1 callbacks suppressed
[ 1179.723645][T30396] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6285'.
[ 1179.727716][T30394] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6286'.
[ 1179.754963][T30396] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6285'.
[ 1179.857406][T30401] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6288'.
[ 1179.874664][T30401] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6288'.
[ 1179.883760][T30401] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6288'.
[ 1179.903281][T30401] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6288'.
[ 1179.913384][T30401] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6288'.
[ 1179.924171][T30401] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6288'.
[ 1179.933259][T30401] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6288'.
[ 1180.255105][T23345] block nbd25: Receive control failed (result -32)
[ 1180.285596][T30411] netlink: 'syz.4.6291': attribute type 2 has an invalid length.
[ 1180.547630][T30424] FAULT_INJECTION: forcing a failure.
[ 1180.547630][T30424] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1180.569106][T30424] CPU: 1 UID: 0 PID: 30424 Comm: syz.3.6292 Not tainted syzkaller #0 PREEMPT(full) 
[ 1180.569135][T30424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1180.569148][T30424] Call Trace:
[ 1180.569157][T30424]  <TASK>
[ 1180.569166][T30424]  dump_stack_lvl+0xe8/0x150
[ 1180.569197][T30424]  should_fail_ex+0x414/0x560
[ 1180.569234][T30424]  _copy_to_user+0x31/0xb0
[ 1180.569261][T30424]  simple_read_from_buffer+0xe1/0x170
[ 1180.569291][T30424]  proc_fail_nth_read+0x1b3/0x220
[ 1180.569316][T30424]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1180.569341][T30424]  ? rw_verify_area+0x2a6/0x4d0
[ 1180.569370][T30424]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1180.569393][T30424]  vfs_read+0x200/0xa30
[ 1180.569411][T30424]  ? fdget_pos+0x247/0x320
[ 1180.569441][T30424]  ? __pfx___mutex_lock+0x10/0x10
[ 1180.569464][T30424]  ? __pfx_vfs_read+0x10/0x10
[ 1180.569485][T30424]  ? __fget_files+0x2a/0x420
[ 1180.569514][T30424]  ? __fget_files+0x3a0/0x420
[ 1180.569537][T30424]  ? __fget_files+0x2a/0x420
[ 1180.569570][T30424]  ksys_read+0x145/0x250
[ 1180.569592][T30424]  ? __pfx_ksys_read+0x10/0x10
[ 1180.569611][T30424]  ? rcu_is_watching+0x15/0xb0
[ 1180.569636][T30424]  ? trace_sys_enter+0x25/0xf0
[ 1180.569689][T30424]  do_syscall_64+0xec/0xf80
[ 1180.569710][T30424]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1180.569727][T30424]  ? trace_irq_disable+0x37/0x100
[ 1180.569752][T30424]  ? clear_bhb_loop+0x60/0xb0
[ 1180.569776][T30424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1180.569795][T30424] RIP: 0033:0x7f20fa58e15c
[ 1180.569818][T30424] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1180.569837][T30424] RSP: 002b:00007f20fb4b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1180.569858][T30424] RAX: ffffffffffffffda RBX: 00007f20fa7e6090 RCX: 00007f20fa58e15c
[ 1180.569874][T30424] RDX: 000000000000000f RSI: 00007f20fb4b70a0 RDI: 0000000000000006
[ 1180.569887][T30424] RBP: 00007f20fb4b7090 R08: 0000000000000000 R09: 0000000000000000
[ 1180.569900][T30424] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[ 1180.569913][T30424] R13: 00007f20fa7e6128 R14: 00007f20fa7e6090 R15: 00007ffccaaafed8
[ 1180.569948][T30424]  </TASK>
[ 1181.091145][T30430] bridge25: port 1(veth35) entered blocking state
[ 1181.119989][T30430] bridge25: port 1(veth35) entered disabled state
[ 1181.127434][T30430] veth35: entered allmulticast mode
[ 1181.135960][T30430] veth35: entered promiscuous mode
[ 1181.154957][T30437] veth0_to_bond: left allmulticast mode
[ 1181.160562][T30437] veth0_to_bond: left promiscuous mode
[ 1181.195159][T30437] bridge22: port 2(veth0_to_bond) entered disabled state
[ 1181.225478][T30437] bridge25: port 2(veth0_to_bond) entered blocking state
[ 1181.241637][T30437] bridge25: port 2(veth0_to_bond) entered disabled state
[ 1181.250782][T30437] veth0_to_bond: entered allmulticast mode
[ 1181.272205][T30437] veth0_to_bond: entered promiscuous mode
[ 1181.308332][T30430] bridge25: port 3(veth37) entered blocking state
[ 1181.315301][T30430] bridge25: port 3(veth37) entered disabled state
[ 1181.322037][T30430] veth37: entered allmulticast mode
[ 1181.343488][T30430] veth37: entered promiscuous mode
[ 1181.596745][T30462] dvmrp0: entered allmulticast mode
[ 1182.095364][T30491] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1183.819087][T30559] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1183.831655][T30559] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[ 1183.842527][T30559] 8021q: adding VLAN 0 to HW filter on device hsr0
[ 1185.435117][T30593] __nla_validate_parse: 495 callbacks suppressed
[ 1185.435139][T30593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6335'.
[ 1188.130614][T30624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6342'.
[ 1188.145049][T30624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6342'.
[ 1188.167394][T30624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6342'.
[ 1188.181806][T30624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6342'.
[ 1188.194312][T30624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6342'.
[ 1188.203304][T30624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6342'.
[ 1188.213926][T30624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6342'.
[ 1188.228776][T30624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6342'.
[ 1188.268008][T30624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6342'.
[ 1189.532537][T30690] bpq0: left promiscuous mode
[ 1189.637955][T30692] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1190.450259][T30743] __nla_validate_parse: 488 callbacks suppressed
[ 1190.450278][T30743] netlink: 592 bytes leftover after parsing attributes in process `syz.0.6377'.
[ 1190.472956][T30741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6375'.
[ 1190.606997][T30748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6379'.
[ 1190.655722][T30752] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1190.665906][T30752] syzkaller0: entered promiscuous mode
[ 1190.679999][T30752] syzkaller0: entered allmulticast mode
[ 1190.833044][T30759] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6384'.
[ 1190.927297][T30767] geneve3: entered promiscuous mode
[ 1190.987791][T30772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6389'.
[ 1191.046855][T30776] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6388'.
[ 1191.074678][T30776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1191.128573][T30784] openvswitch: netlink: IP tunnel TTL not specified.
[ 1191.320953][T30792] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1191.605484][T30809] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6400'.
[ 1192.056485][T30841] netlink: 'syz.0.6405': attribute type 4 has an invalid length.
[ 1192.121957][T30844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6406'.
[ 1192.122667][T30837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6404'.
[ 1192.170840][T30837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6404'.
[ 1192.280985][T30849] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1192.391257][T23345] block nbd26: Receive control failed (result -32)
[ 1192.886207][T30877] FAULT_INJECTION: forcing a failure.
[ 1192.886207][T30877] name failslab, interval 1, probability 0, space 0, times 0
[ 1192.899432][T30877] CPU: 1 UID: 0 PID: 30877 Comm: syz.4.6416 Not tainted syzkaller #0 PREEMPT(full) 
[ 1192.899458][T30877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1192.899471][T30877] Call Trace:
[ 1192.899479][T30877]  <TASK>
[ 1192.899488][T30877]  dump_stack_lvl+0xe8/0x150
[ 1192.899519][T30877]  should_fail_ex+0x414/0x560
[ 1192.899554][T30877]  should_failslab+0xa8/0x100
[ 1192.899580][T30877]  kmem_cache_alloc_noprof+0x88/0x710
[ 1192.899607][T30877]  ? __lock_acquire+0x6b6/0x2cf0
[ 1192.899623][T30877]  ? fdb_create+0x1a2/0x13d0
[ 1192.899643][T30877]  fdb_create+0x1a2/0x13d0
[ 1192.899660][T30877]  ? rcu_read_lock_any_held+0x33/0x90
[ 1192.899681][T30877]  ? fdb_find_rcu+0x6db/0x760
[ 1192.899714][T30877]  ? br_fdb_find+0x82/0x210
[ 1192.899743][T30877]  ? __pfx_fdb_create+0x10/0x10
[ 1192.899761][T30877]  ? br_fdb_find+0x82/0x210
[ 1192.899793][T30877]  fdb_add_local+0x128/0x250
[ 1192.899820][T30877]  ? br_fdb_add_local+0x2a/0x60
[ 1192.899841][T30877]  br_fdb_add_local+0x3a/0x60
[ 1192.899861][T30877]  __vlan_add+0x5f7/0x2530
[ 1192.899897][T30877]  ? pcpu_alloc_noprof+0xf95/0x1750
[ 1192.899941][T30877]  br_vlan_add+0x41f/0x940
[ 1192.899971][T30877]  ? __lock_acquire+0x6b6/0x2cf0
[ 1192.899995][T30877]  br_vlan_info+0x1b8/0x460
[ 1192.900016][T30877]  ? __pfx_br_vlan_info+0x10/0x10
[ 1192.900033][T30877]  ? __lock_acquire+0x6b6/0x2cf0
[ 1192.900053][T30877]  ? br_process_vlan_info+0x504/0x890
[ 1192.900087][T30877]  br_process_vlan_info+0x600/0x890
[ 1192.900125][T30877]  ? __pfx_br_process_vlan_info+0x10/0x10
[ 1192.900165][T30877]  br_afspec+0x395/0x5f0
[ 1192.900182][T30877]  ? unwind_next_frame+0xa5/0x23d0
[ 1192.900214][T30877]  ? __pfx_br_afspec+0x10/0x10
[ 1192.900246][T30877]  br_setlink+0x280/0x800
[ 1192.900270][T30877]  ? __pfx_br_setlink+0x10/0x10
[ 1192.900326][T30877]  ? kernel_text_address+0xa5/0xe0
[ 1192.900357][T30877]  ? rtnetlink_rcv_msg+0x71c/0xb70
[ 1192.900379][T30877]  ? nla_find+0x131/0x150
[ 1192.900403][T30877]  rtnl_bridge_setlink+0x63b/0x7d0
[ 1192.900441][T30877]  ? __pfx_rtnl_bridge_setlink+0x10/0x10
[ 1192.900473][T30877]  ? __pfx_rtnl_bridge_setlink+0x10/0x10
[ 1192.900496][T30877]  rtnetlink_rcv_msg+0x77c/0xb70
[ 1192.900521][T30877]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1192.900541][T30877]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1192.900562][T30877]  ? __lock_acquire+0x6b6/0x2cf0
[ 1192.900596][T30877]  netlink_rcv_skb+0x208/0x470
[ 1192.900622][T30877]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1192.900646][T30877]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1192.900682][T30877]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1192.900715][T30877]  netlink_unicast+0x82f/0x9e0
[ 1192.900747][T30877]  ? __pfx_netlink_unicast+0x10/0x10
[ 1192.900768][T30877]  ? __alloc_skb+0x198/0x3a0
[ 1192.900789][T30877]  ? netlink_sendmsg+0x642/0xb30
[ 1192.900813][T30877]  ? skb_put+0x11b/0x210
[ 1192.900837][T30877]  netlink_sendmsg+0x805/0xb30
[ 1192.900871][T30877]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1192.900900][T30877]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1192.900928][T30877]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1192.900947][T30877]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1192.900974][T30877]  __sock_sendmsg+0x21c/0x270
[ 1192.901006][T30877]  ____sys_sendmsg+0x505/0x820
[ 1192.901035][T30877]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1192.901068][T30877]  ? import_iovec+0x74/0xa0
[ 1192.901096][T30877]  ___sys_sendmsg+0x21f/0x2a0
[ 1192.901123][T30877]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1192.901183][T30877]  ? __fget_files+0x2a/0x420
[ 1192.901206][T30877]  ? __fget_files+0x3a0/0x420
[ 1192.901240][T30877]  __x64_sys_sendmsg+0x19b/0x260
[ 1192.901268][T30877]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1192.901302][T30877]  ? __pfx_ksys_write+0x10/0x10
[ 1192.901332][T30877]  do_syscall_64+0xec/0xf80
[ 1192.901354][T30877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1192.901373][T30877]  ? trace_irq_disable+0x37/0x100
[ 1192.901397][T30877]  ? clear_bhb_loop+0x60/0xb0
[ 1192.901426][T30877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1192.901445][T30877] RIP: 0033:0x7f7c16f8f749
[ 1192.901465][T30877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1192.901482][T30877] RSP: 002b:00007f7c17d77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1192.901503][T30877] RAX: ffffffffffffffda RBX: 00007f7c171e5fa0 RCX: 00007f7c16f8f749
[ 1192.901519][T30877] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1192.901532][T30877] RBP: 00007f7c17d77090 R08: 0000000000000000 R09: 0000000000000000
[ 1192.901545][T30877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1192.901557][T30877] R13: 00007f7c171e6038 R14: 00007f7c171e5fa0 R15: 00007ffe1b82c008
[ 1192.901590][T30877]  </TASK>
[ 1193.351255][T30877] bridge0: failed insert local address into bridge forwarding table
[ 1193.392953][T30886] netlink: 'syz.1.6418': attribute type 4 has an invalid length.
[ 1193.635207][T30895] netlink: 'syz.4.6420': attribute type 1 has an invalid length.
[ 1193.902408][T30905] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1194.190817][T30923] netlink: 'syz.1.6430': attribute type 4 has an invalid length.
[ 1194.491010][T30946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1194.500293][T30946] syzkaller0: entered promiscuous mode
[ 1194.506017][T30946] syzkaller0: entered allmulticast mode
[ 1194.556899][T30946] tipc: Resetting bearer <eth:syzkaller0>
[ 1194.579015][T30946] tipc: Disabling bearer <eth:syzkaller0>
[ 1194.881095][T30961] netlink: 'syz.1.6443': attribute type 4 has an invalid length.
[ 1194.999135][T30965] netlink: 'syz.1.6444': attribute type 2 has an invalid length.
[ 1195.482998][T30977] __nla_validate_parse: 404 callbacks suppressed
[ 1195.483018][T30977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6448'.
[ 1195.539029][T30992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6451'.
[ 1195.564144][T30992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6451'.
[ 1195.573419][T30992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6451'.
[ 1195.605471][T30992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6451'.
[ 1195.632951][T30992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6451'.
[ 1195.697760][T30999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6453'.
[ 1195.698904][T30992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6451'.
[ 1195.794168][T30992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6451'.
[ 1195.803165][T30992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6451'.
[ 1196.339570][T31022] netlink: 'syz.0.6459': attribute type 12 has an invalid length.
[ 1199.057186][T31068] bridge20: port 1(veth25) entered blocking state
[ 1199.073131][T31068] bridge20: port 1(veth25) entered disabled state
[ 1199.105095][T31068] veth25: entered allmulticast mode
[ 1199.112209][T31068] veth25: entered promiscuous mode
[ 1199.127478][T31065] veth0_to_bond: left allmulticast mode
[ 1199.141478][T31065] veth0_to_bond: left promiscuous mode
[ 1199.159361][T31065] bridge19: port 2(veth0_to_bond) entered disabled state
[ 1199.212096][T31065] bridge20: port 2(veth0_to_bond) entered blocking state
[ 1199.240040][T31065] bridge20: port 2(veth0_to_bond) entered disabled state
[ 1199.258742][T31065] veth0_to_bond: entered allmulticast mode
[ 1199.272222][T31065] veth0_to_bond: entered promiscuous mode
[ 1199.328752][T31068] bridge20: port 3(veth27) entered blocking state
[ 1199.339357][T31068] bridge20: port 3(veth27) entered disabled state
[ 1199.356080][T31068] veth27: entered allmulticast mode
[ 1199.369174][T31068] veth27: entered promiscuous mode
[ 1199.907432][T31102] FAULT_INJECTION: forcing a failure.
[ 1199.907432][T31102] name failslab, interval 1, probability 0, space 0, times 0
[ 1199.975963][T31102] CPU: 1 UID: 0 PID: 31102 Comm: syz.2.6481 Not tainted syzkaller #0 PREEMPT(full) 
[ 1199.975991][T31102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1199.976004][T31102] Call Trace:
[ 1199.976012][T31102]  <TASK>
[ 1199.976020][T31102]  dump_stack_lvl+0xe8/0x150
[ 1199.976052][T31102]  should_fail_ex+0x414/0x560
[ 1199.976088][T31102]  should_failslab+0xa8/0x100
[ 1199.976115][T31102]  kmem_cache_alloc_noprof+0x88/0x710
[ 1199.976151][T31102]  ? ep_ptable_queue_proc+0x5c/0x200
[ 1199.976179][T31102]  ? tun_get+0x1c/0x2f0
[ 1199.976205][T31102]  ep_ptable_queue_proc+0x5c/0x200
[ 1199.976236][T31102]  ? __pfx_ep_ptable_queue_proc+0x10/0x10
[ 1199.976267][T31102]  tun_chr_poll+0xe3/0x630
[ 1199.976317][T31102]  ? __pfx_tun_chr_poll+0x10/0x10
[ 1199.976343][T31102]  ep_insert+0x1161/0x19e0
[ 1199.976393][T31102]  ? __pfx_ep_insert+0x10/0x10
[ 1199.976417][T31102]  ? __pfx___mutex_lock+0x10/0x10
[ 1199.976440][T31102]  ? __fget_files+0x2a/0x420
[ 1199.976478][T31102]  ? __pfx_ep_ptable_queue_proc+0x10/0x10
[ 1199.976509][T31102]  ? __fget_files+0x3a0/0x420
[ 1199.976532][T31102]  ? __fget_files+0x2a/0x420
[ 1199.976572][T31102]  do_epoll_ctl+0x7f4/0xe80
[ 1199.976607][T31102]  __x64_sys_epoll_ctl+0x163/0x1a0
[ 1199.976641][T31102]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[ 1199.976678][T31102]  do_syscall_64+0xec/0xf80
[ 1199.976699][T31102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1199.976718][T31102]  ? trace_irq_disable+0x37/0x100
[ 1199.976744][T31102]  ? clear_bhb_loop+0x60/0xb0
[ 1199.976768][T31102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1199.976788][T31102] RIP: 0033:0x7ff430d8f749
[ 1199.976806][T31102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1199.976833][T31102] RSP: 002b:00007ff431c61038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[ 1199.976855][T31102] RAX: ffffffffffffffda RBX: 00007ff430fe5fa0 RCX: 00007ff430d8f749
[ 1199.976871][T31102] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004
[ 1199.976884][T31102] RBP: 00007ff431c61090 R08: 0000000000000000 R09: 0000000000000000
[ 1199.976902][T31102] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001
[ 1199.976914][T31102] R13: 00007ff430fe6038 R14: 00007ff430fe5fa0 R15: 00007ffc7f5f0738
[ 1199.976945][T31102]  </TASK>
[ 1200.639075][T31123] __nla_validate_parse: 611 callbacks suppressed
[ 1200.639094][T31123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6489'.
[ 1200.657837][T31123] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6489'.
[ 1200.924593][T31126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6491'.
[ 1201.017573][T31126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6491'.
[ 1201.815973][T31149] FAULT_INJECTION: forcing a failure.
[ 1201.815973][T31149] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1201.836461][T31151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6495'.
[ 1201.846367][T31151] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1201.858547][T31151] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1201.860542][T31150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6496'.
[ 1201.907862][T31151] batadv0 (unregistering): left promiscuous mode
[ 1201.923883][T31149] CPU: 0 UID: 0 PID: 31149 Comm: syz.3.6497 Not tainted syzkaller #0 PREEMPT(full) 
[ 1201.923911][T31149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1201.923924][T31149] Call Trace:
[ 1201.923932][T31149]  <TASK>
[ 1201.923941][T31149]  dump_stack_lvl+0xe8/0x150
[ 1201.923973][T31149]  should_fail_ex+0x414/0x560
[ 1201.924005][T31149]  _copy_from_user+0x2d/0xb0
[ 1201.924027][T31149]  restore_altstack+0x9d/0x4b0
[ 1201.924047][T31149]  ? cgroup1_freezing+0x20/0x350
[ 1201.924070][T31149]  ? cgroup1_freezing+0x29a/0x350
[ 1201.924091][T31149]  ? __pfx_restore_altstack+0x10/0x10
[ 1201.924123][T31149]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1201.924156][T31149]  __ia32_sys_rt_sigreturn+0x281/0x860
[ 1201.924193][T31149]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[ 1201.924218][T31149]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1201.924247][T31149]  ? signal_setup_done+0x2cf/0x3b0
[ 1201.924272][T31149]  ? arch_do_signal_or_restart+0x465/0x7a0
[ 1201.924306][T31149]  ? __task_pid_nr_ns+0x28/0x490
[ 1201.924342][T31149]  ? __task_pid_nr_ns+0x28/0x490
[ 1201.924379][T31149]  do_syscall_64+0xec/0xf80
[ 1201.924413][T31149]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1201.924432][T31149]  ? trace_irq_disable+0x37/0x100
[ 1201.924457][T31149]  ? clear_bhb_loop+0x60/0xb0
[ 1201.924481][T31149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1201.924499][T31149] RIP: 0033:0x7f20fa52b829
[ 1201.924525][T31149] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[ 1201.924543][T31149] RSP: 002b:00007f20fb4d7a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[ 1201.924565][T31149] RAX: ffffffffffffffda RBX: 00007f20fa7e5fa0 RCX: 00007f20fa52b829
[ 1201.924581][T31149] RDX: 00007f20fb4d7a80 RSI: 00007f20fb4d7bb0 RDI: 0000000000000021
[ 1201.924595][T31149] RBP: 00007f20fb4d8090 R08: 0000000000000000 R09: 0000000000000000
[ 1201.924609][T31149] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[ 1201.924621][T31149] R13: 00007f20fa7e6038 R14: 00007f20fa7e5fa0 R15: 00007ffccaaafed8
[ 1201.924654][T31149]  </TASK>
[ 1201.986220][T31150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6496'.
[ 1202.145578][T31150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6496'.
[ 1202.154862][T31150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6496'.
[ 1202.321326][T31162] syzkaller0: entered promiscuous mode
[ 1202.334138][T31162] syzkaller0: entered allmulticast mode
[ 1202.435004][T31167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6501'.
[ 1202.531279][T31177] FAULT_INJECTION: forcing a failure.
[ 1202.531279][T31177] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1202.558865][T31177] CPU: 1 UID: 0 PID: 31177 Comm: syz.4.6504 Not tainted syzkaller #0 PREEMPT(full) 
[ 1202.558894][T31177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1202.558907][T31177] Call Trace:
[ 1202.558916][T31177]  <TASK>
[ 1202.558926][T31177]  dump_stack_lvl+0xe8/0x150
[ 1202.558956][T31177]  should_fail_ex+0x414/0x560
[ 1202.558995][T31177]  prepare_alloc_pages+0x22b/0x650
[ 1202.559028][T31177]  __alloc_frozen_pages_noprof+0x123/0x370
[ 1202.559051][T31177]  ? skb_trim+0x83/0x1a0
[ 1202.559089][T31177]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1202.559121][T31177]  ? policy_nodemask+0x27c/0x720
[ 1202.559146][T31177]  alloc_pages_mpol+0x232/0x4a0
[ 1202.559172][T31177]  vma_alloc_folio_noprof+0xe4/0x200
[ 1202.559196][T31177]  ? __lock_acquire+0x6b6/0x2cf0
[ 1202.559217][T31177]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1202.559246][T31177]  ? ___pte_offset_map+0x29/0x240
[ 1202.559278][T31177]  folio_prealloc+0x30/0x180
[ 1202.559310][T31177]  do_pte_missing+0x14e8/0x3330
[ 1202.559414][T31177]  handle_mm_fault+0x1b26/0x32b0
[ 1202.559464][T31177]  ? handle_mm_fault+0xdb/0x32b0
[ 1202.559502][T31177]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1202.559544][T31177]  ? __lock_acquire+0x6b6/0x2cf0
[ 1202.559579][T31177]  ? lock_mm_and_find_vma+0x9c/0x300
[ 1202.559601][T31177]  do_user_addr_fault+0x764/0x1380
[ 1202.559639][T31177]  exc_page_fault+0x71/0xd0
[ 1202.559663][T31177]  asm_exc_page_fault+0x26/0x30
[ 1202.559683][T31177] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 1202.559710][T31177] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 1202.559728][T31177] RSP: 0018:ffffc9001bc074d8 EFLAGS: 00050202
[ 1202.559747][T31177] RAX: ffff88808a5c8001 RBX: ffff88808a5c83e1 RCX: 0000000000000157
[ 1202.559763][T31177] RDX: 0000000000000000 RSI: ffff88808a5c8421 RDI: 0000200000001000
[ 1202.559777][T31177] RBP: ffffc9001bc07650 R08: ffff88808a5c8577 R09: 1ffff110114b90ae
[ 1202.559793][T31177] R10: dffffc0000000000 R11: ffffed10114b90af R12: dffffc0000000000
[ 1202.559809][T31177] R13: 0000000000000197 R14: 00007ffffffff000 R15: 0000200000001157
[ 1202.559839][T31177]  _copy_to_iter+0x60a/0x1790
[ 1202.559872][T31177]  ? __pfx__copy_to_iter+0x10/0x10
[ 1202.559892][T31177]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1202.559919][T31177]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1202.559939][T31177]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1202.559968][T31177]  ? __skb_try_recv_datagram+0x3d5/0x4d0
[ 1202.560000][T31177]  __skb_datagram_iter+0xf8/0x990
[ 1202.560027][T31177]  ? __pfx_simple_copy_to_iter+0x10/0x10
[ 1202.560060][T31177]  skb_copy_datagram_iter+0xb5/0x210
[ 1202.560090][T31177]  netlink_recvmsg+0x2ab/0xa30
[ 1202.560125][T31177]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1202.560154][T31177]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1202.560182][T31177]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 1202.560200][T31177]  ? security_socket_recvmsg+0x7e/0x2e0
[ 1202.560229][T31177]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1202.560256][T31177]  sock_recvmsg+0x22c/0x270
[ 1202.560290][T31177]  ____sys_recvmsg+0x1c9/0x460
[ 1202.560319][T31177]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1202.560355][T31177]  ? import_iovec+0x74/0xa0
[ 1202.560382][T31177]  ___sys_recvmsg+0x1b5/0x510
[ 1202.560411][T31177]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1202.560441][T31177]  ? __fget_files+0x2a/0x420
[ 1202.560483][T31177]  ? __fget_files+0x3a0/0x420
[ 1202.560518][T31177]  do_recvmmsg+0x307/0x770
[ 1202.560563][T31177]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1202.560602][T31177]  ? _copy_from_user+0x94/0xb0
[ 1202.560642][T31177]  __x64_sys_recvmmsg+0x1af/0x240
[ 1202.560671][T31177]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1202.560707][T31177]  do_syscall_64+0xec/0xf80
[ 1202.560727][T31177]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1202.560744][T31177]  ? trace_irq_disable+0x37/0x100
[ 1202.560767][T31177]  ? clear_bhb_loop+0x60/0xb0
[ 1202.560791][T31177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1202.560812][T31177] RIP: 0033:0x7f7c16f8f749
[ 1202.560830][T31177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1202.560846][T31177] RSP: 002b:00007f7c17d77038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1202.560864][T31177] RAX: ffffffffffffffda RBX: 00007f7c171e5fa0 RCX: 00007f7c16f8f749
[ 1202.560879][T31177] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[ 1202.560892][T31177] RBP: 00007f7c17d77090 R08: 0000200000003700 R09: 0000000000000000
[ 1202.560903][T31177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1202.560915][T31177] R13: 00007f7c171e6038 R14: 00007f7c171e5fa0 R15: 00007ffe1b82c008
[ 1202.560946][T31177]  </TASK>
[ 1203.048433][T31181] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1204.756128][T31230] pimreg1: tun_chr_ioctl cmd 1074025677
[ 1204.762049][T31230] pimreg1: linktype set to 804
[ 1204.769405][T31230] pimreg1: tun_chr_ioctl cmd 2147767506
[ 1204.948968][T31240] FAULT_INJECTION: forcing a failure.
[ 1204.948968][T31240] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1204.997100][T31240] CPU: 0 UID: 0 PID: 31240 Comm: syz.1.6522 Not tainted syzkaller #0 PREEMPT(full) 
[ 1204.997129][T31240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1204.997142][T31240] Call Trace:
[ 1204.997151][T31240]  <TASK>
[ 1204.997161][T31240]  dump_stack_lvl+0xe8/0x150
[ 1204.997191][T31240]  should_fail_ex+0x414/0x560
[ 1204.997227][T31240]  _copy_from_iter+0x1cd/0x1630
[ 1204.997261][T31240]  ? __pfx__copy_from_iter+0x10/0x10
[ 1204.997282][T31240]  ? __build_skb_around+0x22d/0x3c0
[ 1204.997310][T31240]  ? __alloc_skb+0x198/0x3a0
[ 1204.997330][T31240]  ? netlink_sendmsg+0x642/0xb30
[ 1204.997354][T31240]  ? skb_put+0x11b/0x210
[ 1204.997380][T31240]  netlink_sendmsg+0x6b2/0xb30
[ 1204.997416][T31240]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1204.997446][T31240]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1204.997474][T31240]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1204.997493][T31240]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1204.997520][T31240]  __sock_sendmsg+0x21c/0x270
[ 1204.997553][T31240]  ____sys_sendmsg+0x505/0x820
[ 1204.997583][T31240]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1204.997617][T31240]  ? import_iovec+0x74/0xa0
[ 1204.997644][T31240]  ___sys_sendmsg+0x21f/0x2a0
[ 1204.997671][T31240]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1204.997730][T31240]  ? __fget_files+0x2a/0x420
[ 1204.997754][T31240]  ? __fget_files+0x3a0/0x420
[ 1204.997789][T31240]  __x64_sys_sendmsg+0x19b/0x260
[ 1204.997815][T31240]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1204.997849][T31240]  ? __pfx_ksys_write+0x10/0x10
[ 1204.997881][T31240]  do_syscall_64+0xec/0xf80
[ 1204.997902][T31240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1204.997922][T31240]  ? trace_irq_disable+0x37/0x100
[ 1204.997947][T31240]  ? clear_bhb_loop+0x60/0xb0
[ 1204.997971][T31240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1204.997991][T31240] RIP: 0033:0x7f9667b8f749
[ 1204.998009][T31240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1204.998027][T31240] RSP: 002b:00007f966897d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1204.998048][T31240] RAX: ffffffffffffffda RBX: 00007f9667de5fa0 RCX: 00007f9667b8f749
[ 1204.998064][T31240] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003
[ 1204.998078][T31240] RBP: 00007f966897d090 R08: 0000000000000000 R09: 0000000000000000
[ 1204.998092][T31240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1204.998108][T31240] R13: 00007f9667de6038 R14: 00007f9667de5fa0 R15: 00007ffe42ddcdd8
[ 1204.998141][T31240]  </TASK>
[ 1205.286488][T31245] syzkaller0: left promiscuous mode
[ 1205.291733][T31245] syzkaller0: left allmulticast mode
[ 1205.738643][T31278] tipc: Resetting bearer <ib:caif0>
[ 1206.132937][T31278] tipc: Resetting bearer <eth:vlan0>
[ 1206.576450][T31298] __nla_validate_parse: 8 callbacks suppressed
[ 1206.576515][T31298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6534'.
[ 1206.595692][T31298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6534'.
[ 1206.605105][T31298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6534'.
[ 1206.614359][T31298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6534'.
[ 1206.623618][T31298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6534'.
[ 1206.635274][T31298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6534'.
[ 1206.651310][T31298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6534'.
[ 1206.660879][T31298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6534'.
[ 1206.670129][T31298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6534'.
[ 1206.684384][T31298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6534'.
[ 1207.476059][T31345] FAULT_INJECTION: forcing a failure.
[ 1207.476059][T31345] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1207.529441][T31345] CPU: 0 UID: 0 PID: 31345 Comm: syz.0.6544 Not tainted syzkaller #0 PREEMPT(full) 
[ 1207.529469][T31345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1207.529481][T31345] Call Trace:
[ 1207.529489][T31345]  <TASK>
[ 1207.529498][T31345]  dump_stack_lvl+0xe8/0x150
[ 1207.529528][T31345]  should_fail_ex+0x414/0x560
[ 1207.529562][T31345]  prepare_alloc_pages+0x22b/0x650
[ 1207.529592][T31345]  __alloc_frozen_pages_noprof+0x123/0x370
[ 1207.529617][T31345]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1207.529649][T31345]  ? policy_nodemask+0x27c/0x720
[ 1207.529678][T31345]  alloc_pages_mpol+0x232/0x4a0
[ 1207.529707][T31345]  alloc_pages_noprof+0xa9/0x190
[ 1207.529733][T31345]  __pud_alloc+0x3a/0x470
[ 1207.529776][T31345]  handle_mm_fault+0x1f7a/0x32b0
[ 1207.529811][T31345]  ? mt_find+0x15c/0x5e0
[ 1207.529833][T31345]  ? __pfx_mt_find+0x10/0x10
[ 1207.529855][T31345]  ? handle_mm_fault+0xdb/0x32b0
[ 1207.529892][T31345]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1207.529934][T31345]  ? __lock_acquire+0x6b6/0x2cf0
[ 1207.529961][T31345]  ? lock_mm_and_find_vma+0x9c/0x300
[ 1207.529982][T31345]  do_user_addr_fault+0x764/0x1380
[ 1207.530019][T31345]  exc_page_fault+0x71/0xd0
[ 1207.530041][T31345]  asm_exc_page_fault+0x26/0x30
[ 1207.530060][T31345] RIP: 0010:rep_movs_alternative+0x30/0x90
[ 1207.530087][T31345] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[ 1207.530105][T31345] RSP: 0018:ffffc9001c3cfa18 EFLAGS: 00050206
[ 1207.530124][T31345] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038
[ 1207.530139][T31345] RDX: 0000000000000001 RSI: 00002000000055c0 RDI: ffffc9001c3cfaa0
[ 1207.530153][T31345] RBP: ffffc9001c3cfc30 R08: ffffc9001c3cfad7 R09: 1ffff92003879f5a
[ 1207.530168][T31345] R10: dffffc0000000000 R11: fffff52003879f5b R12: 0000000000000300
[ 1207.530183][T31345] R13: dffffc0000000000 R14: ffffc9001c3cfaa0 R15: 00002000000055c0
[ 1207.530215][T31345]  _copy_from_user+0x7a/0xb0
[ 1207.530240][T31345]  ___sys_recvmsg+0x12e/0x510
[ 1207.530273][T31345]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1207.530302][T31345]  ? __fget_files+0x2a/0x420
[ 1207.530337][T31345]  ? __fget_files+0x3a0/0x420
[ 1207.530365][T31345]  do_recvmmsg+0x307/0x770
[ 1207.530390][T31345]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1207.530417][T31345]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1207.530456][T31345]  __x64_sys_recvmmsg+0x190/0x240
[ 1207.530483][T31345]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1207.530520][T31345]  do_syscall_64+0xec/0xf80
[ 1207.530540][T31345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1207.530559][T31345]  ? trace_irq_disable+0x37/0x100
[ 1207.530584][T31345]  ? clear_bhb_loop+0x60/0xb0
[ 1207.530608][T31345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1207.530627][T31345] RIP: 0033:0x7fb89138f749
[ 1207.530645][T31345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1207.530662][T31345] RSP: 002b:00007fb89230c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1207.530681][T31345] RAX: ffffffffffffffda RBX: 00007fb8915e5fa0 RCX: 00007fb89138f749
[ 1207.530697][T31345] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004
[ 1207.530710][T31345] RBP: 00007fb89230c090 R08: 0000000000000000 R09: 0000000000000000
[ 1207.530723][T31345] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001
[ 1207.530735][T31345] R13: 00007fb8915e6038 R14: 00007fb8915e5fa0 R15: 00007fff602a0cc8
[ 1207.530776][T31345]  </TASK>
[ 1210.575786][T31432] veth34: entered allmulticast mode
[ 1211.452603][T31456] netlink: 'syz.4.6578': attribute type 10 has an invalid length.
[ 1211.479275][T31456] netlink: 'syz.4.6578': attribute type 10 has an invalid length.
[ 1212.185958][T31478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1212.485767][T31483] bond11: option mode: invalid value (254)
[ 1212.493902][T31483] bond11 (unregistering): Released all slaves
[ 1212.515674][T31486] __nla_validate_parse: 681 callbacks suppressed
[ 1212.515692][T31486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6586'.
[ 1212.610130][T31490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6589'.
[ 1212.795663][T31495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6588'.
[ 1212.805016][T31495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6588'.
[ 1212.814254][T31495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6588'.
[ 1212.823481][T31495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6588'.
[ 1212.833026][T31495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6588'.
[ 1212.846750][T31495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6588'.
[ 1212.856929][T31495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6588'.
[ 1212.866081][T31495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6588'.
[ 1213.564721][T31524] FAULT_INJECTION: forcing a failure.
[ 1213.564721][T31524] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1213.578679][T31524] CPU: 0 UID: 0 PID: 31524 Comm: syz.1.6597 Not tainted syzkaller #0 PREEMPT(full) 
[ 1213.578706][T31524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1213.578719][T31524] Call Trace:
[ 1213.578727][T31524]  <TASK>
[ 1213.578736][T31524]  dump_stack_lvl+0xe8/0x150
[ 1213.578768][T31524]  should_fail_ex+0x414/0x560
[ 1213.578804][T31524]  _copy_from_user+0x2d/0xb0
[ 1213.578828][T31524]  ___sys_sendmsg+0x158/0x2a0
[ 1213.578854][T31524]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1213.578911][T31524]  ? __fget_files+0x2a/0x420
[ 1213.578933][T31524]  ? __fget_files+0x3a0/0x420
[ 1213.578968][T31524]  __x64_sys_sendmsg+0x19b/0x260
[ 1213.578991][T31524]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1213.579024][T31524]  ? __pfx_ksys_write+0x10/0x10
[ 1213.579054][T31524]  do_syscall_64+0xec/0xf80
[ 1213.579075][T31524]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1213.579092][T31524]  ? trace_irq_disable+0x37/0x100
[ 1213.579114][T31524]  ? clear_bhb_loop+0x60/0xb0
[ 1213.579138][T31524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1213.579155][T31524] RIP: 0033:0x7f9667b8f749
[ 1213.579173][T31524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1213.579190][T31524] RSP: 002b:00007f966895c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1213.579213][T31524] RAX: ffffffffffffffda RBX: 00007f9667de6090 RCX: 00007f9667b8f749
[ 1213.579229][T31524] RDX: 0000000000000001 RSI: 0000200000002ac0 RDI: 0000000000000006
[ 1213.579242][T31524] RBP: 00007f966895c090 R08: 0000000000000000 R09: 0000000000000000
[ 1213.579255][T31524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1213.579267][T31524] R13: 00007f9667de6128 R14: 00007f9667de6090 R15: 00007ffe42ddcdd8
[ 1213.579298][T31524]  </TASK>
[ 1214.305889][T31564] FAULT_INJECTION: forcing a failure.
[ 1214.305889][T31564] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1214.323517][T31564] CPU: 0 UID: 0 PID: 31564 Comm: syz.0.6606 Not tainted syzkaller #0 PREEMPT(full) 
[ 1214.323544][T31564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1214.323556][T31564] Call Trace:
[ 1214.323564][T31564]  <TASK>
[ 1214.323572][T31564]  dump_stack_lvl+0xe8/0x150
[ 1214.323602][T31564]  should_fail_ex+0x414/0x560
[ 1214.323636][T31564]  _copy_from_user+0x2d/0xb0
[ 1214.323660][T31564]  __ia32_sys_rt_sigreturn+0x314/0x860
[ 1214.323698][T31564]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[ 1214.323724][T31564]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1214.323774][T31564]  ? __task_pid_nr_ns+0x28/0x490
[ 1214.323807][T31564]  do_syscall_64+0xec/0xf80
[ 1214.323825][T31564]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1214.323841][T31564]  ? trace_irq_disable+0x37/0x100
[ 1214.323862][T31564]  ? clear_bhb_loop+0x60/0xb0
[ 1214.323885][T31564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1214.323901][T31564] RIP: 0033:0x7fb89132b829
[ 1214.323917][T31564] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[ 1214.323933][T31564] RSP: 002b:00007fb89230ba80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[ 1214.323951][T31564] RAX: ffffffffffffffda RBX: 00007fb8915e5fa0 RCX: 00007fb89132b829
[ 1214.323969][T31564] RDX: 00007fb89230ba80 RSI: 00007fb89230bbb0 RDI: 0000000000000021
[ 1214.323980][T31564] RBP: 00007fb89230c090 R08: 0000000000000000 R09: 0000000000000000
[ 1214.323991][T31564] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[ 1214.324001][T31564] R13: 00007fb8915e6038 R14: 00007fb8915e5fa0 R15: 00007fff602a0cc8
[ 1214.324030][T31564]  </TASK>
[ 1214.765797][T31592] netlink: 'syz.4.6617': attribute type 12 has an invalid length.
[ 1215.215069][T31606] bridge26: port 1(veth39) entered blocking state
[ 1215.221725][T31606] bridge26: port 1(veth39) entered disabled state
[ 1215.229168][T31606] veth39: entered allmulticast mode
[ 1215.235842][T31606] veth39: entered promiscuous mode
[ 1215.245458][T31606] veth0_to_bond: left allmulticast mode
[ 1215.251191][T31606] veth0_to_bond: left promiscuous mode
[ 1215.257203][T31606] bridge25: port 2(veth0_to_bond) entered disabled state
[ 1215.269852][T31606] bridge26: port 2(veth0_to_bond) entered blocking state
[ 1215.277932][T31606] bridge26: port 2(veth0_to_bond) entered disabled state
[ 1215.285280][T31606] veth0_to_bond: entered allmulticast mode
[ 1215.292304][T31606] veth0_to_bond: entered promiscuous mode
[ 1215.310435][T31607] bridge26: port 3(veth41) entered blocking state
[ 1215.317287][T31607] bridge26: port 3(veth41) entered disabled state
[ 1215.324359][T31607] veth41: entered allmulticast mode
[ 1215.330888][T31607] veth41: entered promiscuous mode
[ 1215.646116][T31625] netlink: 'syz.2.6628': attribute type 2 has an invalid length.
[ 1215.660740][T31625] netlink: 'syz.2.6628': attribute type 2 has an invalid length.
[ 1215.675160][T31625] !: left promiscuous mode
[ 1215.739342][T23345] block nbd27: Receive control failed (result -32)
[ 1217.112716][T31680] FAULT_INJECTION: forcing a failure.
[ 1217.112716][T31680] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1217.129479][T31680] CPU: 1 UID: 0 PID: 31680 Comm: syz.4.6643 Not tainted syzkaller #0 PREEMPT(full) 
[ 1217.129508][T31680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1217.129520][T31680] Call Trace:
[ 1217.129528][T31680]  <TASK>
[ 1217.129538][T31680]  dump_stack_lvl+0xe8/0x150
[ 1217.129565][T31680]  should_fail_ex+0x414/0x560
[ 1217.129593][T31680]  _copy_to_user+0x31/0xb0
[ 1217.129614][T31680]  simple_read_from_buffer+0xe1/0x170
[ 1217.129635][T31680]  proc_fail_nth_read+0x1b3/0x220
[ 1217.129655][T31680]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1217.129674][T31680]  ? rw_verify_area+0x2a6/0x4d0
[ 1217.129698][T31680]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1217.129715][T31680]  vfs_read+0x200/0xa30
[ 1217.129728][T31680]  ? fdget_pos+0x247/0x320
[ 1217.129760][T31680]  ? __pfx___mutex_lock+0x10/0x10
[ 1217.129778][T31680]  ? __pfx_vfs_read+0x10/0x10
[ 1217.129794][T31680]  ? __fget_files+0x2a/0x420
[ 1217.129820][T31680]  ? __fget_files+0x3a0/0x420
[ 1217.129841][T31680]  ? __fget_files+0x2a/0x420
[ 1217.129872][T31680]  ksys_read+0x145/0x250
[ 1217.129891][T31680]  ? __pfx_ksys_read+0x10/0x10
[ 1217.129916][T31680]  do_syscall_64+0xec/0xf80
[ 1217.129934][T31680]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1217.129952][T31680]  ? clear_bhb_loop+0x60/0xb0
[ 1217.129975][T31680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1217.129992][T31680] RIP: 0033:0x7f7c16f8e15c
[ 1217.130008][T31680] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1217.130027][T31680] RSP: 002b:00007f7c17d56030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1217.130049][T31680] RAX: ffffffffffffffda RBX: 00007f7c171e6090 RCX: 00007f7c16f8e15c
[ 1217.130063][T31680] RDX: 000000000000000f RSI: 00007f7c17d560a0 RDI: 0000000000000008
[ 1217.130073][T31680] RBP: 00007f7c17d56090 R08: 0000000000000000 R09: 0000000000000000
[ 1217.130084][T31680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1217.130095][T31680] R13: 00007f7c171e6128 R14: 00007f7c171e6090 R15: 00007ffe1b82c008
[ 1217.130125][T31680]  </TASK>
[ 1217.528460][T31699] __nla_validate_parse: 675 callbacks suppressed
[ 1217.528480][T31699] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6652'.
[ 1217.560608][T31701] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6651'.
[ 1217.615219][T31707] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6653'.
[ 1217.647356][T31696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6649'.
[ 1217.703426][T31696] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6649'.
[ 1218.016984][T31722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6656'.
[ 1218.028308][T31722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6656'.
[ 1218.040972][T31732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6660'.
[ 1218.051586][T31732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6660'.
[ 1218.061037][T31732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6660'.
[ 1218.147894][T31738] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[ 1218.663395][T31764] nbd: nbd2 already in use
[ 1218.707484][T31764] netlink: 'syz.2.6672': attribute type 1 has an invalid length.
[ 1218.833842][T31772] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1218.886876][T31774] veth29: entered promiscuous mode
[ 1218.898830][T31774] bond8: (slave veth29): Enslaving as a backup interface with a down link
[ 1218.932418][T31764] netlink: 'syz.2.6672': attribute type 12 has an invalid length.
[ 1219.080784][T31783] x_tables: duplicate underflow at hook 2
[ 1219.096796][T31787] FAULT_INJECTION: forcing a failure.
[ 1219.096796][T31787] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1219.189109][T31787] CPU: 1 UID: 0 PID: 31787 Comm: syz.2.6680 Not tainted syzkaller #0 PREEMPT(full) 
[ 1219.189137][T31787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1219.189150][T31787] Call Trace:
[ 1219.189158][T31787]  <TASK>
[ 1219.189167][T31787]  dump_stack_lvl+0xe8/0x150
[ 1219.189197][T31787]  should_fail_ex+0x414/0x560
[ 1219.189231][T31787]  prepare_alloc_pages+0x22b/0x650
[ 1219.189261][T31787]  __alloc_frozen_pages_noprof+0x123/0x370
[ 1219.189283][T31787]  ? handle_mm_fault+0xe51/0x32b0
[ 1219.189312][T31787]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1219.189333][T31787]  ? do_recvmmsg+0x307/0x770
[ 1219.189367][T31787]  ? policy_nodemask+0x27c/0x720
[ 1219.189394][T31787]  alloc_pages_mpol+0x232/0x4a0
[ 1219.189422][T31787]  alloc_pages_noprof+0xa9/0x190
[ 1219.189446][T31787]  pte_alloc_one+0x23/0x370
[ 1219.189468][T31787]  ? __pte_alloc+0x1d/0x1a0
[ 1219.189490][T31787]  __pte_alloc+0x25/0x1a0
[ 1219.189507][T31787]  ? do_raw_spin_lock+0x121/0x290
[ 1219.189536][T31787]  do_pte_missing+0x2b2f/0x3330
[ 1219.189566][T31787]  ? do_raw_spin_unlock+0x122/0x240
[ 1219.189595][T31787]  ? _raw_spin_unlock+0x28/0x50
[ 1219.189634][T31787]  handle_mm_fault+0x1b26/0x32b0
[ 1219.189673][T31787]  ? handle_mm_fault+0xdb/0x32b0
[ 1219.189711][T31787]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1219.189752][T31787]  ? __lock_acquire+0x6b6/0x2cf0
[ 1219.189780][T31787]  ? lock_mm_and_find_vma+0x9c/0x300
[ 1219.189800][T31787]  do_user_addr_fault+0x764/0x1380
[ 1219.189839][T31787]  exc_page_fault+0x71/0xd0
[ 1219.189861][T31787]  asm_exc_page_fault+0x26/0x30
[ 1219.189879][T31787] RIP: 0010:rep_movs_alternative+0x30/0x90
[ 1219.189905][T31787] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[ 1219.189923][T31787] RSP: 0018:ffffc9000b5d7a18 EFLAGS: 00050206
[ 1219.189941][T31787] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038
[ 1219.189955][T31787] RDX: 0000000000000001 RSI: 00002000000055c0 RDI: ffffc9000b5d7aa0
[ 1219.189969][T31787] RBP: ffffc9000b5d7c30 R08: ffffc9000b5d7ad7 R09: 1ffff920016baf5a
[ 1219.189985][T31787] R10: dffffc0000000000 R11: fffff520016baf5b R12: 0000000000000300
[ 1219.189999][T31787] R13: dffffc0000000000 R14: ffffc9000b5d7aa0 R15: 00002000000055c0
[ 1219.190031][T31787]  _copy_from_user+0x7a/0xb0
[ 1219.190055][T31787]  ___sys_recvmsg+0x12e/0x510
[ 1219.190078][T31787]  ? trace_irq_disable+0x37/0x100
[ 1219.190107][T31787]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1219.190135][T31787]  ? __fget_files+0x2a/0x420
[ 1219.190176][T31787]  ? __fget_files+0x3a0/0x420
[ 1219.190209][T31787]  do_recvmmsg+0x307/0x770
[ 1219.190241][T31787]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1219.190296][T31787]  __x64_sys_recvmmsg+0x190/0x240
[ 1219.190322][T31787]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1219.190347][T31787]  ? rcu_is_watching+0x15/0xb0
[ 1219.190371][T31787]  ? trace_sys_enter+0x25/0xf0
[ 1219.190398][T31787]  do_syscall_64+0xec/0xf80
[ 1219.190418][T31787]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1219.190436][T31787]  ? trace_irq_disable+0x37/0x100
[ 1219.190459][T31787]  ? clear_bhb_loop+0x60/0xb0
[ 1219.190482][T31787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1219.190500][T31787] RIP: 0033:0x7ff430d8f749
[ 1219.190515][T31787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1219.190531][T31787] RSP: 002b:00007ff431c61038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1219.190556][T31787] RAX: ffffffffffffffda RBX: 00007ff430fe5fa0 RCX: 00007ff430d8f749
[ 1219.190571][T31787] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004
[ 1219.190584][T31787] RBP: 00007ff431c61090 R08: 0000000000000000 R09: 0000000000000000
[ 1219.190597][T31787] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001
[ 1219.190609][T31787] R13: 00007ff430fe6038 R14: 00007ff430fe5fa0 R15: 00007ffc7f5f0738
[ 1219.190640][T31787]  </TASK>
[ 1220.079242][T31825] FAULT_INJECTION: forcing a failure.
[ 1220.079242][T31825] name failslab, interval 1, probability 0, space 0, times 0
[ 1220.110784][T31825] CPU: 1 UID: 0 PID: 31825 Comm: syz.3.6687 Not tainted syzkaller #0 PREEMPT(full) 
[ 1220.110813][T31825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1220.110825][T31825] Call Trace:
[ 1220.110834][T31825]  <TASK>
[ 1220.110842][T31825]  dump_stack_lvl+0xe8/0x150
[ 1220.110871][T31825]  should_fail_ex+0x414/0x560
[ 1220.110907][T31825]  should_failslab+0xa8/0x100
[ 1220.110932][T31825]  __kvmalloc_node_noprof+0x175/0x920
[ 1220.110955][T31825]  ? nf_tables_newset+0x1330/0x2540
[ 1220.110976][T31825]  ? nft_set_lookup+0x128/0x150
[ 1220.110997][T31825]  ? nft_rhash_estimate+0x8f/0xa0
[ 1220.111027][T31825]  nf_tables_newset+0x1330/0x2540
[ 1220.111054][T31825]  ? __pfx_nf_tables_newset+0x10/0x10
[ 1220.111093][T31825]  ? __nla_parse+0x40/0x60
[ 1220.111120][T31825]  nfnetlink_rcv+0x11d9/0x2590
[ 1220.111176][T31825]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1220.111245][T31825]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1220.111272][T31825]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1220.111316][T31825]  netlink_unicast+0x82f/0x9e0
[ 1220.111345][T31825]  ? __pfx_netlink_unicast+0x10/0x10
[ 1220.111367][T31825]  ? __alloc_skb+0x198/0x3a0
[ 1220.111387][T31825]  ? netlink_sendmsg+0x642/0xb30
[ 1220.111410][T31825]  ? skb_put+0x11b/0x210
[ 1220.111435][T31825]  netlink_sendmsg+0x805/0xb30
[ 1220.111471][T31825]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1220.111500][T31825]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1220.111525][T31825]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1220.111543][T31825]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1220.111571][T31825]  __sock_sendmsg+0x21c/0x270
[ 1220.111601][T31825]  ____sys_sendmsg+0x505/0x820
[ 1220.111630][T31825]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1220.111662][T31825]  ? import_iovec+0x74/0xa0
[ 1220.111698][T31825]  ___sys_sendmsg+0x21f/0x2a0
[ 1220.111725][T31825]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1220.111787][T31825]  ? __fget_files+0x2a/0x420
[ 1220.111810][T31825]  ? __fget_files+0x3a0/0x420
[ 1220.111845][T31825]  __x64_sys_sendmsg+0x19b/0x260
[ 1220.111872][T31825]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1220.111911][T31825]  ? __pfx_ksys_write+0x10/0x10
[ 1220.111943][T31825]  do_syscall_64+0xec/0xf80
[ 1220.111963][T31825]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1220.111980][T31825]  ? trace_irq_disable+0x37/0x100
[ 1220.112002][T31825]  ? clear_bhb_loop+0x60/0xb0
[ 1220.112024][T31825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1220.112043][T31825] RIP: 0033:0x7f20fa58f749
[ 1220.112060][T31825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1220.112078][T31825] RSP: 002b:00007f20fb496038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1220.112098][T31825] RAX: ffffffffffffffda RBX: 00007f20fa7e6180 RCX: 00007f20fa58f749
[ 1220.112113][T31825] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000008
[ 1220.112127][T31825] RBP: 00007f20fb496090 R08: 0000000000000000 R09: 0000000000000000
[ 1220.112140][T31825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1220.112153][T31825] R13: 00007f20fa7e6218 R14: 00007f20fa7e6180 R15: 00007ffccaaafed8
[ 1220.112187][T31825]  </TASK>
[ 1220.706489][T31843] FAULT_INJECTION: forcing a failure.
[ 1220.706489][T31843] name failslab, interval 1, probability 0, space 0, times 0
[ 1220.734582][T31847] FAULT_INJECTION: forcing a failure.
[ 1220.734582][T31847] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1220.750810][T31843] CPU: 0 UID: 0 PID: 31843 Comm: syz.1.6695 Not tainted syzkaller #0 PREEMPT(full) 
[ 1220.750837][T31843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1220.750850][T31843] Call Trace:
[ 1220.750859][T31843]  <TASK>
[ 1220.750868][T31843]  dump_stack_lvl+0xe8/0x150
[ 1220.750900][T31843]  should_fail_ex+0x414/0x560
[ 1220.750935][T31843]  should_failslab+0xa8/0x100
[ 1220.750962][T31843]  __kmalloc_node_track_caller_noprof+0xe2/0x820
[ 1220.750983][T31843]  ? kasprintf+0xd4/0x120
[ 1220.751011][T31843]  kvasprintf+0xdc/0x190
[ 1220.751033][T31843]  ? nf_tables_newset+0x136f/0x2540
[ 1220.751051][T31843]  ? nfnetlink_rcv+0x11d9/0x2590
[ 1220.751062][T31843]  ? netlink_unicast+0x82f/0x9e0
[ 1220.751075][T31843]  ? __pfx_kvasprintf+0x10/0x10
[ 1220.751087][T31843]  ? __x64_sys_sendmsg+0x19b/0x260
[ 1220.751113][T31843]  kasprintf+0xd4/0x120
[ 1220.751129][T31843]  ? __pfx_kasprintf+0x10/0x10
[ 1220.751149][T31843]  nf_tables_set_alloc_name+0x109/0x720
[ 1220.751165][T31843]  ? rcu_is_watching+0x15/0xb0
[ 1220.751179][T31843]  ? trace_kmalloc+0x1f/0xb0
[ 1220.751188][T31843]  ? __pfx_nf_tables_set_alloc_name+0x10/0x10
[ 1220.751200][T31843]  ? nla_strdup+0xb8/0x140
[ 1220.751217][T31843]  nf_tables_newset+0x1390/0x2540
[ 1220.751235][T31843]  ? __pfx_nf_tables_newset+0x10/0x10
[ 1220.751256][T31843]  ? __nla_parse+0x40/0x60
[ 1220.751269][T31843]  nfnetlink_rcv+0x11d9/0x2590
[ 1220.751299][T31843]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1220.751333][T31843]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1220.751347][T31843]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1220.751376][T31843]  netlink_unicast+0x82f/0x9e0
[ 1220.751393][T31843]  ? __pfx_netlink_unicast+0x10/0x10
[ 1220.751404][T31843]  ? __alloc_skb+0x198/0x3a0
[ 1220.751416][T31843]  ? netlink_sendmsg+0x642/0xb30
[ 1220.751428][T31843]  ? skb_put+0x11b/0x210
[ 1220.751441][T31843]  netlink_sendmsg+0x805/0xb30
[ 1220.751460][T31843]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1220.751475][T31843]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1220.751491][T31843]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1220.751501][T31843]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1220.751515][T31843]  __sock_sendmsg+0x21c/0x270
[ 1220.751532][T31843]  ____sys_sendmsg+0x505/0x820
[ 1220.751548][T31843]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1220.751566][T31843]  ? import_iovec+0x74/0xa0
[ 1220.751580][T31843]  ___sys_sendmsg+0x21f/0x2a0
[ 1220.751594][T31843]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1220.751627][T31843]  ? __fget_files+0x2a/0x420
[ 1220.751640][T31843]  ? __fget_files+0x3a0/0x420
[ 1220.751658][T31843]  __x64_sys_sendmsg+0x19b/0x260
[ 1220.751672][T31843]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1220.751690][T31843]  ? __pfx_ksys_write+0x10/0x10
[ 1220.751707][T31843]  do_syscall_64+0xec/0xf80
[ 1220.751726][T31843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1220.751743][T31843]  ? trace_irq_disable+0x37/0x100
[ 1220.751765][T31843]  ? clear_bhb_loop+0x60/0xb0
[ 1220.751788][T31843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1220.751803][T31843] RIP: 0033:0x7f9667b8f749
[ 1220.751814][T31843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1220.751825][T31843] RSP: 002b:00007f966897d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1220.751840][T31843] RAX: ffffffffffffffda RBX: 00007f9667de5fa0 RCX: 00007f9667b8f749
[ 1220.751848][T31843] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1220.751855][T31843] RBP: 00007f966897d090 R08: 0000000000000000 R09: 0000000000000000
[ 1220.751861][T31843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1220.751868][T31843] R13: 00007f9667de6038 R14: 00007f9667de5fa0 R15: 00007ffe42ddcdd8
[ 1220.751885][T31843]  </TASK>
[ 1220.753639][T31847] CPU: 0 UID: 0 PID: 31847 Comm: syz.0.6697 Not tainted syzkaller #0 PREEMPT(full) 
[ 1220.753665][T31847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1220.753677][T31847] Call Trace:
[ 1220.753685][T31847]  <TASK>
[ 1220.753694][T31847]  dump_stack_lvl+0xe8/0x150
[ 1220.753723][T31847]  should_fail_ex+0x414/0x560
[ 1220.753754][T31847]  _copy_from_user+0x2d/0xb0
[ 1220.753769][T31847]  ___sys_sendmsg+0x158/0x2a0
[ 1220.753783][T31847]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1220.753814][T31847]  ? __fget_files+0x2a/0x420
[ 1220.753826][T31847]  ? __fget_files+0x3a0/0x420
[ 1220.753844][T31847]  __x64_sys_sendmsg+0x19b/0x260
[ 1220.753866][T31847]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1220.753884][T31847]  ? __task_pid_nr_ns+0x28/0x490
[ 1220.753903][T31847]  do_syscall_64+0xec/0xf80
[ 1220.753918][T31847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1220.753935][T31847]  ? trace_irq_disable+0x37/0x100
[ 1220.753962][T31847]  ? clear_bhb_loop+0x60/0xb0
[ 1220.753982][T31847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1220.754001][T31847] RIP: 0033:0x7fb89138f749
[ 1220.754016][T31847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1220.754036][T31847] RSP: 002b:00007fb89230c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1220.754055][T31847] RAX: ffffffffffffffda RBX: 00007fb8915e5fa0 RCX: 00007fb89138f749
[ 1220.754070][T31847] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1220.754083][T31847] RBP: 00007fb89230c090 R08: 0000000000000000 R09: 0000000000000000
[ 1220.754096][T31847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1220.754108][T31847] R13: 00007fb8915e6038 R14: 00007fb8915e5fa0 R15: 00007fff602a0cc8
[ 1220.754139][T31847]  </TASK>
[ 1221.312026][T23345] block nbd28: Receive control failed (result -32)
[ 1221.902685][T31895] syzkaller0: entered promiscuous mode
[ 1221.908781][T31895] syzkaller0: entered allmulticast mode
[ 1222.708581][T31919] __nla_validate_parse: 20 callbacks suppressed
[ 1222.708602][T31919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6723'.
[ 1222.742676][T31935] xt_hashlimit: size too large, truncated to 1048576
[ 1222.787215][T31938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6728'.
[ 1222.969420][T31946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6727'.
[ 1223.037755][T31952] netlink: 'syz.0.6729': attribute type 1 has an invalid length.
[ 1223.051845][T31952] netlink: 'syz.0.6729': attribute type 3 has an invalid length.
[ 1223.064682][T31952] netlink: 'syz.0.6729': attribute type 1 has an invalid length.
[ 1223.072437][T31952] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6729'.
[ 1223.347115][T23345] block nbd29: Receive control failed (result -22)
[ 1223.845954][T31979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6736'.
[ 1223.934136][T31986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6738'.
[ 1224.069601][T31987] bridge14: port 1(veth17) entered blocking state
[ 1224.105561][T31987] bridge14: port 1(veth17) entered disabled state
[ 1224.112256][T31987] veth17: entered allmulticast mode
[ 1224.134378][T31987] veth17: entered promiscuous mode
[ 1224.158740][T31986] veth0_to_bond: left allmulticast mode
[ 1224.175681][T32000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6743'.
[ 1224.178509][T31986] veth0_to_bond: left promiscuous mode
[ 1224.196991][T32002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6742'.
[ 1224.225125][T31986] bridge12: port 2(veth0_to_bond) entered disabled state
[ 1224.242304][T31986] bridge14: port 2(veth0_to_bond) entered blocking state
[ 1224.253110][T31986] bridge14: port 2(veth0_to_bond) entered disabled state
[ 1224.260966][T31986] veth0_to_bond: entered allmulticast mode
[ 1224.269690][T31986] veth0_to_bond: entered promiscuous mode
[ 1224.316975][T31998] bridge14: port 3(veth19) entered blocking state
[ 1224.325096][T31998] bridge14: port 3(veth19) entered disabled state
[ 1224.331887][T31998] veth19: entered allmulticast mode
[ 1224.348859][T31998] veth19: entered promiscuous mode
[ 1224.387904][T32007] bridge13: port 1(veth17) entered blocking state
[ 1224.396630][T32007] bridge13: port 1(veth17) entered disabled state
[ 1224.404381][T32007] veth17: entered allmulticast mode
[ 1224.411799][T32007] veth17: entered promiscuous mode
[ 1224.425263][T32015] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6746'.
[ 1224.429636][T32008] dvmrp6: entered allmulticast mode
[ 1224.442378][T32015] FAULT_INJECTION: forcing a failure.
[ 1224.442378][T32015] name failslab, interval 1, probability 0, space 0, times 0
[ 1224.466523][T32015] CPU: 1 UID: 0 PID: 32015 Comm: syz.0.6746 Not tainted syzkaller #0 PREEMPT(full) 
[ 1224.466551][T32015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1224.466563][T32015] Call Trace:
[ 1224.466572][T32015]  <TASK>
[ 1224.466580][T32015]  dump_stack_lvl+0xe8/0x150
[ 1224.466610][T32015]  should_fail_ex+0x414/0x560
[ 1224.466646][T32015]  should_failslab+0xa8/0x100
[ 1224.466671][T32015]  __kmalloc_cache_noprof+0x84/0x700
[ 1224.466692][T32015]  ? nfnetlink_rcv+0xf97/0x2590
[ 1224.466721][T32015]  nfnetlink_rcv+0xf97/0x2590
[ 1224.466778][T32015]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1224.466850][T32015]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1224.466878][T32015]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1224.466920][T32015]  netlink_unicast+0x82f/0x9e0
[ 1224.466952][T32015]  ? __pfx_netlink_unicast+0x10/0x10
[ 1224.466975][T32015]  ? __alloc_skb+0x198/0x3a0
[ 1224.466996][T32015]  ? netlink_sendmsg+0x642/0xb30
[ 1224.467018][T32015]  ? skb_put+0x11b/0x210
[ 1224.467048][T32015]  netlink_sendmsg+0x805/0xb30
[ 1224.467081][T32015]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1224.467109][T32015]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1224.467136][T32015]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1224.467155][T32015]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1224.467180][T32015]  __sock_sendmsg+0x21c/0x270
[ 1224.467227][T32015]  ____sys_sendmsg+0x505/0x820
[ 1224.467256][T32015]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1224.467296][T32015]  ? import_iovec+0x74/0xa0
[ 1224.467324][T32015]  ___sys_sendmsg+0x21f/0x2a0
[ 1224.467351][T32015]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1224.467411][T32015]  ? __fget_files+0x2a/0x420
[ 1224.467435][T32015]  ? __fget_files+0x3a0/0x420
[ 1224.467469][T32015]  __x64_sys_sendmsg+0x19b/0x260
[ 1224.467496][T32015]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1224.467530][T32015]  ? __pfx_ksys_write+0x10/0x10
[ 1224.467561][T32015]  do_syscall_64+0xec/0xf80
[ 1224.467583][T32015]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1224.467602][T32015]  ? trace_irq_disable+0x37/0x100
[ 1224.467627][T32015]  ? clear_bhb_loop+0x60/0xb0
[ 1224.467650][T32015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1224.467669][T32015] RIP: 0033:0x7fb89138f749
[ 1224.467687][T32015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1224.467704][T32015] RSP: 002b:00007fb89230c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1224.467726][T32015] RAX: ffffffffffffffda RBX: 00007fb8915e5fa0 RCX: 00007fb89138f749
[ 1224.467741][T32015] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1224.467755][T32015] RBP: 00007fb89230c090 R08: 0000000000000000 R09: 0000000000000000
[ 1224.467767][T32015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1224.467779][T32015] R13: 00007fb8915e6038 R14: 00007fb8915e5fa0 R15: 00007fff602a0cc8
[ 1224.467813][T32015]  </TASK>
[ 1224.782329][T32002] bridge13: port 2(veth19) entered blocking state
[ 1224.789972][T32002] bridge13: port 2(veth19) entered disabled state
[ 1224.797094][T32002] veth19: entered allmulticast mode
[ 1224.805159][T32002] veth19: entered promiscuous mode
[ 1224.823222][T32008] syzkaller0: left promiscuous mode
[ 1224.828708][T32008] syzkaller0: left allmulticast mode
[ 1225.066639][T32030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1225.077555][T32031] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.6750'.
[ 1226.006929][T23345] block nbd30: Receive control failed (result -32)
[ 1226.397640][T32070] netlink: 'syz.2.6761': attribute type 8 has an invalid length.
[ 1227.171308][T32098] sctp: [Deprecated]: syz.0.6765 (pid 32098) Use of int in max_burst socket option.
[ 1227.171308][T32098] Use struct sctp_assoc_value instead
[ 1227.607052][T32118] nbd: must specify at least one socket
[ 1227.657162][T32120] openvswitch: netlink: IP tunnel TTL not specified.
[ 1227.720795][T32123] __nla_validate_parse: 10 callbacks suppressed
[ 1227.720814][T32123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6774'.
[ 1227.936885][T32129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6777'.
[ 1228.096845][T32138] 8021q: VLANs not supported on lo
[ 1228.111530][T32138] bridge27: entered promiscuous mode
[ 1228.121400][T32138] bridge27: entered allmulticast mode
[ 1228.144380][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1228.154123][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1228.162604][T32140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1228.171017][T28004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1228.187591][T32140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6782'.
[ 1228.381478][T32147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6784'.
[ 1228.508363][T32148] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1228.531364][T32148] 8021q: adding VLAN 0 to HW filter on device team0
[ 1228.554749][T32148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1228.680830][T32161] netlink: 308 bytes leftover after parsing attributes in process `syz.2.6788'.
[ 1228.690806][T32161] netlink: 308 bytes leftover after parsing attributes in process `syz.2.6788'.
[ 1228.757430][T32159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6785'.
[ 1228.867848][T32167] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[ 1228.902038][T32169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6790'.
[ 1229.350326][T32199] FAULT_INJECTION: forcing a failure.
[ 1229.350326][T32199] name failslab, interval 1, probability 0, space 0, times 0
[ 1229.364195][T32199] CPU: 1 UID: 0 PID: 32199 Comm: syz.2.6798 Not tainted syzkaller #0 PREEMPT(full) 
[ 1229.364223][T32199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1229.364236][T32199] Call Trace:
[ 1229.364244][T32199]  <TASK>
[ 1229.364252][T32199]  dump_stack_lvl+0xe8/0x150
[ 1229.364283][T32199]  should_fail_ex+0x414/0x560
[ 1229.364319][T32199]  should_failslab+0xa8/0x100
[ 1229.364345][T32199]  __kvmalloc_node_noprof+0x175/0x920
[ 1229.364369][T32199]  ? rhashtable_init_noprof+0x52e/0xa70
[ 1229.364389][T32199]  ? rhashtable_init_noprof+0x12d/0xa70
[ 1229.364416][T32199]  rhashtable_init_noprof+0x52e/0xa70
[ 1229.364443][T32199]  nft_rhash_init+0x10b/0x3a0
[ 1229.364472][T32199]  ? __pfx_nft_rhash_init+0x10/0x10
[ 1229.364499][T32199]  ? __pfx_nft_rhash_key+0x10/0x10
[ 1229.364525][T32199]  ? __pfx_nft_rhash_obj+0x10/0x10
[ 1229.364551][T32199]  ? __pfx_nft_rhash_cmp+0x10/0x10
[ 1229.364580][T32199]  ? nf_tables_newset+0x139b/0x2540
[ 1229.364608][T32199]  nf_tables_newset+0x1c0c/0x2540
[ 1229.364641][T32199]  ? __pfx_nf_tables_newset+0x10/0x10
[ 1229.364682][T32199]  ? __nla_parse+0x40/0x60
[ 1229.364715][T32199]  nfnetlink_rcv+0x11d9/0x2590
[ 1229.364773][T32199]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1229.364839][T32199]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1229.364866][T32199]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1229.364908][T32199]  netlink_unicast+0x82f/0x9e0
[ 1229.364939][T32199]  ? __pfx_netlink_unicast+0x10/0x10
[ 1229.364961][T32199]  ? __alloc_skb+0x198/0x3a0
[ 1229.364982][T32199]  ? netlink_sendmsg+0x642/0xb30
[ 1229.365005][T32199]  ? skb_put+0x11b/0x210
[ 1229.365030][T32199]  netlink_sendmsg+0x805/0xb30
[ 1229.365065][T32199]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1229.365094][T32199]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1229.365121][T32199]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1229.365139][T32199]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1229.365166][T32199]  __sock_sendmsg+0x21c/0x270
[ 1229.365197][T32199]  ____sys_sendmsg+0x505/0x820
[ 1229.365227][T32199]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1229.365261][T32199]  ? import_iovec+0x74/0xa0
[ 1229.365288][T32199]  ___sys_sendmsg+0x21f/0x2a0
[ 1229.365315][T32199]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1229.365374][T32199]  ? __fget_files+0x2a/0x420
[ 1229.365397][T32199]  ? __fget_files+0x3a0/0x420
[ 1229.365432][T32199]  __x64_sys_sendmsg+0x19b/0x260
[ 1229.365458][T32199]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1229.365492][T32199]  ? __pfx_ksys_write+0x10/0x10
[ 1229.365524][T32199]  do_syscall_64+0xec/0xf80
[ 1229.365545][T32199]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1229.365564][T32199]  ? trace_irq_disable+0x37/0x100
[ 1229.365588][T32199]  ? clear_bhb_loop+0x60/0xb0
[ 1229.365612][T32199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1229.365631][T32199] RIP: 0033:0x7ff430d8f749
[ 1229.365651][T32199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1229.365669][T32199] RSP: 002b:00007ff431c1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1229.365691][T32199] RAX: ffffffffffffffda RBX: 00007ff430fe6180 RCX: 00007ff430d8f749
[ 1229.365713][T32199] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000008
[ 1229.365724][T32199] RBP: 00007ff431c1f090 R08: 0000000000000000 R09: 0000000000000000
[ 1229.365737][T32199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1229.365749][T32199] R13: 00007ff430fe6218 R14: 00007ff430fe6180 R15: 00007ffc7f5f0738
[ 1229.365782][T32199]  </TASK>
[ 1229.801856][T32206] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6802'.
[ 1229.825471][T32206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1229.882628][T32210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6803'.
[ 1230.066253][T23345] block nbd31: Receive control failed (result -32)
[ 1230.299305][T32226] IPVS: persistence engine module ip_vs_pe_ not found
[ 1230.447242][T32246] netlink: 'syz.3.6817': attribute type 9 has an invalid length.
[ 1231.086861][T32272] pimreg: entered allmulticast mode
[ 1231.092343][T32274] pimreg: left allmulticast mode
[ 1231.731030][T32299] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1231.769448][T32298] netlink: 'syz.2.6832': attribute type 10 has an invalid length.
[ 1233.759596][T32312] FAULT_INJECTION: forcing a failure.
[ 1233.759596][T32312] name failslab, interval 1, probability 0, space 0, times 0
[ 1233.773428][T32312] CPU: 0 UID: 0 PID: 32312 Comm: syz.1.6839 Not tainted syzkaller #0 PREEMPT(full) 
[ 1233.773457][T32312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1233.773469][T32312] Call Trace:
[ 1233.773478][T32312]  <TASK>
[ 1233.773486][T32312]  dump_stack_lvl+0xe8/0x150
[ 1233.773516][T32312]  should_fail_ex+0x414/0x560
[ 1233.773553][T32312]  should_failslab+0xa8/0x100
[ 1233.773579][T32312]  kmem_cache_alloc_noprof+0x88/0x710
[ 1233.773609][T32312]  ? __anon_vma_prepare+0x117/0x4a0
[ 1233.773633][T32312]  __anon_vma_prepare+0x117/0x4a0
[ 1233.773656][T32312]  do_wp_page+0x3921/0x5810
[ 1233.773691][T32312]  ? ___pte_offset_map+0x29/0x240
[ 1233.773728][T32312]  ? __pfx_do_wp_page+0x10/0x10
[ 1233.773752][T32312]  ? do_raw_spin_lock+0x121/0x290
[ 1233.773782][T32312]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1233.773819][T32312]  handle_mm_fault+0x14c5/0x32b0
[ 1233.773866][T32312]  ? handle_mm_fault+0xdb/0x32b0
[ 1233.773901][T32312]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1233.773962][T32312]  ? ping_recvmsg+0xc79/0x1120
[ 1233.773990][T32312]  ? lock_mm_and_find_vma+0x9c/0x300
[ 1233.774008][T32312]  do_user_addr_fault+0x764/0x1380
[ 1233.774040][T32312]  exc_page_fault+0x71/0xd0
[ 1233.774059][T32312]  asm_exc_page_fault+0x26/0x30
[ 1233.774077][T32312] RIP: 0010:__put_user_nocheck_4+0x3/0x10
[ 1233.774098][T32312] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 d7 6d 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[ 1233.774117][T32312] RSP: 0018:ffffc9001b5cf8b8 EFLAGS: 00050206
[ 1233.774134][T32312] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000055f0
[ 1233.774148][T32312] RDX: ffff88807b2b8000 RSI: 0000000000000300 RDI: 00000000ffffffff
[ 1233.774160][T32312] RBP: ffffc9001b5cfa30 R08: ffffffff8f822377 R09: 1ffffffff1f0446e
[ 1233.774175][T32312] R10: dffffc0000000000 R11: fffffbfff1f0446f R12: 0000000000000300
[ 1233.774189][T32312] R13: dffffc0000000000 R14: 0000000000000000 R15: 00002000000055c0
[ 1233.774232][T32312]  ____sys_recvmsg+0x2ab/0x460
[ 1233.774277][T32312]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1233.774321][T32312]  ? import_iovec+0x74/0xa0
[ 1233.774352][T32312]  ___sys_recvmsg+0x1b5/0x510
[ 1233.774382][T32312]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1233.774410][T32312]  ? __fget_files+0x2a/0x420
[ 1233.774451][T32312]  ? __fget_files+0x3a0/0x420
[ 1233.774484][T32312]  do_recvmmsg+0x307/0x770
[ 1233.774518][T32312]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1233.774555][T32312]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1233.774594][T32312]  __x64_sys_recvmmsg+0x190/0x240
[ 1233.774620][T32312]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1233.774656][T32312]  do_syscall_64+0xec/0xf80
[ 1233.774677][T32312]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1233.774695][T32312]  ? trace_irq_disable+0x37/0x100
[ 1233.774720][T32312]  ? clear_bhb_loop+0x60/0xb0
[ 1233.774744][T32312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1233.774763][T32312] RIP: 0033:0x7f9667b8f749
[ 1233.774780][T32312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1233.774798][T32312] RSP: 002b:00007f966897d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1233.774818][T32312] RAX: ffffffffffffffda RBX: 00007f9667de5fa0 RCX: 00007f9667b8f749
[ 1233.774834][T32312] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004
[ 1233.774848][T32312] RBP: 00007f966897d090 R08: 0000000000000000 R09: 0000000000000000
[ 1233.774860][T32312] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001
[ 1233.774871][T32312] R13: 00007f9667de6038 R14: 00007f9667de5fa0 R15: 00007ffe42ddcdd8
[ 1233.774899][T32312]  </TASK>
[ 1234.206035][T32314] __nla_validate_parse: 16 callbacks suppressed
[ 1234.206054][T32314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6838'.
[ 1234.477061][T32332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6845'.
[ 1234.541205][T32332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6845'.
[ 1234.581533][T32332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6845'.
[ 1234.741143][T32341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6846'.
[ 1234.760096][T32343] bpq0: entered promiscuous mode
[ 1234.770693][T32341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6846'.
[ 1234.801300][T32341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6846'.
[ 1234.824694][T32341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6846'.
[ 1234.836002][T32355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6848'.
[ 1234.849401][T32351] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6848'.
[ 1235.105979][T32371] netlink: 'syz.0.6854': attribute type 12 has an invalid length.
[ 1235.625690][T32394] netlink: 'syz.2.6863': attribute type 5 has an invalid length.
[ 1236.498568][T32442] syzkaller0: entered promiscuous mode
[ 1236.504655][T32442] syzkaller0: entered allmulticast mode
[ 1236.666157][T32446] bridge15: port 1(veth21) entered blocking state
[ 1236.677573][T32446] bridge15: port 1(veth21) entered disabled state
[ 1236.696691][T32446] veth21: entered allmulticast mode
[ 1236.716799][T32446] veth21: entered promiscuous mode
[ 1236.726190][T32453] veth0_to_bond: left allmulticast mode
[ 1236.732254][T32453] veth0_to_bond: left promiscuous mode
[ 1236.741591][T32453] bridge14: port 2(veth0_to_bond) entered disabled state
[ 1236.756574][T32453] bridge15: port 2(veth0_to_bond) entered blocking state
[ 1236.782486][T32453] bridge15: port 2(veth0_to_bond) entered disabled state
[ 1236.793665][T32453] veth0_to_bond: entered allmulticast mode
[ 1236.801786][T32453] veth0_to_bond: entered promiscuous mode
[ 1236.851450][T32459] bridge15: port 3(veth23) entered blocking state
[ 1236.874408][T32459] bridge15: port 3(veth23) entered disabled state
[ 1236.881097][T32459] veth23: entered allmulticast mode
[ 1236.910248][T32459] veth23: entered promiscuous mode
[ 1236.975309][T32461] bridge14: port 1(veth21) entered blocking state
[ 1236.994847][T32461] bridge14: port 1(veth21) entered disabled state
[ 1237.011338][T32461] veth21: entered allmulticast mode
[ 1237.028383][T32461] veth21: entered promiscuous mode
[ 1237.078986][T32455] bridge14: port 2(veth23) entered blocking state
[ 1237.087706][T32455] bridge14: port 2(veth23) entered disabled state
[ 1237.095068][T32455] veth23: entered allmulticast mode
[ 1237.102518][T32455] veth23: entered promiscuous mode
[ 1237.355389][T32486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1237.428846][T32487] syzkaller0: entered promiscuous mode
[ 1237.451828][T32487] syzkaller0: entered allmulticast mode
[ 1237.458988][T32487] tipc: Resetting bearer <eth:syzkaller0>
[ 1237.517006][T32487] tipc: Resetting bearer <eth:syzkaller0>
[ 1239.497043][T32487] tipc: Disabling bearer <eth:syzkaller0>
[ 1239.742883][T32537] __nla_validate_parse: 22 callbacks suppressed
[ 1239.742903][T32537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6907'.
[ 1239.767557][T32536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6908'.
[ 1239.783132][T32536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6908'.
[ 1239.796289][T32536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6908'.
[ 1239.809808][T32536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6908'.
[ 1239.886466][T32542] ip6tnl0: left allmulticast mode
[ 1239.942877][T32542] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1239.957767][T32542] 8021q: adding VLAN 0 to HW filter on device team0
[ 1239.988086][T32542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1240.130474][T32560] siw: device registration error -23
[ 1240.217188][T32566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6916'.
[ 1240.680326][T32582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6919'.
[ 1241.721211][T32595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6922'.
[ 1243.252341][T32590] workqueue: Failed to create a rescuer kthread for wq "nbd32-recv": -EINTR
[ 1243.252494][T32590] block (null): Could not allocate knbd recv work queue.
[ 1243.315032][T32590] nbd: failed to add new device
[ 1243.420419][T32601] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6923'.
[ 1243.429688][T32601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6923'.
[ 1244.345537][T32652] FAULT_INJECTION: forcing a failure.
[ 1244.345537][T32652] name failslab, interval 1, probability 0, space 0, times 0
[ 1244.370816][T32652] CPU: 0 UID: 0 PID: 32652 Comm: syz.0.6937 Not tainted syzkaller #0 PREEMPT(full) 
[ 1244.370847][T32652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1244.370860][T32652] Call Trace:
[ 1244.370869][T32652]  <TASK>
[ 1244.370878][T32652]  dump_stack_lvl+0xe8/0x150
[ 1244.370909][T32652]  should_fail_ex+0x414/0x560
[ 1244.370946][T32652]  should_failslab+0xa8/0x100
[ 1244.370973][T32652]  __kmalloc_noprof+0xdf/0x800
[ 1244.370994][T32652]  ? nft_set_elem_expr_alloc+0x16f/0x590
[ 1244.371023][T32652]  nft_set_elem_expr_alloc+0x16f/0x590
[ 1244.371049][T32652]  ? __pfx_nft_set_elem_expr_alloc+0x10/0x10
[ 1244.371083][T32652]  ? nft_rhash_init+0x2b3/0x3a0
[ 1244.371119][T32652]  ? __pfx_nft_rhash_init+0x10/0x10
[ 1244.371144][T32652]  ? __pfx_nft_rhash_key+0x10/0x10
[ 1244.371169][T32652]  ? __pfx_nft_rhash_obj+0x10/0x10
[ 1244.371194][T32652]  ? __pfx_nft_rhash_cmp+0x10/0x10
[ 1244.371225][T32652]  nft_set_expr_alloc+0x68/0x760
[ 1244.371257][T32652]  nf_tables_newset+0x1c4c/0x2540
[ 1244.371291][T32652]  ? __pfx_nf_tables_newset+0x10/0x10
[ 1244.371333][T32652]  ? __nla_parse+0x40/0x60
[ 1244.371359][T32652]  nfnetlink_rcv+0x11d9/0x2590
[ 1244.371417][T32652]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1244.371457][T32652]  ? ref_tracker_free+0x63a/0x7d0
[ 1244.371506][T32652]  ? __netlink_deliver_tap+0x807/0x850
[ 1244.371532][T32652]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1244.371575][T32652]  netlink_unicast+0x82f/0x9e0
[ 1244.371607][T32652]  ? __pfx_netlink_unicast+0x10/0x10
[ 1244.371629][T32652]  ? __alloc_skb+0x198/0x3a0
[ 1244.371652][T32652]  ? netlink_sendmsg+0x642/0xb30
[ 1244.371675][T32652]  ? skb_put+0x11b/0x210
[ 1244.371701][T32652]  netlink_sendmsg+0x805/0xb30
[ 1244.371737][T32652]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1244.371764][T32652]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1244.371790][T32652]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1244.371812][T32652]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1244.371839][T32652]  __sock_sendmsg+0x21c/0x270
[ 1244.371871][T32652]  ____sys_sendmsg+0x505/0x820
[ 1244.371901][T32652]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1244.371935][T32652]  ? import_iovec+0x74/0xa0
[ 1244.371963][T32652]  ___sys_sendmsg+0x21f/0x2a0
[ 1244.371989][T32652]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1244.372050][T32652]  ? __fget_files+0x2a/0x420
[ 1244.372074][T32652]  ? __fget_files+0x3a0/0x420
[ 1244.372113][T32652]  __x64_sys_sendmsg+0x19b/0x260
[ 1244.372141][T32652]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1244.372175][T32652]  ? __pfx_ksys_write+0x10/0x10
[ 1244.372207][T32652]  do_syscall_64+0xec/0xf80
[ 1244.372229][T32652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1244.372248][T32652]  ? trace_irq_disable+0x37/0x100
[ 1244.372273][T32652]  ? clear_bhb_loop+0x60/0xb0
[ 1244.372297][T32652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1244.372317][T32652] RIP: 0033:0x7fb89138f749
[ 1244.372335][T32652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1244.372353][T32652] RSP: 002b:00007fb8922ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1244.372375][T32652] RAX: ffffffffffffffda RBX: 00007fb8915e6180 RCX: 00007fb89138f749
[ 1244.372391][T32652] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000008
[ 1244.372404][T32652] RBP: 00007fb8922ca090 R08: 0000000000000000 R09: 0000000000000000
[ 1244.372417][T32652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1244.372430][T32652] R13: 00007fb8915e6218 R14: 00007fb8915e6180 R15: 00007fff602a0cc8
[ 1244.372464][T32652]  </TASK>
[ 1245.077500][T23345] block nbd32: Receive control failed (result -32)
[ 1245.181907][T32677] __nla_validate_parse: 9 callbacks suppressed
[ 1245.181921][T32677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6946'.
[ 1245.360211][T32687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6948'.
[ 1245.385561][T32687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6948'.
[ 1245.400380][T32687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6948'.
[ 1245.420001][T32682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1245.437140][T32687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6948'.
[ 1245.495137][T32690] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1245.586461][T32698] netlink: 'syz.2.6952': attribute type 10 has an invalid length.
[ 1245.618212][T32698] 8021q: adding VLAN 0 to HW filter on device team0
[ 1245.647164][T32698] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1245.771270][T32713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6951'.
[ 1245.840306][T32708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6950'.
[ 1245.850026][T32708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6950'.
[ 1245.904771][T32716] IPVS: set_ctl: invalid protocol: 4 172.20.20.27:20004
[ 1245.932235][T32718] FAULT_INJECTION: forcing a failure.
[ 1245.932235][T32718] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1245.945596][T32718] CPU: 1 UID: 0 PID: 32718 Comm: syz.2.6954 Not tainted syzkaller #0 PREEMPT(full) 
[ 1245.945625][T32718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1245.945637][T32718] Call Trace:
[ 1245.945646][T32718]  <TASK>
[ 1245.945655][T32718]  dump_stack_lvl+0xe8/0x150
[ 1245.945696][T32718]  should_fail_ex+0x414/0x560
[ 1245.945732][T32718]  _copy_from_user+0x2d/0xb0
[ 1245.945757][T32718]  ___sys_recvmsg+0x12e/0x510
[ 1245.945788][T32718]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1245.945816][T32718]  ? __fget_files+0x2a/0x420
[ 1245.945864][T32718]  do_recvmmsg+0x307/0x770
[ 1245.945893][T32718]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1245.945925][T32718]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1245.945961][T32718]  __x64_sys_recvmmsg+0x190/0x240
[ 1245.945990][T32718]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1245.946029][T32718]  do_syscall_64+0xec/0xf80
[ 1245.946050][T32718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1245.946070][T32718]  ? trace_irq_disable+0x37/0x100
[ 1245.946096][T32718]  ? clear_bhb_loop+0x60/0xb0
[ 1245.946120][T32718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1245.946141][T32718] RIP: 0033:0x7ff430d8f749
[ 1245.946159][T32718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1245.946178][T32718] RSP: 002b:00007ff431c61038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1245.946199][T32718] RAX: ffffffffffffffda RBX: 00007ff430fe5fa0 RCX: 00007ff430d8f749
[ 1245.946215][T32718] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004
[ 1245.946229][T32718] RBP: 00007ff431c61090 R08: 0000000000000000 R09: 0000000000000000
[ 1245.946242][T32718] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[ 1245.946256][T32718] R13: 00007ff430fe6038 R14: 00007ff430fe5fa0 R15: 00007ffc7f5f0738
[ 1245.946289][T32718]  </TASK>
[ 1246.391784][T32728] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1246.514496][T32739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6961'.
[ 1246.523947][T32739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6961'.
[ 1246.867033][T32754] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1247.506399][  T323] bond9: entered promiscuous mode
[ 1247.568856][  T323] vcan0: entered promiscuous mode
[ 1247.573934][  T323] vcan0: entered allmulticast mode
[ 1247.577280][  T332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1247.583944][  T323] bond9: (slave vcan0): The slave device specified does not support setting the MAC address
[ 1247.612196][  T323] bond9: (slave vcan0): Error -95 calling set_mac_address
[ 1248.040848][  T356] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[ 1248.429833][  T378] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1248.899155][  T406] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1249.449941][  T431] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[ 1249.602040][  T436] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1249.868672][  T450] FAULT_INJECTION: forcing a failure.
[ 1249.868672][  T450] name failslab, interval 1, probability 0, space 0, times 0
[ 1249.948227][  T450] CPU: 0 UID: 0 PID: 450 Comm: syz.2.7016 Not tainted syzkaller #0 PREEMPT(full) 
[ 1249.948254][  T450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1249.948275][  T450] Call Trace:
[ 1249.948284][  T450]  <TASK>
[ 1249.948293][  T450]  dump_stack_lvl+0xe8/0x150
[ 1249.948323][  T450]  should_fail_ex+0x414/0x560
[ 1249.948358][  T450]  should_failslab+0xa8/0x100
[ 1249.948384][  T450]  kmem_cache_alloc_node_noprof+0x8c/0x720
[ 1249.948416][  T450]  ? __alloc_skb+0x1dc/0x3a0
[ 1249.948435][  T450]  ? __local_bh_enable_ip+0xd0/0x130
[ 1249.948458][  T450]  ? __alloc_skb+0x198/0x3a0
[ 1249.948479][  T450]  __alloc_skb+0x1dc/0x3a0
[ 1249.948504][  T450]  wireless_send_event+0x51f/0xbd0
[ 1249.948538][  T450]  ? __pfx_wireless_send_event+0x10/0x10
[ 1249.948556][  T450]  ? trace_kmalloc+0x1f/0xb0
[ 1249.948573][  T450]  ? __kmalloc_noprof+0x43e/0x800
[ 1249.948590][  T450]  ? ioctl_standard_iw_point+0x4d5/0xd40
[ 1249.948610][  T450]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1249.948646][  T450]  ioctl_standard_iw_point+0x976/0xd40
[ 1249.948680][  T450]  ? __pfx_cfg80211_wext_siwencode+0x10/0x10
[ 1249.948710][  T450]  ? __pfx_ioctl_standard_iw_point+0x10/0x10
[ 1249.948731][  T450]  ? __pfx___mutex_lock+0x10/0x10
[ 1249.948759][  T450]  ? full_name_hash+0x92/0xe0
[ 1249.948784][  T450]  ? __pfx_cfg80211_wext_siwencode+0x10/0x10
[ 1249.948813][  T450]  ioctl_standard_call+0xaf/0x1b0
[ 1249.948834][  T450]  ? __pfx_cfg80211_wext_siwencode+0x10/0x10
[ 1249.948859][  T450]  wext_ioctl_dispatch+0xee/0x410
[ 1249.948877][  T450]  ? __pfx_ioctl_standard_call+0x10/0x10
[ 1249.948899][  T450]  wext_handle_ioctl+0x100/0x1c0
[ 1249.948921][  T450]  ? __pfx_wext_handle_ioctl+0x10/0x10
[ 1249.948938][  T450]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 1249.948976][  T450]  sock_ioctl+0x15f/0x790
[ 1249.949006][  T450]  ? __pfx_sock_ioctl+0x10/0x10
[ 1249.949033][  T450]  ? __fget_files+0x2a/0x420
[ 1249.949057][  T450]  ? __fget_files+0x3a0/0x420
[ 1249.949079][  T450]  ? __fget_files+0x2a/0x420
[ 1249.949107][  T450]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1249.949129][  T450]  ? __pfx_sock_ioctl+0x10/0x10
[ 1249.949155][  T450]  __se_sys_ioctl+0xfc/0x170
[ 1249.949188][  T450]  do_syscall_64+0xec/0xf80
[ 1249.949208][  T450]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1249.949225][  T450]  ? trace_irq_disable+0x37/0x100
[ 1249.949252][  T450]  ? clear_bhb_loop+0x60/0xb0
[ 1249.949283][  T450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1249.949302][  T450] RIP: 0033:0x7ff430d8f749
[ 1249.949320][  T450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1249.949337][  T450] RSP: 002b:00007ff431c40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1249.949359][  T450] RAX: ffffffffffffffda RBX: 00007ff430fe6090 RCX: 00007ff430d8f749
[ 1249.949374][  T450] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000005
[ 1249.949388][  T450] RBP: 00007ff431c40090 R08: 0000000000000000 R09: 0000000000000000
[ 1249.949401][  T450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1249.949413][  T450] R13: 00007ff430fe6128 R14: 00007ff430fe6090 R15: 00007ffc7f5f0738
[ 1249.949446][  T450]  </TASK>
[ 1250.310237][  T455] __nla_validate_parse: 28 callbacks suppressed
[ 1250.310258][  T455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7017'.
[ 1250.417936][  T457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7018'.
[ 1250.452281][  T455] bridge28: port 1(veth43) entered blocking state
[ 1250.488901][  T455] bridge28: port 1(veth43) entered disabled state
[ 1250.504343][  T455] veth43: entered allmulticast mode
[ 1250.519032][  T455] veth43: entered promiscuous mode
[ 1250.544820][  T457] bridge_slave_1: left allmulticast mode
[ 1250.552936][  T457] bridge_slave_1: left promiscuous mode
[ 1250.559820][  T457] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1250.585026][  T457] bridge_slave_0: left promiscuous mode
[ 1250.611554][  T457] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1250.659412][  T465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7021'.
[ 1250.669339][  T465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7021'.
[ 1250.678484][  T465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7021'.
[ 1250.689500][  T465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7021'.
[ 1251.403703][  T461] veth0_to_bond: left allmulticast mode
[ 1251.410827][  T461] veth0_to_bond: left promiscuous mode
[ 1251.416777][  T461] bridge26: port 2(veth0_to_bond) entered disabled state
[ 1251.437226][  T461] bridge28: port 2(veth0_to_bond) entered blocking state
[ 1251.445166][  T461] bridge28: port 2(veth0_to_bond) entered disabled state
[ 1251.452433][  T461] veth0_to_bond: entered allmulticast mode
[ 1251.476858][  T461] veth0_to_bond: entered promiscuous mode
[ 1251.503742][  T455] bridge28: port 3(veth45) entered blocking state
[ 1251.510685][  T455] bridge28: port 3(veth45) entered disabled state
[ 1251.517853][  T455] veth45: entered allmulticast mode
[ 1251.526240][  T455] veth45: entered promiscuous mode
[ 1251.560831][  T480] netlink: 'syz.0.7023': attribute type 1 has an invalid length.
[ 1251.582991][  T481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7024'.
[ 1251.594302][  T481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7024'.
[ 1265.455607][ T5152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1265.465703][ T5152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1265.474743][ T5152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1265.485375][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1265.501400][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1265.520190][T23345] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1265.528320][T23345] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1265.535739][T23345] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1265.543602][T23345] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1265.551329][T23345] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1265.935058][ T5152] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1265.945543][ T5152] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1265.955072][ T5152] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1265.963008][ T5152] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1265.971268][ T5152] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1266.931832][T23345] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1266.943569][T23345] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1266.951923][T23345] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1266.961481][T23345] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1266.969678][T23345] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1267.145714][T23345] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1267.155363][T23345] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1267.165891][T23345] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1267.175782][T23345] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1267.183430][T23345] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1267.435018][ T5152] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1267.446436][ T5152] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1267.454884][ T5152] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1267.462858][ T5152] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1267.470584][ T5152] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1267.579415][ T5152] Bluetooth: hci5: command tx timeout
[ 1268.054107][ T5152] Bluetooth: hci6: command tx timeout
[ 1269.014176][ T5152] Bluetooth: hci7: command tx timeout
[ 1269.254446][ T5152] Bluetooth: hci8: command tx timeout
[ 1269.494339][ T5152] Bluetooth: hci9: command tx timeout
[ 1269.654263][ T5152] Bluetooth: hci5: command tx timeout
[ 1270.134241][ T5152] Bluetooth: hci6: command tx timeout
[ 1271.094227][ T5152] Bluetooth: hci7: command tx timeout
[ 1271.334257][ T5152] Bluetooth: hci8: command tx timeout
[ 1271.574052][ T5152] Bluetooth: hci9: command tx timeout
[ 1271.734919][ T5152] Bluetooth: hci5: command tx timeout
[ 1272.214626][ T5152] Bluetooth: hci6: command tx timeout
[ 1273.174707][ T5152] Bluetooth: hci7: command tx timeout
[ 1273.414877][ T5152] Bluetooth: hci8: command tx timeout
[ 1273.654784][ T5152] Bluetooth: hci9: command tx timeout
[ 1273.814280][ T5152] Bluetooth: hci5: command tx timeout
[ 1274.294677][ T5152] Bluetooth: hci6: command tx timeout
[ 1275.254679][ T5152] Bluetooth: hci7: command tx timeout
[ 1275.494305][ T5152] Bluetooth: hci8: command tx timeout
[ 1275.734093][ T5152] Bluetooth: hci9: command tx timeout
[ 1326.145136][T23345] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1326.161175][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1326.170208][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1326.178276][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1326.186474][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1326.255024][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1326.265551][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1326.274592][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1326.282564][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1326.290433][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1327.064982][T23345] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1327.076599][T23345] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1327.085057][T23345] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1327.092975][T23345] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1327.101547][T23345] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1328.106773][ T5840] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1328.116756][ T5840] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1328.125746][ T5840] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1328.133679][ T5840] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1328.141463][ T5840] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1328.214770][ T5840] Bluetooth: hci10: command tx timeout
[ 1328.335510][T23345] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1328.345531][T23345] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1328.354650][T23345] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1328.365279][T23345] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1328.374302][ T5152] Bluetooth: hci11: command tx timeout
[ 1328.381173][T23345] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1329.174647][T23345] Bluetooth: hci12: command tx timeout
[ 1330.214196][T23345] Bluetooth: hci13: command tx timeout
[ 1330.294112][T23345] Bluetooth: hci10: command tx timeout
[ 1330.454552][ T5840] Bluetooth: hci11: command tx timeout
[ 1330.460508][T23345] Bluetooth: hci14: command tx timeout
[ 1331.254182][T23345] Bluetooth: hci12: command tx timeout
[ 1332.294636][T23345] Bluetooth: hci13: command tx timeout
[ 1332.374115][T23345] Bluetooth: hci10: command tx timeout
[ 1332.535405][ T5840] Bluetooth: hci11: command tx timeout
[ 1332.540967][T23345] Bluetooth: hci14: command tx timeout
[ 1333.334139][T23345] Bluetooth: hci12: command tx timeout
[ 1334.374079][T23345] Bluetooth: hci13: command tx timeout
[ 1334.454656][T23345] Bluetooth: hci10: command tx timeout
[ 1334.614141][ T5840] Bluetooth: hci11: command tx timeout
[ 1334.619668][T23345] Bluetooth: hci14: command tx timeout
[ 1335.414598][T23345] Bluetooth: hci12: command tx timeout
[ 1336.454096][T23345] Bluetooth: hci13: command tx timeout
[ 1336.694079][T23345] Bluetooth: hci14: command tx timeout
[ 1356.574000][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 1356.580626][    C0] rcu: 	0-....: (1 GPs behind) idle=8474/1/0x4000000000000000 softirq=181739/181740 fqs=5237
[ 1356.591884][    C0] rcu: 	         hardirqs   softirqs   csw/system
[ 1356.598288][    C0] rcu: 	 number:     7777          0            0
[ 1356.604691][    C0] rcu: 	cputime:      178      52311            5   ==> 52490(ms)
[ 1356.612473][    C0] rcu: 	(t=10500 jiffies g=170533 q=2746 ncpus=2)
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1356.618879][    C0] CPU: 0 UID: 0 PID: 455 Comm: syz.1.7017 Not tainted syzkaller #0 PREEMPT(full) 
[ 1356.618903][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1356.618916][    C0] RIP: 0010:taprio_dequeue_from_txq+0x154/0x980
[ 1356.618937][    C0] Code: 89 f3 4d 8d 7e 18 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 da 9e b6 f8 4d 8b 3f 49 83 c7 38 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 48 8b 6c 24 28 74 08 4c 89 ff e8 b8 9e b6 f8 4d 8b
[ 1356.618946][    C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00000a02
[ 1356.618956][    C0] RAX: 1ffffffff1f05567 RBX: ffff888033198000 RCX: 0000000000000100
[ 1356.618963][    C0] RDX: ffff888039fa5b80 RSI: 0000000000000000 RDI: 0000000000000000
[ 1356.618970][    C0] RBP: 0000000000000002 R08: ffffffff896fcc56 R09: ffffffff8df41aa0
[ 1356.618977][    C0] R10: 0000000000000001 R11: ffffffff89631050 R12: dffffc0000000000
[ 1356.618984][    C0] R13: ffff888033e80000 R14: ffff888033198000 R15: ffffffff8f82ab38
[ 1356.618991][    C0] FS:  0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000
[ 1356.618999][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1356.619006][    C0] CR2: 000000110c34010b CR3: 000000000dd3a000 CR4: 00000000003526f0
[ 1356.619015][    C0] Call Trace:
[ 1356.619022][    C0]  <IRQ>
[ 1356.619025][    C0]  ? taprio_dequeue+0x26/0x550
[ 1356.619044][    C0]  taprio_dequeue_tc_priority+0x1ac/0x750
[ 1356.619063][    C0]  ? taprio_dequeue+0x26/0x550
[ 1356.619077][    C0]  taprio_dequeue+0x186/0x550
[ 1356.619097][    C0]  __qdisc_run+0x23f/0x1510
[ 1356.619117][    C0]  qdisc_run+0xc7/0x300
[ 1356.619127][    C0]  ? net_tx_action+0x58c/0x900
[ 1356.619138][    C0]  net_tx_action+0x717/0x900
[ 1356.619150][    C0]  handle_softirqs+0x22b/0x7c0
[ 1356.619163][    C0]  ? __irq_exit_rcu+0x60/0x150
[ 1356.619177][    C0]  __irq_exit_rcu+0x60/0x150
[ 1356.619186][    C0]  irq_exit_rcu+0x9/0x30
[ 1356.619196][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1356.619207][    C0]  </IRQ>
[ 1356.619211][    C0]  <TASK>
[ 1356.619215][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1356.619227][    C0] RIP: 0010:free_pages_and_swap_cache+0x14b/0x520
[ 1356.619242][    C0] Code: 89 44 24 10 4c 8d 70 08 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 48 c9 08 00 4d 8b 36 <4c> 89 f6 48 83 e6 01 31 ff e8 e7 ad a2 ff 4c 89 f0 48 83 e0 01 0f
[ 1356.619250][    C0] RSP: 0018:ffffc9001b7df560 EFLAGS: 00000246
[ 1356.619258][    C0] RAX: 1ffffd40003ff421 RBX: ffff888033f2eda8 RCX: dffffc0000000000
[ 1356.619266][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001f
[ 1356.619272][    C0] RBP: ffffc9001b7df7e8 R08: ffffea0001ffa0c7 R09: 1ffffd40003ff418
[ 1356.619279][    C0] R10: dffffc0000000000 R11: fffff940003ff419 R12: 1ffff110067e5db5
[ 1356.619286][    C0] R13: ffffea0001ffa100 R14: ffffea0001ffa0c8 R15: 00000000000001b3
[ 1356.619305][    C0]  ? __pfx_free_pages_and_swap_cache+0x10/0x10
[ 1356.619331][    C0]  ? call_rcu+0x644/0x890
[ 1356.619344][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1356.619365][    C0]  tlb_flush_mmu+0x3a0/0x680
[ 1356.619376][    C0]  ? __pfx_down_write+0x10/0x10
[ 1356.619390][    C0]  tlb_finish_mmu+0xc3/0x1d0
[ 1356.619403][    C0]  exit_mmap+0x439/0xb10
[ 1356.619418][    C0]  ? uprobe_clear_state+0x20f/0x290
[ 1356.619430][    C0]  ? __pfx_exit_mmap+0x10/0x10
[ 1356.619443][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 1356.619461][    C0]  ? __pfx_exit_aio+0x10/0x10
[ 1356.619480][    C0]  ? uprobe_clear_state+0x27c/0x290
[ 1356.619492][    C0]  __mmput+0x118/0x430
[ 1356.619503][    C0]  exit_mm+0x169/0x230
[ 1356.619518][    C0]  do_exit+0x627/0x22f0
[ 1356.619533][    C0]  ? cgroup1_freezing+0x20/0x350
[ 1356.619546][    C0]  ? __pfx_do_exit+0x10/0x10
[ 1356.619560][    C0]  ? cgroup1_freezing+0x20/0x350
[ 1356.619571][    C0]  ? cgroup1_freezing+0x20/0x350
[ 1356.619586][    C0]  do_group_exit+0x21c/0x2d0
[ 1356.619599][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1356.619617][    C0]  get_signal+0x1285/0x1340
[ 1356.619636][    C0]  arch_do_signal_or_restart+0x9a/0x7a0
[ 1356.619654][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1356.619677][    C0]  exit_to_user_mode_loop+0x87/0x4e0
[ 1356.619688][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1356.619701][    C0]  do_syscall_64+0x2c1/0xf80
[ 1356.619712][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.619721][    C0]  ? trace_irq_disable+0x37/0x100
[ 1356.619734][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1356.619745][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.619755][    C0] RIP: 0033:0x7f9667b8f749
[ 1356.619765][    C0] Code: Unable to access opcode bytes at 0x7f9667b8f71f.
[ 1356.619770][    C0] RSP: 002b:00007f966897d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1356.619780][    C0] RAX: 0000000000000001 RBX: 00007f9667de5fa0 RCX: 00007f9667b8f749
[ 1356.619787][    C0] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1356.619794][    C0] RBP: 00007f9667c13f91 R08: 0000000000000000 R09: 0000000000000000
[ 1356.619800][    C0] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1356.619806][    C0] R13: 00007f9667de6038 R14: 00007f9667de5fa0 R15: 00007ffe42ddcdd8
[ 1356.619821][    C0]  </TASK>
[ 1358.103087][    C0] sched: DL replenish lagged too much