last executing test programs:

8.242392651s ago: executing program 0 (id=5932):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "d1546197deb53ddf", "b3d231449ef9d69bbc16d13a1ca02d4c", "6c1fda80", "72b3166eddc7622e"}, 0x28)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x48001)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000f80)=ANY=[@ANYBLOB="34c90423cc891d3129d3a0bbd08614e6221f6720725e784e8f2530a67743c840a9a812d65ac35e85b1e8e8177a059196f7dcc4ccc5", @ANYRES16=r5, @ANYBLOB="040027bd7000ffdbdf252d0000000c0005000200aaaaaaaaaaaa0c000500000000000000000008000200", @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r7 = socket(0x2, 0x2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r9)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1ce68, r10, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94)
syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x2, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x11, "e6673fcf0b051e0000000000000000"}, @window={0x3, 0x3, 0xfe}]}}}}}}}}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r11, 0x11, 0x1, &(0x7f00000002c0)=0x8, 0x4)

8.17824645s ago: executing program 0 (id=5934):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0xe, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000f5ffffffffffffff950000000000f8568a3daf3e1c97f595b369584987075eda7257d6db1399641013b69561cdc03eb7b2e5d04e5064647fb8707f0e10bbed14142a7777ec4cd98070b47ec56daf58f73c0000e176ee41ab95988a71486d799dbbeb22e2b59c94e4ec68dc55671fda1b561c648dcd190c651ef8666468d0bbbd2b29f1cbeeddf5de1574dd1ff4cdb04f1816552c8392bebd031a9f6e6b6f87e52f355d4a5c693eeec6984a1224e722451383ee266bc9fedee641acc3d660f0903f3b7f94db287cdceab8c52f5640ca0f9e8bb2519e8a7b0c1a4700b491fa4838"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="7961fdffffff000000007e0000000c0089006c91000002000000a94f4f187b27b634ea10495627def6a85ef0bdf6ead3b9e6917326a81488d7939be1354b7d3272ff61b2c3133c0bbe31f7d78d69a3ef70d41b6a7dda0000000000000000e432a776f60f6c09195a735efb6ccccf5cae43ce62b36c01aef71e88083a65ea06c556a9fbc090a6bd7dbe23089287d2beb794533474eb66f6fd2bd03e3b0db2691fb485e7d921c4b6bcdf062bccf2f023300fdc72fdfb85de33007c070c2a4d1d4935a12f671221f8e03b88b9a840a49d625c48b07e193d4915c03bb6b2aca4f2"], 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008004)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r5, @ANYBLOB], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0)
socket$inet_sctp(0x2, 0x1, 0x84)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r7 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018004e204e24140017"], 0x54}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@deltfilter={0x204, 0x2d, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0xe}, {0x9, 0x3}, {0xe, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1cc, 0x2, [@TCA_CGROUP_EMATCHES={0x1c8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="cd9e9103b4", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="95588fed184221"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf9, 0x7, 0x2}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3, 0x2, 0xc00}, {0x0, 0x4, 0x0, "fc585ae4"}}}, @TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "4632c94aac159d10e6623a8e84b4dcee9f88b80ac5cc81ced0f285d22ac250a7286c5759c5a188e8b79696cc7aeeb670a5c4eb4fb0bf445691a21d6394c37df2347dce30bec0e709ab184437138695d544cf409ed205790476554a"}}, @TCF_EM_CONTAINER={0xa0, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x7ff}, "5354a3d093e573750683102e19570c32e3574664345e4110b74279bf59d022e53990c342c7a516a82198e9f5217e4266f466986c00b8c315908b60469d0b7e53e78fa5a7208820a19d7ca3a70b6342cd2d9469a57f1d253abf3ecde218b41e93898e1224618c73fc71896c397d8ee069f61444f09825a2f0630e021898b883401bbe88065961f1a088c7e74c85a29961e0e547f3"}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffff, 0x3, 0x7}, {0x4, 0x2, 0x7, 0x5}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xa68, 0x2, 0xd7}, {0x101, 0x5, 0x0, "990f972ce5"}}}]}]}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000008001b000000000004021a801800025cb00080000000000000fc49ffa16913d155026b0527498ab94a6a37ab85fdd5829c5a394e4b7246c350a0aa8a6007097ce0f1daaeaf0334df9fa0db9947a4aedeba676b9dfb9803c143eb3b902a4808001c0ebe9a015a512ffbe57b1b02810fb3dead7b43e0eb46dd1be51a7fd0b05d1d246f484db1b22cf4b8b2af8e8a183eb13a44e2f8aa46f64a54f8ce89d5"], 0x44}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

7.826168074s ago: executing program 0 (id=5939):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x7e, @dev={0xfe, 0x80, '\x00', 0xa}, 0x1}, 0x1c)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x16, 0x1, 0x0, 0x1, [@generic="88046fa3301e12b1dbed7c66a9a96b690465"]}]}, 0x3c}], 0x1}, 0x0)
ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7})
listen(r3, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001280)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x98, r9, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x79, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="1bef70d8fb37", {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x15, 0x97, 0x5}}, @val={0x25, 0x3, {0x1, 0xb0, 0x93}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40081}, 0x0)

7.613503271s ago: executing program 0 (id=5943):
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000980)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/104, 0x68}, {&(0x7f0000000040)=""/18, 0x12}, {&(0x7f0000000200)=""/29, 0x1d}, {&(0x7f00000002c0)=""/14, 0xe}, {&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/89, 0x59}, {&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000000580)=""/101, 0x65}], 0x9}, 0x1}, {{&(0x7f00000006c0)=@phonet, 0x80, &(0x7f0000000880)=[{&(0x7f0000000740)=""/17, 0x11}, {&(0x7f0000000780)=""/115, 0x73}, {&(0x7f0000000800)=""/31, 0x1f}, {&(0x7f0000000840)=""/61, 0x3d}], 0x4, &(0x7f00000008c0)=""/53, 0x35}, 0x2}], 0x2, 0x0, &(0x7f00000009c0)={r1, r2+10000000})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRES8=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000002740)=@abs, &(0x7f00000027c0)=0x6e, 0x80000)
recvmmsg$unix(r5, &(0x7f0000003180)=[{{&(0x7f0000002800), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002880)=""/206, 0xce}, {&(0x7f0000002980)=""/226, 0xe2}], 0x2, &(0x7f0000002ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000002b80), 0x6e, &(0x7f0000003080)=[{&(0x7f0000002c00)=""/68, 0x44}, {&(0x7f0000002c80)=""/157, 0x9d}, {&(0x7f0000002d40)=""/6, 0x6}, {&(0x7f0000002d80)=""/176, 0xb0}, {&(0x7f0000002e40)=""/164, 0xa4}, {&(0x7f0000002f00)=""/254, 0xfe}, {&(0x7f0000003000)=""/63, 0x3f}, {&(0x7f0000003040)=""/9, 0x9}], 0x8, &(0x7f0000003100)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}}], 0x2, 0x2002, &(0x7f0000003200)={0x77359400})
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r8 = socket(0x5, 0xa, 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00'})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r9, 0x0, 0x60000000)
sendmsg$nl_route(r6, 0x0, 0x810)
r10 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x0, 0xc0000000, 0x402, 0x9, 0xffffffe8, 0x5, 0x6, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424c, 0x3}})
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000)
r11 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendto$inet(r8, &(0x7f0000000380)="0fc364f2c8686429de1b40f0d06ff6a72f08bd01130129a8ee02", 0x1a, 0x20000040, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bind$alg(0xffffffffffffffff, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xe)
socket$nl_generic(0x10, 0x3, 0x10)

7.413372261s ago: executing program 0 (id=5945):
unshare(0x28000600)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r11 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

7.160906609s ago: executing program 0 (id=5949):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0xe, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000f5ffffffffffffff950000000000f8568a3daf3e1c97f595b369584987075eda7257d6db1399641013b69561cdc03eb7b2e5d04e5064647fb8707f0e10bbed14142a7777ec4cd98070b47ec56daf58f73c0000e176ee41ab95988a71486d799dbbeb22e2b59c94e4ec68dc55671fda1b561c648dcd190c651ef8666468d0bbbd2b29f1cbeeddf5de1574dd1ff4cdb04f1816552c8392bebd031a9f6e6b6f87e52f355d4a5c693eeec6984a1224e722451383ee266bc9fedee641acc3d660f0903f3b7f94db287cdceab8c52f5640ca0f9e8bb2519e8a7b0c1a4700b491fa4838"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="7961fdffffff000000007e0000000c0089006c91000002000000a94f4f187b27b634ea10495627def6a85ef0bdf6ead3b9e6917326a81488d7939be1354b7d3272ff61b2c3133c0bbe31f7d78d69a3ef70d41b6a7dda0000000000000000e432a776f60f6c09195a735efb6ccccf5cae43ce62b36c01aef71e88083a65ea06c556a9fbc090a6bd7dbe23089287d2beb794533474eb66f6fd2bd03e3b0db2691fb485e7d921c4b6bcdf062bccf2f023300fdc72fdfb85de33007c070c2a4d1d4935a12f671221f8e03b88b9a840a49d625c48b07e193d4915c03bb6b2aca4f2"], 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008004)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r5, @ANYBLOB], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0)
socket$inet_sctp(0x2, 0x1, 0x84)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r7 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018004e204e24140017"], 0x54}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@deltfilter={0x204, 0x2d, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0xe}, {0x9, 0x3}, {0xe, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1cc, 0x2, [@TCA_CGROUP_EMATCHES={0x1c8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="cd9e9103b4", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="95588fed184221"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf9, 0x7, 0x2}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3, 0x2, 0xc00}, {0x0, 0x4, 0x0, "fc585ae4"}}}, @TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "4632c94aac159d10e6623a8e84b4dcee9f88b80ac5cc81ced0f285d22ac250a7286c5759c5a188e8b79696cc7aeeb670a5c4eb4fb0bf445691a21d6394c37df2347dce30bec0e709ab184437138695d544cf409ed205790476554a"}}, @TCF_EM_CONTAINER={0xa0, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x7ff}, "5354a3d093e573750683102e19570c32e3574664345e4110b74279bf59d022e53990c342c7a516a82198e9f5217e4266f466986c00b8c315908b60469d0b7e53e78fa5a7208820a19d7ca3a70b6342cd2d9469a57f1d253abf3ecde218b41e93898e1224618c73fc71896c397d8ee069f61444f09825a2f0630e021898b883401bbe88065961f1a088c7e74c85a29961e0e547f3"}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffff, 0x3, 0x7}, {0x4, 0x2, 0x7, 0x5}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xa68, 0x2, 0xd7}, {0x101, 0x5, 0x0, "990f972ce5"}}}]}]}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000008001b000000000004021a801800025cb00080000000000000fc49ffa16913d155026b0527498ab94a6a37ab85fdd5829c5a394e4b7246c350a0aa8a6007097ce0f1daaeaf0334df9fa0db9947a4aedeba676b9dfb9803c143eb3b902a4808001c0ebe9a015a512ffbe57b1b02810fb3dead7b43e0eb46dd1be51a7fd0b05d1d246f484db1b22cf4b8b2af8e8a183eb13a44e2f8aa46f64a54f8ce89d5"], 0x44}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

2.278559288s ago: executing program 3 (id=6004):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0xfc00, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0)

2.142283785s ago: executing program 3 (id=6007):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6f0f4923d6000000000000800e0001006970366772657461700000001400028006000fbafd81efcebd8d83e02707"], 0x48}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x80}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x5, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xd94ac76b42879f9f}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711033000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x58, 0x140c, 0x800, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x801)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)

2.046106741s ago: executing program 2 (id=6009):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0xe, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000f5ffffffffffffff950000000000f8568a3daf3e1c97f595b369584987075eda7257d6db1399641013b69561cdc03eb7b2e5d04e5064647fb8707f0e10bbed14142a7777ec4cd98070b47ec56daf58f73c0000e176ee41ab95988a71486d799dbbeb22e2b59c94e4ec68dc55671fda1b561c648dcd190c651ef8666468d0bbbd2b29f1cbeeddf5de1574dd1ff4cdb04f1816552c8392bebd031a9f6e6b6f87e52f355d4a5c693eeec6984a1224e722451383ee266bc9fedee641acc3d660f0903f3b7f94db287cdceab8c52f5640ca0f9e8bb2519e8a7b0c1a4700b491fa4838"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="7961fdffffff000000007e0000000c0089006c91000002000000a94f4f187b27b634ea10495627def6a85ef0bdf6ead3b9e6917326a81488d7939be1354b7d3272ff61b2c3133c0bbe31f7d78d69a3ef70d41b6a7dda0000000000000000e432a776f60f6c09195a735efb6ccccf5cae43ce62b36c01aef71e88083a65ea06c556a9fbc090a6bd7dbe23089287d2beb794533474eb66f6fd2bd03e3b0db2691fb485e7d921c4b6bcdf062bccf2f023300fdc72fdfb85de33007c070c2a4d1d4935a12f671221f8e03b88b9a840a49d625c48b07e193d4915c03bb6b2aca4f2"], 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008004)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r5, @ANYBLOB], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0)
socket$inet_sctp(0x2, 0x1, 0x84)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r7 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018004e204e24140017"], 0x54}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@deltfilter={0x204, 0x2d, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0xe}, {0x9, 0x3}, {0xe, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1cc, 0x2, [@TCA_CGROUP_EMATCHES={0x1c8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="cd9e9103b4", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="95588fed184221"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf9, 0x7, 0x2}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3, 0x2, 0xc00}, {0x0, 0x4, 0x0, "fc585ae4"}}}, @TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "4632c94aac159d10e6623a8e84b4dcee9f88b80ac5cc81ced0f285d22ac250a7286c5759c5a188e8b79696cc7aeeb670a5c4eb4fb0bf445691a21d6394c37df2347dce30bec0e709ab184437138695d544cf409ed205790476554a"}}, @TCF_EM_CONTAINER={0xa0, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x7ff}, "5354a3d093e573750683102e19570c32e3574664345e4110b74279bf59d022e53990c342c7a516a82198e9f5217e4266f466986c00b8c315908b60469d0b7e53e78fa5a7208820a19d7ca3a70b6342cd2d9469a57f1d253abf3ecde218b41e93898e1224618c73fc71896c397d8ee069f61444f09825a2f0630e021898b883401bbe88065961f1a088c7e74c85a29961e0e547f3"}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffff, 0x3, 0x7}, {0x4, 0x2, 0x7, 0x5}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xa68, 0x2, 0xd7}, {0x101, 0x5, 0x0, "990f972ce5"}}}]}]}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000008001b000000000004021a801800025cb00080000000000000fc49ffa16913d155026b0527498ab94a6a37ab85fdd5829c5a394e4b7246c350a0aa8a6007097ce0f1daaeaf0334df9fa0db9947a4aedeba676b9dfb9803c143eb3b902a4808001c0ebe9a015a512ffbe57b1b02810fb3dead7b43e0eb46dd1be51a7fd0b05d1d246f484db1b22cf4b8b2af8e8a183eb13a44e2f8aa46f64a54f8ce89d5"], 0x44}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.945580091s ago: executing program 3 (id=6011):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x2, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x200, 0x4)
sendmmsg$inet(r1, &(0x7f00000049c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="5d5ff9883c7a858a8e2659b069f9925b8f64172976084d06bab86f8818dbabc6bd9cdf22850db42064ab50a2a36fef3bef5a251d", 0x34}], 0x1}}], 0x1, 0x20000800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)

1.820036087s ago: executing program 3 (id=6012):
socket(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2}], 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x7fffffff, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000014c0)="03", 0x1}], 0x1}}], 0x2, 0x400c404)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = socket(0x2b, 0x1, 0x0)
listen(r6, 0x0)
accept4$nfc_llcp(r6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0x3}, 0x6)
write$bt_hci(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x9)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x8004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r8, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)

1.768112254s ago: executing program 1 (id=6013):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async, rerun: 32)
r2 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) (async, rerun: 64)
r3 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10)
sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) (async, rerun: 32)
r4 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32)
bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
bind$tipc(r0, 0x0, 0x0) (async, rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000006a000d0e26bd7000fcdbdf25004003000000000008000a000000000004000900080005"], 0x2c}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

1.687239703s ago: executing program 2 (id=6014):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4)
socketpair(0x2b, 0x5, 0x3, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000600)={&(0x7f00000000c0), 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/233, 0xe9}, {&(0x7f0000000340)=""/254, 0xfe}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000140)=""/1, 0x1}], 0x4, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x2020)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000001000900000001"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000000), &(0x7f00000004c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000000), 0x4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="24000000700001002abd7000fbdbdf2507000000", @ANYRES32=r7, @ANYBLOB="0c0001800800010021000300633ace880c4bcd2cc2ad0afebd85c2d105fcfe5ab37069f8151d071c3b1ea82718aefde879861ebcb17c2470db693d5efda41413a267df2418e13922ce2aa65275d42e8ad40d30f6428dc30866362af4100dd736feb2d08767d102353fdec7750fc3522f0cafa46dda85babbf009e0b83c94ceec14dc83d3b5db2d7f30e32bb0d808f7ded256fce4823b8a3b3bdc000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0)

1.505600861s ago: executing program 1 (id=6015):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r2, &(0x7f0000000900)="a4", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4)
shutdown(r2, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
r4 = epoll_create1(0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f00000000c0))
ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x10)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xe0000012})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x80)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)

1.379761179s ago: executing program 1 (id=6016):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0xa0, 0x1405, 0x4, 0x70bd29, 0x25dfdbfd, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8010}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r1, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

1.337064708s ago: executing program 2 (id=6017):
socket$alg(0x26, 0x5, 0x0)
r0 = socket(0x23, 0x80805, 0x0)
listen(r0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffdfe, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

1.19154655s ago: executing program 4 (id=6018):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3)
r2 = socket$can_raw(0x1d, 0x3, 0x1) (async)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)=@buf={0xd0, &(0x7f0000000580)="0cab512a33d28c11a2d7db3aa3e5ba774c0060e3bda2f0fd006cba4cfeec5cfb11ba9b31e190f16f39ae8a60ef38e229dacf4cf704889f252f23896f0b911cd3868cdd4aa9798e282bb5b11356430eba41b32797807b567a7b67b27b7c6041508245ebd7c86f274926d2e9666d52c8cf3e024f5332eaa18c3ae4c61719304a3d4af572781be8aaf69c68660874d9482dfe23c30ed2c3a810e939d4a9223341eca39a74cc7772c0f04e0ee68404094f5d33b0ba195f17dc29b74eb280033e31797ed53b7dbc519ace29b627437b5a317d"}) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) (async)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000380)=0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010700000000000000002e"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0xe0000000, 0x8000}, 0x50)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff00000000800000110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a80000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r8, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x40)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r9)
sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r6, 0x4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a3100000000090001"], 0x14b0}}, 0x0) (async)
connect$llc(r11, &(0x7f0000000300)={0x1a, 0x339, 0x8, 0xc, 0x2, 0xb}, 0x10)

1.08579362s ago: executing program 2 (id=6019):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r1=>r0, 0x7098, 0x6, 0x4})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5cb, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x104, 0x1a, 0x1, 0x0, 0x0, "", [@nested={0xf4, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640d"]}]}, 0x104}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140"], 0xa4}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.08522958s ago: executing program 1 (id=6020):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6f0f4923d6000000000000800e0001006970366772657461700000001400028006000fbafd81efcebd8d83e02707"], 0x48}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x80}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x5, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xd94ac76b42879f9f}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711033000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x58, 0x140c, 0x800, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x801)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)

1.009166063s ago: executing program 4 (id=6021):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x2, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x200, 0x4)
sendmmsg$inet(r1, &(0x7f00000049c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="5d5ff9883c7a858a8e2659b069f9925b8f64172976084d06bab86f8818dbabc6bd9cdf22850db42064ab50a2a36fef3bef5a251d", 0x34}], 0x1}}], 0x1, 0x20000800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)

984.005336ms ago: executing program 2 (id=6022):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$ax25(0x3, 0x2, 0xce)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x15}, 0x8000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r6, 0x0, 0x40010)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="ea77158eff3b91d035c6837e7602585420822c5c22c32caedcf977a6ddee49523d3febfb9a27d72872434ae74fdc510975e6e488a769937673bdebb27aae5aa5f85b5f4fe40b93af5f31e1d4fcfb6a74ee99fa56", 0x54}, {&(0x7f0000000dc0)="9064533a7837407e683a09e451dd472e5f7aeef50aee94ac12f9fb32a0cce1fb5e534ad5d374dc00e818a685571957e1bef09c120c39c2396ef3d7e15f5877581d9e44c9fd79d22cc28ed899e4acffa42b5ce1a83273afc139a4acfbef126c783af5507886f6120404799e82fd9c52f23b9ac4076af50dccfc24f0ce35ed34e194f14cf1823788f09292f3cd0789e2f2d9556d63cdb77a059cd4bcf71980ba7da4440c217345cc49be28e49f9df1735aff9a53436d899ce9dcd18054a2a6995150ffd252d5a93136bd744f5d5b05af436ac730639dd83ab03250ba9b1dfbc54fc14c3575b462627a3ea50ceddabab31ec9a9f82f22b9dae044f75ecd687ccdaea93206958e72b7d8ca0f69bb1731e953639af370fb2b09949073b08abcb99ac0e2ebf8ccb6640894d2a1871ad1a8684b4148a3b28f5a97788586a643297e9a9479a2ad4cc4f2cb71e0f6241a16e953724d370a6c8c8c4931cf7dfc65eec03aaa3ab2fc8e99cefeb08b8e12f38450d51080e3978822b5fee62584c49ba2cf32a332c0824bfecda9ae17734b72a937eafcb123bb003d5ca94c2c68548bd6403f7b26c556efdd5ccb14e340a117872faf52efed1728243d17ce070c6bf611303ea5133097435721ee7d17d7aff64cfb2b38910c8a67dd00639c24b85f8f660995e4a1fe06b72f436ef0236a9431a3cae5bf79a22bd04220308119480c2b4e39a42b3458a834c0f3efa164c36e6025bc9d50db0654cac13c4fb15070ed57056a6e293f5e341a48249d4ddf78c38ddbc62f80a56b93615f2dd8c57f841c357576a0c3ab902dae463eb9c85a5a82a1ae9d6d338fcfc78893044b2c105e9ea039a5c3e4d7a07283a4cd0bb26cd8614d4236ef9a2528a7067c2d7a11a986c0b3c0654b3363cab96afdfeb6d2fecc091bb4f9b0f093ced28f84c10718a1ee55abca218f079bf5ecb8790f886bdb04023938d5e56bd7086e88638c1e05b98f3c9129f3a7e9483f659d1f37411b48a68e689363237940d737023865eeeba207a5e5e381ddc029ddfd0c9e666db18cad86661848fb6f3a0f62d46eaa490bc4e042aeb25d478a0385c39f150e69eeaafde7a91dc193a4c5889b16bd5cdccc73e4171007be0eee4fad582973f2730c269fcd495db4aed9f170c2d1f382d4cf9e9913e188a016f0ccdae047c4c2a7176b8b71f6f028956a6ca3c05068211ffdc0b828ea1e7b4c1765966555fb4bdd153c7a19b6d223f9277eca106eaeae629b251c621e06dcf7d1851df55d6b85c14cb231a1925b28b18c7c067d48c594773b6da50f329a4e8e2993411b96815032e80ec6096c951e94dd3fa6627945c24057e9d76af0fa72801f1dd4970756623da993cb83c0e1fe0328ccdfc887531d1d67a00d413137c5075539c22236cfe113055eee794f1dce7d8ee3e4dd3a6848b21d5e83a35ca758c3223590ff3f303abf2c4c65f7e9dd61af37781aade8dd2cdd71fa15f4f8da5b66a7d45ccbf237acdaf3a323db630b33f69ffada15362ad78f97c5852f3352f39950d7f727f1146272f83a33cbb6ab6e608f92f8ab2267f444c15f77b7c0309453cac215d7804358c383c12e194da7bbcb281db96126924afd2d8529d11e21404c3885b3e559924cfc4113e9aa3ee4355d9c3c187f548b444b40d1ce671708fceb5c1daab5c4877e5dd296ef46bed008821ef95ac9ae9bcc7c4246ad66421159036b7eb22906475074ac2f4b25ad27e90ca648c5da1334d173e730547e43262d3266f2854ac58609041c33a929f52ae8b59a240c52a7f7d7f9b5f4b49a4471acd51983d09d5749f1b48e2160bcdc328cc39b2aa31962cb4f3f78bc89f721dd854af777ddb8cd1f1f482617897e875cfed4a67e0c5e04572697d3e4bf63a59fca822d2945f8d9642a3577bd756f245d8c81bfe729168f472cb5", 0x557}], 0x2}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)='ni', 0x2}], 0x1}}], 0x2, 0x119e75c40673edef)

966.413938ms ago: executing program 1 (id=6023):
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4)
shutdown(0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x40044)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x8}, 0x1c)
sendmsg$nl_route(r0, 0x0, 0x0)

849.89572ms ago: executing program 3 (id=6024):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)=ANY=[@ANYBLOB="200000002f00010000000000fcdbdf251000f2800c00180008ac0f0000000000252fe816bfc9e76fd0c3895538d1ada0fb92e9ed4af26cb5ba2b0a17f27e4b4dea215e212195cbec38ece291da1ba4858b1daa7decb6c500000000"], 0x20}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0x23, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}]}, 0x10c}}, 0x0)

849.235073ms ago: executing program 4 (id=6025):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000f8ffffff000000008000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa20000000000000702000008000000b7040000010000038500000082000000181100"/68, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b70800000a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000001701000003000000ffff00000000000028000000000000001701000002"], 0x40}], 0x1, 0x40800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r6=>0x0})
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000300)={0x0, 0x1, 0x5, r6, 0x3}, 0xc)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaac7640e82496b0190004500002c0000fffd0011907800000000000000004e234e2000189078040000000e0000ff7f00000000000000"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7)
sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r3, 0x13, 0x0, 0x1cd0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', r6, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYBLOB="24e39362", @ANYRES8=r10], 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r12, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r12, 0x2f, 0x4, 0x24, 0x3, 0x2c, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7800, 0x6, 0x5}})

776.836886ms ago: executing program 3 (id=6026):
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x14)
socket$unix(0x1, 0x5, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x204, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x24010045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001800d000100"], 0x34}}, 0x0)
write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0)
close(0xffffffffffffffff)
close(r5)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
splice(r1, 0x0, r5, 0x0, 0x1100000000f336, 0x0)

721.034942ms ago: executing program 1 (id=6027):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000140)="1a36c5", 0x3}], 0x2)
unshare(0x6a040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b)
sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000", @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r6, 0x0, 0xfdef)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc41d6c9de4f40b08, 0x4, 0x5, 0x80000000, 0x1084, 0xffffffffffffffff, 0x6000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)

658.052953ms ago: executing program 4 (id=6028):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ac0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x80, r3, 0xe6852c1bdfe1ae3e, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x39}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0}, &(0x7f0000000080)=0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r10=>0x0})
r11 = gettid()
r12 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r10, @ANYBLOB="049c01000750050008001300", @ANYRES32=r11, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES64=r7, @ANYRES16], 0x24}, {&(0x7f0000000300)=ANY=[@ANYBLOB="24270000250004002bbd7000fcdbdf25d791d23e0dc4d7727fa118b36f8b01438015000e006fcca301cc1c6fc6c302d5d6312fbe46bb000000040037800400d6000800fa0003000000040005803563e80afa9f641f58bf3147cbd465e3ee75313b3d22f1065bd34d1352a207537ca5c21cc66d8d3b1e99903f134a1b14256cfe81942b9ba77597e47e9a0cee887090f98be65896137ab302dd30adc55f234d6e92d6c7ec4ed8fb0c3a19239a2eb7d630653b58ac0d65bf1e2544856d2c684b80bb439451f6ebe8303889582bf06adf2af334bbc871ba24e238fc00a1b9b7543b410c2b50b957c279c7374f708af459c24c34cf0c054d37129bc8d36f41070bec774fc1f6fb06c8b0910d1041bfed563150fbb7245b0769f4d1b326d5cc6de9df548a002436cd6215fd68535091d05c81860b4a49558fc12bce0d265be6a85fa867d48d26584053168f6ad514decac81d673c6eff9116e6447946af47e27a7f661d2ccb0b1d21235ae3da555fad26456d87f1e6c05d2dba20ad3cd8add652bf0c1150ae044049b7c24c2cd0a51fb52961d1e99d2b99e987c4b91323c80a7f417ffd17b75504000480007510b98053917678f4a54eef5a9df2993c18f03cb013be2e00bd67c4c9370ab0bbc75c10f21e6ab2a0b3f6dd2847c29765ac17ccefaeed8bbd1fde1cd5c85648bfbacaad230d0b5711d5e5bede80608cfd1bdae7de49356f8d08003200", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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"], 0x2724}], 0x2, 0x0, 0x0, 0x4040115}, 0x0)
recvmsg$can_raw(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002c00)=""/232, 0xe8}, {&(0x7f0000002d00)=""/83, 0x53}, {&(0x7f0000002d80)=""/3, 0x3}, {&(0x7f0000002dc0)=""/191, 0xbf}, {&(0x7f0000002e80)=""/72, 0x48}, {&(0x7f0000002f00)=""/226, 0xe2}], 0x6}, 0x10001)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@can_newroute={0x9c, 0x18, 0x2, 0x70bd27, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_LIM_HOPS={0x5, 0xd, 0xa}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "286a5d1e21749523"}, 0x1}}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "6b025e843aaff1ac"}}}, @CGW_LIM_HOPS={0x5, 0xd, 0xf}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "8e88e8921b4d108e"}, 0x2}}, @CGW_SRC_IF={0x8}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_MOD_UID={0x8, 0xe, r8}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "32b7e3d6e10b4ace"}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000010)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000280)={0x0, @adiantum, 0x0, @desc4})
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x65, 0x0, 0x3, 0x11, 0x0, @empty=0x300, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0)

418.233026ms ago: executing program 4 (id=6029):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}], {0x14}}, 0x78}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
select(0x40, &(0x7f0000000000)={0x6}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', <r4=>0x0, 0x29, 0x9, 0x3, 0xfffffe00, 0x3e, @local, @loopback, 0x727, 0x1, 0x9, 0x80000}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44855}, 0x240020c4)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

188.8985ms ago: executing program 4 (id=6030):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
recvfrom(r1, &(0x7f0000000200)=""/29, 0x1d, 0x140, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
r3 = socket$kcm(0x29, 0x2, 0x0)
close(r3)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
socket$kcm(0xa, 0x2, 0x88)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000ad00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf253800000008000300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

0s ago: executing program 2 (id=6031):
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x50241, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]})
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x6d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x6}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES8=r7], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_udp_int(r8, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x56ad)
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000240)={<r10=>r7, 0xff, 0x4b64, 0x1})
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r7, &(0x7f00000002c0)={0x2004})
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$rds(0x15, 0x5, 0x0)

kernel console output (not intermixed with test programs):

er #0 PREEMPT(full) 
[  551.981102][T24874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  551.981112][T24874] Call Trace:
[  551.981120][T24874]  <TASK>
[  551.981127][T24874]  dump_stack_lvl+0xe8/0x150
[  551.981155][T24874]  should_fail_ex+0x412/0x560
[  551.981181][T24874]  _copy_to_user+0x31/0xb0
[  551.981208][T24874]  bpf_prog_test_run_raw_tp+0x511/0x6c0
[  551.981233][T24874]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[  551.981253][T24874]  ? __fget_files+0x2a/0x420
[  551.981276][T24874]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[  551.981295][T24874]  bpf_prog_test_run+0x2c7/0x340
[  551.981319][T24874]  __sys_bpf+0x5cb/0x920
[  551.981338][T24874]  ? __pfx___sys_bpf+0x10/0x10
[  551.981370][T24874]  ? ksys_write+0x242/0x270
[  551.981397][T24874]  ? __pfx_ksys_write+0x10/0x10
[  551.981427][T24874]  __x64_sys_bpf+0x7c/0x90
[  551.981451][T24874]  do_syscall_64+0xe2/0xf80
[  551.981471][T24874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.981488][T24874]  ? trace_irq_disable+0x37/0x100
[  551.981505][T24874]  ? clear_bhb_loop+0x60/0xb0
[  551.981526][T24874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.981543][T24874] RIP: 0033:0x7f537019aeb9
[  551.981559][T24874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  551.981576][T24874] RSP: 002b:00007f53710ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  551.981594][T24874] RAX: ffffffffffffffda RBX: 00007f5370415fa0 RCX: 00007f537019aeb9
[  551.981616][T24874] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a
[  551.981628][T24874] RBP: 00007f53710ba090 R08: 0000000000000000 R09: 0000000000000000
[  551.981638][T24874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  551.981649][T24874] R13: 00007f5370416038 R14: 00007f5370415fa0 R15: 00007ffc31ae3d98
[  551.981677][T24874]  </TASK>
[  552.221212][T24884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5372'.
[  552.242315][T24879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5373'.
[  552.300508][T24889] netlink: 'syz.0.5378': attribute type 10 has an invalid length.
[  552.458678][T24899] netlink: 'syz.3.5382': attribute type 30 has an invalid length.
[  552.495817][T24899] bond2: option arp_missed_max: invalid value (0)
[  552.520662][T24899] bond2: option arp_missed_max: allowed values 1 - 255
[  552.561353][T24899] bond2 (unregistering): Released all slaves
[  552.561599][T24891] block nbd3: server does not support multiple connections per device.
[  552.588446][T24891] block nbd3: shutting down sockets
[  552.798644][T24916] FAULT_INJECTION: forcing a failure.
[  552.798644][T24916] name failslab, interval 1, probability 0, space 0, times 0
[  552.836198][T24916] CPU: 0 UID: 0 PID: 24916 Comm: syz.1.5385 Not tainted syzkaller #0 PREEMPT(full) 
[  552.836224][T24916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  552.836235][T24916] Call Trace:
[  552.836243][T24916]  <TASK>
[  552.836251][T24916]  dump_stack_lvl+0xe8/0x150
[  552.836279][T24916]  should_fail_ex+0x412/0x560
[  552.836305][T24916]  should_failslab+0xa8/0x100
[  552.836327][T24916]  __kmalloc_cache_noprof+0x83/0x6e0
[  552.836347][T24916]  ? __hw_addr_add_ex+0x1dc/0x650
[  552.836376][T24916]  __hw_addr_add_ex+0x1dc/0x650
[  552.836401][T24916]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  552.836427][T24916]  dev_addr_init+0x15e/0x240
[  552.836454][T24916]  ? __pfx_dev_addr_init+0x10/0x10
[  552.836489][T24916]  alloc_netdev_mqs+0x2b1/0x11b0
[  552.836506][T24916]  ? __pfx_vti6_dev_setup+0x10/0x10
[  552.836532][T24916]  vti6_locate+0x5d4/0x780
[  552.836564][T24916]  ? __pfx_vti6_locate+0x10/0x10
[  552.836584][T24916]  ? vti6_siocdevprivate+0x575/0x7a0
[  552.836608][T24916]  vti6_siocdevprivate+0x5a3/0x7a0
[  552.836630][T24916]  ? __pfx_vti6_siocdevprivate+0x10/0x10
[  552.836649][T24916]  ? trace_contention_end+0x39/0x100
[  552.836690][T24916]  ? full_name_hash+0xb0/0xe0
[  552.836714][T24916]  dev_ifsioc+0xba6/0x1280
[  552.836739][T24916]  dev_ioctl+0x84c/0x1150
[  552.836762][T24916]  sock_ioctl+0x75f/0x7f0
[  552.836780][T24916]  ? __pfx_sock_ioctl+0x10/0x10
[  552.836798][T24916]  ? __fget_files+0x3a0/0x420
[  552.836814][T24916]  ? __fget_files+0x2a/0x420
[  552.836835][T24916]  ? bpf_lsm_file_ioctl+0x9/0x20
[  552.836854][T24916]  ? __pfx_sock_ioctl+0x10/0x10
[  552.836871][T24916]  __se_sys_ioctl+0xfc/0x170
[  552.836896][T24916]  do_syscall_64+0xe2/0xf80
[  552.836915][T24916]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.836932][T24916]  ? trace_irq_disable+0x37/0x100
[  552.836949][T24916]  ? clear_bhb_loop+0x60/0xb0
[  552.836968][T24916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.836984][T24916] RIP: 0033:0x7fe1eab9aeb9
[  552.837000][T24916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  552.837016][T24916] RSP: 002b:00007fe1ebb08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  552.837036][T24916] RAX: ffffffffffffffda RBX: 00007fe1eae15fa0 RCX: 00007fe1eab9aeb9
[  552.837050][T24916] RDX: 0000200000000180 RSI: 00000000000089f1 RDI: 0000000000000003
[  552.837062][T24916] RBP: 00007fe1ebb08090 R08: 0000000000000000 R09: 0000000000000000
[  552.837074][T24916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  552.837085][T24916] R13: 00007fe1eae16038 R14: 00007fe1eae15fa0 R15: 00007ffe503ab228
[  552.837115][T24916]  </TASK>
[  553.116197][T24920] bond0: (slave bond_slave_0): Releasing backup interface
[  553.146248][T24920] bond0: (slave bond_slave_1): Releasing backup interface
[  553.210031][T24920] team0: Port device team_slave_0 removed
[  553.218234][T24920] team0: Port device team_slave_1 removed
[  553.225062][T24920] batman_adv: batadv0: Removing interface: batadv_slave_0
[  553.235878][T24920] batman_adv: batadv0: Removing interface: batadv_slave_1
[  553.245108][T24920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  553.313878][T24926] lo speed is unknown, defaulting to 1000
[  553.421815][T24933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5391'.
[  553.690638][T24946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5393'.
[  553.804192][T24944] ip6gre1: entered promiscuous mode
[  553.827994][T24944] ip6gre1: entered allmulticast mode
[  553.855993][T24952] netlink: 'syz.1.5397': attribute type 30 has an invalid length.
[  553.867646][T24945] lo speed is unknown, defaulting to 1000
[  553.955482][T24952] bond6: option arp_missed_max: invalid value (0)
[  553.974883][T24952] bond6: option arp_missed_max: allowed values 1 - 255
[  553.990255][T24952] bond6 (unregistering): Released all slaves
[  554.026625][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  554.034716][    C0] lec:lec_tx_timeout: lec0
[  554.039391][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  554.097833][T24965] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5401'.
[  554.237852][T24970] ip6tnl0: Caught tx_queue_len zero misconfig
[  554.742566][T24984] bond0: entered promiscuous mode
[  554.759290][T24984] batadv0: entered promiscuous mode
[  554.765388][T24984] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  554.778426][T24984] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  554.789454][T24984] 8021q: adding VLAN 0 to HW filter on device hsr1
[  554.798495][T24984] bond0: left promiscuous mode
[  554.804172][T24984] batadv0: left promiscuous mode
[  554.892836][T24990] FAULT_INJECTION: forcing a failure.
[  554.892836][T24990] name failslab, interval 1, probability 0, space 0, times 0
[  554.917162][T24990] CPU: 0 UID: 0 PID: 24990 Comm: syz.4.5411 Not tainted syzkaller #0 PREEMPT(full) 
[  554.917190][T24990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  554.917201][T24990] Call Trace:
[  554.917209][T24990]  <TASK>
[  554.917225][T24990]  dump_stack_lvl+0xe8/0x150
[  554.917253][T24990]  should_fail_ex+0x412/0x560
[  554.917279][T24990]  should_failslab+0xa8/0x100
[  554.917300][T24990]  kmem_cache_alloc_noprof+0x87/0x6e0
[  554.917322][T24990]  ? __netlink_lookup+0xc6/0x8b0
[  554.917343][T24990]  ? skb_clone+0x212/0x3a0
[  554.917369][T24990]  skb_clone+0x212/0x3a0
[  554.917393][T24990]  __netlink_deliver_tap+0x404/0x850
[  554.917423][T24990]  ? netlink_deliver_tap+0x2e/0x1b0
[  554.917443][T24990]  netlink_deliver_tap+0x19c/0x1b0
[  554.917463][T24990]  netlink_unicast+0x7e3/0x9b0
[  554.917487][T24990]  ? __pfx_netlink_unicast+0x10/0x10
[  554.917507][T24990]  ? netlink_sendmsg+0x650/0xb40
[  554.917524][T24990]  ? skb_put+0x11b/0x210
[  554.917546][T24990]  netlink_sendmsg+0x813/0xb40
[  554.917573][T24990]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.917596][T24990]  ? aa_sock_msg_perm+0xf1/0x1b0
[  554.917620][T24990]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  554.917639][T24990]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.917658][T24990]  ____sys_sendmsg+0xa68/0xad0
[  554.917680][T24990]  ? __might_fault+0xaf/0x130
[  554.917708][T24990]  ? __pfx_____sys_sendmsg+0x10/0x10
[  554.917736][T24990]  ? import_iovec+0x73/0xa0
[  554.917764][T24990]  ___sys_sendmsg+0x2a5/0x360
[  554.917786][T24990]  ? __lock_acquire+0x6b5/0x2cf0
[  554.917814][T24990]  ? __pfx____sys_sendmsg+0x10/0x10
[  554.917867][T24990]  ? __fget_files+0x2a/0x420
[  554.917886][T24990]  ? __fget_files+0x3a0/0x420
[  554.917913][T24990]  __x64_sys_sendmsg+0x1bd/0x2a0
[  554.917939][T24990]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  554.917968][T24990]  ? __pfx_ksys_write+0x10/0x10
[  554.918000][T24990]  do_syscall_64+0xe2/0xf80
[  554.918019][T24990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.918036][T24990]  ? trace_irq_disable+0x37/0x100
[  554.918052][T24990]  ? clear_bhb_loop+0x60/0xb0
[  554.918072][T24990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.918090][T24990] RIP: 0033:0x7f7714f9aeb9
[  554.918106][T24990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.918122][T24990] RSP: 002b:00007f7715dda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  554.918142][T24990] RAX: ffffffffffffffda RBX: 00007f7715215fa0 RCX: 00007f7714f9aeb9
[  554.918155][T24990] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000004
[  554.918167][T24990] RBP: 00007f7715dda090 R08: 0000000000000000 R09: 0000000000000000
[  554.918179][T24990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.918189][T24990] R13: 00007f7715216038 R14: 00007f7715215fa0 R15: 00007ffc15c90288
[  554.918225][T24990]  </TASK>
[  554.925005][T24990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5411'.
[  555.855364][T25029] lo speed is unknown, defaulting to 1000
[  556.038795][T25038] vlan3: entered promiscuous mode
[  556.050748][T25038] team0: entered promiscuous mode
[  556.056926][T25038] team_slave_0: entered promiscuous mode
[  556.098616][T25038] team_slave_1: entered promiscuous mode
[  556.401832][T25055] __nla_validate_parse: 3 callbacks suppressed
[  556.401853][T25055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5431'.
[  556.565786][T25068] netlink: 'syz.3.5437': attribute type 137 has an invalid length.
[  556.750823][T25068] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5437'.
[  556.937487][T25082] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  557.028562][T25091] lo: Caught tx_queue_len zero misconfig
[  557.115349][T25091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5443'.
[  557.161364][T25098] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5444'.
[  557.221104][T25101] netlink: 'syz.1.5446': attribute type 2 has an invalid length.
[  557.259190][T25102] netlink: 'syz.1.5446': attribute type 2 has an invalid length.
[  557.271276][T25101] !©�9: entered promiscuous mode
[  557.291364][T25101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5446'.
[  557.305559][T25102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5446'.
[  557.317352][T25105] FAULT_INJECTION: forcing a failure.
[  557.317352][T25105] name failslab, interval 1, probability 0, space 0, times 0
[  557.346690][T25105] CPU: 1 UID: 0 PID: 25105 Comm: syz.3.5447 Not tainted syzkaller #0 PREEMPT(full) 
[  557.346715][T25105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  557.346726][T25105] Call Trace:
[  557.346735][T25105]  <TASK>
[  557.346743][T25105]  dump_stack_lvl+0xe8/0x150
[  557.346771][T25105]  should_fail_ex+0x412/0x560
[  557.346799][T25105]  should_failslab+0xa8/0x100
[  557.346821][T25105]  __kmalloc_cache_noprof+0x83/0x6e0
[  557.346840][T25105]  ? sctp_add_bind_addr+0x8c/0x370
[  557.346864][T25105]  sctp_add_bind_addr+0x8c/0x370
[  557.346887][T25105]  sctp_copy_local_addr_list+0x314/0x4f0
[  557.346910][T25105]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  557.346928][T25105]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  557.346950][T25105]  ? sctp_v4_is_any+0x35/0x60
[  557.346973][T25105]  ? sctp_copy_one_addr+0x93/0x360
[  557.346996][T25105]  sctp_bind_addr_copy+0xb3/0x3c0
[  557.347022][T25105]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  557.347052][T25105]  sctp_connect_new_asoc+0x2ff/0x6b0
[  557.347078][T25105]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  557.347107][T25105]  ? __local_bh_enable_ip+0xd0/0x130
[  557.347123][T25105]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  557.347148][T25105]  ? security_sctp_bind_connect+0x7e/0x2c0
[  557.347169][T25105]  sctp_sendmsg+0x1528/0x2c10
[  557.347206][T25105]  ? __pfx_sctp_sendmsg+0x10/0x10
[  557.347227][T25105]  ? aa_sk_perm+0x15a/0x960
[  557.347249][T25105]  ? aa_sk_perm+0x82d/0x960
[  557.347275][T25105]  ? __pfx_aa_sk_perm+0x10/0x10
[  557.347298][T25105]  ? sock_rps_record_flow+0x19/0x400
[  557.347325][T25105]  ? inet_sendmsg+0x2f4/0x370
[  557.347353][T25105]  ____sys_sendmsg+0x894/0xad0
[  557.347385][T25105]  ? __pfx_____sys_sendmsg+0x10/0x10
[  557.347417][T25105]  ? import_iovec+0x73/0xa0
[  557.347447][T25105]  ___sys_sendmsg+0x2a5/0x360
[  557.347468][T25105]  ? __lock_acquire+0x6b5/0x2cf0
[  557.347496][T25105]  ? __pfx____sys_sendmsg+0x10/0x10
[  557.347524][T25105]  ? kstrtouint+0x6e/0xe0
[  557.347570][T25105]  ? __fget_files+0x2a/0x420
[  557.347589][T25105]  ? __fget_files+0x3a0/0x420
[  557.347618][T25105]  __sys_sendmmsg+0x27c/0x4e0
[  557.347646][T25105]  ? __pfx___sys_sendmmsg+0x10/0x10
[  557.347667][T25105]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  557.347712][T25105]  ? ksys_write+0x242/0x270
[  557.347739][T25105]  ? __pfx_ksys_write+0x10/0x10
[  557.347769][T25105]  __x64_sys_sendmmsg+0xa0/0xc0
[  557.347795][T25105]  do_syscall_64+0xe2/0xf80
[  557.347815][T25105]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.347848][T25105]  ? trace_irq_disable+0x37/0x100
[  557.347866][T25105]  ? clear_bhb_loop+0x60/0xb0
[  557.347887][T25105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.347904][T25105] RIP: 0033:0x7f1e5db9aeb9
[  557.347920][T25105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  557.347936][T25105] RSP: 002b:00007f1e5ea49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  557.347956][T25105] RAX: ffffffffffffffda RBX: 00007f1e5de15fa0 RCX: 00007f1e5db9aeb9
[  557.347969][T25105] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000005
[  557.347981][T25105] RBP: 00007f1e5ea49090 R08: 0000000000000000 R09: 0000000000000000
[  557.347993][T25105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  557.348010][T25105] R13: 00007f1e5de16038 R14: 00007f1e5de15fa0 R15: 00007ffda2579aa8
[  557.348041][T25105]  </TASK>
[  557.349007][T25101] syzkaller1: entered promiscuous mode
[  557.693096][T25101] syzkaller1: entered allmulticast mode
[  557.703979][T25110] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5450'.
[  557.930656][T25121] lo speed is unknown, defaulting to 1000
[  558.046839][T25130] netlink: 'syz.0.5454': attribute type 137 has an invalid length.
[  558.197827][T25130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5454'.
[  558.435659][T25141] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  558.787307][T25161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5461'.
[  558.825978][T25161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5461'.
[  558.967512][T25121] netlink: 'syz.4.5452': attribute type 4 has an invalid length.
[  559.029322][T25171] FAULT_INJECTION: forcing a failure.
[  559.029322][T25171] name failslab, interval 1, probability 0, space 0, times 0
[  559.042500][T25171] CPU: 0 UID: 0 PID: 25171 Comm: syz.1.5465 Not tainted syzkaller #0 PREEMPT(full) 
[  559.042524][T25171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  559.042536][T25171] Call Trace:
[  559.042544][T25171]  <TASK>
[  559.042552][T25171]  dump_stack_lvl+0xe8/0x150
[  559.042580][T25171]  should_fail_ex+0x412/0x560
[  559.042605][T25171]  should_failslab+0xa8/0x100
[  559.042627][T25171]  __kmalloc_cache_noprof+0x83/0x6e0
[  559.042646][T25171]  ? alloc_fs_context+0x64/0xd60
[  559.042672][T25171]  alloc_fs_context+0x64/0xd60
[  559.042701][T25171]  mq_init_ns+0x110/0x760
[  559.042721][T25171]  copy_ipcs+0x460/0x6c0
[  559.042744][T25171]  create_new_namespaces+0x210/0x6a0
[  559.042771][T25171]  ? bpf_lsm_capable+0x9/0x20
[  559.042794][T25171]  ? security_capable+0x7e/0x2c0
[  559.042830][T25171]  unshare_nsproxy_namespaces+0x11a/0x160
[  559.042858][T25171]  ksys_unshare+0x4f4/0x900
[  559.042886][T25171]  ? __pfx_ksys_unshare+0x10/0x10
[  559.042907][T25171]  ? __pfx_ksys_write+0x10/0x10
[  559.042941][T25171]  __x64_sys_unshare+0x38/0x50
[  559.042961][T25171]  do_syscall_64+0xe2/0xf80
[  559.042981][T25171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.042998][T25171]  ? trace_irq_disable+0x37/0x100
[  559.043016][T25171]  ? clear_bhb_loop+0x60/0xb0
[  559.043037][T25171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.043054][T25171] RIP: 0033:0x7fe1eab9aeb9
[  559.043071][T25171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  559.043088][T25171] RSP: 002b:00007fe1ebb08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  559.043107][T25171] RAX: ffffffffffffffda RBX: 00007fe1eae15fa0 RCX: 00007fe1eab9aeb9
[  559.043121][T25171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400
[  559.043133][T25171] RBP: 00007fe1ebb08090 R08: 0000000000000000 R09: 0000000000000000
[  559.043144][T25171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  559.043155][T25171] R13: 00007fe1eae16038 R14: 00007fe1eae15fa0 R15: 00007ffe503ab228
[  559.043183][T25171]  </TASK>
[  559.153789][T25173] netlink: 'syz.3.5466': attribute type 137 has an invalid length.
[  559.160118][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5120 ms
[  559.267103][    C0] lec:lec_tx_timeout: lec0
[  559.272282][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  559.945901][T25209] tipc: Failed to remove unknown binding: 66,0,0/10005162:365834421/365834422
[  559.976843][T25209] tipc: Failed to remove unknown binding: 66,0,0/10005162:365834421/365834422
[  560.053224][T25218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  560.135628][T25218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  560.184701][T25218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  560.226724][T25218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  560.245494][T25230] netlink: 'syz.3.5481': attribute type 29 has an invalid length.
[  560.294887][T25231] netlink: 'syz.3.5481': attribute type 29 has an invalid length.
[  560.528485][T25250] tipc: Resetting bearer <eth:syzkaller0>
[  560.590590][T25249] tipc: Resetting bearer <eth:syzkaller0>
[  560.930840][T25263] ip6tnl0: Caught tx_queue_len zero misconfig
[  560.972498][T25263] sctp: [Deprecated]: syz.3.5488 (pid 25263) Use of struct sctp_assoc_value in delayed_ack socket option.
[  560.972498][T25263] Use struct sctp_sack_info instead
[  561.182126][T25273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  561.225535][T25273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  561.278592][T25273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  561.309949][T25273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  561.443847][T25289] netlink: 'syz.4.5497': attribute type 137 has an invalid length.
[  561.559639][T25284] __nla_validate_parse: 70 callbacks suppressed
[  561.559658][T25284] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5497'.
[  561.610078][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5498'.
[  561.622721][ T3488] tipc: Resetting bearer <eth:syzkaller0>
[  561.730066][T25286] lo speed is unknown, defaulting to 1000
[  561.876058][T25298] lo speed is unknown, defaulting to 1000
[  561.974007][T25304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5499'.
[  562.639110][T25331] netlink: 'syz.1.5510': attribute type 137 has an invalid length.
[  562.707484][T25337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.787322][T25331] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5510'.
[  562.823252][T25337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5512'.
[  562.833787][T25337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.883840][T25337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.895431][T25337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  563.084594][T25351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5515'.
[  563.264953][T25365] FAULT_INJECTION: forcing a failure.
[  563.264953][T25365] name failslab, interval 1, probability 0, space 0, times 0
[  563.285158][T25365] CPU: 1 UID: 0 PID: 25365 Comm: syz.2.5520 Not tainted syzkaller #0 PREEMPT(full) 
[  563.285182][T25365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  563.285193][T25365] Call Trace:
[  563.285201][T25365]  <TASK>
[  563.285209][T25365]  dump_stack_lvl+0xe8/0x150
[  563.285238][T25365]  should_fail_ex+0x412/0x560
[  563.285264][T25365]  should_failslab+0xa8/0x100
[  563.285285][T25365]  __kvmalloc_node_noprof+0x166/0x8d0
[  563.285307][T25365]  ? alloc_netdev_mqs+0xa6/0x11b0
[  563.285329][T25365]  alloc_netdev_mqs+0xa6/0x11b0
[  563.285344][T25365]  ? __pfx_ipgre_tap_setup+0x10/0x10
[  563.285371][T25365]  rtnl_create_link+0x31f/0xd70
[  563.285404][T25365]  rtnl_newlink_create+0x277/0xb70
[  563.285427][T25365]  ? __pfx___nla_validate_parse+0x10/0x10
[  563.285461][T25365]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  563.285488][T25365]  ? __pfx___mutex_lock+0x10/0x10
[  563.285518][T25365]  ? ns_capable+0x89/0xe0
[  563.285546][T25365]  rtnl_newlink+0x1666/0x1be0
[  563.285582][T25365]  ? __pfx_rtnl_newlink+0x10/0x10
[  563.285603][T25365]  ? is_bpf_text_address+0x26/0x2b0
[  563.285628][T25365]  ? __lock_acquire+0x6b5/0x2cf0
[  563.285659][T25365]  ? __lock_acquire+0x6b5/0x2cf0
[  563.285684][T25365]  ? __lock_acquire+0x6b5/0x2cf0
[  563.285717][T25365]  ? unwind_next_frame+0xa5/0x23c0
[  563.285743][T25365]  ? unwind_next_frame+0xa5/0x23c0
[  563.285766][T25365]  ? is_bpf_text_address+0x26/0x2b0
[  563.285792][T25365]  ? __lock_acquire+0x6b5/0x2cf0
[  563.285824][T25365]  ? is_bpf_text_address+0x292/0x2b0
[  563.285843][T25365]  ? is_bpf_text_address+0x26/0x2b0
[  563.285874][T25365]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  563.285908][T25365]  ? __pfx_rtnl_newlink+0x10/0x10
[  563.285928][T25365]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  563.285952][T25365]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  563.285972][T25365]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  563.285992][T25365]  ? __lock_acquire+0x6b5/0x2cf0
[  563.286029][T25365]  netlink_rcv_skb+0x232/0x4b0
[  563.286058][T25365]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  563.286081][T25365]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  563.286112][T25365]  ? netlink_deliver_tap+0x2e/0x1b0
[  563.286138][T25365]  netlink_unicast+0x80f/0x9b0
[  563.286163][T25365]  ? __pfx_netlink_unicast+0x10/0x10
[  563.286181][T25365]  ? netlink_sendmsg+0x650/0xb40
[  563.286197][T25365]  ? skb_put+0x11b/0x210
[  563.286220][T25365]  netlink_sendmsg+0x813/0xb40
[  563.286248][T25365]  ? __pfx_netlink_sendmsg+0x10/0x10
[  563.286271][T25365]  ? aa_sock_msg_perm+0xf1/0x1b0
[  563.286294][T25365]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  563.286314][T25365]  ? __pfx_netlink_sendmsg+0x10/0x10
[  563.286331][T25365]  ____sys_sendmsg+0xa68/0xad0
[  563.286353][T25365]  ? __might_fault+0xaf/0x130
[  563.286382][T25365]  ? __pfx_____sys_sendmsg+0x10/0x10
[  563.286423][T25365]  ? import_iovec+0x73/0xa0
[  563.286451][T25365]  ___sys_sendmsg+0x2a5/0x360
[  563.286473][T25365]  ? __lock_acquire+0x6b5/0x2cf0
[  563.286500][T25365]  ? __pfx____sys_sendmsg+0x10/0x10
[  563.286561][T25365]  ? __fget_files+0x2a/0x420
[  563.286578][T25365]  ? __fget_files+0x3a0/0x420
[  563.286603][T25365]  __x64_sys_sendmsg+0x1bd/0x2a0
[  563.286627][T25365]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  563.286657][T25365]  ? __pfx_ksys_write+0x10/0x10
[  563.286690][T25365]  do_syscall_64+0xe2/0xf80
[  563.286710][T25365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.286727][T25365]  ? trace_irq_disable+0x37/0x100
[  563.286743][T25365]  ? clear_bhb_loop+0x60/0xb0
[  563.286764][T25365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.286781][T25365] RIP: 0033:0x7f5832f9aeb9
[  563.286798][T25365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  563.286814][T25365] RSP: 002b:00007f5833f41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  563.286834][T25365] RAX: ffffffffffffffda RBX: 00007f5833215fa0 RCX: 00007f5832f9aeb9
[  563.286848][T25365] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  563.286860][T25365] RBP: 00007f5833f41090 R08: 0000000000000000 R09: 0000000000000000
[  563.286871][T25365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  563.286883][T25365] R13: 00007f5833216038 R14: 00007f5833215fa0 R15: 00007fff7a6e47f8
[  563.286912][T25365]  </TASK>
[  563.697714][T25357] FAULT_INJECTION: forcing a failure.
[  563.697714][T25357] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  563.726397][T25357] CPU: 0 UID: 0 PID: 25357 Comm: syz.3.5518 Not tainted syzkaller #0 PREEMPT(full) 
[  563.726423][T25357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  563.726435][T25357] Call Trace:
[  563.726443][T25357]  <TASK>
[  563.726451][T25357]  dump_stack_lvl+0xe8/0x150
[  563.726480][T25357]  should_fail_ex+0x412/0x560
[  563.726507][T25357]  _copy_from_user+0x2d/0xb0
[  563.726534][T25357]  ___sys_sendmsg+0x1c6/0x360
[  563.726560][T25357]  ? __lock_acquire+0x6b5/0x2cf0
[  563.726585][T25357]  ? __pfx____sys_sendmsg+0x10/0x10
[  563.726638][T25357]  ? __fget_files+0x2a/0x420
[  563.726665][T25357]  ? __fget_files+0x3a0/0x420
[  563.726694][T25357]  __x64_sys_sendmsg+0x1bd/0x2a0
[  563.726721][T25357]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  563.726753][T25357]  ? __pfx_ksys_write+0x10/0x10
[  563.726788][T25357]  do_syscall_64+0xe2/0xf80
[  563.726809][T25357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.726826][T25357]  ? trace_irq_disable+0x37/0x100
[  563.726843][T25357]  ? clear_bhb_loop+0x60/0xb0
[  563.726865][T25357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.726882][T25357] RIP: 0033:0x7f1e5db9aeb9
[  563.726899][T25357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  563.726916][T25357] RSP: 002b:00007f1e5ea49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  563.726936][T25357] RAX: ffffffffffffffda RBX: 00007f1e5de15fa0 RCX: 00007f1e5db9aeb9
[  563.726949][T25357] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000003
[  563.726962][T25357] RBP: 00007f1e5ea49090 R08: 0000000000000000 R09: 0000000000000000
[  563.726974][T25357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  563.726986][T25357] R13: 00007f1e5de16038 R14: 00007f1e5de15fa0 R15: 00007ffda2579aa8
[  563.727016][T25357]  </TASK>
[  563.954972][T25375] netlink: 'syz.0.5522': attribute type 39 has an invalid length.
[  564.034223][T25378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5522'.
[  564.071545][T25380] netlink: 'syz.1.5524': attribute type 137 has an invalid length.
[  564.185653][T25380] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5524'.
[  564.418975][T25396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5530'.
[  564.564170][T25404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.649084][T25410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5532'.
[  564.656527][T25401] lo speed is unknown, defaulting to 1000
[  564.696423][T25410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.827059][T25404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.865634][T25404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.964318][T25429] netlink: 'syz.0.5537': attribute type 21 has an invalid length.
[  565.083815][T25433] netlink: 'syz.0.5539': attribute type 137 has an invalid length.
[  565.375431][T25444] FAULT_INJECTION: forcing a failure.
[  565.375431][T25444] name failslab, interval 1, probability 0, space 0, times 0
[  565.389282][T25444] CPU: 0 UID: 0 PID: 25444 Comm: syz.0.5541 Not tainted syzkaller #0 PREEMPT(full) 
[  565.389307][T25444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  565.389319][T25444] Call Trace:
[  565.389327][T25444]  <TASK>
[  565.389335][T25444]  dump_stack_lvl+0xe8/0x150
[  565.389362][T25444]  should_fail_ex+0x412/0x560
[  565.389388][T25444]  should_failslab+0xa8/0x100
[  565.389410][T25444]  __kmalloc_cache_noprof+0x83/0x6e0
[  565.389429][T25444]  ? sctp_add_bind_addr+0x8c/0x370
[  565.389453][T25444]  sctp_add_bind_addr+0x8c/0x370
[  565.389476][T25444]  sctp_copy_local_addr_list+0x314/0x4f0
[  565.389499][T25444]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  565.389520][T25444]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  565.389541][T25444]  ? sctp_v6_is_any+0x64/0x80
[  565.389562][T25444]  ? sctp_copy_one_addr+0x93/0x360
[  565.389584][T25444]  sctp_bind_addr_copy+0xb3/0x3c0
[  565.389605][T25444]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  565.389634][T25444]  sctp_connect_new_asoc+0x2ff/0x6b0
[  565.389660][T25444]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  565.389689][T25444]  ? sctp_get_af_specific+0x29/0x80
[  565.389708][T25444]  ? sctp_inet6_send_verify+0x80/0x300
[  565.389726][T25444]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  565.389752][T25444]  __sctp_connect+0x5cb/0xdc0
[  565.389786][T25444]  ? __pfx___sctp_connect+0x10/0x10
[  565.389808][T25444]  ? security_sctp_bind_connect+0x7e/0x2c0
[  565.389830][T25444]  ? __sctp_setsockopt_connectx+0xc7/0x190
[  565.389851][T25444]  sctp_getsockopt_connectx3+0x227/0x360
[  565.389869][T25444]  ? lock_sock_nested+0x6a/0x100
[  565.389889][T25444]  ? __pfx_sctp_getsockopt_connectx3+0x10/0x10
[  565.389918][T25444]  ? __local_bh_enable_ip+0xd0/0x130
[  565.389939][T25444]  sctp_getsockopt+0x984/0xb90
[  565.389960][T25444]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  565.389980][T25444]  do_sock_getsockopt+0x2d3/0x3f0
[  565.390005][T25444]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  565.390029][T25444]  ? __fget_files+0x3a0/0x420
[  565.390047][T25444]  ? __fget_files+0x2a/0x420
[  565.390076][T25444]  __x64_sys_getsockopt+0x1a4/0x240
[  565.390108][T25444]  do_syscall_64+0xe2/0xf80
[  565.390128][T25444]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.390145][T25444]  ? trace_irq_disable+0x37/0x100
[  565.390161][T25444]  ? clear_bhb_loop+0x60/0xb0
[  565.390188][T25444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.390205][T25444] RIP: 0033:0x7f537019aeb9
[  565.390222][T25444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.390238][T25444] RSP: 002b:00007f53710ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  565.390257][T25444] RAX: ffffffffffffffda RBX: 00007f5370415fa0 RCX: 00007f537019aeb9
[  565.390270][T25444] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004
[  565.390281][T25444] RBP: 00007f53710ba090 R08: 0000200000000440 R09: 0000000000000000
[  565.390293][T25444] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[  565.390304][T25444] R13: 00007f5370416038 R14: 00007f5370415fa0 R15: 00007ffc31ae3d98
[  565.390336][T25444]  </TASK>
[  565.699100][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6420 ms
[  565.707135][    C0] lec:lec_tx_timeout: lec0
[  565.712284][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  566.111679][T25464] netlink: 'syz.0.5548': attribute type 1 has an invalid length.
[  566.135307][T25464] netlink: 'syz.0.5548': attribute type 1 has an invalid length.
[  566.202899][T25472] netlink: 'syz.1.5551': attribute type 137 has an invalid length.
[  566.359427][T25479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.441954][T25485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.585756][T25499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.636210][T25499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.646063][T25503] netlink: 'syz.0.5559': attribute type 29 has an invalid length.
[  566.648143][T25503] __nla_validate_parse: 15 callbacks suppressed
[  566.648159][T25503] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5559'.
[  566.662794][T25485] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5553'.
[  566.781594][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5562'.
[  567.043515][T25526] lo speed is unknown, defaulting to 1000
[  567.106749][T25534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5567'.
[  567.536880][T25521] wg1: entered promiscuous mode
[  567.556807][T25521] wg1: entered allmulticast mode
[  567.609666][T25551] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5570'.
[  567.672800][T25551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5570'.
[  567.768305][T25560] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  567.907424][T25567] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5575'.
[  567.917115][T25567] nbd: illegal input index 65508
[  568.140043][ T5844] Bluetooth: hci1: link tx timeout
[  568.145939][ T5844] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  568.162823][ T5845] Bluetooth: hci1: link tx timeout
[  568.172348][ T5845] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  568.262463][T25563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5573'.
[  568.297934][T25565] vxlan0: entered promiscuous mode
[  568.303088][T25565] vxlan0: entered allmulticast mode
[  568.308836][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  568.349727][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  568.387581][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  568.395810][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  568.471330][ T5845] Bluetooth: hci1: link tx timeout
[  568.476538][ T5845] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  568.497925][ T5845] Bluetooth: hci1: link tx timeout
[  568.503084][ T5845] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  568.565038][T25583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5579'.
[  568.580045][T25582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  568.640034][T25583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5579'.
[  568.661248][T25582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  568.715750][T25582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  568.926749][T25603] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  569.093044][T25614] syzkaller0: entered promiscuous mode
[  569.098772][T25614] syzkaller0: entered allmulticast mode
[  569.106099][ T5845] Bluetooth: hci1: link tx timeout
[  569.114905][ T5845] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  569.147514][ T5845] Bluetooth: hci1: link tx timeout
[  569.152672][ T5845] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  569.703731][T21881] udevd[21881]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  569.777962][T25642] FAULT_INJECTION: forcing a failure.
[  569.777962][T25642] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  569.810081][T25639] vlan2: entered promiscuous mode
[  569.836304][T25642] CPU: 1 UID: 0 PID: 25642 Comm: syz.2.5591 Not tainted syzkaller #0 PREEMPT(full) 
[  569.836330][T25642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  569.836340][T25642] Call Trace:
[  569.836347][T25642]  <TASK>
[  569.836355][T25642]  dump_stack_lvl+0xe8/0x150
[  569.836383][T25642]  should_fail_ex+0x412/0x560
[  569.836409][T25642]  _copy_from_user+0x2d/0xb0
[  569.836435][T25642]  ___sys_recvmsg+0x175/0x590
[  569.836466][T25642]  ? __pfx____sys_recvmsg+0x10/0x10
[  569.836494][T25642]  ? __fget_files+0x2a/0x420
[  569.836541][T25642]  do_recvmmsg+0x334/0x800
[  569.836573][T25642]  ? __pfx_do_recvmmsg+0x10/0x10
[  569.836605][T25642]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  569.836645][T25642]  __x64_sys_recvmmsg+0x198/0x250
[  569.836671][T25642]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  569.836700][T25642]  do_syscall_64+0xe2/0xf80
[  569.836717][T25642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.836731][T25642]  ? trace_irq_disable+0x37/0x100
[  569.836748][T25642]  ? clear_bhb_loop+0x60/0xb0
[  569.836758][T25639] bridge0: entered promiscuous mode
[  569.836767][T25642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.836792][T25642] RIP: 0033:0x7f5832f9aeb9
[  569.836805][T25642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.836825][T25642] RSP: 002b:00007f5833f41028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  569.836842][T25642] RAX: ffffffffffffffda RBX: 00007f5833215fa0 RCX: 00007f5832f9aeb9
[  569.836854][T25642] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004
[  569.836866][T25642] RBP: 00007f5833f41090 R08: 0000000000000000 R09: 0000000000000000
[  569.836877][T25642] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[  569.836888][T25642] R13: 00007f5833216038 R14: 00007f5833215fa0 R15: 00007fff7a6e47f8
[  569.836917][T25642]  </TASK>
[  570.147446][ T5845] Bluetooth: hci1: link tx timeout
[  570.153138][ T5845] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  570.170085][ T5845] Bluetooth: hci1: link tx timeout
[  570.175320][ T5845] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  570.186800][ T5845] Bluetooth: hci1: command 0x0405 tx timeout
[  570.190201][T25656] netlink: 'syz.3.5596': attribute type 30 has an invalid length.
[  570.295901][T25656] bond2: option arp_missed_max: invalid value (0)
[  570.304870][T25656] bond2: option arp_missed_max: allowed values 1 - 255
[  570.333528][T25656] bond2 (unregistering): Released all slaves
[  570.381029][T25670] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  570.401702][T25674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  570.415844][T25674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  570.441070][T25674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  570.452584][T25674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  570.461003][T25677] netlink: 'syz.0.5601': attribute type 19 has an invalid length.
[  570.492177][T25677] netlink: 'syz.0.5601': attribute type 19 has an invalid length.
[  570.492217][ T1306] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  570.509148][ T1306] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  570.518681][ T1306] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  570.527333][ T1306] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  570.750532][T25689] ip6t_srh: unknown srh invflags BA61
[  570.811171][T25693] netlink: 'syz.0.5607': attribute type 30 has an invalid length.
[  570.853606][T25693] bond3: option arp_missed_max: invalid value (0)
[  570.860231][T25693] bond3: option arp_missed_max: allowed values 1 - 255
[  570.870429][T25693] bond3 (unregistering): Released all slaves
[  571.226589][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms
[  571.234658][    C0] lec:lec_tx_timeout: lec0
[  571.239669][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  571.454839][T25737] netlink: 'syz.2.5622': attribute type 30 has an invalid length.
[  571.498427][T25737] bond6: option arp_missed_max: invalid value (0)
[  571.501580][T25740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  571.505215][T25737] bond6: option arp_missed_max: allowed values 1 - 255
[  571.525139][T25737] bond6 (unregistering): Released all slaves
[  571.604980][T25748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  571.727423][T25748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  571.741386][T25748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  571.770374][T25740] __nla_validate_parse: 21 callbacks suppressed
[  571.770393][T25740] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5623'.
[  571.902192][T25765] netlink: 320 bytes leftover after parsing attributes in process `syz.2.5627'.
[  571.911638][T25766] netlink: 320 bytes leftover after parsing attributes in process `syz.2.5627'.
[  572.120662][T25778] syzkaller0: entered promiscuous mode
[  572.137539][T25778] syzkaller0: entered allmulticast mode
[  572.245635][T25785] Cannot find add_set index 0 as target
[  572.310581][T25787] netlink: 'syz.0.5634': attribute type 30 has an invalid length.
[  572.379456][T25789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5635'.
[  572.402522][T25787] bond3: option arp_missed_max: invalid value (0)
[  572.409420][T25787] bond3: option arp_missed_max: allowed values 1 - 255
[  572.433554][T25787] bond3 (unregistering): Released all slaves
[  572.479168][T25794] veth3: entered promiscuous mode
[  572.521714][T25798] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  572.648542][T25810] netlink: 'syz.4.5642': attribute type 8 has an invalid length.
[  572.671254][T25807] netlink: 'syz.4.5642': attribute type 8 has an invalid length.
[  572.684183][T25809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5641'.
[  572.700589][T25807] netlink: 'syz.4.5642': attribute type 4 has an invalid length.
[  572.728580][T25810] netlink: 'syz.4.5642': attribute type 4 has an invalid length.
[  572.745579][T25810] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5642'.
[  572.764817][T25807] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5642'.
[  572.892638][T25825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  572.908636][T25825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5646'.
[  572.920253][T25825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  572.959415][T25825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  572.995628][T25825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.033513][T25825] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5646'.
[  573.071847][T25832] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5647'.
[  573.132245][T25834] lo: Caught tx_queue_len zero misconfig
[  573.212046][ T5201] udevd[5201]: worker [21877] /devices/virtual/block/nbd1 is taking a long time
[  573.282501][T25836] tipc: Resetting bearer <eth:syzkaller0>
[  573.321668][T25835] tipc: Resetting bearer <eth:syzkaller0>
[  573.820375][ T3471] tipc: Resetting bearer <eth:syzkaller0>
[  573.916267][T25867] tipc: Resetting bearer <eth:syzkaller0>
[  573.962529][T25866] tipc: Resetting bearer <eth:syzkaller0>
[  574.089489][T25873] lo speed is unknown, defaulting to 1000
[  574.094279][T25876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  574.158770][T25876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  574.417303][T25890] vxcan3: entered promiscuous mode
[  574.884701][ T3488] tipc: Resetting bearer <eth:syzkaller0>
[  574.917548][T25898] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  574.959034][T25898] batman_adv: batadv0: Adding interface: gretap1
[  574.965784][T25898] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  574.993473][T25898] batman_adv: batadv0: Interface activated: gretap1
[  575.503390][T25927] tipc: Resetting bearer <eth:syzkaller0>
[  575.537260][T25926] tipc: Resetting bearer <eth:syzkaller0>
[  575.605753][T25930] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  575.675500][T25936] openvswitch: netlink: Flow key attr not present in new flow.
[  575.706758][T25937] openvswitch: netlink: Flow key attr not present in new flow.
[  575.902086][ T1306] tipc: Resetting bearer <eth:syzkaller0>
[  575.952087][T25948] FAULT_INJECTION: forcing a failure.
[  575.952087][T25948] name failslab, interval 1, probability 0, space 0, times 0
[  576.027059][T25948] CPU: 0 UID: 0 PID: 25948 Comm: syz.1.5680 Not tainted syzkaller #0 PREEMPT(full) 
[  576.027086][T25948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  576.027097][T25948] Call Trace:
[  576.027104][T25948]  <TASK>
[  576.027112][T25948]  dump_stack_lvl+0xe8/0x150
[  576.027148][T25948]  should_fail_ex+0x412/0x560
[  576.027175][T25948]  should_failslab+0xa8/0x100
[  576.027196][T25948]  __kmalloc_cache_noprof+0x83/0x6e0
[  576.027215][T25948]  ? sctp_add_bind_addr+0x8c/0x370
[  576.027239][T25948]  sctp_add_bind_addr+0x8c/0x370
[  576.027263][T25948]  sctp_copy_local_addr_list+0x314/0x4f0
[  576.027288][T25948]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  576.027308][T25948]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  576.027332][T25948]  ? sctp_v4_is_any+0x35/0x60
[  576.027352][T25948]  ? sctp_copy_one_addr+0x93/0x360
[  576.027374][T25948]  sctp_bind_addr_copy+0xb3/0x3c0
[  576.027395][T25948]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  576.027425][T25948]  sctp_connect_new_asoc+0x2ff/0x6b0
[  576.027452][T25948]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  576.027483][T25948]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  576.027510][T25948]  __sctp_connect+0x5cb/0xdc0
[  576.027544][T25948]  ? __pfx___sctp_connect+0x10/0x10
[  576.027567][T25948]  ? security_sctp_bind_connect+0x7e/0x2c0
[  576.027589][T25948]  ? __sctp_setsockopt_connectx+0xc7/0x190
[  576.027611][T25948]  sctp_getsockopt_connectx3+0x227/0x360
[  576.027630][T25948]  ? lock_sock_nested+0x6a/0x100
[  576.027651][T25948]  ? __pfx_sctp_getsockopt_connectx3+0x10/0x10
[  576.027680][T25948]  ? __local_bh_enable_ip+0xd0/0x130
[  576.027702][T25948]  sctp_getsockopt+0x984/0xb90
[  576.027724][T25948]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  576.027746][T25948]  do_sock_getsockopt+0x2d3/0x3f0
[  576.027771][T25948]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  576.027794][T25948]  ? __fget_files+0x3a0/0x420
[  576.027813][T25948]  ? __fget_files+0x2a/0x420
[  576.027840][T25948]  __x64_sys_getsockopt+0x1a4/0x240
[  576.027873][T25948]  do_syscall_64+0xe2/0xf80
[  576.027893][T25948]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.027910][T25948]  ? trace_irq_disable+0x37/0x100
[  576.027928][T25948]  ? clear_bhb_loop+0x60/0xb0
[  576.027949][T25948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.027967][T25948] RIP: 0033:0x7fe1eab9aeb9
[  576.027983][T25948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  576.028000][T25948] RSP: 002b:00007fe1ebb08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  576.028021][T25948] RAX: ffffffffffffffda RBX: 00007fe1eae15fa0 RCX: 00007fe1eab9aeb9
[  576.028034][T25948] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003
[  576.028046][T25948] RBP: 00007fe1ebb08090 R08: 0000200000000180 R09: 0000000000000000
[  576.028058][T25948] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[  576.028070][T25948] R13: 00007fe1eae16038 R14: 00007fe1eae15fa0 R15: 00007ffe503ab228
[  576.028102][T25948]  </TASK>
[  576.847641][T25966] FAULT_INJECTION: forcing a failure.
[  576.847641][T25966] name failslab, interval 1, probability 0, space 0, times 0
[  576.860455][T25966] CPU: 0 UID: 0 PID: 25966 Comm: syz.3.5685 Not tainted syzkaller #0 PREEMPT(full) 
[  576.860480][T25966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  576.860492][T25966] Call Trace:
[  576.860499][T25966]  <TASK>
[  576.860508][T25966]  dump_stack_lvl+0xe8/0x150
[  576.860536][T25966]  should_fail_ex+0x412/0x560
[  576.860563][T25966]  should_failslab+0xa8/0x100
[  576.860585][T25966]  __kmalloc_cache_noprof+0x83/0x6e0
[  576.860603][T25966]  ? __sctp_v6_cmp_addr+0x1dc/0x510
[  576.860624][T25966]  ? sctp_add_bind_addr+0x8c/0x370
[  576.860647][T25966]  sctp_add_bind_addr+0x8c/0x370
[  576.860669][T25966]  sctp_copy_local_addr_list+0x314/0x4f0
[  576.860692][T25966]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  576.860709][T25966]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  576.860729][T25966]  ? sctp_v6_is_any+0x64/0x80
[  576.860749][T25966]  ? sctp_copy_one_addr+0x93/0x360
[  576.860771][T25966]  sctp_bind_addr_copy+0xb3/0x3c0
[  576.860791][T25966]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  576.860822][T25966]  sctp_connect_new_asoc+0x2ff/0x6b0
[  576.860849][T25966]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  576.860879][T25966]  ? __local_bh_enable_ip+0xd0/0x130
[  576.860896][T25966]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  576.860917][T25966]  ? security_sctp_bind_connect+0x7e/0x2c0
[  576.860939][T25966]  sctp_sendmsg+0x1528/0x2c10
[  576.860974][T25966]  ? __pfx_sctp_sendmsg+0x10/0x10
[  576.860994][T25966]  ? aa_sk_perm+0x15a/0x960
[  576.861017][T25966]  ? aa_sk_perm+0x82d/0x960
[  576.861035][T25966]  ? __might_fault+0xaf/0x130
[  576.861063][T25966]  ? __pfx_aa_sk_perm+0x10/0x10
[  576.861085][T25966]  ? sock_rps_record_flow+0x19/0x400
[  576.861113][T25966]  ? inet_sendmsg+0x2f4/0x370
[  576.861141][T25966]  __sys_sendto+0x627/0x7a0
[  576.861167][T25966]  ? __pfx___sys_sendto+0x10/0x10
[  576.861186][T25966]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  576.861218][T25966]  ? __fget_files+0x3a0/0x420
[  576.861247][T25966]  ? ksys_write+0x242/0x270
[  576.861273][T25966]  ? __pfx_ksys_write+0x10/0x10
[  576.861301][T25966]  __x64_sys_sendto+0xde/0x100
[  576.861323][T25966]  do_syscall_64+0xe2/0xf80
[  576.861341][T25966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.861366][T25966]  ? trace_irq_disable+0x37/0x100
[  576.861383][T25966]  ? clear_bhb_loop+0x60/0xb0
[  576.861403][T25966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.861418][T25966] RIP: 0033:0x7f1e5db9aeb9
[  576.861434][T25966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  576.861449][T25966] RSP: 002b:00007f1e5ea49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  576.861468][T25966] RAX: ffffffffffffffda RBX: 00007f1e5de15fa0 RCX: 00007f1e5db9aeb9
[  576.861482][T25966] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  576.861493][T25966] RBP: 00007f1e5ea49090 R08: 0000200000000280 R09: 000000000000001c
[  576.861505][T25966] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000002
[  576.861516][T25966] R13: 00007f1e5de16038 R14: 00007f1e5de15fa0 R15: 00007ffda2579aa8
[  576.861545][T25966]  </TASK>
[  577.166791][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5930 ms
[  577.174795][    C0] lec:lec_tx_timeout: lec0
[  577.210102][T25967] __nla_validate_parse: 4 callbacks suppressed
[  577.210119][T25967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5684'.
[  577.276430][T25970] syzkaller0: entered promiscuous mode
[  577.287712][T25970] syzkaller0: entered allmulticast mode
[  577.533733][T25979] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  577.580612][T25982] tipc: Resetting bearer <eth:syzkaller0>
[  577.629413][   T11] block nbd1: Possible stuck request ffff8880255e0000: control (read@0,1024B). Runtime 90 seconds
[  577.640410][   T11] block nbd1: Possible stuck request ffff8880255e0200: control (read@1024,1024B). Runtime 90 seconds
[  577.645003][T25984] bridge0: left promiscuous mode
[  577.652877][   T11] block nbd1: Possible stuck request ffff8880255e0400: control (read@2048,1024B). Runtime 90 seconds
[  577.667795][   T11] block nbd1: Possible stuck request ffff8880255e0600: control (read@3072,1024B). Runtime 90 seconds
[  577.688232][T25984] bridge0: left allmulticast mode
[  577.712581][T25984] vxlan0: left promiscuous mode
[  577.723991][T25984] vxlan0: left allmulticast mode
[  577.726452][T25992] netlink: 'syz.1.5694': attribute type 30 has an invalid length.
[  577.751171][ T3471] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  577.764946][ T3471] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  577.808998][T25992] bond6: option arp_missed_max: invalid value (0)
[  577.815439][T25992] bond6: option arp_missed_max: allowed values 1 - 255
[  577.824616][T25992] bond6 (unregistering): Released all slaves
[  577.841074][ T3471] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  577.850341][ T3471] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  577.867147][T25981] tipc: Resetting bearer <eth:syzkaller0>
[  578.250748][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5699'.
[  578.267745][T26021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5701'.
[  578.304925][T26024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  578.341727][T26024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5700'.
[  578.368749][T26024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  578.387911][T26024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  578.399765][T26024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  578.450686][T26029] tipc: Resetting bearer <eth:syzkaller0>
[  578.458969][T26021] lo speed is unknown, defaulting to 1000
[  578.474543][T26027] tipc: Resetting bearer <eth:syzkaller0>
[  578.588329][ T3471] tipc: Resetting bearer <eth:syzkaller0>
[  578.931564][T26036] syzkaller1: entered promiscuous mode
[  578.939997][T26036] syzkaller1: entered allmulticast mode
[  579.268835][T26048] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5708'.
[  579.314090][T26053] tipc: Failed to remove unknown binding: 66,0,0/2945577758:2692620521/2692620522
[  579.341176][T26053] tipc: Failed to remove unknown binding: 66,0,0/2945577758:2692620521/2692620522
[  579.427873][T26046] 8021q: adding VLAN 0 to HW filter on device bond0
[  579.437633][T26046] 8021q: adding VLAN 0 to HW filter on device team0
[  579.460719][T26046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  579.539167][T26050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  579.586812][T26048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5708'.
[  579.853397][T26064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5712'.
[  580.010316][T26071] dummy0: Caught tx_queue_len zero misconfig
[  580.160366][T26077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5716'.
[  580.190778][   T25] block nbd2: Possible stuck request ffff888025658000: control (read@0,1024B). Runtime 30 seconds
[  580.201896][   T25] block nbd2: Possible stuck request ffff888025658200: control (read@1024,1024B). Runtime 30 seconds
[  580.213033][   T25] block nbd2: Possible stuck request ffff888025658400: control (read@2048,1024B). Runtime 30 seconds
[  580.224082][   T25] block nbd2: Possible stuck request ffff888025658600: control (read@3072,1024B). Runtime 30 seconds
[  580.925089][T26088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  580.982959][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5717'.
[  581.017260][T26088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  581.060425][T26088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  581.079930][T26088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  581.107938][T26088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5717'.
[  581.164659][T26103] tipc: Failed to remove unknown binding: 66,0,0/1:598139475/598139476
[  581.184104][T26103] tipc: Failed to remove unknown binding: 66,0,0/1:598139475/598139476
[  581.273992][T26109] syzkaller1: entered promiscuous mode
[  581.314863][T26109] syzkaller1: entered allmulticast mode
[  581.356317][T26113] netlink: 'syz.3.5725': attribute type 39 has an invalid length.
[  581.637334][T26120] nbd3: detected capacity change from 0 to 127
[  581.648080][T24789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  581.659914][T24789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  581.668545][T24789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  581.675739][ T5845] block nbd3: Receive control failed (result -32)
[  581.690692][T21881] block nbd3: Dead connection, failed to find a fallback
[  581.698793][T24789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  581.707976][T24789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  581.719355][T21881] block nbd3: shutting down sockets
[  581.735018][T21881] blk_print_req_error: 138 callbacks suppressed
[  581.735035][T21881] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  581.764028][T26129] lo speed is unknown, defaulting to 1000
[  581.788014][ T5844] Bluetooth: hci1: Opcode 0x0c24 failed: -110
[  581.796776][ T5844] Bluetooth: hci1: command 0x0405 tx timeout
[  581.827283][T21881] buffer_io_error: 138 callbacks suppressed
[  581.827301][T21881] Buffer I/O error on dev nbd3, logical block 0, async page read
[  581.847637][T21881] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  581.879183][T21881] Buffer I/O error on dev nbd3, logical block 1, async page read
[  581.894217][T21881] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  581.915483][T21881] Buffer I/O error on dev nbd3, logical block 2, async page read
[  581.932734][T21881] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  581.960239][T26144] FAULT_INJECTION: forcing a failure.
[  581.960239][T26144] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  581.982740][T21881] Buffer I/O error on dev nbd3, logical block 3, async page read
[  582.004031][T21881] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  582.024224][T26144] CPU: 1 UID: 0 PID: 26144 Comm: syz.2.5732 Not tainted syzkaller #0 PREEMPT(full) 
[  582.024249][T26144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  582.024261][T26144] Call Trace:
[  582.024269][T26144]  <TASK>
[  582.024277][T26144]  dump_stack_lvl+0xe8/0x150
[  582.024305][T26144]  should_fail_ex+0x412/0x560
[  582.024332][T26144]  _copy_from_user+0x2d/0xb0
[  582.024359][T26144]  ___sys_sendmsg+0x1c6/0x360
[  582.024382][T26144]  ? __lock_acquire+0x6b5/0x2cf0
[  582.024409][T26144]  ? __pfx____sys_sendmsg+0x10/0x10
[  582.024464][T26144]  ? __fget_files+0x2a/0x420
[  582.024483][T26144]  ? __fget_files+0x3a0/0x420
[  582.024511][T26144]  __x64_sys_sendmsg+0x1bd/0x2a0
[  582.024537][T26144]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  582.024578][T26144]  ? __pfx_ksys_write+0x10/0x10
[  582.024612][T26144]  do_syscall_64+0xe2/0xf80
[  582.024632][T26144]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.024649][T26144]  ? trace_irq_disable+0x37/0x100
[  582.024665][T26144]  ? clear_bhb_loop+0x60/0xb0
[  582.024685][T26144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.024703][T26144] RIP: 0033:0x7f5832f9aeb9
[  582.024718][T26144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.024733][T26144] RSP: 002b:00007f5833f41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  582.024751][T26144] RAX: ffffffffffffffda RBX: 00007f5833215fa0 RCX: 00007f5832f9aeb9
[  582.024765][T26144] RDX: 0000000008000000 RSI: 0000200000000040 RDI: 0000000000000004
[  582.024778][T26144] RBP: 00007f5833f41090 R08: 0000000000000000 R09: 0000000000000000
[  582.024789][T26144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  582.024800][T26144] R13: 00007f5833216038 R14: 00007f5833215fa0 R15: 00007fff7a6e47f8
[  582.024827][T26144]  </TASK>
[  582.242528][T21881] Buffer I/O error on dev nbd3, logical block 0, async page read
[  582.381400][T21881] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  582.473396][T21881] Buffer I/O error on dev nbd3, logical block 1, async page read
[  582.500593][T21881] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  582.541673][T21881] Buffer I/O error on dev nbd3, logical block 2, async page read
[  582.572839][T21881] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  582.582805][T21881] Buffer I/O error on dev nbd3, logical block 3, async page read
[  582.609776][T21881] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  582.632381][T21881] Buffer I/O error on dev nbd3, logical block 0, async page read
[  582.666940][T21881] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  582.699532][T26169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.715672][T26129] chnl_net:caif_netlink_parms(): no params data found
[  582.736671][T21881] Buffer I/O error on dev nbd3, logical block 1, async page read
[  582.756266][T21881] ldm_validate_partition_table(): Disk read failed.
[  582.787106][T21881] Dev nbd3: unable to read RDB block 0
[  582.793187][T21881]  nbd3: unable to read partition table
[  582.834982][T21881] ldm_validate_partition_table(): Disk read failed.
[  582.857479][T26179] __nla_validate_parse: 2 callbacks suppressed
[  582.857495][T26179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5739'.
[  582.872574][T21881] Dev nbd3: unable to read RDB block 0
[  582.873128][T21881]  nbd3: unable to read partition table
[  582.885682][T26169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.902234][T26176] tap0: tun_chr_ioctl cmd 1074025677
[  582.926826][T26176] tap0: linktype set to 1
[  582.933825][T26169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.954741][T26169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.967417][T26184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5741'.
[  583.038714][T26184] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.062426][T26179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5739'.
[  583.087190][T26190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5741'.
[  583.119397][T26129] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.134721][T26129] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.151332][T26129] bridge_slave_0: entered allmulticast mode
[  583.165920][T26129] bridge_slave_0: entered promiscuous mode
[  583.186277][T26184] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.228258][T26129] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.235530][T26129] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.243243][T26129] bridge_slave_1: entered allmulticast mode
[  583.259574][T26129] bridge_slave_1: entered promiscuous mode
[  583.314655][T26184] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.350180][T26129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  583.362940][T26129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  583.379062][T26184] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.424969][T26129] team0: Port device team_slave_0 added
[  583.436231][T26129] team0: Port device team_slave_1 added
[  583.541697][ T3488] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.564379][T26129] batman_adv: batadv0: Adding interface: batadv_slave_0
[  583.571807][T26129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.598411][T26129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  583.657849][T26129] batman_adv: batadv0: Adding interface: batadv_slave_1
[  583.675856][T26129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.722413][T26129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  583.733938][  T996] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  583.773148][  T996] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  583.790993][ T5844] Bluetooth: hci4: command tx timeout
[  583.811885][  T996] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  583.818443][T26202] netlink: 'syz.4.5743': attribute type 5 has an invalid length.
[  583.840976][T26129] hsr_slave_0: entered promiscuous mode
[  583.848047][T26129] hsr_slave_1: entered promiscuous mode
[  583.895995][T26205] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5744'.
[  583.926782][T26202] syz_tun: entered allmulticast mode
[  583.936155][T26205] tunl0: Caught tx_queue_len zero misconfig
[  584.157664][T26210] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  584.393327][T26213] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  584.625663][T26224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  584.657667][T26224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5752'.
[  584.671440][T26224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  584.686009][T26224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  584.718878][T26224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  584.745760][T26224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5752'.
[  584.874667][T26129] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  584.891343][T26129] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  584.902521][T26129] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  584.919089][T26129] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  585.041609][T26129] 8021q: adding VLAN 0 to HW filter on device bond0
[  585.072887][T26129] 8021q: adding VLAN 0 to HW filter on device team0
[  585.087335][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.094569][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state
[  585.114110][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.121322][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  585.423021][T26249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5756'.
[  585.440392][T26246] netlink: 'syz.4.5755': attribute type 11 has an invalid length.
[  585.487230][T26251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  585.494654][T26251] IPv6: NLM_F_CREATE should be set when creating new route
[  585.501952][T26251] IPv6: NLM_F_CREATE should be set when creating new route
[  585.503613][T26129] 8021q: adding VLAN 0 to HW filter on device batadv0
[  585.543919][T26253] netlink: 'syz.0.5757': attribute type 30 has an invalid length.
[  585.555340][T26129] veth0_vlan: entered promiscuous mode
[  585.576072][T26129] veth1_vlan: entered promiscuous mode
[  585.617167][T26253] bond3: option arp_missed_max: invalid value (0)
[  585.624154][T26253] bond3: option arp_missed_max: allowed values 1 - 255
[  585.633949][T26253] bond3 (unregistering): Released all slaves
[  585.664108][T26259] syzkaller1: entered promiscuous mode
[  585.669829][T26259] syzkaller1: entered allmulticast mode
[  585.758116][T26129] veth0_macvtap: entered promiscuous mode
[  585.770846][T26129] veth1_macvtap: entered promiscuous mode
[  585.834864][T26129] batman_adv: batadv0: Interface activated: batadv_slave_0
[  585.868188][ T5844] Bluetooth: hci4: command tx timeout
[  585.875491][T26129] batman_adv: batadv0: Interface activated: batadv_slave_1
[  585.896132][ T1102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  585.922159][  T996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  585.936999][  T996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  585.955369][  T996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  585.962380][T26275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  585.979075][T26272] syzkaller1: entered promiscuous mode
[  585.984702][T26272] syzkaller1: entered allmulticast mode
[  586.067404][T26278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5764'.
[  586.144473][T26278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  586.157496][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  586.176814][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  586.227908][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  586.235808][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  586.324026][T26275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  586.353256][T26275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  586.412253][T26275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5764'.
[  586.413250][T26287] FAULT_INJECTION: forcing a failure.
[  586.413250][T26287] name failslab, interval 1, probability 0, space 0, times 0
[  586.437006][T26287] CPU: 1 UID: 0 PID: 26287 Comm: syz.4.5765 Not tainted syzkaller #0 PREEMPT(full) 
[  586.437032][T26287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  586.437043][T26287] Call Trace:
[  586.437051][T26287]  <TASK>
[  586.437059][T26287]  dump_stack_lvl+0xe8/0x150
[  586.437088][T26287]  should_fail_ex+0x412/0x560
[  586.437115][T26287]  should_failslab+0xa8/0x100
[  586.437150][T26287]  __kmalloc_noprof+0xde/0x7e0
[  586.437167][T26287]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  586.437191][T26287]  ? rcu_is_watching+0x15/0xb0
[  586.437212][T26287]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  586.437242][T26287]  genl_family_rcv_msg_doit+0xd9/0x330
[  586.437266][T26287]  ? __asan_memcpy+0x40/0x70
[  586.437293][T26287]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  586.437323][T26287]  ? apparmor_capable+0x137/0x1a0
[  586.437349][T26287]  ? bpf_lsm_capable+0x9/0x20
[  586.437368][T26287]  ? security_capable+0x7e/0x2c0
[  586.437393][T26287]  genl_rcv_msg+0x61c/0x7a0
[  586.437427][T26287]  ? __pfx_genl_rcv_msg+0x10/0x10
[  586.437450][T26287]  ? __pfx_wg_set_device_doit+0x10/0x10
[  586.437472][T26287]  ? __pfx_ref_tracker_free+0x10/0x10
[  586.437500][T26287]  netlink_rcv_skb+0x232/0x4b0
[  586.437521][T26287]  ? __pfx_genl_rcv_msg+0x10/0x10
[  586.437544][T26287]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  586.437560][T26287]  ? genl_rcv+0x19/0x40
[  586.437595][T26287]  ? down_read+0x272/0x2e0
[  586.437614][T26287]  ? genl_rcv+0xd/0x40
[  586.437638][T26287]  genl_rcv+0x28/0x40
[  586.437658][T26287]  netlink_unicast+0x80f/0x9b0
[  586.437684][T26287]  ? __pfx_netlink_unicast+0x10/0x10
[  586.437705][T26287]  ? netlink_sendmsg+0x650/0xb40
[  586.437722][T26287]  ? skb_put+0x11b/0x210
[  586.437746][T26287]  netlink_sendmsg+0x813/0xb40
[  586.437774][T26287]  ? __pfx_netlink_sendmsg+0x10/0x10
[  586.437797][T26287]  ? aa_sock_msg_perm+0xf1/0x1b0
[  586.437820][T26287]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  586.437840][T26287]  ? __pfx_netlink_sendmsg+0x10/0x10
[  586.437859][T26287]  ____sys_sendmsg+0xa68/0xad0
[  586.437882][T26287]  ? __might_fault+0xaf/0x130
[  586.437912][T26287]  ? __pfx_____sys_sendmsg+0x10/0x10
[  586.437944][T26287]  ? import_iovec+0x73/0xa0
[  586.437972][T26287]  ___sys_sendmsg+0x2a5/0x360
[  586.437993][T26287]  ? __lock_acquire+0x6b5/0x2cf0
[  586.438021][T26287]  ? __pfx____sys_sendmsg+0x10/0x10
[  586.438074][T26287]  ? __fget_files+0x2a/0x420
[  586.438093][T26287]  ? __fget_files+0x3a0/0x420
[  586.438129][T26287]  __x64_sys_sendmsg+0x1bd/0x2a0
[  586.438155][T26287]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  586.438188][T26287]  ? __pfx_ksys_write+0x10/0x10
[  586.438223][T26287]  do_syscall_64+0xe2/0xf80
[  586.438243][T26287]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.438260][T26287]  ? trace_irq_disable+0x37/0x100
[  586.438277][T26287]  ? clear_bhb_loop+0x60/0xb0
[  586.438298][T26287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.438315][T26287] RIP: 0033:0x7f7714f9aeb9
[  586.438332][T26287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.438348][T26287] RSP: 002b:00007f7715dda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  586.438365][T26287] RAX: ffffffffffffffda RBX: 00007f7715215fa0 RCX: 00007f7714f9aeb9
[  586.438377][T26287] RDX: 0000000060000800 RSI: 00002000000000c0 RDI: 0000000000000003
[  586.438388][T26287] RBP: 00007f7715dda090 R08: 0000000000000000 R09: 0000000000000000
[  586.438399][T26287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  586.438410][T26287] R13: 00007f7715216038 R14: 00007f7715215fa0 R15: 00007ffc15c90288
[  586.438440][T26287]  </TASK>
[  586.442843][T26288] FAULT_INJECTION: forcing a failure.
[  586.442843][T26288] name failslab, interval 1, probability 0, space 0, times 0
[  586.517923][T26293] netlink: 'syz.4.5767': attribute type 5 has an invalid length.
[  586.525595][T26290] FAULT_INJECTION: forcing a failure.
[  586.525595][T26290] name failslab, interval 1, probability 0, space 0, times 0
[  586.529120][T26293] netlink: 'syz.4.5767': attribute type 16 has an invalid length.
[  586.533138][T26290] CPU: 1 UID: 0 PID: 26290 Comm: syz.0.5766 Not tainted syzkaller #0 PREEMPT(full) 
[  586.533161][T26290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  586.533180][T26290] Call Trace:
[  586.533189][T26290]  <TASK>
[  586.533196][T26290]  dump_stack_lvl+0xe8/0x150
[  586.533223][T26290]  should_fail_ex+0x412/0x560
[  586.533248][T26290]  should_failslab+0xa8/0x100
[  586.533271][T26290]  __kmalloc_cache_noprof+0x83/0x6e0
[  586.533288][T26290]  ? __asan_memset+0x22/0x50
[  586.533309][T26290]  ? nft_netdev_hook_alloc+0x220/0x570
[  586.533331][T26290]  nft_netdev_hook_alloc+0x220/0x570
[  586.533359][T26290]  nf_tables_parse_netdev_hooks+0x138/0x950
[  586.533388][T26290]  nft_flowtable_parse_hook+0x46a/0x920
[  586.533416][T26290]  ? queue_delayed_work_on+0x12f/0x1e0
[  586.533435][T26290]  ? __pfx_nft_flowtable_parse_hook+0x10/0x10
[  586.533465][T26290]  ? nf_flow_table_init+0x280/0x2a0
[  586.533487][T26290]  nf_tables_newflowtable+0x14e4/0x23d0
[  586.533527][T26290]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[  586.533551][T26290]  ? nfnl_pernet+0x23/0x240
[  586.533577][T26290]  ? __nla_parse+0x40/0x60
[  586.533604][T26290]  nfnetlink_rcv+0x1240/0x27b0
[  586.533650][T26290]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  586.533706][T26290]  ? netlink_deliver_tap+0x2e/0x1b0
[  586.533728][T26290]  ? netlink_deliver_tap+0x2e/0x1b0
[  586.533763][T26290]  netlink_unicast+0x80f/0x9b0
[  586.533788][T26290]  ? __pfx_netlink_unicast+0x10/0x10
[  586.533807][T26290]  ? netlink_sendmsg+0x650/0xb40
[  586.533826][T26290]  ? skb_put+0x11b/0x210
[  586.533851][T26290]  netlink_sendmsg+0x813/0xb40
[  586.533879][T26290]  ? __pfx_netlink_sendmsg+0x10/0x10
[  586.533902][T26290]  ? aa_sock_msg_perm+0xf1/0x1b0
[  586.533925][T26290]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  586.533945][T26290]  ? __pfx_netlink_sendmsg+0x10/0x10
[  586.533964][T26290]  ____sys_sendmsg+0xa68/0xad0
[  586.533987][T26290]  ? __might_fault+0xaf/0x130
[  586.534017][T26290]  ? __pfx_____sys_sendmsg+0x10/0x10
[  586.534047][T26290]  ? import_iovec+0x73/0xa0
[  586.534075][T26290]  ___sys_sendmsg+0x2a5/0x360
[  586.534097][T26290]  ? __lock_acquire+0x6b5/0x2cf0
[  586.534123][T26290]  ? __pfx____sys_sendmsg+0x10/0x10
[  586.534185][T26290]  ? __fget_files+0x2a/0x420
[  586.534203][T26290]  ? __fget_files+0x3a0/0x420
[  586.534231][T26290]  __x64_sys_sendmsg+0x1bd/0x2a0
[  586.534257][T26290]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  586.534289][T26290]  ? __pfx_ksys_write+0x10/0x10
[  586.534323][T26290]  do_syscall_64+0xe2/0xf80
[  586.534343][T26290]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.534360][T26290]  ? trace_irq_disable+0x37/0x100
[  586.534377][T26290]  ? clear_bhb_loop+0x60/0xb0
[  586.534398][T26290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.534415][T26290] RIP: 0033:0x7f537019aeb9
[  586.534430][T26290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.534446][T26290] RSP: 002b:00007f53710ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  586.534465][T26290] RAX: ffffffffffffffda RBX: 00007f5370415fa0 RCX: 00007f537019aeb9
[  586.534478][T26290] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  586.534489][T26290] RBP: 00007f53710ba090 R08: 0000000000000000 R09: 0000000000000000
[  586.534501][T26290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  586.534511][T26290] R13: 00007f5370416038 R14: 00007f5370415fa0 R15: 00007ffc31ae3d98
[  586.534540][T26290]  </TASK>
[  586.535576][T26288] CPU: 1 UID: 0 PID: 26288 Comm: syz.1.5727 Not tainted syzkaller #0 PREEMPT(full) 
[  586.535597][T26288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  586.535609][T26288] Call Trace:
[  586.535617][T26288]  <TASK>
[  586.535624][T26288]  dump_stack_lvl+0xe8/0x150
[  586.535650][T26288]  should_fail_ex+0x412/0x560
[  586.535674][T26288]  should_failslab+0xa8/0x100
[  586.535695][T26288]  kmem_cache_alloc_noprof+0x87/0x6e0
[  586.535722][T26288]  ? dst_alloc+0x105/0x170
[  586.535746][T26288]  ? __local_bh_enable_ip+0xd0/0x130
[  586.535766][T26288]  dst_alloc+0x105/0x170
[  586.535788][T26288]  ? ip_check_mc_rcu+0x632/0x680
[  586.535812][T26288]  ip_route_output_key_hash_rcu+0x14d0/0x25d0
[  586.535845][T26288]  ? ip_route_output_key_hash+0xd8/0x2a0
[  586.535869][T26288]  ip_route_output_key_hash+0x18d/0x2a0
[  586.535894][T26288]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  586.535930][T26288]  ip_route_output_flow+0x2a/0x150
[  586.535950][T26288]  ? security_sk_classify_flow+0x6d/0x150
[  586.535978][T26288]  udp_sendmsg+0x154a/0x22f0
[  586.536002][T26288]  ? count_memcg_event_mm+0x21/0x260
[  586.536037][T26288]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  586.536063][T26288]  ? __pfx_udp_sendmsg+0x10/0x10
[  586.536114][T26288]  ? __pfx_aa_sk_perm+0x10/0x10
[  586.536132][T26288]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  586.536159][T26288]  ? sock_rps_record_flow+0x19/0x400
[  586.536193][T26288]  ? inet_sendmsg+0x29c/0x370
[  586.536216][T26288]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  586.536238][T26288]  ____sys_sendmsg+0x894/0xad0
[  586.536260][T26288]  ? irqentry_exit+0x59c/0x620
[  586.536286][T26288]  ? __pfx_____sys_sendmsg+0x10/0x10
[  586.536317][T26288]  ? import_iovec+0x73/0xa0
[  586.536345][T26288]  ___sys_sendmsg+0x2a5/0x360
[  586.536368][T26288]  ? __lock_acquire+0x6b5/0x2cf0
[  586.536394][T26288]  ? __pfx____sys_sendmsg+0x10/0x10
[  586.536421][T26288]  ? kstrtouint+0x6e/0xe0
[  586.536463][T26288]  ? __fget_files+0x2a/0x420
[  586.536481][T26288]  ? __fget_files+0x3a0/0x420
[  586.536508][T26288]  __sys_sendmmsg+0x27c/0x4e0
[  586.536536][T26288]  ? __pfx___sys_sendmmsg+0x10/0x10
[  586.536562][T26288]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  586.536605][T26288]  ? ksys_write+0x242/0x270
[  586.536630][T26288]  ? __pfx_ksys_write+0x10/0x10
[  586.536659][T26288]  __x64_sys_sendmmsg+0xa0/0xc0
[  586.536683][T26288]  do_syscall_64+0xe2/0xf80
[  586.536702][T26288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.536719][T26288]  ? trace_irq_disable+0x37/0x100
[  586.536735][T26288]  ? clear_bhb_loop+0x60/0xb0
[  586.536756][T26288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.536773][T26288] RIP: 0033:0x7fd30339aeb9
[  586.536788][T26288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.536803][T26288] RSP: 002b:00007fd30432d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  586.536821][T26288] RAX: ffffffffffffffda RBX: 00007fd303615fa0 RCX: 00007fd30339aeb9
[  586.536834][T26288] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[  586.536846][T26288] RBP: 00007fd30432d090 R08: 0000000000000000 R09: 0000000000000000
[  586.536857][T26288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  586.536867][T26288] R13: 00007fd303616038 R14: 00007fd303615fa0 R15: 00007fff599bfe88
[  586.536896][T26288]  </TASK>
[  586.588818][ T5844] Bluetooth: hci3: command 0x0406 tx timeout
[  587.597305][T26304] lo speed is unknown, defaulting to 1000
[  587.946905][ T5844] Bluetooth: hci4: command tx timeout
[  587.962439][T26327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  587.981245][T26323] lo speed is unknown, defaulting to 1000
[  588.028901][T26327] __nla_validate_parse: 5 callbacks suppressed
[  588.028919][T26327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5780'.
[  588.047982][T26320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5777'.
[  588.060569][T26327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  588.090125][T26327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  588.102323][T26327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  588.129870][T26327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5780'.
[  588.756083][T26349] FAULT_INJECTION: forcing a failure.
[  588.756083][T26349] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  588.771573][T26349] CPU: 1 UID: 0 PID: 26349 Comm: syz.2.5788 Not tainted syzkaller #0 PREEMPT(full) 
[  588.771597][T26349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  588.771608][T26349] Call Trace:
[  588.771616][T26349]  <TASK>
[  588.771623][T26349]  dump_stack_lvl+0xe8/0x150
[  588.771651][T26349]  should_fail_ex+0x412/0x560
[  588.771676][T26349]  _copy_from_user+0x2d/0xb0
[  588.771703][T26349]  ___sys_sendmsg+0x1c6/0x360
[  588.771726][T26349]  ? __lock_acquire+0x6b5/0x2cf0
[  588.771752][T26349]  ? __pfx____sys_sendmsg+0x10/0x10
[  588.771806][T26349]  ? __fget_files+0x2a/0x420
[  588.771825][T26349]  ? __fget_files+0x3a0/0x420
[  588.771852][T26349]  __x64_sys_sendmsg+0x1bd/0x2a0
[  588.771876][T26349]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  588.771908][T26349]  ? __pfx_ksys_write+0x10/0x10
[  588.771940][T26349]  do_syscall_64+0xe2/0xf80
[  588.771961][T26349]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.771978][T26349]  ? trace_irq_disable+0x37/0x100
[  588.771995][T26349]  ? clear_bhb_loop+0x60/0xb0
[  588.772015][T26349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.772031][T26349] RIP: 0033:0x7f5832f9aeb9
[  588.772046][T26349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.772060][T26349] RSP: 002b:00007f5833f41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  588.772078][T26349] RAX: ffffffffffffffda RBX: 00007f5833215fa0 RCX: 00007f5832f9aeb9
[  588.772090][T26349] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  588.772101][T26349] RBP: 00007f5833f41090 R08: 0000000000000000 R09: 0000000000000000
[  588.772111][T26349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  588.772120][T26349] R13: 00007f5833216038 R14: 00007f5833215fa0 R15: 00007fff7a6e47f8
[  588.772148][T26349]  </TASK>
[  589.249334][T26367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5794'.
[  589.458209][T26367] bridge_slave_1 (unregistering): left allmulticast mode
[  589.486760][T26367] bridge_slave_1 (unregistering): left promiscuous mode
[  589.494079][T26367] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.524125][T26370] FAULT_INJECTION: forcing a failure.
[  589.524125][T26370] name failslab, interval 1, probability 0, space 0, times 0
[  589.545396][T26370] CPU: 1 UID: 0 PID: 26370 Comm: syz.1.5797 Not tainted syzkaller #0 PREEMPT(full) 
[  589.545422][T26370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  589.545434][T26370] Call Trace:
[  589.545442][T26370]  <TASK>
[  589.545450][T26370]  dump_stack_lvl+0xe8/0x150
[  589.545478][T26370]  should_fail_ex+0x412/0x560
[  589.545503][T26370]  should_failslab+0xa8/0x100
[  589.545524][T26370]  __kmalloc_cache_noprof+0x83/0x6e0
[  589.545543][T26370]  ? register_netdevice+0x582/0x1cf0
[  589.545572][T26370]  register_netdevice+0x582/0x1cf0
[  589.545601][T26370]  ? do_raw_spin_lock+0x12b/0x2f0
[  589.545626][T26370]  ? pcpu_alloc+0x10/0x360
[  589.545645][T26370]  ? dev_addr_check+0x20/0x230
[  589.545668][T26370]  ? __pfx_register_netdevice+0x10/0x10
[  589.545695][T26370]  ? __asan_memset+0x22/0x50
[  589.545718][T26370]  ? dev_addr_mod+0x354/0x520
[  589.545743][T26370]  macvlan_common_newlink+0x12ae/0x1a30
[  589.545762][T26370]  ? alloc_netdev_mqs+0xc89/0x11b0
[  589.545776][T26370]  ? alloc_netdev_mqs+0xbf8/0x11b0
[  589.545803][T26370]  ? __pfx_macvlan_common_newlink+0x10/0x10
[  589.545837][T26370]  ? __pfx_macvlan_newlink+0x10/0x10
[  589.545861][T26370]  rtnl_newlink_create+0x329/0xb70
[  589.545889][T26370]  ? __mutex_lock+0x5ac/0x1300
[  589.545915][T26370]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  589.545941][T26370]  ? __pfx___mutex_lock+0x10/0x10
[  589.545972][T26370]  ? ns_capable+0x89/0xe0
[  589.546000][T26370]  rtnl_newlink+0x1666/0x1be0
[  589.546036][T26370]  ? __pfx_rtnl_newlink+0x10/0x10
[  589.546054][T26370]  ? do_syscall_64+0xe2/0xf80
[  589.546072][T26370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.546119][T26370]  ? kasan_quarantine_put+0xbb/0x1f0
[  589.546142][T26370]  ? lockdep_hardirqs_on+0x7a/0x110
[  589.546164][T26370]  ? kmem_cache_free+0x195/0x610
[  589.546181][T26370]  ? nlmon_xmit+0xb0/0x100
[  589.546207][T26370]  ? __lock_acquire+0x6b5/0x2cf0
[  589.546239][T26370]  ? __local_bh_enable_ip+0xd0/0x130
[  589.546254][T26370]  ? lockdep_hardirqs_on+0x7a/0x110
[  589.546272][T26370]  ? __dev_queue_xmit+0x274/0x3850
[  589.546294][T26370]  ? __local_bh_enable_ip+0xd0/0x130
[  589.546308][T26370]  ? __dev_queue_xmit+0x274/0x3850
[  589.546340][T26370]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  589.546373][T26370]  ? __pfx_rtnl_newlink+0x10/0x10
[  589.546393][T26370]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  589.546416][T26370]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  589.546436][T26370]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  589.546454][T26370]  ? ref_tracker_free+0x693/0x840
[  589.546475][T26370]  ? __copy_skb_header+0xa3/0x4a0
[  589.546500][T26370]  ? __pfx_ref_tracker_free+0x10/0x10
[  589.546532][T26370]  netlink_rcv_skb+0x232/0x4b0
[  589.546552][T26370]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  589.546573][T26370]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  589.546601][T26370]  ? netlink_deliver_tap+0x2e/0x1b0
[  589.546625][T26370]  netlink_unicast+0x80f/0x9b0
[  589.546649][T26370]  ? __pfx_netlink_unicast+0x10/0x10
[  589.546667][T26370]  ? netlink_sendmsg+0x650/0xb40
[  589.546684][T26370]  ? skb_put+0x11b/0x210
[  589.546706][T26370]  netlink_sendmsg+0x813/0xb40
[  589.546732][T26370]  ? __pfx_netlink_sendmsg+0x10/0x10
[  589.546754][T26370]  ? aa_sock_msg_perm+0xf1/0x1b0
[  589.546778][T26370]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  589.546799][T26370]  ? __pfx_netlink_sendmsg+0x10/0x10
[  589.546827][T26370]  ____sys_sendmsg+0xa68/0xad0
[  589.546851][T26370]  ? __might_fault+0xaf/0x130
[  589.546881][T26370]  ? __pfx_____sys_sendmsg+0x10/0x10
[  589.546913][T26370]  ? import_iovec+0x73/0xa0
[  589.546941][T26370]  ___sys_sendmsg+0x2a5/0x360
[  589.546963][T26370]  ? __lock_acquire+0x6b5/0x2cf0
[  589.546990][T26370]  ? __pfx____sys_sendmsg+0x10/0x10
[  589.547018][T26370]  ? kstrtouint+0x6e/0xe0
[  589.547063][T26370]  ? __fget_files+0x2a/0x420
[  589.547082][T26370]  ? __fget_files+0x3a0/0x420
[  589.547110][T26370]  __sys_sendmmsg+0x27c/0x4e0
[  589.547139][T26370]  ? __pfx___sys_sendmmsg+0x10/0x10
[  589.547160][T26370]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  589.547206][T26370]  ? ksys_write+0x242/0x270
[  589.547232][T26370]  ? __pfx_ksys_write+0x10/0x10
[  589.547263][T26370]  __x64_sys_sendmmsg+0xa0/0xc0
[  589.547289][T26370]  do_syscall_64+0xe2/0xf80
[  589.547307][T26370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.547324][T26370]  ? trace_irq_disable+0x37/0x100
[  589.547341][T26370]  ? clear_bhb_loop+0x60/0xb0
[  589.547362][T26370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.547379][T26370] RIP: 0033:0x7fd30339aeb9
[  589.547395][T26370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  589.547411][T26370] RSP: 002b:00007fd30432d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  589.547430][T26370] RAX: ffffffffffffffda RBX: 00007fd303615fa0 RCX: 00007fd30339aeb9
[  589.547445][T26370] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000b
[  589.547457][T26370] RBP: 00007fd30432d090 R08: 0000000000000000 R09: 0000000000000000
[  589.547469][T26370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  589.547480][T26370] R13: 00007fd303616038 R14: 00007fd303615fa0 R15: 00007fff599bfe88
[  589.547510][T26370]  </TASK>
[  590.057841][ T5844] Bluetooth: hci4: command tx timeout
[  590.139857][T26379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.179637][T26381] lo speed is unknown, defaulting to 1000
[  590.272812][T26388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5801'.
[  590.336487][T26392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.428747][T26379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.443082][T26387] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5803'.
[  590.459868][T26382] netlink: 'syz.4.5800': attribute type 4 has an invalid length.
[  590.486500][T26379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.555957][T26379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5801'.
[  590.635614][T26402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5805'.
[  590.670006][T26401] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5806'.
[  590.792060][T26407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5806'.
[  590.989255][T24789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  591.027714][T24789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  591.044465][T24789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  591.061358][T24789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  591.070242][T24789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  592.605754][T16256] syz_tun (unregistering): left allmulticast mode
[  592.698207][T16415] lec:lec_start_xmit: lec0:No lecd attached
[  592.708878][T26410] lo speed is unknown, defaulting to 1000
[  592.715165][T26429] syzkaller1: entered promiscuous mode
[  592.721999][T26429] syzkaller1: entered allmulticast mode
[  592.860031][T26433] Set syz0 is full, maxelem 0 reached
[  593.059113][T26445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.153638][ T5844] Bluetooth: hci2: command tx timeout
[  593.173170][T26450] __nla_validate_parse: 1 callbacks suppressed
[  593.173187][T26450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5818'.
[  593.218146][T26449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5820'.
[  593.265308][T26445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.330879][T26453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.492273][T26457] lo speed is unknown, defaulting to 1000
[  593.684449][T26410] chnl_net:caif_netlink_parms(): no params data found
[  593.844962][T26410] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.852333][T26410] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.860342][T26410] bridge_slave_0: entered allmulticast mode
[  593.871763][T26410] bridge_slave_0: entered promiscuous mode
[  593.892521][T26410] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.900057][T26410] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.903691][T26483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5828'.
[  593.907834][T26410] bridge_slave_1: entered allmulticast mode
[  593.924948][T26410] bridge_slave_1: entered promiscuous mode
[  593.982701][T26410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  594.001598][T26410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  594.096260][T26410] team0: Port device team_slave_0 added
[  594.105124][T26410] team0: Port device team_slave_1 added
[  594.138890][T26410] batman_adv: batadv0: Adding interface: batadv_slave_0
[  594.146324][T26410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  594.173378][T26410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  594.186207][T26410] batman_adv: batadv0: Adding interface: batadv_slave_1
[  594.194357][T26410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  594.237033][T26410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  594.473213][T26410] hsr_slave_0: entered promiscuous mode
[  594.494560][T26410] hsr_slave_1: entered promiscuous mode
[  594.511545][T26410] debugfs: 'hsr0' already exists in 'hsr'
[  594.522362][T26410] Cannot create hsr debugfs directory
[  594.662537][T26512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.705891][T26514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5840'.
[  594.730352][T26516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5839'.
[  594.773084][T26517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5838'.
[  594.824730][T26521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.861598][T26512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.885445][T26512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  595.100007][T26410] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.112791][T26536] FAULT_INJECTION: forcing a failure.
[  595.112791][T26536] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  595.134217][T26536] CPU: 0 UID: 0 PID: 26536 Comm: syz.1.5848 Not tainted syzkaller #0 PREEMPT(full) 
[  595.134245][T26536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  595.134256][T26536] Call Trace:
[  595.134263][T26536]  <TASK>
[  595.134271][T26536]  dump_stack_lvl+0xe8/0x150
[  595.134299][T26536]  should_fail_ex+0x412/0x560
[  595.134325][T26536]  _copy_to_user+0x31/0xb0
[  595.134350][T26536]  simple_read_from_buffer+0xe1/0x170
[  595.134375][T26536]  proc_fail_nth_read+0x1bb/0x230
[  595.134403][T26536]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  595.134430][T26536]  ? rw_verify_area+0x2a6/0x4d0
[  595.134451][T26536]  ? __fget_files+0x2a/0x420
[  595.134468][T26536]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  595.134495][T26536]  vfs_read+0x20c/0xa70
[  595.134517][T26536]  ? fdget_pos+0x246/0x320
[  595.134541][T26536]  ? __pfx___mutex_lock+0x10/0x10
[  595.134563][T26536]  ? __pfx_vfs_read+0x10/0x10
[  595.134597][T26536]  ? __fget_files+0x2a/0x420
[  595.134620][T26536]  ? __fget_files+0x3a0/0x420
[  595.134638][T26536]  ? __fget_files+0x2a/0x420
[  595.134664][T26536]  ksys_read+0x150/0x270
[  595.134689][T26536]  ? __pfx_ksys_read+0x10/0x10
[  595.134725][T26536]  do_syscall_64+0xe2/0xf80
[  595.134745][T26536]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.134762][T26536]  ? trace_irq_disable+0x37/0x100
[  595.134780][T26536]  ? clear_bhb_loop+0x60/0xb0
[  595.134802][T26536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.134820][T26536] RIP: 0033:0x7fd30335b78e
[  595.134836][T26536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  595.134852][T26536] RSP: 002b:00007fd30432cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  595.134871][T26536] RAX: ffffffffffffffda RBX: 00007fd30432d6c0 RCX: 00007fd30335b78e
[  595.134885][T26536] RDX: 000000000000000f RSI: 00007fd30432d0a0 RDI: 0000000000000005
[  595.134897][T26536] RBP: 00007fd30432d090 R08: 0000000000000000 R09: 0000000000000000
[  595.134909][T26536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  595.134920][T26536] R13: 00007fd303616038 R14: 00007fd303615fa0 R15: 00007fff599bfe88
[  595.134951][T26536]  </TASK>
[  595.227800][ T5844] Bluetooth: hci2: command tx timeout
[  595.258641][T26539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5847'.
[  595.426238][T26410] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.432806][T26552] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5851'.
[  595.466320][T26552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5851'.
[  595.486093][T26552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5851'.
[  595.531631][T26410] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.545856][T26554] netlink: 'syz.2.5852': attribute type 4 has an invalid length.
[  595.598198][T26410] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.875960][T26578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  595.879640][T26576] netem: incorrect ge model size
[  595.892700][T26576] netem: change failed
[  595.898034][T26410] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  595.909176][T26410] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  595.910155][T26578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  595.951458][T26410] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  595.952418][T26578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  595.976096][T26410] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  596.010519][T26578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  596.044980][T26586] syzkaller0: entered promiscuous mode
[  596.052127][T26586] syzkaller0: entered allmulticast mode
[  596.111522][T26410] 8021q: adding VLAN 0 to HW filter on device bond0
[  596.130014][T26410] 8021q: adding VLAN 0 to HW filter on device team0
[  596.142006][T24415] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.149202][T24415] bridge0: port 1(bridge_slave_0) entered forwarding state
[  596.172164][T24415] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.179511][T24415] bridge0: port 2(bridge_slave_1) entered forwarding state
[  596.339889][T26596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  596.432560][T26596] lo speed is unknown, defaulting to 1000
[  596.461916][T26410] 8021q: adding VLAN 0 to HW filter on device batadv0
[  596.513680][T26410] veth0_vlan: entered promiscuous mode
[  596.530623][T26410] veth1_vlan: entered promiscuous mode
[  596.582095][T26410] veth0_macvtap: entered promiscuous mode
[  596.594098][T26410] veth1_macvtap: entered promiscuous mode
[  596.644671][T26410] batman_adv: batadv0: Interface activated: batadv_slave_0
[  596.677981][T26410] batman_adv: batadv0: Interface activated: batadv_slave_1
[  596.719469][T24415] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  596.748430][T24415] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  596.763048][T24415] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  596.803628][T24415] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  596.963803][T24415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.983391][T24415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  597.017694][  T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  597.025552][  T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  597.153946][T26619] lo speed is unknown, defaulting to 1000
[  597.216334][T26624] syzkaller0: entered promiscuous mode
[  597.222093][T26624] syzkaller0: entered allmulticast mode
[  597.359293][T26631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  597.375783][T26631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  597.394251][ T5844] Bluetooth: hci2: command tx timeout
[  597.423375][T26631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  597.452531][T26631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  597.478421][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  597.866797][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms
[  597.874850][    C0] lec:lec_tx_timeout: lec0
[  597.942519][T26649] FAULT_INJECTION: forcing a failure.
[  597.942519][T26649] name failslab, interval 1, probability 0, space 0, times 0
[  597.957919][T26649] CPU: 1 UID: 0 PID: 26649 Comm: syz.1.5885 Not tainted syzkaller #0 PREEMPT(full) 
[  597.957945][T26649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  597.957958][T26649] Call Trace:
[  597.957966][T26649]  <TASK>
[  597.957974][T26649]  dump_stack_lvl+0xe8/0x150
[  597.958010][T26649]  should_fail_ex+0x412/0x560
[  597.958037][T26649]  should_failslab+0xa8/0x100
[  597.958059][T26649]  kmem_cache_alloc_noprof+0x87/0x6e0
[  597.958084][T26649]  ? __netlink_lookup+0xc6/0x8b0
[  597.958106][T26649]  ? skb_clone+0x212/0x3a0
[  597.958135][T26649]  skb_clone+0x212/0x3a0
[  597.958162][T26649]  __netlink_deliver_tap+0x404/0x850
[  597.958193][T26649]  ? netlink_deliver_tap+0x2e/0x1b0
[  597.958215][T26649]  netlink_deliver_tap+0x19c/0x1b0
[  597.958236][T26649]  netlink_unicast+0x7e3/0x9b0
[  597.958261][T26649]  ? __pfx_netlink_unicast+0x10/0x10
[  597.958282][T26649]  ? netlink_sendmsg+0x650/0xb40
[  597.958300][T26649]  ? skb_put+0x11b/0x210
[  597.958325][T26649]  netlink_sendmsg+0x813/0xb40
[  597.958354][T26649]  ? __pfx_netlink_sendmsg+0x10/0x10
[  597.958377][T26649]  ? aa_sock_msg_perm+0xf1/0x1b0
[  597.958398][T26649]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  597.958419][T26649]  ? __pfx_netlink_sendmsg+0x10/0x10
[  597.958438][T26649]  ____sys_sendmsg+0xa68/0xad0
[  597.958461][T26649]  ? __might_fault+0xaf/0x130
[  597.958492][T26649]  ? __pfx_____sys_sendmsg+0x10/0x10
[  597.958524][T26649]  ? import_iovec+0x73/0xa0
[  597.958553][T26649]  ___sys_sendmsg+0x2a5/0x360
[  597.958575][T26649]  ? __lock_acquire+0x6b5/0x2cf0
[  597.958604][T26649]  ? __pfx____sys_sendmsg+0x10/0x10
[  597.958661][T26649]  ? __fget_files+0x2a/0x420
[  597.958680][T26649]  ? __fget_files+0x3a0/0x420
[  597.958709][T26649]  __x64_sys_sendmsg+0x1bd/0x2a0
[  597.958736][T26649]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  597.958769][T26649]  ? __pfx_ksys_write+0x10/0x10
[  597.958805][T26649]  do_syscall_64+0xe2/0xf80
[  597.958825][T26649]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.958843][T26649]  ? trace_irq_disable+0x37/0x100
[  597.958860][T26649]  ? clear_bhb_loop+0x60/0xb0
[  597.958881][T26649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.958897][T26649] RIP: 0033:0x7fd30339aeb9
[  597.958913][T26649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  597.958929][T26649] RSP: 002b:00007fd30432d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  597.958949][T26649] RAX: ffffffffffffffda RBX: 00007fd303615fa0 RCX: 00007fd30339aeb9
[  597.958963][T26649] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000004
[  597.958975][T26649] RBP: 00007fd30432d090 R08: 0000000000000000 R09: 0000000000000000
[  597.958987][T26649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  597.959004][T26649] R13: 00007fd303616038 R14: 00007fd303615fa0 R15: 00007fff599bfe88
[  597.959034][T26649]  </TASK>
[  598.583657][T26669] netlink: 'syz.1.5892': attribute type 1 has an invalid length.
[  598.636661][T26669] __nla_validate_parse: 7 callbacks suppressed
[  598.636678][T26669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5892'.
[  599.115490][T26686] netlink: 428 bytes leftover after parsing attributes in process `syz.0.5896'.
[  599.150157][T26686] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5896'.
[  599.401205][T26697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  599.461227][T26701] netlink: 'syz.0.5901': attribute type 137 has an invalid length.
[  599.470041][ T5844] Bluetooth: hci2: command tx timeout
[  599.502553][T26697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5900'.
[  599.556268][T26697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  599.610229][T26711] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5901'.
[  599.673507][T26697] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  599.695972][T26697] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  599.707411][T26703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  599.798594][T26717] netlink: 'syz.2.5907': attribute type 137 has an invalid length.
[  599.938648][T26717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5907'.
[  600.089720][T26735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5915'.
[  600.153012][T26738] FAULT_INJECTION: forcing a failure.
[  600.153012][T26738] name failslab, interval 1, probability 0, space 0, times 0
[  600.166226][T26740] netlink: 'syz.1.5916': attribute type 137 has an invalid length.
[  600.182449][T26738] CPU: 0 UID: 0 PID: 26738 Comm: syz.0.5918 Not tainted syzkaller #0 PREEMPT(full) 
[  600.182476][T26738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  600.182487][T26738] Call Trace:
[  600.182495][T26738]  <TASK>
[  600.182503][T26738]  dump_stack_lvl+0xe8/0x150
[  600.182531][T26738]  should_fail_ex+0x412/0x560
[  600.182558][T26738]  should_failslab+0xa8/0x100
[  600.182580][T26738]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  600.182607][T26738]  ? __alloc_skb+0x186/0x7d0
[  600.182627][T26738]  ? __alloc_skb+0x1d0/0x7d0
[  600.182645][T26738]  ? __local_bh_enable_ip+0xd0/0x130
[  600.182667][T26738]  __alloc_skb+0x1d0/0x7d0
[  600.182687][T26738]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  600.182712][T26738]  netlink_sendmsg+0x5d4/0xb40
[  600.182742][T26738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  600.182765][T26738]  ? aa_sock_msg_perm+0xf1/0x1b0
[  600.182788][T26738]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  600.182807][T26738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  600.182826][T26738]  ____sys_sendmsg+0xa68/0xad0
[  600.182850][T26738]  ? __might_fault+0xaf/0x130
[  600.182879][T26738]  ? __pfx_____sys_sendmsg+0x10/0x10
[  600.182908][T26738]  ? import_iovec+0x73/0xa0
[  600.182934][T26738]  ___sys_sendmsg+0x2a5/0x360
[  600.182955][T26738]  ? __lock_acquire+0x6b5/0x2cf0
[  600.182981][T26738]  ? __pfx____sys_sendmsg+0x10/0x10
[  600.183031][T26738]  ? __fget_files+0x2a/0x420
[  600.183050][T26738]  ? __fget_files+0x3a0/0x420
[  600.183077][T26738]  __x64_sys_sendmsg+0x1bd/0x2a0
[  600.183103][T26738]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  600.183141][T26738]  ? __pfx_ksys_write+0x10/0x10
[  600.183175][T26738]  do_syscall_64+0xe2/0xf80
[  600.183196][T26738]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.183213][T26738]  ? trace_irq_disable+0x37/0x100
[  600.183230][T26738]  ? clear_bhb_loop+0x60/0xb0
[  600.183252][T26738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.183269][T26738] RIP: 0033:0x7f537019aeb9
[  600.183286][T26738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  600.183302][T26738] RSP: 002b:00007f53710ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  600.183322][T26738] RAX: ffffffffffffffda RBX: 00007f5370415fa0 RCX: 00007f537019aeb9
[  600.183337][T26738] RDX: 0000000000000800 RSI: 0000200000006040 RDI: 0000000000000005
[  600.183349][T26738] RBP: 00007f53710ba090 R08: 0000000000000000 R09: 0000000000000000
[  600.183361][T26738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  600.183372][T26738] R13: 00007f5370416038 R14: 00007f5370415fa0 R15: 00007ffc31ae3d98
[  600.183401][T26738]  </TASK>
[  600.516452][T26745] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5916'.
[  600.777656][T26763] FAULT_INJECTION: forcing a failure.
[  600.777656][T26763] name failslab, interval 1, probability 0, space 0, times 0
[  600.806924][T26763] CPU: 0 UID: 0 PID: 26763 Comm: syz.0.5927 Not tainted syzkaller #0 PREEMPT(full) 
[  600.806950][T26763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  600.806961][T26763] Call Trace:
[  600.806969][T26763]  <TASK>
[  600.806977][T26763]  dump_stack_lvl+0xe8/0x150
[  600.807004][T26763]  should_fail_ex+0x412/0x560
[  600.807030][T26763]  should_failslab+0xa8/0x100
[  600.807052][T26763]  __kmalloc_cache_node_noprof+0x87/0x6d0
[  600.807071][T26763]  ? page_pool_create_percpu+0x76/0xb80
[  600.807102][T26763]  page_pool_create_percpu+0x76/0xb80
[  600.807127][T26763]  ? bpf_test_run_xdp_live+0x223/0x1cf0
[  600.807154][T26763]  bpf_test_run_xdp_live+0x23d/0x1cf0
[  600.807173][T26763]  ? arch_stack_walk+0xfb/0x150
[  600.807206][T26763]  ? __pfx_stack_trace_save+0x10/0x10
[  600.807234][T26763]  ? __lock_acquire+0x6b5/0x2cf0
[  600.807261][T26763]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  600.807279][T26763]  ? __kasan_kmalloc+0x93/0xb0
[  600.807296][T26763]  ? __kmalloc_noprof+0x40c/0x7e0
[  600.807311][T26763]  ? bpf_test_init+0x9f/0x150
[  600.807327][T26763]  ? bpf_prog_test_run_xdp+0x529/0x1160
[  600.807345][T26763]  ? bpf_prog_test_run+0x2c7/0x340
[  600.807394][T26763]  ? __might_fault+0xaf/0x130
[  600.807419][T26763]  ? __might_fault+0xaf/0x130
[  600.807448][T26763]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  600.807479][T26763]  ? _copy_from_user+0x94/0xb0
[  600.807505][T26763]  ? bpf_test_init+0x113/0x150
[  600.807522][T26763]  ? xdp_convert_md_to_buff+0x5b/0x330
[  600.807544][T26763]  bpf_prog_test_run_xdp+0x81c/0x1160
[  600.807579][T26763]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  600.807603][T26763]  ? __fget_files+0x2a/0x420
[  600.807627][T26763]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  600.807648][T26763]  bpf_prog_test_run+0x2c7/0x340
[  600.807671][T26763]  __sys_bpf+0x5cb/0x920
[  600.807690][T26763]  ? __pfx___sys_bpf+0x10/0x10
[  600.807729][T26763]  ? ksys_write+0x242/0x270
[  600.807756][T26763]  ? __pfx_ksys_write+0x10/0x10
[  600.807786][T26763]  __x64_sys_bpf+0x7c/0x90
[  600.807810][T26763]  do_syscall_64+0xe2/0xf80
[  600.807829][T26763]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.807845][T26763]  ? trace_irq_disable+0x37/0x100
[  600.807862][T26763]  ? clear_bhb_loop+0x60/0xb0
[  600.807883][T26763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.807901][T26763] RIP: 0033:0x7f537019aeb9
[  600.807917][T26763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  600.807933][T26763] RSP: 002b:00007f53710ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  600.807952][T26763] RAX: ffffffffffffffda RBX: 00007f5370415fa0 RCX: 00007f537019aeb9
[  600.807965][T26763] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  600.807977][T26763] RBP: 00007f53710ba090 R08: 0000000000000000 R09: 0000000000000000
[  600.807989][T26763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  600.808000][T26763] R13: 00007f5370416038 R14: 00007f5370415fa0 R15: 00007ffc31ae3d98
[  600.808029][T26763]  </TASK>
[  601.173805][T24415] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  601.200112][T26773] xt_CT: You must specify a L4 protocol and not use inversions on it
[  601.318866][ T3555] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  601.354683][T26781] netlink: 'syz.0.5934': attribute type 137 has an invalid length.
[  601.426717][ T3555] wlan1: authentication with 08:02:11:00:00:00 timed out
[  601.447718][T26783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5934'.
[  601.531179][T26787] netlink: 'syz.4.5936': attribute type 1 has an invalid length.
[  601.625684][T26787] bond9: entered promiscuous mode
[  601.649214][T26787] bond9: entered allmulticast mode
[  601.654767][T26787] 8021q: adding VLAN 0 to HW filter on device bond9
[  601.736117][T26792] erspan1: entered allmulticast mode
[  601.769943][T26792] bond9: (slave erspan1): making interface the new active one
[  601.786736][T26792] erspan1: entered promiscuous mode
[  601.804345][T26792] bond9: (slave erspan1): Enslaving as an active interface with an up link
[  601.845240][T26797] lo speed is unknown, defaulting to 1000
[  601.961389][T26810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5942'.
[  602.002036][T26810] netlink: 'syz.3.5942': attribute type 39 has an invalid length.
[  602.062745][T26814] xt_TCPMSS: Only works on TCP SYN packets
[  602.379237][T26827] netlink: 'syz.1.5950': attribute type 137 has an invalid length.
[  602.400580][T26828] netlink: 'syz.0.5949': attribute type 137 has an invalid length.
[  602.633558][T26840] xt_l2tp: v2 sid > 0xffff: 4294901760
[  603.015410][T24789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  603.027889][T24789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  603.039045][T24789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  603.048738][T24789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  603.056357][T24789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  603.086688][T26854] netlink: 'syz.1.5959': attribute type 30 has an invalid length.
[  603.116509][T26849] lo speed is unknown, defaulting to 1000
[  603.206487][T26851] lo speed is unknown, defaulting to 1000
[  603.457828][T15723] syz_tun (unregistering): left allmulticast mode
[  603.822303][T26875] __nla_validate_parse: 8 callbacks suppressed
[  603.822322][T26875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5966'.
[  603.839792][T26873] tipc: Started in network mode
[  603.844685][T26873] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  603.868065][T26873] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  603.887109][T26873] tipc: Enabled bearer <udp:syz0>, priority 10
[  604.573741][T26891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5971'.
[  604.770379][T26851] chnl_net:caif_netlink_parms(): no params data found
[  604.852940][T26893] lo speed is unknown, defaulting to 1000
[  604.898055][T26900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5974'.
[  604.927044][T26900] nbd: couldn't find a device at index 65546
[  604.937050][T26904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5976'.
[  604.949359][ T5889] tipc: Node number set to 1
[  604.999007][T26904] bond10 (unregistering): Released all slaves
[  605.147190][ T5844] Bluetooth: hci0: command tx timeout
[  605.260196][T26851] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.273656][T26851] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.285312][T26851] bridge_slave_0: entered allmulticast mode
[  605.298863][T26851] bridge_slave_0: entered promiscuous mode
[  605.328134][T26917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5977'.
[  605.338026][T26851] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.351885][T26851] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.360032][T26851] bridge_slave_1: entered allmulticast mode
[  605.368245][T26851] bridge_slave_1: entered promiscuous mode
[  605.449149][T26851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  605.487961][T26851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  605.514433][T26922] lo speed is unknown, defaulting to 1000
[  605.568024][T26924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5979'.
[  605.595393][T26851] team0: Port device team_slave_0 added
[  605.615002][T26851] team0: Port device team_slave_1 added
[  605.638919][T26924] netlink: 'syz.4.5979': attribute type 4 has an invalid length.
[  605.676039][T26851] batman_adv: batadv0: Adding interface: batadv_slave_0
[  605.686496][T26924] netlink: 'syz.4.5979': attribute type 4 has an invalid length.
[  605.694805][T26851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  605.736874][T26851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  605.750089][T26851] batman_adv: batadv0: Adding interface: batadv_slave_1
[  605.757637][T26851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  605.784405][T26851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  605.856264][T26927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5979'.
[  606.071318][T26935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5983'.
[  606.150754][T26851] hsr_slave_0: entered promiscuous mode
[  606.159699][T26851] hsr_slave_1: entered promiscuous mode
[  606.169179][T26851] debugfs: 'hsr0' already exists in 'hsr'
[  606.175098][T26851] Cannot create hsr debugfs directory
[  606.441648][T26951] netlink: 'syz.2.5988': attribute type 3 has an invalid length.
[  606.467114][T26951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5988'.
[  606.488539][T26954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5989'.
[  606.891786][T26851] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  607.039543][T26851] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  607.124090][T26851] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  607.195458][T26851] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  607.227593][ T5844] Bluetooth: hci0: command tx timeout
[  607.251523][T26989] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  607.305517][T26987] lo speed is unknown, defaulting to 1000
[  607.435332][T27001] netlink: 'syz.2.6009': attribute type 137 has an invalid length.
[  607.604838][T26851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  607.632203][T27003] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  607.643607][T26851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  607.680465][T26851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  607.716949][   T11] block nbd1: Possible stuck request ffff8880255e0000: control (read@0,1024B). Runtime 120 seconds
[  607.727853][   T11] block nbd1: Possible stuck request ffff8880255e0200: control (read@1024,1024B). Runtime 120 seconds
[  607.739525][   T11] block nbd1: Possible stuck request ffff8880255e0400: control (read@2048,1024B). Runtime 120 seconds
[  607.751239][   T11] block nbd1: Possible stuck request ffff8880255e0600: control (read@3072,1024B). Runtime 120 seconds
[  607.812380][T26851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  608.118566][T26851] 8021q: adding VLAN 0 to HW filter on device bond0
[  608.219045][T26851] 8021q: adding VLAN 0 to HW filter on device team0
[  608.231810][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.239013][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state
[  608.263081][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.270569][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state
[  608.647515][T27053] netlink: 'syz.3.6024': attribute type 35 has an invalid length.
[  608.663046][T27054] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  608.856312][T27064] v: renamed from dummy0 (while UP)
[  608.879257][T27064] batman_adv: batadv0: Interface deactivated: v
[  608.928465][T27062] lo speed is unknown, defaulting to 1000
[  608.966981][T26851] 8021q: adding VLAN 0 to HW filter on device batadv0
[  609.053716][T26851] veth0_vlan: entered promiscuous mode
[  609.075887][T26851] veth1_vlan: entered promiscuous mode
[  609.082132][T27071] __nla_validate_parse: 7 callbacks suppressed
[  609.082227][T27071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6029'.
[  609.113514][T27071] netlink: 'syz.4.6029': attribute type 39 has an invalid length.
[  609.153915][T27071] syz_tun (unregistering): left allmulticast mode
[  609.183655][T26851] veth0_macvtap: entered promiscuous mode
[  609.202284][T26851] veth1_macvtap: entered promiscuous mode
[  609.234848][T26851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  609.259239][T26851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  609.286779][ T3555] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  609.301924][ T3555] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  609.327941][ T3555] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  609.367062][ T3555] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  609.456209][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.471673][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  609.539843][T27077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6030'.
[  609.565572][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.586712][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  609.619877][ T3555] 
[  609.622253][ T3555] ============================================
[  609.628487][ T3555] WARNING: possible recursive locking detected
[  609.634821][ T3555] syzkaller #0 Not tainted
[  609.639238][ T3555] --------------------------------------------
[  609.645378][ T3555] kworker/u8:14/3555 is trying to acquire lock:
[  609.651618][ T3555] ffff8880329d4558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  609.661450][ T3555] 
[  609.661450][ T3555] but task is already holding lock:
[  609.668889][ T3555] ffff888032ce6d58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  609.678711][ T3555] 
[  609.678711][ T3555] other info that might help us debug this:
[  609.686760][ T3555]  Possible unsafe locking scenario:
[  609.686760][ T3555] 
[  609.694199][ T3555]        CPU0
[  609.697463][ T3555]        ----
[  609.700726][ T3555]   lock(&qdisc_xmit_lock_key#3);
[  609.705743][ T3555]   lock(&qdisc_xmit_lock_key#3);
[  609.710761][ T3555] 
[  609.710761][ T3555]  *** DEADLOCK ***
[  609.710761][ T3555] 
[  609.718884][ T3555]  May be due to missing lock nesting notation
[  609.718884][ T3555] 
[  609.727207][ T3555] 11 locks held by kworker/u8:14/3555:
[  609.732729][ T3555]  #0: ffff8880207b4148 ((wq_completion)bond9){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  609.743708][ T3555]  #1: ffffc9000c5f7bc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  609.756692][ T3555]  #2: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0
[  609.766264][ T3555]  #3: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850
[  609.776169][ T3555]  #4: ffff88802f923228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850
[  609.788835][ T3555]  #5: ffff888032ce6d58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  609.799106][ T3555]  #6: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450
[  609.808055][ T3555]  #7: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3d0/0xff0
[  609.817847][ T3555]  #8: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  609.826711][ T3555]  #9: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850
[  609.836644][ T3555]  #10: ffff88802073b228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850
[  609.849612][ T3555] 
[  609.849612][ T3555] stack backtrace:
[  609.855494][ T3555] CPU: 0 UID: 0 PID: 3555 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) 
[  609.855512][ T3555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  609.855522][ T3555] Workqueue: bond9 bond_alb_monitor
[  609.855545][ T3555] Call Trace:
[  609.855551][ T3555]  <TASK>
[  609.855557][ T3555]  dump_stack_lvl+0xe8/0x150
[  609.855576][ T3555]  print_deadlock_bug+0x279/0x290
[  609.855592][ T3555]  __lock_acquire+0x253f/0x2cf0
[  609.855612][ T3555]  ? unwind_next_frame+0xa5/0x23c0
[  609.855628][ T3555]  ? __pfx_netif_skb_features+0x10/0x10
[  609.855651][ T3555]  ? sch_direct_xmit+0x15f/0x4c0
[  609.855665][ T3555]  lock_acquire+0x106/0x330
[  609.855682][ T3555]  ? sch_direct_xmit+0x15f/0x4c0
[  609.855699][ T3555]  _raw_spin_lock+0x2e/0x40
[  609.855713][ T3555]  ? sch_direct_xmit+0x15f/0x4c0
[  609.855725][ T3555]  sch_direct_xmit+0x15f/0x4c0
[  609.855741][ T3555]  ? __pfx_sch_direct_xmit+0x10/0x10
[  609.855753][ T3555]  ? kasan_save_track+0x4f/0x80
[  609.855767][ T3555]  ? kmem_cache_alloc_node_noprof+0x420/0x6f0
[  609.855787][ T3555]  ? __alloc_skb+0x27d/0x7d0
[  609.855805][ T3555]  __dev_queue_xmit+0x1538/0x3850
[  609.855833][ T3555]  ? __dev_queue_xmit+0x274/0x3850
[  609.855853][ T3555]  ? arpt_do_table+0x261/0x1ec0
[  609.855871][ T3555]  ? __pfx___dev_queue_xmit+0x10/0x10
[  609.855892][ T3555]  ? __pfx_arpt_do_table+0x10/0x10
[  609.855914][ T3555]  ? NF_HOOK+0xa2/0x3c0
[  609.855932][ T3555]  NF_HOOK+0x33a/0x3c0
[  609.855951][ T3555]  ? __pfx_arp_xmit_finish+0x10/0x10
[  609.855968][ T3555]  ? NF_HOOK+0xa2/0x3c0
[  609.855985][ T3555]  ? __pfx_NF_HOOK+0x10/0x10
[  609.856001][ T3555]  ? lock_acquire+0x106/0x330
[  609.856019][ T3555]  ? __pfx_arp_xmit_finish+0x10/0x10
[  609.856037][ T3555]  ? inet_addr_type_dev_table+0x25/0x190
[  609.856058][ T3555]  arp_xmit+0x16c/0x270
[  609.856074][ T3555]  ? arp_xmit+0x23/0x270
[  609.856093][ T3555]  arp_solicit+0xbe0/0xe40
[  609.856113][ T3555]  ? arp_solicit+0x119/0xe40
[  609.856131][ T3555]  ? __pfx_arp_solicit+0x10/0x10
[  609.856151][ T3555]  ? __neigh_event_send+0xe9d/0x14a0
[  609.856167][ T3555]  ? __pfx_arp_solicit+0x10/0x10
[  609.856185][ T3555]  __neigh_event_send+0xf05/0x14a0
[  609.856204][ T3555]  neigh_resolve_output+0x198/0x750
[  609.856220][ T3555]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  609.856242][ T3555]  ip_finish_output2+0xbb6/0xff0
[  609.856260][ T3555]  ? ip_skb_dst_mtu+0x80b/0xa50
[  609.856276][ T3555]  ? ip_skb_dst_mtu+0x109/0xa50
[  609.856293][ T3555]  ? ip_finish_output2+0x3d0/0xff0
[  609.856310][ T3555]  ? ip_finish_output+0x33a/0x3f0
[  609.856327][ T3555]  ip_output+0x29f/0x450
[  609.856343][ T3555]  ? ip_output+0x5b/0x450
[  609.856360][ T3555]  iptunnel_xmit+0x59f/0xa00
[  609.856378][ T3555]  ip_tunnel_xmit+0x1f74/0x2730
[  609.856397][ T3555]  ? __pfx_stack_trace_save+0x10/0x10
[  609.856419][ T3555]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  609.856436][ T3555]  ? gre_build_header+0x31f/0xa40
[  609.856456][ T3555]  ? __pfx_gre_build_header+0x10/0x10
[  609.856474][ T3555]  ? skb_network_protocol+0x528/0x790
[  609.856493][ T3555]  __gre_xmit+0x19e/0x240
[  609.856510][ T3555]  ? __pfx___gre_xmit+0x10/0x10
[  609.856525][ T3555]  ? unwind_next_frame+0xa5/0x23c0
[  609.856540][ T3555]  ? iptunnel_handle_offloads+0x2fd/0x630
[  609.856557][ T3555]  erspan_xmit+0xa81/0x1670
[  609.856576][ T3555]  ? __lock_acquire+0x6b5/0x2cf0
[  609.856599][ T3555]  ? __pfx_erspan_xmit+0x10/0x10
[  609.856620][ T3555]  dev_hard_start_xmit+0x2cd/0x7f0
[  609.856644][ T3555]  sch_direct_xmit+0x251/0x4c0
[  609.856659][ T3555]  ? __pfx_sch_direct_xmit+0x10/0x10
[  609.856671][ T3555]  ? alb_send_lp_vid+0x122/0x550
[  609.856688][ T3555]  ? process_scheduled_works+0xad0/0x17a0
[  609.856707][ T3555]  ? worker_thread+0xda6/0x1360
[  609.856728][ T3555]  __dev_queue_xmit+0x1538/0x3850
[  609.856750][ T3555]  ? __dev_queue_xmit+0x274/0x3850
[  609.856772][ T3555]  ? __pfx___dev_queue_xmit+0x10/0x10
[  609.856794][ T3555]  ? rcu_is_watching+0x15/0xb0
[  609.856807][ T3555]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  609.856831][ T3555]  ? kmem_cache_alloc_node_noprof+0x473/0x6f0
[  609.856855][ T3555]  ? alb_send_lp_vid+0x14e/0x550
[  609.856873][ T3555]  alb_send_lp_vid+0x348/0x550
[  609.856893][ T3555]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  609.856915][ T3555]  alb_send_learning_packets+0x12c/0x300
[  609.856933][ T3555]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  609.856951][ T3555]  ? bond_alb_monitor+0xf8/0x17e0
[  609.856970][ T3555]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  609.856988][ T3555]  bond_alb_monitor+0x3d5/0x17e0
[  609.857007][ T3555]  ? bond_alb_monitor+0xf8/0x17e0
[  609.857023][ T3555]  ? __pfx_bond_alb_monitor+0x10/0x10
[  609.857041][ T3555]  ? process_scheduled_works+0xa0f/0x17a0
[  609.857059][ T3555]  ? process_scheduled_works+0xa0f/0x17a0
[  609.857079][ T3555]  process_scheduled_works+0xaec/0x17a0
[  609.857107][ T3555]  ? __pfx_process_scheduled_works+0x10/0x10
[  609.857126][ T3555]  ? do_raw_spin_lock+0x12b/0x2f0
[  609.857141][ T3555]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  609.857155][ T3555]  ? schedule+0x90/0x360
[  609.857172][ T3555]  worker_thread+0xda6/0x1360
[  609.857199][ T3555]  kthread+0x726/0x8b0
[  609.857216][ T3555]  ? __pfx_worker_thread+0x10/0x10
[  609.857235][ T3555]  ? __pfx_kthread+0x10/0x10
[  609.857250][ T3555]  ? _raw_spin_unlock_irq+0x23/0x50
[  609.857263][ T3555]  ? __pfx_kthread+0x10/0x10
[  609.857278][ T3555]  ret_from_fork+0x51b/0xa40
[  609.857300][ T3555]  ? __pfx_ret_from_fork+0x10/0x10
[  609.857318][ T3555]  ? __switch_to+0xc82/0x1410
[  609.857337][ T3555]  ? __pfx_kthread+0x10/0x10
[  609.857352][ T3555]  ret_from_fork_asm+0x1a/0x30
[  609.857375][ T3555]  </TASK>
[  610.456869][   T25] block nbd2: Possible stuck request ffff888025658000: control (read@0,1024B). Runtime 60 seconds
[  610.468853][   T25] block nbd2: Possible stuck request ffff888025658200: control (read@1024,1024B). Runtime 60 seconds
[  610.481308][   T25] block nbd2: Possible stuck request ffff888025658400: control (read@2048,1024B). Runtime 60 seconds
[  610.492894][   T25] block nbd2: Possible stuck request ffff888025658600: control (read@3072,1024B). Runtime 60 seconds
[  612.826931][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  613.758064][ T5201] udevd[5201]: worker [22709] /devices/virtual/block/nbd2 is taking a long time