last executing test programs:

5.603812619s ago: executing program 3 (id=2556):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0xfc}}, 0x20050800)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x114, 0x2e, 0x1, 0x0, 0x25dfdc03, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x12, 0x53, 0x0, 0x0, @binary="9eec4385ec473f10be3264867e60"}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @generic="3ed73cfccb"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x20008800)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f00000006c0)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x1, 0x9bca, 0x8, 0x4, 0x8b], 0x1141, 0x0, 0x0, [{}, {}, {}, {}]}, 0x78)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}})
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x0, 0x1}}, 0x10)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="010500600000000040119078ac140041ac1400014404bb7012344e20004890780300000023000000f3a74d33b95518f01bbd7604731c892a0a13e19a51f64f9e78077bb13c9fc3304cf3c5cd542ab66fee275d6644654e5b0e7123e822a71d2700"/106], 0x6a)
r5 = socket$inet6(0xa, 0x3, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0xff, 0x2, 0xff, 0x8, 0xfffb, 0x8}, 0x20)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r7, 0x804, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0xffffffff, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0xc, 0x80000000}, {0x80, 0x3}, {0x80, 0xfd}, {0x7, 0x0, 0xfe, 0x10000000}, {0x0, 0x0, 0xe, 0xffffffff}, {0x3, 0x0, 0xf8}, {0x5}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

5.242310249s ago: executing program 3 (id=2559):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4000000)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180))
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, r1, 0x402, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0xa8, 0xf, [@mesh_chsw={0x76, 0x6, {0x4, 0x0, 0x13, 0x7}}, @fast_bss_trans={0x37, 0x88, {0xe, 0x2, "82055d8a4b9e858c059dcf072c6f5ef4", "949671f0bd31e8d72e1096e2034bdc4e61dd2bcf790f18967aca2b0d731341a7", "b20ad7670e713b771abd28a4e9c052d21a3f5a76912a035546e841f467e1587c", [{0x4, 0x23, "f1383a16cebbf8aa5af2c7f1bac41cb3879ffb30e33ce18ed42ed95f2e35e3e3f310cf"}, {0x2, 0xf, "e31b0da6a1dfbec8096e9d36a76ec7"}]}}, @mic={0x8c, 0x10, {0xabb, "b2b0f381b7ce", @short="3581584b4d6e3334"}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000002}, 0x4054)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1402, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x48000)
recvmmsg(r3, &(0x7f0000003280)=[{{&(0x7f0000000440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000580)=""/229, 0xe5}], 0x2}, 0x2}, {{&(0x7f00000006c0)=@ieee802154, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)=""/23, 0x17}], 0x1, &(0x7f00000007c0)}, 0x6}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000800)=""/224, 0xe0}, {&(0x7f0000000900)=""/197, 0xc5}, {&(0x7f0000000a00)=""/94, 0x5e}, {&(0x7f0000000a80)=""/128, 0x80}, {&(0x7f0000000b00)=""/13, 0xd}, {&(0x7f0000000b40)=""/249, 0xf9}, {&(0x7f0000000c40)=""/156, 0x9c}], 0x7, &(0x7f0000000d80)=""/162, 0xa2}, 0x5}, {{&(0x7f0000000e40)=@hci, 0x80, &(0x7f0000001300)=[{&(0x7f0000000ec0)=""/107, 0x6b}, {&(0x7f0000000f40)=""/248, 0xf8}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/58, 0x3a}, {&(0x7f0000001100)=""/102, 0x66}, {&(0x7f0000001180)=""/107, 0x6b}, {&(0x7f0000001200)=""/245, 0xf5}], 0x7, &(0x7f0000001380)=""/206, 0xce}, 0xa}, {{&(0x7f0000001480)=@can, 0x80, &(0x7f0000001840)=[{&(0x7f0000001500)=""/170, 0xaa}, {&(0x7f00000015c0)=""/127, 0x7f}, {&(0x7f0000001640)=""/46, 0x2e}, {&(0x7f0000001680)=""/143, 0x8f}, {&(0x7f0000001740)=""/7, 0x7}, {&(0x7f0000001780)=""/188, 0xbc}], 0x6, &(0x7f00000018c0)=""/77, 0x4d}, 0xff}, {{&(0x7f0000001940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000019c0)=""/217, 0xd9}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/25, 0x19}], 0x3, &(0x7f0000002b40)=""/16, 0x10}, 0x5e87}, {{&(0x7f0000002b80)=@qipcrtr, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002c00)=""/52, 0x34}, {&(0x7f0000002c40)=""/240, 0xf0}, {&(0x7f0000002d40)=""/196, 0xc4}, {&(0x7f0000002e40)=""/206, 0xce}, {&(0x7f0000002f40)=""/219, 0xdb}, {&(0x7f0000003040)=""/248, 0xf8}, {&(0x7f0000003140)=""/88, 0x58}], 0x7, &(0x7f0000003240)=""/29, 0x1d}, 0x8}], 0x7, 0x0, &(0x7f0000003440)={0x77359400})
r4 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r4, &(0x7f0000003480)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000003680)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0xd8009024}, 0xc, &(0x7f0000003640)={&(0x7f0000003500)={0x128, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2b}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe0, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x101}}, {0xc4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc0, 0x1, "e9a33eada53f2040abfb7ef1b3bf02d0cfce5b536af67b6d205cf9b80dd23944baf7a5869c971cd78322090297f841d00227ade425f32fdafcab0d07e0f755859f32b112527e26eaf1964b52d599bbb8e3196150363da815ab5221596274dcdbf09ca1f366a958ac938b22392a9a350ba0ea5049c27d82320b962c0c6adc0a2af0f30b60d3bf95c3b366c2aded16b43218137b9b71cc0e5f8493b33338f4fc334d05976a89c09850e6cd5bd575ad319458bc608fd7bb14ddfa04be4d"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x4040081}, 0x24000044)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000037c0)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003780)={&(0x7f0000003700)={0x68, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x55)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003840), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000003900)={&(0x7f0000003800), 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r5, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00c}, 0x80c)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000003940), &(0x7f0000003980)=0x40)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000039c0)={{r0}, 0x5, 0x100000001, 0x3})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000003a00))
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003a40)={'wg0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x60000800}, 0xc, &(0x7f0000003b40)={&(0x7f0000003ac0)={0x64, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1a, 0x34, @random="5a2fbfa64db270166597d3785882d887261753658ed6"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xc, 0x34, @random="2c6cc64834e58cec"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="27e4d6f4e607"}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
sendto(r4, &(0x7f0000003bc0)="ee986bb60b2e2ee7379c3ce40865af036545432e25559597c9317ceab819fa2363730700af21fd7c33a680096f630d476a44b7052af34c40cf6c3e066fd3189eb3f6d8595bd2017e1a5ecc312529a032b993248a3300dd962fa313830f27e55251166cdc3d5826063f99eb96", 0x6c, 0x10, &(0x7f0000003c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x4, 0x2, 0x7, 0x1, {0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, 0x80)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000003e40)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0xbe5051c7ea76e444}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d00)={0xe4, 0x0, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x48800}, 0x40000)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000004040)={{<r9=>r2, &(0x7f0000003e80)='\x00', 0x202000, &(0x7f0000003ec0)={@align=0x5, {0x4, 0x1, 0x1, 0x7}}, 0x2, &(0x7f0000003f00), &(0x7f0000003f40)=0x8}, {[0x9, 0x1a41ba13, 0x3f08, 0x80000001]}, 0x6, 0xa5, &(0x7f0000003f80)=""/165})
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f00000040c0)=@req3={0x9, 0x8001, 0x6, 0x56, 0x4, 0x3, 0x2}, 0x1c)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000004280)=@generic={&(0x7f0000004240)='./file0\x00', 0x0, 0x10}, 0x18)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000042c0)={0xffffffffffffffff, 0x2, 0x18}, 0xc)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004300)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x5, '\x00', r8, r9, 0x3, 0x2, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000004480)={0x1e, 0x7, &(0x7f0000004100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000004140)='GPL\x00', 0x7, 0x2, &(0x7f0000004180)=""/2, 0x41000, 0x2, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f00000041c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000004200)={0x0, 0xd, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r9, 0x2, &(0x7f0000004400)=[r10, r9, 0x1, r9, 0x1, r11, r9, r12, 0xffffffffffffffff], &(0x7f0000004440)=[{0x5, 0x5, 0xf}, {0x2, 0x4, 0x3, 0xb}], 0x10, 0x7}, 0x94)

4.793537157s ago: executing program 2 (id=2564):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = epoll_create1(0x0)
poll(&(0x7f0000000040)=[{r4, 0x200}], 0x1, 0xdb3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100))
shutdown(r5, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0xf74}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x4000)

4.280800543s ago: executing program 4 (id=2567):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000107000000000000000001"], 0x114}], 0x1}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x138, 0xffffff80, 0x178, 0x138, 0x178, 0x258, 0x230, 0x258, 0x258, 0x258, 0x2034, 0x0, {[{{@ipv6={@mcast2, @empty, [0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff, 0xff000000], 'netdevsim0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x2, 0x2, 0x4, 0x32}, 0x1d, 0x118, 0x138, 0x12, {0x959f1400}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private2, [0x0, 0x0, 0xff0000ff, 0xffffff00], 0x8, 0xc, 0x3, 0x4e20, 0x8, 0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xff000000], 'ip6gretap0\x00', 'veth1_macvtap\x00', {}, {}, 0x87, 0x0, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x2, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)

4.171417229s ago: executing program 3 (id=2568):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000100)={0x7, {0x1, 0xfff, 0xa556, 0x9, 0xfffffffffffff800}})
connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="007fffefff00000000", 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

3.982890894s ago: executing program 4 (id=2570):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500000003001d000100000f070000000300000001dbbe8a8b521c616e5df57341c644e1a4a728bafc43be3944075d13f10294ae639566dcd0f51ff81cb683e98fbacff048df44695ac78e207c00"/112], 0x0, 0x35, 0x0, 0x9}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
unshare(0x26020480)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000320000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffecffffff"]}, 0x108)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="880000000b000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000410007012bbd70004476b502047c00000400c2800c000180064f060086dd00000c0007800820e704dfdfebc546546f11607bc2f5a1465028d7068a0e8943fc63bb768087c78677f847a9e1c57e14b772e02a38b55c2ef6d411ab7777402c1dd1ee4145"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r1, &(0x7f0000000500), &(0x7f0000000080)=""/12}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x1, 0x18, 0x44, 0x66, 0x0, 0x2, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_addr={0x44, 0x4, 0x46, 0x1, 0x2}, @noop]}}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0x1, 0x2, 0x5, 0x0, 0x2, 0x6, 0x2, 0x2, 0xf, 0x1, 0x4, 0x4e23, 0x4e24}, 0x4, 0x4}, 0x3, 0x2}}}}}}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x9)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000580)=""/103, &(0x7f0000000600)=0x67)
setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
ioctl$int_out(r3, 0x5461, &(0x7f00000004c0))
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000b00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000780)=ANY=[@ANYBLOB="0403000012000d0029bd7000fcbedf252100a30d4e224e20e9060000090000000700000001000080ad02000088639d07d96e0b1002000000", @ANYRES32=r6, @ANYBLOB="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"], 0x304}, 0x1, 0x0, 0x0, 0x48011}, 0x4000000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
syz_emit_ethernet(0xfdef, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff9caaaaaaaabb08004500fde10000000000019078ac1414bbac1414aa080090787f000001450000000000000000000000ac1414aae0000001"], 0x0)

3.739789914s ago: executing program 2 (id=2571):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200})
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'gre0\x00', 0x0})
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90)
syz_emit_ethernet(0xbe, &(0x7f0000001040)={@random="74121d2cc1ee", @local, @void, {@ipv4={0x800, @tipc={{0x20, 0x4, 0x3, 0x1e, 0xb0, 0x64, 0x0, 0x5, 0x6, 0x0, @local, @loopback, {[@ssrr={0x89, 0x7, 0x79, [@dev={0xac, 0x14, 0x14, 0x1d}]}, @lsrr={0x83, 0x7, 0x44, [@local]}, @timestamp_addr={0x44, 0x2c, 0x72, 0x1, 0x2, [{@loopback, 0xc7}, {@remote, 0x6}, {@broadcast, 0x894}, {@private=0xa010100, 0x2}, {@multicast1, 0x7}]}, @timestamp_addr={0x44, 0xc, 0xb3, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x6}]}, @timestamp_addr={0x44, 0x1c, 0x7c, 0x1, 0x7, [{@loopback}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x6}, {@loopback, 0xf}]}, @rr={0x7, 0x7, 0x15, [@dev={0xac, 0x14, 0x14, 0x2d}]}]}}, @payload_mcast={{{{{{0x30, 0x0, 0x0, 0x0, 0x1, 0xb, 0x1, 0x2, 0x5, 0x0, 0x3, 0xc, 0x1, 0x1, 0x3, 0xeff, 0x2, 0x4e21, 0x4e24}, 0x2}, 0x0, 0x1}, 0x2}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000180)=0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000f80)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x2, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffefe}, 0x10}, 0x94)

3.601452336s ago: executing program 3 (id=2573):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000040))
getpid()
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14)
sendmmsg$inet(r1, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="96cdfe5fa9dd3385ba20e53118561f66ed63f3c48a91d2085db3f32079f4aded61c6aa37c69839fcd2c5fee8659c829ab58df82fe7261b78a1c6414e319d9e0eb9af0627d4acbc5587fff800af103ab2ba616f96b03f92c3f160d2ec190cf83575", 0x61}, {&(0x7f0000000100)="a09aa83e7d1fba722db0399f1458cf4ab282993fe3cd23fc2abbbff1b678e99840e7465ff38c41e7f8311af5e7895fe648def92f36f63fb85b8a47da704bf99ce1b180e574374a5f4cf8310b40a27b8a3b2a05888eaa16420b253f947f13715fe8adc53998639428865a618da2fa889e996c89dc1f58dc92c8ab21b1697f10c3fdc2836e411e3021637d2e7ae65e7880d7d1a1369b76bc7f91aef5d7991ba1850b667d1910c45c44815836", 0xab}], 0x2, &(0x7f0000000280)=[@ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x3d, 0x1, 0x6, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x2}, {@broadcast, 0xffff0000}]}, @rr={0x7, 0x13, 0x9, [@loopback, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x8d, 0x1, 0xf, [{@loopback}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0xe0}}, {{&(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001700)=[{&(0x7f00000003c0)="4220270a6a318a93ed5ecb3ef19141da7588f0b530cb081d76a29ed4040614efd35be8e8a42ae9f469d42c70b1d1df27c35febdae4b07442226d9a6b0c571780c205f4f208aac0afd0b29f23f34e1c89605cea219bc0780d", 0x58}, {&(0x7f0000000440)="f0bc489b6fd8212d7e415483e94e4db0438d7dab89cfb4f08f4cf57477a6e0ea39f0e369577431e5189ad287caffc4e91885b24fd87c34db71aa674fb7ad22270752ededdb0305464675a67dc6ee90a5f5dbcd76b384f88febf795c6b8877edec97feb5cce9d513ff013c27f81a3df3b5ef58a3017d2ca2b2c8c6526d27e386a196d882e6f83062676211c715f11fa9cd321869db138f1cf12d62fadc190353352228289af9a7053effc48fdc13f27e0becbe31a0942da600e50ca2516d5d457fc59e779cb3a5bd1cfaf6002ff5d2ffe281cde7760e8703c9a68899e203fc82024a1bc1181a24d9a16df6d3f", 0xec}, {&(0x7f0000000540)="78c0aaa1d62bf122eea2b842422344f939fa8581f01612fff656ab78dfd1e93c2997116eb21a809c1eef01b096a21970b02d72076409014f8bc2318391ea342572992ec87d84f8f93c4b96b4e24c274346424fc83e0c2244fca7c644fd6432e895818da45a", 0x65}, {&(0x7f00000005c0)="e4e6594d5016870ec7ba7b6b13bafb60bdeab3030578ba0317a924dc51a6b943297a1c91506a36d7288c180008054966410dc1232d17e02f6bf119e5976f2b38a9c5953317e08b12287ce80d5f5f7a8baf6906cab8433abd3284f96327ab0663679ccdb7a98dca017f5c3533b0bc60c2aa70ad23505dd1dd062c7067fae94170ea2a4fad9f108224574f51519cbc8f609f2dca0a", 0x94}, {&(0x7f0000000680)="e1b1049af787372210b0a22fd4896ad45b716b243cf9194b182c59d442d630820f382b8cc65b", 0x26}, {&(0x7f00000006c0)="b526", 0x2}, {&(0x7f0000000700)="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", 0x1000}], 0x7}}, {{&(0x7f0000001780)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000001800)=[{&(0x7f00000017c0)="bc2c8db0c56adacd428f35d05ff40b58bdeb90f9cc172eb70ab0f229d06ec25581f10ceca403bc24258ad09340975b076da5288ea280360447a00fefb4f8", 0x3e}], 0x1, &(0x7f0000001840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x40}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001880)="88562a87ac1d7590ebf82bf2b0e3be6a258bc2900f8203d553744df9a8cb75ea17c25f89d043591791f5af58365873b8b36db9ee", 0x34}], 0x1, &(0x7f0000001900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf5}}, @ip_tos_int={{0x14}}], 0x30}}], 0x4, 0xd28af079c0621858)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001a40)={0x0, 0x991}, 0xc)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001c00)={{<r4=>r0, &(0x7f0000001a80)='\x00', 0x10000, &(0x7f0000001ac0)={@_ha_fsid={[0x10000, 0x5]}, {0x1000, 0x81, 0x2, 0x1}}, 0x8, &(0x7f0000001b00)={@_ha_fsid}, &(0x7f0000001b40)=0x3}, {[0xa02b, 0x3, 0x1, 0x40]}, 0x4, 0x46, &(0x7f0000001b80)=""/70})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001cc0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000001e00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x1288000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d00)={0xb4, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0xf}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2400d015}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000001e40)={0x2, 0x4, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0xa, 0x286, [0x0, 0x5, 0xb590]}}, @ra={0x5, 0x2, 0xa81}]}, 0x30)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r6)
sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000002080)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f00)={0x110, r8, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x30}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}]}, @NL80211_ATTR_REG_RULES={0xac, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe8d}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe8b}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf26}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x80000)
write$cgroup_subtree(r4, &(0x7f00000020c0)={[{0x0, 'blkio'}, {0x2b, 'pids'}, {0x2b, 'pids'}, {0x2b, 'net_prio'}, {0x2b, 'net_cls'}, {0x2b, 'memory'}, {0x2b, 'memory'}]}, 0x36)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x14, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240080d0}, 0x8000)
accept4$phonet_pipe(r4, &(0x7f0000002200), &(0x7f0000002240)=0x10, 0x80000)
ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000002280)={'pimreg0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r9 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockname(r9, &(0x7f00000022c0)=@tipc, &(0x7f0000002340)=0x80)
sendmsg$nl_generic(r4, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x34, 0x22, 0x8, 0x70bd29, 0x25dfdbff, {0x1e}, [@nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x4, 0x104}, @nested={0x4, 0xf5}]}, @generic="86a4c290ab1b76a5985597770920e603a9"]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000002480))
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000024c0))
socket$inet_udp(0x2, 0x2, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002500), 0x20000, 0x0)
ioctl$SIOCGSKNS(r10, 0x894c, &(0x7f0000002540)={'ipvlan1\x00', 0x600})

3.310016071s ago: executing program 3 (id=2575):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/146, 0x92}], 0x1}, 0x9}], 0x1, 0x2, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x100000000003f}}], 0x48}, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async)
sendfile(r0, r1, 0x0, 0xffffffff000) (async)
recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/146, 0x92}], 0x1}, 0x9}], 0x1, 0x2, 0x0) (async)
ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) (async)
socket$rds(0x15, 0x5, 0x0) (async)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x100000000003f}}], 0x48}, 0x0) (async)

3.154572029s ago: executing program 4 (id=2577):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_int(r0, 0x0, 0x12, 0x0, &(0x7f0000000100))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x200, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2.91383989s ago: executing program 2 (id=2579):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x488d, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
syz_open_procfs$namespace(0x0, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c)
sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)

2.577401485s ago: executing program 2 (id=2582):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'pimreg\x00', 0x100})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="804001000000010008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1c9b, 0x2, 0x2, 0x4, 0x3, 0x4}, 0x20)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'pimreg\x00', 0x100}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="804001000000010008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1c9b, 0x2, 0x2, 0x4, 0x3, 0x4}, 0x20) (async)

2.242474806s ago: executing program 0 (id=2583):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000100)={0x7, {0x1, 0xfff, 0xa556, 0x9, 0xfffffffffffff800}})
connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="00a6ffffff00000000", 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

2.068096652s ago: executing program 4 (id=2584):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="1bac0fbeaf2a237c09baa3e40484bd524f5eeed7e73f08060000001e930aeabe1b3012f8bbd96f067229722ba1784d83183dc1fecd5b445e4d", 0x39}], 0x1}}], 0x2, 0x40)
r2 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000040), 0x2)
sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$sock_SIOCADDRT(r2, 0x890b, 0x0)
sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r1, 0x1)
writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x20004056)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x44)
write(r3, &(0x7f0000000040), 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9)

1.99484862s ago: executing program 3 (id=2585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x36, 0x301, 0x70bd25, 0xfffffffc, {0x3}}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00')
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="25000100", @ANYRES16=r1, @ANYBLOB="00082dbd7000fddbdf250300000008000700", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x4000000)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000d40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a00)={0x2e0, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0x106, 0x2a, [@tim={0x5, 0xf8, {0x2, 0xa2, 0x80, "5942673e743a3261f6f871928eff68f3f6a4774ed187a5afb3147999a6344615bf1fa62b04e881b701a46f8a21ad61770088ebfdae4ecf7606046a8a83e86ce1519daba1abf1785e710e8eae225dec7862f411febec61ed6aef13b54600e638c301bdbd494f14ab17bed79807bec65c48be7dc0410e76e5f7da945699db5d1bc5019b7fe35f2c13105dc408fb96626e2eed9800730a2891a6647cade534604e86500d7e4c8ded1d23546218ded9dc12be8e5ae7590a8d4d1c209f3103e32fdcc1a98ba7fb5534dc7467b14b0c97a8fdee698b0be2c59d6bb019d035ff4ed63855afb4acd9915fdd484ad7bef24b49c892471cd1208"}}, @cf={0x4, 0x6, {0xd, 0xfb, 0x4, 0x6}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x12}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x190, 0x84, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x10}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x200}, @NL80211_BAND_LC={0x8, 0x5, 0x1ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffffb}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x77}, @NL80211_BAND_LC={0x8, 0x5, 0x81}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x401}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8000}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xd8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, @random="338ea0f8d4be278007f7"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1b5f02d47539"}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80000001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3ff}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x79356b95}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xea2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xc}, @NL80211_BAND_LC={0x8, 0x5, 0xf2}, @NL80211_BAND_LC={0x8, 0x5, 0x10}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="25210bfca0db"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r3, 0x4, 0x70bd26, 0x1a, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7fff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffffff7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040011)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
splice(r5, 0x0, r6, 0x0, 0x39000, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, <r8=>0x0, 0x0}}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000001000000000000000000850000002e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x2, 0x0, 0x3, 0x1, 0xffffffffffffffff}], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r9, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0x21, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x7, 0x40, 0xfffffff7}, 0x10, 0xffffffffffffffff, r9, 0xa, &(0x7f0000000540)=[0xffffffffffffffff], &(0x7f0000000580)=[{0x5, 0x2, 0xc, 0xb}, {0x1, 0x3, 0xd, 0x3}, {0x2, 0x1, 0x0, 0x1}, {0x4, 0x1, 0xc, 0x9}, {0x3, 0x1, 0x4, 0x7}, {0x3, 0x4, 0x3, 0x7}, {0x5, 0x4, 0x4, 0x6}, {0x1, 0x2, 0x3, 0xb}, {0x2, 0x3, 0xb, 0x3}, {0x5, 0x1, 0xf}], 0x10, 0x1}, 0x94)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0)

1.651835207s ago: executing program 0 (id=2586):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f40)={0x6, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0100000012020000ffffffff00000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000171c18ae86"], 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1)

1.62360773s ago: executing program 1 (id=2587):
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x5, <r2=>0x0}, 0x8)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0x4)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4)
bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="17", 0x1}], 0x1}, 0x8c0)
recvmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010082, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000000)={r9, 0x6, 0x2}, 0x8)
accept(r0, 0x0, &(0x7f0000000180))
socket$tipc(0x1e, 0x2, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000380)={<r10=>r0, &(0x7f00000001c0)=':^\x00', 0x1, &(0x7f0000000240)={@_ha_fsid={[0x7fffffff, 0x10001]}, {0x7, 0x1, 0x8, 0x5}}, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0xf8a})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r11=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r12=>0xffffffffffffffff})
r13 = socket(0x8000000010, 0x2, 0x0)
write(r13, &(0x7f00000002c0)="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", 0xfc)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r4, @ANYBLOB="81010000000000000000030000000800010000000000700007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="af00018008000100", @ANYRES32=r5, @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c000180", @ANYRES32=r13, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00080005000000000000000c00020005000000000000000c000800c80d000000000000"], 0xbc}}, 0x20040404)

1.542765126s ago: executing program 2 (id=2588):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1bc8, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000003ac8ffccf01426a00000085000000200000009500000800000000"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(0x0, 0x10000, 0x3, 0x11, r1, 0x80000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x8, 0x6, "6ed00268"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800070127bd351af6f168a5255500000800b8"], 0x1c}, 0x1, 0x0, 0x0, 0x24044811}, 0x20004000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x1d, 0x1, 0xfe, 0xfffffffc}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0xffffffd0}, 0x48)
setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@int=0xfffffffc, 0x4)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
bind$packet(r7, &(0x7f0000000000)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00', <r8=>0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)='T', 0x1}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c}}], 0x20, 0x2004c044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="f48b6b0e", 0x4}], 0x1}}], 0x2, 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, r8, 0x25, 0x2, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=[0x4, 0xfff, 0x2, 0x6, 0x40, 0x7, 0x9, 0xb, 0x8, 0x4], &(0x7f0000000440)=[0x3, 0x4, 0x3, 0x5, 0x2, 0x2], 0x3, 0xa}}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno', 0xa)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4)
socket$nl_route(0x10, 0x3, 0x0)

1.442930848s ago: executing program 0 (id=2589):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0x6, 0x200, 0x3b, 0x100, 0xa12b, 0x4, 0x8243}, 0x1c)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x87, @dev={0xac, 0x14, 0x14, 0x3b}, 0x4e23, 0x4, 'none\x00', 0x10, 0x3, 0x2d}, 0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xf, 0x1006, &(0x7f0000000980)=""/4102, 0x40f00, 0x4d}, 0x94)

1.145459256s ago: executing program 1 (id=2590):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x4, 0xffffffff, 0x8, 0x28480, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50)
socketpair(0x10, 0x5, 0x9, &(0x7f0000000280)) (async)
socketpair(0x10, 0x5, 0x9, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000002c0)=0x7)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x2c, &(0x7f0000000180)=0xf, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x1d, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x560}, @call={0x85, 0x0, 0x0, 0x4d}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x10}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x1d, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x560}, @call={0x85, 0x0, 0x0, 0x4d}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x10}, 0x94)

1.133340671s ago: executing program 0 (id=2591):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x4004040)

820.500282ms ago: executing program 1 (id=2592):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, <r1=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0xffff}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28)

817.958898ms ago: executing program 0 (id=2593):
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x40003a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x8, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8004, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1)
getsockopt$inet_opts(r5, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) (async)
ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x440, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, 'veth1_to_batadv\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000001c0), 0xc) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r11 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (rerun: 64)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000002900)=r12, 0x4) (async, rerun: 64)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x800) (async, rerun: 64)
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES64=r11], 0x1c}}, 0x810)

693.355015ms ago: executing program 1 (id=2594):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080)

685.439923ms ago: executing program 4 (id=2595):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10030, r0, 0x93b57000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="880000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c0002800500010000000000080007400000000124000e800c00028054aa010021000000140001"], 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)="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", 0x346}], 0x1)
readv(r0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000a80)=""/4105, 0x1009}], 0x2)

451.892502ms ago: executing program 1 (id=2596):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)

365.240425ms ago: executing program 4 (id=2597):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000004400000000000000", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004002400"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async, rerun: 64)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x16}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000006000000000000850000006c0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790701757df37538e486dd63"], 0xfdef) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, 0x48) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (rerun: 64)

292.204894ms ago: executing program 1 (id=2598):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0}) (async)
r3 = socket(0x10, 0x3, 0x0) (async)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200087ad, &(0x7f0000e68000)={0x2, 0x4e20, @remote}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) (async)
r5 = socket$kcm(0x10, 0x2, 0x4) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x94) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb)
sendto$inet(r6, &(0x7f0000000800)="12345678", 0x8, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10)

167.44839ms ago: executing program 2 (id=2599):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
socket$packet(0x11, 0xa, 0x300)
syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008100000282b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a020201"], 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000000))
socket(0x1d, 0x2, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f00000000c0), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r6, &(0x7f0000000240)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ea44c22080000000000000077609475b709de050000000000f2170e65e3f50327e42200000000000000ff000000000000fe00ff0100", 0x3c}, 0x60)
listen(r6, 0xf5f)
accept(r6, 0x0, 0x0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[], 0xb8}}, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8922, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)

0s ago: executing program 0 (id=2600):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, 0x0, 0x0)
r3 = accept(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)

kernel console output (not intermixed with test programs):

uplex
[  378.241968][T12011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1681'.
[  378.295640][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1681'.
[  378.521734][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  379.054488][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1689'.
[  379.131932][T12043] batman_adv: batadv0: Interface deactivated: wlan1
[  379.152069][T12043] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  379.155402][T12043] batman_adv: batadv0: Removing interface: wlan1
[  379.230221][T12057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1690'.
[  379.230865][T12057] syzkaller1: entered promiscuous mode
[  379.230885][T12057] syzkaller1: entered allmulticast mode
[  379.265331][T12057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1690'.
[  380.003527][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1696'.
[  380.003553][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'.
[  380.534440][T12098] batman_adv: batadv0: Adding interface: veth0
[  380.534460][T12098] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  380.534494][T12098] batman_adv: batadv0: Interface activated: veth0
[  380.571426][T12098] batman_adv: batadv0: Interface deactivated: macvlan2
[  380.571659][T12098] batman_adv: batadv0: Removing interface: macvlan2
[  380.597831][T12098] batman_adv: batadv0: Interface deactivated: ipvlan3
[  380.598042][T12098] batman_adv: batadv0: Removing interface: ipvlan3
[  380.631041][T12098] batman_adv: batadv0: Interface deactivated: veth0
[  380.631256][T12098] batman_adv: batadv0: Removing interface: veth0
[  381.149123][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1700'.
[  381.182770][T12108] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1700'.
[  381.371706][T12120] sctp: [Deprecated]: syz.0.1705 (pid 12120) Use of int in max_burst socket option.
[  381.371706][T12120] Use struct sctp_assoc_value instead
[  381.602638][T12132] tun0: tun_chr_ioctl cmd 1074025677
[  381.602750][T12132] tun0: linktype set to 0
[  381.714573][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'.
[  382.159172][ T1916] net_ratelimit: 28 callbacks suppressed
[  382.159195][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  382.269398][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  382.381975][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  382.488976][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  382.599148][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  382.709455][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  382.820598][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  382.930097][   T59] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  382.964139][   T31] audit: type=1804 audit(1789141929.466:7): pid=12159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1716" name="/newroot/347/cgroup.controllers" dev="tmpfs" ino=1802 res=1 errno=0
[  382.964204][   T31] audit: type=1800 audit(1789141929.466:8): pid=12159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1716" name="cgroup.controllers" dev="tmpfs" ino=1802 res=0 errno=0
[  383.049137][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  383.159935][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  383.456539][T12177] __nla_validate_parse: 4 callbacks suppressed
[  383.456560][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1721'.
[  383.633500][T12177] netlink: 'syz.3.1721': attribute type 3 has an invalid length.
[  383.633524][T12177] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1721'.
[  383.670068][T12177] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1721'.
[  383.832442][T12189] C: renamed from veth1_to_team (while UP)
[  383.862993][T12189] netlink: 'syz.4.1725': attribute type 3 has an invalid length.
[  383.863021][T12189] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1725'.
[  384.050188][T12202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1727'.
[  384.096419][T12202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1727'.
[  384.110707][T12199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.111426][T12199] syzkaller0: entered promiscuous mode
[  384.111464][T12199] syzkaller0: entered allmulticast mode
[  384.159168][T12199] sch_tbf: peakrate 4294967291 is lower than or equals to rate 5668971250712199402 !
[  384.174375][T12206] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1727'.
[  384.175158][T12206] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1727'.
[  384.381960][T12193] tipc: Resetting bearer <eth:syzkaller0>
[  384.412351][T12193] tipc: Disabling bearer <eth:syzkaller0>
[  386.052359][T12248] netlink: 'syz.1.1743': attribute type 1 has an invalid length.
[  386.077010][T12249] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1743'.
[  386.237042][T12248] 8021q: adding VLAN 0 to HW filter on device bond4
[  386.939324][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'.
[  387.180026][   T13] net_ratelimit: 25 callbacks suppressed
[  387.180050][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  387.294450][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  387.404101][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  387.510387][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  387.620070][   T59] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  387.808543][T12312] IPVS: length: 15 != 8
[  387.851416][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  387.956852][T12314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.969765][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  388.078976][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  388.191067][   T59] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  388.771674][T12335] __nla_validate_parse: 1 callbacks suppressed
[  388.771696][T12335] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1758'.
[  388.771726][T12335] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1758'.
[  388.918754][T12349] vlan0: entered promiscuous mode
[  388.964705][T12358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1756'.
[  388.986026][T12349] team0: Port device vlan0 added
[  389.903103][T12380] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1765'.
[  390.506383][T12388] netlink: 'syz.0.1768': attribute type 39 has an invalid length.
[  391.705157][T12412] FAULT_INJECTION: forcing a failure.
[  391.705157][T12412] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  391.705196][T12412] CPU: 1 UID: 0 PID: 12412 Comm: syz.4.1772 Not tainted syzkaller #0 PREEMPT(full) 
[  391.705221][T12412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  391.705236][T12412] Call Trace:
[  391.705245][T12412]  <TASK>
[  391.705255][T12412]  dump_stack_lvl+0xe8/0x150
[  391.705294][T12412]  should_fail_ex+0x410/0x560
[  391.705332][T12412]  _copy_from_user+0x2d/0xb0
[  391.705362][T12412]  ___sys_sendmsg+0x1c6/0x360
[  391.705391][T12412]  ? __lock_acquire+0x747/0x2de0
[  391.705420][T12412]  ? __pfx____sys_sendmsg+0x10/0x10
[  391.705456][T12412]  ? kstrtouint+0x6e/0xe0
[  391.705520][T12412]  ? __fget_files+0x2a/0x420
[  391.705551][T12412]  ? __fget_files+0x3a2/0x420
[  391.705593][T12412]  __sys_sendmmsg+0x273/0x4d0
[  391.705630][T12412]  ? __pfx___sys_sendmmsg+0x10/0x10
[  391.705670][T12412]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  391.705712][T12412]  ? ksys_write+0x242/0x270
[  391.705750][T12412]  ? __pfx_ksys_write+0x10/0x10
[  391.705791][T12412]  __x64_sys_sendmmsg+0xa0/0xc0
[  391.705824][T12412]  do_syscall_64+0x166/0x520
[  391.705848][T12412]  ? trace_irq_disable+0x3b/0x140
[  391.705871][T12412]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.705894][T12412]  ? clear_bhb_loop+0x70/0xc0
[  391.705922][T12412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.705945][T12412] RIP: 0033:0x7f569eb9e159
[  391.705973][T12412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  391.705992][T12412] RSP: 002b:00007f569fa3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  391.706017][T12412] RAX: ffffffffffffffda RBX: 00007f569ee25fa0 RCX: 00007f569eb9e159
[  391.706034][T12412] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 000000000000000a
[  391.706050][T12412] RBP: 00007f569fa3a090 R08: 0000000000000000 R09: 0000000000000000
[  391.706064][T12412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  391.706078][T12412] R13: 00007f569ee26038 R14: 00007f569ee25fa0 R15: 00007fff5a422b88
[  391.706114][T12412]  </TASK>
[  392.269537][  T113] net_ratelimit: 30 callbacks suppressed
[  392.269561][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  392.380829][   T59] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  392.489141][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  392.605513][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  392.709136][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  392.823420][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  392.929090][   T59] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  393.122855][   T40] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  393.230419][   T59] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  393.342570][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  393.493306][T12451] netlink: 'syz.4.1781': attribute type 10 has an invalid length.
[  393.493345][T12451] dummy0: left promiscuous mode
[  393.553967][T12454] netlink: 'syz.4.1781': attribute type 10 has an invalid length.
[  393.601072][T12451] team0: Port device dummy0 added
[  393.705084][T12454] team0: Port device dummy0 removed
[  394.048015][T12464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1783'.
[  394.278300][T12464] hsr_slave_1 (unregistering): left promiscuous mode
[  394.422712][T12467] ip6gre2: entered promiscuous mode
[  394.422737][T12467] ip6gre2: entered allmulticast mode
[  394.430546][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'.
[  395.670578][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'.
[  395.742130][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1789'.
[  395.875736][T12493] veth0_to_bridge: entered promiscuous mode
[  395.876307][T12493] macvtap1: entered promiscuous mode
[  395.877264][T12493] macvtap1: entered allmulticast mode
[  395.877280][T12493] veth0_to_bridge: entered allmulticast mode
[  396.331191][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1792'.
[  396.395146][T12511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1792'.
[  396.444252][T12507] 8021q: adding VLAN 0 to HW filter on device bond3
[  396.518674][T12513] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1793'.
[  397.377445][ T1916] net_ratelimit: 17 callbacks suppressed
[  397.377471][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  397.529919][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  397.639021][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  397.969115][   T40] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  398.079337][   T40] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  398.149688][T12542] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  398.194436][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  398.299104][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  398.409071][   T59] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  398.726492][T12564] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[  398.829437][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  399.138290][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1807'.
[  399.138340][T12571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1807'.
[  399.140693][T12569] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1806'.
[  399.273167][T12574] netlink: 'syz.1.1809': attribute type 1 has an invalid length.
[  399.273193][T12574] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1809'.
[  399.273956][T12574] sock: sock_timestamping_bind_phc: sock not bind to device
[  399.323553][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1808'.
[  399.363620][T12571] bond0: (slave gretap0): Opening slave failed
[  400.278583][T12587] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  400.727515][T12600] netlink: 'syz.1.1817': attribute type 1 has an invalid length.
[  400.727662][T12600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  400.727676][T12600] IPv6: NLM_F_CREATE should be set when creating new route
[  400.976770][T12606] netlink: 'syz.1.1819': attribute type 1 has an invalid length.
[  401.235772][T12606] 8021q: adding VLAN 0 to HW filter on device bond5
[  401.287251][T12617] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1821'.
[  401.346208][T12609] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  401.459981][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1822'.
[  401.907919][T12621] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  401.946506][T12621] bond4 (unregistering): Released all slaves
[  402.043896][T12604] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1818'.
[  402.077212][T12630] bridge_slave_0: entered promiscuous mode
[  402.173667][T12636] bond0 (unregistering): Released all slaves
[  402.230691][T12641] netlink: 'syz.1.1826': attribute type 1 has an invalid length.
[  402.447161][T12643] bond6: (slave veth5): Enslaving as an active interface with a down link
[  402.450625][ T1916] net_ratelimit: 17 callbacks suppressed
[  402.450646][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  403.064156][T12651] netlink: 'syz.0.1830': attribute type 1 has an invalid length.
[  403.064254][T12651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  403.064268][T12651] IPv6: NLM_F_CREATE should be set when creating new route
[  403.100829][T12640] veth1_vlan: left promiscuous mode
[  403.104920][T12640] veth0_vlan: left promiscuous mode
[  403.108382][T12640] veth0_vlan: entered promiscuous mode
[  403.128436][T12640] veth1_vlan: entered promiscuous mode
[  403.142158][T12640] veth1_macvtap: left promiscuous mode
[  403.144946][T12640] veth1_macvtap: entered promiscuous mode
[  403.165643][T12640] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  403.166814][T12640] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  403.189645][T12640] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  403.191332][T12640] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  403.194699][T12640] 8021q: adding VLAN 0 to HW filter on device bond1
[  403.196431][T12640] 8021q: adding VLAN 0 to HW filter on device bond2
[  403.197544][T12640] 8021q: adding VLAN 0 to HW filter on device bond3
[  403.237086][T12640] 8021q: adding VLAN 0 to HW filter on device bond4
[  403.254683][T12640] 8021q: adding VLAN 0 to HW filter on device bond5
[  403.267253][T12640] 8021q: adding VLAN 0 to HW filter on device bond6
[  403.278594][T12640] 8021q: adding VLAN 0 to HW filter on device bond7
[  403.291883][T12640] 8021q: adding VLAN 0 to HW filter on device bond8
[  403.301177][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  403.682687][T12672] FAULT_INJECTION: forcing a failure.
[  403.682687][T12672] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  403.682724][T12672] CPU: 0 UID: 0 PID: 12672 Comm: syz.0.1835 Not tainted syzkaller #0 PREEMPT(full) 
[  403.682749][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  403.682762][T12672] Call Trace:
[  403.682771][T12672]  <TASK>
[  403.682780][T12672]  dump_stack_lvl+0xe8/0x150
[  403.682817][T12672]  should_fail_ex+0x410/0x560
[  403.682847][T12672]  _copy_from_iter+0x1d3/0x1660
[  403.682878][T12672]  ? _copy_from_iter+0x21b/0x1660
[  403.682904][T12672]  ? __pfx__copy_from_iter+0x10/0x10
[  403.682933][T12672]  ? __pfx__copy_from_iter+0x10/0x10
[  403.682964][T12672]  copy_page_from_iter+0x219/0x2d0
[  403.682992][T12672]  skb_copy_datagram_from_iter+0x2f4/0x720
[  403.683035][T12672]  packet_sendmsg+0x35e2/0x4f80
[  403.683070][T12672]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  403.683116][T12672]  ? __lock_acquire+0x747/0x2de0
[  403.683145][T12672]  ? kstrtouint+0x6e/0xe0
[  403.683186][T12672]  ? __pfx_packet_sendmsg+0x10/0x10
[  403.683205][T12672]  ? aa_sk_perm+0x713/0x900
[  403.683236][T12672]  ? debug_mutex_add_waiter+0x1b2/0x1f0
[  403.683269][T12672]  ? __pfx_aa_sk_perm+0x10/0x10
[  403.683297][T12672]  ? aa_sock_msg_perm+0x144/0x210
[  403.683339][T12672]  ? apparmor_socket_sendmsg+0x98/0x360
[  403.683367][T12672]  ? __pfx_packet_sendmsg+0x10/0x10
[  403.683387][T12672]  sock_sendmsg_nosec+0x13a/0x180
[  403.683426][T12672]  __sys_sendto+0x408/0x5a0
[  403.683451][T12672]  ? ksys_write+0x1e6/0x270
[  403.683489][T12672]  ? __pfx___sys_sendto+0x10/0x10
[  403.683518][T12672]  ? __mutex_unlock_slowpath+0x731/0x900
[  403.683575][T12672]  ? __pfx_ksys_write+0x10/0x10
[  403.683614][T12672]  __x64_sys_sendto+0xde/0x100
[  403.683644][T12672]  do_syscall_64+0x166/0x520
[  403.683667][T12672]  ? trace_irq_disable+0x3b/0x140
[  403.683689][T12672]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.683713][T12672]  ? clear_bhb_loop+0x70/0xc0
[  403.683740][T12672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.683763][T12672] RIP: 0033:0x7f5950b9e159
[  403.683784][T12672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.683803][T12672] RSP: 002b:00007f5951980028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  403.683827][T12672] RAX: ffffffffffffffda RBX: 00007f5950e25fa0 RCX: 00007f5950b9e159
[  403.683843][T12672] RDX: 000000000001fffc RSI: 0000200000000180 RDI: 0000000000000006
[  403.683858][T12672] RBP: 00007f5951980090 R08: 0000200000000140 R09: 0000000000000014
[  403.683873][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  403.683886][T12672] R13: 00007f5950e26038 R14: 00007f5950e25fa0 R15: 00007fff882455e8
[  403.683921][T12672]  </TASK>
[  403.685657][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1834'.
[  403.685696][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'.
[  404.057424][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.057485][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  404.059812][   T13] bond5: (slave veth1): link status definitely up, 10000 Mbps full duplex
[  404.084125][   T13] bond5: (slave veth1): making interface the new active one
[  404.108297][   T13] bond5: active interface up!
[  404.126746][T12662] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  404.195524][T12649] __nla_validate_parse: 3 callbacks suppressed
[  404.195548][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1829'.
[  404.206175][ T1916] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.206231][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  404.351357][T12686] netlink: 'syz.0.1837': attribute type 1 has an invalid length.
[  404.351383][T12686] netlink: 'syz.0.1837': attribute type 268 has an invalid length.
[  404.351401][T12686] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1837'.
[  404.447155][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1836'.
[  404.725667][T12700] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1840'.
[  404.961078][ T1010] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.000999][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'.
[  405.055791][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'.
[  405.058929][T12713] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1841'.
[  405.069509][ T1916] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.069560][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  405.312706][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1844'.
[  405.343004][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'.
[  405.363640][ T1217] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  405.376542][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  405.414988][T12720] 8021q: VLANs not supported on ip6_vti0
[  405.422549][T12725] FAULT_INJECTION: forcing a failure.
[  405.422549][T12725] name failslab, interval 1, probability 0, space 0, times 0
[  405.422628][T12725] CPU: 0 UID: 0 PID: 12725 Comm: syz.2.1845 Not tainted syzkaller #0 PREEMPT(full) 
[  405.422688][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  405.422718][T12725] Call Trace:
[  405.422737][T12725]  <TASK>
[  405.422757][T12725]  dump_stack_lvl+0xe8/0x150
[  405.422852][T12725]  should_fail_ex+0x410/0x560
[  405.422924][T12725]  should_failslab+0xa8/0x100
[  405.422992][T12725]  __kmalloc_noprof+0xfe/0x720
[  405.423042][T12725]  ? fib6_info_alloc+0x30/0xf0
[  405.423122][T12725]  ? fib6_info_alloc+0x30/0xf0
[  405.423210][T12725]  fib6_info_alloc+0x30/0xf0
[  405.423307][T12725]  ip6_route_info_create+0x149/0x890
[  405.423379][T12725]  ip6_route_add+0x49/0x1b0
[  405.423451][T12725]  inet6_rtm_newroute+0x267/0x1a30
[  405.423542][T12725]  ? lock_acquire+0x115/0x350
[  405.423618][T12725]  ? lock_acquire+0x115/0x350
[  405.423676][T12725]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  405.423780][T12725]  ? is_bpf_text_address+0x26/0x2b0
[  405.423861][T12725]  ? __lock_acquire+0x747/0x2de0
[  405.423929][T12725]  ? __kernel_text_address+0xd/0x30
[  405.423985][T12725]  ? unwind_get_return_address+0x4d/0x90
[  405.424045][T12725]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  405.424102][T12725]  ? arch_stack_walk+0xfb/0x150
[  405.424232][T12725]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  405.424311][T12725]  rtnetlink_rcv_msg+0x802/0xc00
[  405.424370][T12725]  ? netlink_sendmsg+0x5d4/0xb40
[  405.424458][T12725]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  405.424516][T12725]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  405.424580][T12725]  ? __lock_acquire+0x747/0x2de0
[  405.424664][T12725]  netlink_rcv_skb+0x226/0x4a0
[  405.424737][T12725]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  405.424772][T12725]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  405.424866][T12725]  ? netlink_deliver_tap+0x2e/0x1b0
[  405.424965][T12725]  ? netlink_deliver_tap+0x2e/0x1b0
[  405.425061][T12725]  netlink_unicast+0x7bd/0x940
[  405.425153][T12725]  netlink_sendmsg+0x813/0xb40
[  405.425252][T12725]  ? __pfx_netlink_sendmsg+0x10/0x10
[  405.425342][T12725]  ? apparmor_socket_sendmsg+0x98/0x360
[  405.425410][T12725]  ? __pfx_netlink_sendmsg+0x10/0x10
[  405.425488][T12725]  sock_sendmsg_nosec+0x13a/0x180
[  405.425581][T12725]  ____sys_sendmsg+0x54e/0x850
[  405.425649][T12725]  ? __pfx_____sys_sendmsg+0x10/0x10
[  405.425741][T12725]  ? import_iovec+0x73/0xa0
[  405.425820][T12725]  ___sys_sendmsg+0x2a5/0x360
[  405.425881][T12725]  ? __lock_acquire+0x747/0x2de0
[  405.425948][T12725]  ? __pfx____sys_sendmsg+0x10/0x10
[  405.426100][T12725]  ? __fget_files+0x2a/0x420
[  405.426171][T12725]  ? __fget_files+0x3a2/0x420
[  405.426294][T12725]  __x64_sys_sendmsg+0x1b1/0x290
[  405.426391][T12725]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  405.426533][T12725]  do_syscall_64+0x166/0x520
[  405.426595][T12725]  ? trace_irq_disable+0x3b/0x140
[  405.426646][T12725]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.426703][T12725]  ? clear_bhb_loop+0x70/0xc0
[  405.426761][T12725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.426816][T12725] RIP: 0033:0x7f3d0079e159
[  405.426867][T12725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.426919][T12725] RSP: 002b:00007f3d016d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  405.427000][T12725] RAX: ffffffffffffffda RBX: 00007f3d00a25fa0 RCX: 00007f3d0079e159
[  405.427029][T12725] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  405.427064][T12725] RBP: 00007f3d016d3090 R08: 0000000000000000 R09: 0000000000000000
[  405.427104][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.427137][T12725] R13: 00007f3d00a26038 R14: 00007f3d00a25fa0 R15: 00007ffcf779dc58
[  405.427243][T12725]  </TASK>
[  405.490055][ T1010] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  405.651589][ T1217] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  405.795639][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  405.867860][   T40] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  405.981065][   T40] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  406.327125][T12741] netlink: 'syz.3.1848': attribute type 9 has an invalid length.
[  406.327153][T12741] netlink: 'syz.3.1848': attribute type 6 has an invalid length.
[  406.327167][T12741] netlink: 'syz.3.1848': attribute type 7 has an invalid length.
[  406.327181][T12741] netlink: 'syz.3.1848': attribute type 8 has an invalid length.
[  406.382223][T12741] netlink: 'syz.3.1848': attribute type 3 has an invalid length.
[  406.840156][   T27] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  406.840409][   T27] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  406.918746][T12759] netlink: 198796 bytes leftover after parsing attributes in process `syz.1.1850'.
[  406.918787][T12759] netlink: 'syz.1.1850': attribute type 2 has an invalid length.
[  407.356305][T12771] veth1_macvtap: left promiscuous mode
[  407.356337][T12771] macsec0: entered allmulticast mode
[  407.390412][T12771] veth1_macvtap: entered promiscuous mode
[  407.390439][T12771] veth1_macvtap: entered allmulticast mode
[  407.390588][T12771] macsec0: left allmulticast mode
[  407.390602][T12771] veth1_macvtap: left allmulticast mode
[  407.560023][ T1213] net_ratelimit: 9 callbacks suppressed
[  407.560047][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  407.609135][T12778] netlink: 'syz.0.1855': attribute type 1 has an invalid length.
[  407.719243][ T5723] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  407.822684][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  407.823759][T12775] bond7: entered promiscuous mode
[  407.823780][T12775] bond7: entered allmulticast mode
[  407.824148][T12775] 8021q: adding VLAN 0 to HW filter on device bond7
[  408.012735][T12780] bridge5: entered promiscuous mode
[  408.013946][T12780] bridge5: entered allmulticast mode
[  408.017090][T12780] bond7: (slave bridge5): Enslaving as a backup interface with an up link
[  408.019025][ T1010] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  408.091118][ T1916] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  408.150228][T12782] bridge6: entered promiscuous mode
[  408.150631][T12782] bridge6: entered allmulticast mode
[  408.152132][T12782] bond7: (slave bridge6): Enslaving as a backup interface with a down link
[  408.220462][   T40] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  408.253164][   T40] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  408.348708][T12796] FAULT_INJECTION: forcing a failure.
[  408.348708][T12796] name failslab, interval 1, probability 0, space 0, times 0
[  408.348746][T12796] CPU: 1 UID: 0 PID: 12796 Comm: syz.4.1858 Not tainted syzkaller #0 PREEMPT(full) 
[  408.348773][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  408.348788][T12796] Call Trace:
[  408.348797][T12796]  <TASK>
[  408.348810][T12796]  dump_stack_lvl+0xe8/0x150
[  408.348850][T12796]  should_fail_ex+0x410/0x560
[  408.348886][T12796]  should_failslab+0xa8/0x100
[  408.348916][T12796]  __kmalloc_noprof+0xfe/0x720
[  408.348951][T12796]  ? fib6_info_alloc+0x30/0xf0
[  408.348984][T12796]  ? fib6_info_alloc+0x30/0xf0
[  408.349025][T12796]  fib6_info_alloc+0x30/0xf0
[  408.349061][T12796]  ip6_route_info_create+0x149/0x890
[  408.349094][T12796]  ip6_route_add+0x49/0x1b0
[  408.349121][T12796]  inet6_rtm_newroute+0x267/0x1a30
[  408.349165][T12796]  ? kasan_quarantine_put+0xbb/0x1f0
[  408.349189][T12796]  ? lockdep_hardirqs_on+0x7b/0x110
[  408.349216][T12796]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  408.349249][T12796]  ? nlmon_xmit+0xb0/0x100
[  408.349272][T12796]  ? kmem_cache_free+0x182/0x650
[  408.349307][T12796]  ? __lock_acquire+0x747/0x2de0
[  408.349341][T12796]  ? __local_bh_enable_ip+0xd6/0x140
[  408.349379][T12796]  ? lockdep_hardirqs_on+0x7b/0x110
[  408.349434][T12796]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  408.349467][T12796]  rtnetlink_rcv_msg+0x802/0xc00
[  408.349497][T12796]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  408.349520][T12796]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  408.349544][T12796]  ? ref_tracker_free+0x689/0x830
[  408.349573][T12796]  ? __pfx_ref_tracker_free+0x10/0x10
[  408.349611][T12796]  netlink_rcv_skb+0x226/0x4a0
[  408.349646][T12796]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  408.349675][T12796]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  408.349721][T12796]  ? netlink_deliver_tap+0x2e/0x1b0
[  408.349753][T12796]  ? netlink_deliver_tap+0x2e/0x1b0
[  408.349792][T12796]  netlink_unicast+0x7bd/0x940
[  408.349834][T12796]  netlink_sendmsg+0x813/0xb40
[  408.349878][T12796]  ? __pfx_netlink_sendmsg+0x10/0x10
[  408.349920][T12796]  ? apparmor_socket_sendmsg+0x98/0x360
[  408.349945][T12796]  ? __pfx_netlink_sendmsg+0x10/0x10
[  408.349973][T12796]  sock_sendmsg_nosec+0x13a/0x180
[  408.350010][T12796]  ____sys_sendmsg+0x54e/0x850
[  408.350036][T12796]  ? __pfx_____sys_sendmsg+0x10/0x10
[  408.350072][T12796]  ? import_iovec+0x73/0xa0
[  408.350096][T12796]  ___sys_sendmsg+0x2a5/0x360
[  408.350119][T12796]  ? __lock_acquire+0x747/0x2de0
[  408.350139][T12796]  ? __pfx____sys_sendmsg+0x10/0x10
[  408.350190][T12796]  ? __fget_files+0x2a/0x420
[  408.350213][T12796]  ? __fget_files+0x3a2/0x420
[  408.350246][T12796]  __x64_sys_sendmsg+0x1b1/0x290
[  408.350270][T12796]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  408.350311][T12796]  do_syscall_64+0x166/0x520
[  408.350330][T12796]  ? trace_irq_disable+0x3b/0x140
[  408.350348][T12796]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.350374][T12796]  ? clear_bhb_loop+0x70/0xc0
[  408.350397][T12796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.350415][T12796] RIP: 0033:0x7f569eb9e159
[  408.350432][T12796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.350448][T12796] RSP: 002b:00007f569fa3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  408.350468][T12796] RAX: ffffffffffffffda RBX: 00007f569ee25fa0 RCX: 00007f569eb9e159
[  408.350481][T12796] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  408.350493][T12796] RBP: 00007f569fa3a090 R08: 0000000000000000 R09: 0000000000000000
[  408.350504][T12796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.350515][T12796] R13: 00007f569ee26038 R14: 00007f569ee25fa0 R15: 00007fff5a422b88
[  408.350543][T12796]  </TASK>
[  408.366067][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  408.486494][   T40] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  408.603170][   T40] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  408.729435][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  409.825942][T12831] __nla_validate_parse: 1 callbacks suppressed
[  409.825968][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1865'.
[  410.814450][   T31] audit: type=1804 audit(1789141957.316:9): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1871" name="/newroot/380/cgroup.controllers" dev="tmpfs" ino=1974 res=1 errno=0
[  410.814510][   T31] audit: type=1800 audit(1789141957.316:10): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1871" name="cgroup.controllers" dev="tmpfs" ino=1974 res=0 errno=0
[  411.233339][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  411.371137][T12866] netlink: 'syz.4.1874': attribute type 1 has an invalid length.
[  411.371160][T12866] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1874'.
[  411.488979][T12874] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  411.610604][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'.
[  411.764029][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1878'.
[  412.202263][T12897] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1880'.
[  412.660087][   T27] net_ratelimit: 15 callbacks suppressed
[  412.660124][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  412.668234][T12903] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1882'.
[  412.668283][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1882'.
[  412.829263][   T40] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  412.940527][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  413.051502][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  413.238793][T12929] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1887'.
[  413.239355][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  413.295267][T12927] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  413.351461][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  413.740175][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  413.828739][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1892'.
[  414.269399][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  414.272069][T12958] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1894'.
[  414.388946][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  414.498958][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  414.613759][T12966] ip6t_ah: unknown flags 4
[  414.766150][T12975] ip6t_ah: unknown flags 4
[  414.830611][T12966] __nla_validate_parse: 7 callbacks suppressed
[  414.830634][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1896'.
[  414.830651][T12966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'.
[  414.830677][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1896'.
[  415.014438][T12988] netlink: 'syz.0.1900': attribute type 3 has an invalid length.
[  415.163284][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1896'.
[  415.163317][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'.
[  415.163346][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1896'.
[  416.049860][T13004] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  416.124417][T13009] dvmrp0: entered allmulticast mode
[  416.125131][T13006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1903'.
[  416.133898][T13006] sctp: [Deprecated]: syz.4.1903 (pid 13006) Use of int in max_burst socket option.
[  416.133898][T13006] Use struct sctp_assoc_value instead
[  416.193267][T13009] dvmrp0: left allmulticast mode
[  417.048021][T13041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1912'.
[  417.385879][T13035] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1912'.
[  417.890459][  T113] net_ratelimit: 11 callbacks suppressed
[  417.890482][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  418.011240][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  418.098143][T13078] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  418.119106][  T113] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  418.165265][T13083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1918'.
[  418.165294][T13083] openvswitch: netlink: Invalid VLAN frame
[  418.165542][T13083] openvswitch: netlink: Invalid VLAN frame
[  418.165761][T13083] openvswitch: netlink: Invalid VLAN frame
[  418.184358][T13083] openvswitch: netlink: Invalid VLAN frame
[  418.184900][T13083] openvswitch: netlink: Invalid VLAN frame
[  418.185360][T13083] openvswitch: netlink: Invalid VLAN frame
[  418.217906][T13083] openvswitch: netlink: Invalid VLAN frame
[  418.786111][T13111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  419.248375][T13123] FAULT_INJECTION: forcing a failure.
[  419.248375][T13123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  419.248412][T13123] CPU: 1 UID: 0 PID: 13123 Comm: syz.3.1925 Not tainted syzkaller #0 PREEMPT(full) 
[  419.248438][T13123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  419.248452][T13123] Call Trace:
[  419.248460][T13123]  <TASK>
[  419.248470][T13123]  dump_stack_lvl+0xe8/0x150
[  419.248510][T13123]  should_fail_ex+0x410/0x560
[  419.248542][T13123]  _copy_from_iter+0x1d3/0x1660
[  419.248567][T13123]  ? __alloc_skb+0x27a/0x7a0
[  419.248596][T13123]  ? __alloc_skb+0x27a/0x7a0
[  419.248624][T13123]  ? __alloc_skb+0x27a/0x7a0
[  419.248649][T13123]  ? __pfx__copy_from_iter+0x10/0x10
[  419.248672][T13123]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  419.248709][T13123]  ? __alloc_skb+0x27a/0x7a0
[  419.248731][T13123]  ? __alloc_skb+0x27a/0x7a0
[  419.248764][T13123]  ? __alloc_skb+0x4d0/0x7a0
[  419.248786][T13123]  ? skb_put+0x112/0x210
[  419.248821][T13123]  pfkey_sendmsg+0x25f/0x11d0
[  419.248867][T13123]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  419.248916][T13123]  ? aa_sk_perm+0x713/0x900
[  419.248968][T13123]  ? __lock_acquire+0x747/0x2de0
[  419.248990][T13123]  ? __pfx_aa_sk_perm+0x10/0x10
[  419.249017][T13123]  ? aa_sock_msg_perm+0x144/0x210
[  419.249048][T13123]  ? apparmor_socket_sendmsg+0x98/0x360
[  419.249072][T13123]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  419.249099][T13123]  sock_sendmsg_nosec+0x13a/0x180
[  419.249135][T13123]  ____sys_sendmsg+0x54e/0x850
[  419.249167][T13123]  ? __pfx_____sys_sendmsg+0x10/0x10
[  419.249203][T13123]  ? import_iovec+0x73/0xa0
[  419.249233][T13123]  ___sys_sendmsg+0x2a5/0x360
[  419.249259][T13123]  ? __lock_acquire+0x747/0x2de0
[  419.249285][T13123]  ? __pfx____sys_sendmsg+0x10/0x10
[  419.249310][T13123]  ? __lock_acquire+0x747/0x2de0
[  419.249336][T13123]  ? kstrtouint+0x6e/0xe0
[  419.249409][T13123]  __sys_sendmmsg+0x273/0x4d0
[  419.249442][T13123]  ? __pfx___sys_sendmmsg+0x10/0x10
[  419.249480][T13123]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  419.249519][T13123]  ? ksys_write+0x242/0x270
[  419.249554][T13123]  ? __pfx_ksys_write+0x10/0x10
[  419.249592][T13123]  __x64_sys_sendmmsg+0xa0/0xc0
[  419.249623][T13123]  do_syscall_64+0x166/0x520
[  419.249645][T13123]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.249668][T13123]  ? clear_bhb_loop+0x70/0xc0
[  419.249694][T13123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.249717][T13123] RIP: 0033:0x7f7ddf19e159
[  419.249736][T13123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.249754][T13123] RSP: 002b:00007f7de00ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  419.249777][T13123] RAX: ffffffffffffffda RBX: 00007f7ddf425fa0 RCX: 00007f7ddf19e159
[  419.249793][T13123] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003
[  419.249807][T13123] RBP: 00007f7de00ae090 R08: 0000000000000000 R09: 0000000000000000
[  419.249820][T13123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  419.249834][T13123] R13: 00007f7ddf426038 R14: 00007f7ddf425fa0 R15: 00007ffee085e768
[  419.249867][T13123]  </TASK>
[  419.864026][T13129] __nla_validate_parse: 13 callbacks suppressed
[  419.864050][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'.
[  420.119049][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  420.245726][T13140] bridge0: entered promiscuous mode
[  420.263685][T13140] macvlan2: entered promiscuous mode
[  420.392846][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'.
[  420.393618][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'.
[  420.393644][T13142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1930'.
[  420.569393][T13145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'.
[  420.594205][T13144] syzkaller1: entered promiscuous mode
[  420.594228][T13144] syzkaller1: entered allmulticast mode
[  420.619088][T13145] vlan2: entered allmulticast mode
[  420.619111][T13145] bridge_slave_0: entered allmulticast mode
[  420.669010][T13157] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  421.355890][T13180] netlink: 'syz.2.1939': attribute type 1 has an invalid length.
[  421.431555][T13186] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1941'.
[  421.502265][T13180] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  422.228631][T13212] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  422.608015][T13221] netlink: 'syz.4.1950': attribute type 21 has an invalid length.
[  422.990289][   T27] net_ratelimit: 34 callbacks suppressed
[  422.990314][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  423.101203][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  423.211005][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  423.409192][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  423.484774][T13250] syzkaller0: entered promiscuous mode
[  423.484800][T13250] syzkaller0: entered allmulticast mode
[  423.518938][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  423.527706][T13255] batman_adv: batadv0: Adding interface: veth0
[  423.527724][T13255] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.527861][T13255] batman_adv: batadv0: Interface activated: veth0
[  423.622589][T13255] batman_adv: batadv0: Interface deactivated: veth0
[  423.622616][T13255] batman_adv: batadv0: Removing interface: veth0
[  423.674928][T13258] netlink: 'syz.1.1959': attribute type 12 has an invalid length.
[  423.706706][T13255] team0: Port device batadv0 removed
[  423.881520][   T31] audit: type=1800 audit(1789141970.386:11): pid=13263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1961" name="r" dev="tmpfs" ino=2065 res=0 errno=0
[  423.881699][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  423.991050][   T40] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  424.099472][   T40] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  424.211152][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  424.320802][   T40] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  424.575178][T13286] netlink: 'syz.1.1968': attribute type 1 has an invalid length.
[  424.575800][T13288] netlink: 'syz.1.1968': attribute type 1 has an invalid length.
[  425.010006][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'.
[  425.537533][T13320] syzkaller1: entered promiscuous mode
[  425.537741][T13320] syzkaller1: entered allmulticast mode
[  425.598442][T13325] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  425.778701][T13331] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1978'.
[  425.872657][T13334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1981'.
[  426.259811][T13340] syzkaller1: entered promiscuous mode
[  426.260031][T13340] syzkaller1: entered allmulticast mode
[  426.515496][T13346] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.1985'.
[  426.515565][T13346] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.1985'.
[  428.009040][   T27] net_ratelimit: 26 callbacks suppressed
[  428.009068][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  428.119521][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  428.229067][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  428.339078][   T40] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  428.445107][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'.
[  428.445264][T13401] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1999'.
[  428.447230][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'.
[  428.447255][T13401] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1999'.
[  428.452696][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  428.989267][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  429.104421][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  429.209252][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  429.305461][T13420] nft_compat: unsupported protocol 0
[  429.321229][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  429.431141][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  430.353860][T13453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2010'.
[  430.777032][ T1916] IPVS: starting estimator thread 0...
[  430.862773][T13462] IPVS: using max 27 ests per chain, 64800 per kthread
[  431.070076][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'.
[  431.136891][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'.
[  431.472657][T13474] bond0: (slave veth1_to_bond): Device is not bonding slave
[  431.472684][T13474] bond0: option active_slave: invalid value (veth1_to_bond)
[  432.622205][T13518] sit0: entered promiscuous mode
[  432.647657][T13518] netlink: 'syz.1.2023': attribute type 1 has an invalid length.
[  432.647684][T13518] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2023'.
[  433.068204][T13498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2019'.
[  433.102074][   T13] net_ratelimit: 19 callbacks suppressed
[  433.102098][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  433.209007][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  433.226487][T13509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  433.255535][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2027'.
[  433.319897][ T1010] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  433.433808][ T1010] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  433.539450][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  433.649417][ T1010] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  433.759736][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  433.869464][ T1010] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  433.875258][T13546] syzkaller1: entered promiscuous mode
[  433.875283][T13546] syzkaller1: entered allmulticast mode
[  433.979015][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  434.091118][ T1916] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  434.236039][T13562] FAULT_INJECTION: forcing a failure.
[  434.236039][T13562] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  434.236078][T13562] CPU: 1 UID: 0 PID: 13562 Comm: syz.1.2033 Not tainted syzkaller #0 PREEMPT(full) 
[  434.236106][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  434.236120][T13562] Call Trace:
[  434.236130][T13562]  <TASK>
[  434.236139][T13562]  dump_stack_lvl+0xe8/0x150
[  434.236180][T13562]  should_fail_ex+0x410/0x560
[  434.236223][T13562]  _copy_from_user+0x2d/0xb0
[  434.236254][T13562]  ___sys_sendmsg+0x1c6/0x360
[  434.236292][T13562]  ? __pfx____sys_sendmsg+0x10/0x10
[  434.236321][T13562]  ? __lock_acquire+0x747/0x2de0
[  434.236400][T13562]  __sys_sendmmsg+0x273/0x4d0
[  434.236437][T13562]  ? __pfx___sys_sendmmsg+0x10/0x10
[  434.236486][T13562]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  434.236530][T13562]  ? ksys_write+0x242/0x270
[  434.236570][T13562]  ? __pfx_ksys_write+0x10/0x10
[  434.236612][T13562]  __x64_sys_sendmmsg+0xa0/0xc0
[  434.236646][T13562]  do_syscall_64+0x166/0x520
[  434.236670][T13562]  ? trace_irq_disable+0x3b/0x140
[  434.236694][T13562]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.236719][T13562]  ? clear_bhb_loop+0x70/0xc0
[  434.236749][T13562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.236773][T13562] RIP: 0033:0x7f94ef19e159
[  434.236795][T13562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.236815][T13562] RSP: 002b:00007f94f00b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  434.236841][T13562] RAX: ffffffffffffffda RBX: 00007f94ef425fa0 RCX: 00007f94ef19e159
[  434.236859][T13562] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 000000000000000a
[  434.236874][T13562] RBP: 00007f94f00b9090 R08: 0000000000000000 R09: 0000000000000000
[  434.236889][T13562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  434.236904][T13562] R13: 00007f94ef426038 R14: 00007f94ef425fa0 R15: 00007ffdb087c068
[  434.236940][T13562]  </TASK>
[  434.595656][T13571] netlink: 'syz.3.2034': attribute type 1 has an invalid length.
[  434.909133][T13571] 8021q: adding VLAN 0 to HW filter on device bond9
[  435.214122][T13575] bond9: (slave veth3): Enslaving as an active interface with a down link
[  435.315863][T13581] bond9: (slave dummy0): making interface the new active one
[  435.328574][T13575] netlink: 'syz.3.2034': attribute type 10 has an invalid length.
[  435.328598][T13575] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2034'.
[  435.382350][T13581] bond9: (slave dummy0): Enslaving as an active interface with an up link
[  435.763949][T13575] dummy0: entered promiscuous mode
[  435.777724][T13575] bond9: (slave dummy0): Releasing active interface
[  438.039122][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  438.064852][T13605] dummy0: left promiscuous mode
[  438.256605][T13658] net_ratelimit: 4 callbacks suppressed
[  438.256628][T13658] netlink: NAT attribute has 8 unknown bytes
[  438.256658][T13658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.231106][T13605] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  439.341424][T13605] bond1: left promiscuous mode
[  439.682915][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'.
[  439.709916][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  439.710004][   T40] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  439.710035][   T40] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  439.710077][   T40] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  439.710104][   T40] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  439.710141][   T40] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  439.710169][   T40] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  439.710208][   T40] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  439.710236][   T40] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  439.822379][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  439.929333][   T27] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  439.961917][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  440.039344][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  440.712503][T13715] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2054'.
[  440.713835][T13715] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2054'.
[  440.720513][T13665] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.720783][T13665] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.067691][T13665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.105388][T13665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.855296][T13665] gretap0: left allmulticast mode
[  441.896800][T13665] veth0_to_bridge: left allmulticast mode
[  441.907791][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2056'.
[  442.005657][T13730] vlan0: entered promiscuous mode
[  442.029445][T13698] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.029509][T13698] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  442.029762][T13698] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.029806][T13698] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.029847][T13698] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.139375][T13702] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  442.209985][T13738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2057'.
[  442.210023][T13738] netlink: 'syz.3.2057': attribute type 7 has an invalid length.
[  442.210038][T13738] netlink: 'syz.3.2057': attribute type 8 has an invalid length.
[  442.210052][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2057'.
[  442.259470][T13697] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  442.368952][ T1010] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  442.574213][T13751] ieee802154 phy1 wpan1: encryption failed: -22
[  443.211956][T13770] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2064'.
[  443.313069][ T1010] net_ratelimit: 7 callbacks suppressed
[  443.313094][ T1010] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  443.418941][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  443.529854][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  443.639432][T13701] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  443.717189][T13787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2068'.
[  443.717352][T13787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2068'.
[  443.717489][T13787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2068'.
[  443.759662][T13702] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  444.009256][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  444.018492][T13789] tipc: Started in network mode
[  444.018527][T13789] tipc: Node identity e614c958f8ed, cluster identity 4711
[  444.020407][T13789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.085724][T13789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.086153][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.086492][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.086813][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.087163][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.087504][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.088066][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.088696][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.151463][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.161791][T13702] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  444.178383][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.213689][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.215208][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.217044][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.272514][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.273849][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.279192][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.281547][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  444.292933][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.313434][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.324666][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.327648][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.396446][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.397759][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.405279][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.525648][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.895112][T13819] xt_policy: output policy not valid in PREROUTING and INPUT
[  444.967397][ T4932] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  445.129125][T10215] tipc: Node number set to 519686488
[  445.387298][T13835] __nla_validate_parse: 32 callbacks suppressed
[  445.387322][T13835] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2077'.
[  445.693421][T13854] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2081'.
[  445.817459][T13841] 8021q: adding VLAN 0 to HW filter on device bond5
[  446.170249][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'.
[  446.787491][T13900] macvlan0: entered promiscuous mode
[  446.788288][T13900] macvlan0: entered allmulticast mode
[  446.788308][T13900] veth1_vlan: entered allmulticast mode
[  446.826785][T13898] netlink: 'syz.2.2089': attribute type 9 has an invalid length.
[  446.826811][T13898] netlink: 'syz.2.2089': attribute type 6 has an invalid length.
[  446.826836][T13898] netlink: 'syz.2.2089': attribute type 7 has an invalid length.
[  446.826849][T13898] netlink: 'syz.2.2089': attribute type 8 has an invalid length.
[  446.861939][T13898] netlink: 'syz.2.2089': attribute type 3 has an invalid length.
[  447.016871][T13903] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  447.565385][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2094'.
[  448.359022][T13697] net_ratelimit: 58 callbacks suppressed
[  448.359045][T13697] bond7: (slave bridge5): failed to get link speed/duplex
[  448.369900][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  448.471146][ T1213] bond7: (slave bridge5): failed to get link speed/duplex
[  448.479984][T13698] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  448.538007][T13935] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2099'.
[  448.538033][T13935] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2099'.
[  448.538051][T13935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2099'.
[  448.589197][ T1213] bond7: (slave bridge5): failed to get link speed/duplex
[  448.592762][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  448.749055][T13702] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  448.749147][T13702] bond7: (slave bridge5): failed to get link speed/duplex
[  448.750653][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2099'.
[  448.835013][T13943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2101'.
[  448.835051][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'.
[  449.401357][T13941] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  449.550545][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  449.550790][T13701] bond7: (slave bridge5): failed to get link speed/duplex
[  449.707513][T13956] sctp: [Deprecated]: syz.0.2105 (pid 13956) Use of int in max_burst socket option deprecated.
[  449.707513][T13956] Use struct sctp_assoc_value instead
[  450.022481][T13960] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  450.730261][T13985] __nla_validate_parse: 4 callbacks suppressed
[  450.730293][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'.
[  450.772963][T13989] netlink: 'syz.4.2113': attribute type 9 has an invalid length.
[  450.772989][T13989] netlink: 'syz.4.2113': attribute type 6 has an invalid length.
[  450.773004][T13989] netlink: 'syz.4.2113': attribute type 7 has an invalid length.
[  450.773018][T13989] netlink: 'syz.4.2113': attribute type 8 has an invalid length.
[  450.801501][T13989] netlink: 'syz.4.2113': attribute type 3 has an invalid length.
[  451.452787][T14002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2116'.
[  451.979244][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2123'.
[  451.980944][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2123'.
[  452.549856][T14032] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2126'.
[  452.797031][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'.
[  453.450452][T13701] net_ratelimit: 58 callbacks suppressed
[  453.450478][T13701] bond7: (slave bridge5): failed to get link speed/duplex
[  453.450518][T13701] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  453.806927][T14074] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  453.840230][T13702] bond7: (slave bridge5): failed to get link speed/duplex
[  453.840278][T13702] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  453.867210][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'.
[  453.989111][T13698] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  453.989165][T13698] bond7: (slave bridge5): failed to get link speed/duplex
[  454.100850][T13698] bond7: (slave bridge5): failed to get link speed/duplex
[  454.100897][T13698] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  454.146971][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'.
[  454.281249][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'.
[  454.390005][ T1010] bond7: (slave bridge5): failed to get link speed/duplex
[  454.390051][ T1010] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  454.584846][T14089] netlink: 'syz.3.2138': attribute type 9 has an invalid length.
[  454.584871][T14089] netlink: 'syz.3.2138': attribute type 6 has an invalid length.
[  454.584885][T14089] netlink: 'syz.3.2138': attribute type 7 has an invalid length.
[  454.584898][T14089] netlink: 'syz.3.2138': attribute type 8 has an invalid length.
[  454.593542][T14089] netlink: 'syz.3.2138': attribute type 3 has an invalid length.
[  455.014491][T14102] FAULT_INJECTION: forcing a failure.
[  455.014491][T14102] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  455.014529][T14102] CPU: 0 UID: 0 PID: 14102 Comm: syz.1.2141 Not tainted syzkaller #0 PREEMPT(full) 
[  455.014553][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  455.014566][T14102] Call Trace:
[  455.014576][T14102]  <TASK>
[  455.014585][T14102]  dump_stack_lvl+0xe8/0x150
[  455.014623][T14102]  should_fail_ex+0x410/0x560
[  455.014654][T14102]  _copy_from_user+0x2d/0xb0
[  455.014683][T14102]  ___sys_sendmsg+0x1c6/0x360
[  455.014720][T14102]  ? __pfx____sys_sendmsg+0x10/0x10
[  455.014746][T14102]  ? __lock_acquire+0x747/0x2de0
[  455.014819][T14102]  __sys_sendmmsg+0x273/0x4d0
[  455.014865][T14102]  ? __pfx___sys_sendmmsg+0x10/0x10
[  455.014903][T14102]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  455.014942][T14102]  ? ksys_write+0x242/0x270
[  455.014978][T14102]  ? __pfx_ksys_write+0x10/0x10
[  455.015018][T14102]  __x64_sys_sendmmsg+0xa0/0xc0
[  455.015048][T14102]  do_syscall_64+0x166/0x520
[  455.015071][T14102]  ? trace_irq_disable+0x3b/0x140
[  455.015094][T14102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.015116][T14102]  ? clear_bhb_loop+0x70/0xc0
[  455.015142][T14102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.015164][T14102] RIP: 0033:0x7f94ef19e159
[  455.015184][T14102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.015202][T14102] RSP: 002b:00007f94f00b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  455.015227][T14102] RAX: ffffffffffffffda RBX: 00007f94ef425fa0 RCX: 00007f94ef19e159
[  455.015243][T14102] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 000000000000000a
[  455.015258][T14102] RBP: 00007f94f00b9090 R08: 0000000000000000 R09: 0000000000000000
[  455.015273][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  455.015286][T14102] R13: 00007f94ef426038 R14: 00007f94ef425fa0 R15: 00007ffdb087c068
[  455.015320][T14102]  </TASK>
[  455.545986][T14112] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2145'.
[  456.931007][T14135] netlink: 'syz.4.2150': attribute type 1 has an invalid length.
[  457.014925][T14136] SET target dimension over the limit!
[  458.708035][T14158] __nla_validate_parse: 1 callbacks suppressed
[  458.708057][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2156'.
[  459.891816][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'.
[  459.915566][T14155] bridge0: port 1(wlan1) entered blocking state
[  459.915664][T14155] bridge0: port 1(wlan1) entered disabled state
[  459.925662][T14155] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode
[  460.022362][T14155] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode
[  460.039470][T13701] net_ratelimit: 22 callbacks suppressed
[  460.039491][T13701] bond7: (slave bridge5): failed to get link speed/duplex
[  460.066137][T13701] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  460.148993][ T1213] bond7: (slave bridge5): failed to get link speed/duplex
[  460.189381][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  460.191116][T14165] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  460.259046][ T1213] bond7: (slave bridge5): failed to get link speed/duplex
[  460.299159][ T1213] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  460.369970][ T1213] bond7: (slave bridge5): failed to get link speed/duplex
[  460.412999][ T1010] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  460.478925][ T1010] bond7: (slave bridge5): failed to get link speed/duplex
[  460.519147][ T1010] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  460.794607][T14196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2162'.
[  460.795129][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2162'.
[  461.031932][T14205] netlink: 'syz.4.2165': attribute type 2 has an invalid length.
[  461.364707][T14180] bridge0: port 1(dummy0) entered disabled state
[  463.405315][T14180] bridge3: port 2(veth11) entered disabled state
[  463.405811][T14180] bridge3: port 1(veth9) entered disabled state
[  463.714275][T14180] ip6gre2: left promiscuous mode
[  463.714302][T14180] ip6gre2: left allmulticast mode
[  463.778113][T14180] bond7: left promiscuous mode
[  463.778140][T14180] bridge5: left promiscuous mode
[  463.778367][T14180] bridge6: left promiscuous mode
[  463.778543][T14180] bond7: left allmulticast mode
[  463.778559][T14180] bridge5: left allmulticast mode
[  463.778638][T14180] bridge6: left allmulticast mode
[  463.882920][T14186] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2163'.
[  463.913344][T14192] ipvlan4: entered promiscuous mode
[  463.915006][T14192] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  463.915048][T14192] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  463.915203][T14192] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  464.036823][T13697] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.036860][T13697] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.036928][T13697] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.036957][T13697] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.036997][T13697] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.037024][T13697] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.109602][ T1213] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.109643][ T1213] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.312653][T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2169'.
[  464.432067][T14224] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2170'.
[  464.457596][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'.
[  464.457627][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'.
[  464.494249][T14227] FAULT_INJECTION: forcing a failure.
[  464.494249][T14227] name failslab, interval 1, probability 0, space 0, times 0
[  464.494286][T14227] CPU: 1 UID: 0 PID: 14227 Comm: syz.3.2172 Not tainted syzkaller #0 PREEMPT(full) 
[  464.494312][T14227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  464.494327][T14227] Call Trace:
[  464.494336][T14227]  <TASK>
[  464.494346][T14227]  dump_stack_lvl+0xe8/0x150
[  464.494384][T14227]  should_fail_ex+0x410/0x560
[  464.494414][T14227]  ? __alloc_skb+0x1db/0x7a0
[  464.494441][T14227]  should_failslab+0xa8/0x100
[  464.494474][T14227]  ? __alloc_skb+0x1db/0x7a0
[  464.494499][T14227]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  464.494535][T14227]  ? __alloc_skb+0x18d/0x7a0
[  464.494570][T14227]  ? __alloc_skb+0x1db/0x7a0
[  464.494603][T14227]  __alloc_skb+0x1db/0x7a0
[  464.494633][T14227]  netlink_sendmsg+0x5d4/0xb40
[  464.494678][T14227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  464.494721][T14227]  ? apparmor_socket_sendmsg+0x98/0x360
[  464.494749][T14227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  464.494782][T14227]  sock_sendmsg_nosec+0x13a/0x180
[  464.494821][T14227]  ____sys_sendmsg+0x54e/0x850
[  464.494857][T14227]  ? __pfx_____sys_sendmsg+0x10/0x10
[  464.494897][T14227]  ? import_iovec+0x73/0xa0
[  464.494930][T14227]  ___sys_sendmsg+0x2a5/0x360
[  464.494958][T14227]  ? __lock_acquire+0x747/0x2de0
[  464.494990][T14227]  ? __pfx____sys_sendmsg+0x10/0x10
[  464.495057][T14227]  ? __fget_files+0x2a/0x420
[  464.495088][T14227]  ? __fget_files+0x3a2/0x420
[  464.495131][T14227]  __x64_sys_sendmsg+0x1b1/0x290
[  464.495164][T14227]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  464.495217][T14227]  do_syscall_64+0x166/0x520
[  464.495242][T14227]  ? trace_irq_disable+0x3b/0x140
[  464.495264][T14227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.495288][T14227]  ? clear_bhb_loop+0x70/0xc0
[  464.495317][T14227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.495340][T14227] RIP: 0033:0x7f7ddf19e159
[  464.495362][T14227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.495381][T14227] RSP: 002b:00007f7de00ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  464.495406][T14227] RAX: ffffffffffffffda RBX: 00007f7ddf425fa0 RCX: 00007f7ddf19e159
[  464.495423][T14227] RDX: 0000000010000000 RSI: 00002000000012c0 RDI: 0000000000000004
[  464.495438][T14227] RBP: 00007f7de00ae090 R08: 0000000000000000 R09: 0000000000000000
[  464.495453][T14227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.495467][T14227] R13: 00007f7ddf426038 R14: 00007f7ddf425fa0 R15: 00007ffee085e768
[  464.495503][T14227]  </TASK>
[  464.608443][T14230] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2170'.
[  464.688040][T14228] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2171'.
[  464.732815][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'.
[  464.732893][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'.
[  464.932117][T14236] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2173'.
[  465.438491][T14246] ipt_REJECT: TCP_RESET invalid for non-tcp
[  465.961029][T14263] xt_limit: Overflow, try lower: 6/2147483648
[  466.197646][T14268] netlink: 'syz.4.2185': attribute type 9 has an invalid length.
[  466.197673][T14268] netlink: 'syz.4.2185': attribute type 6 has an invalid length.
[  466.197687][T14268] netlink: 'syz.4.2185': attribute type 7 has an invalid length.
[  466.197702][T14268] netlink: 'syz.4.2185': attribute type 8 has an invalid length.
[  466.210751][T14268] netlink: 'syz.4.2185': attribute type 3 has an invalid length.
[  466.379458][T14271] ip6t_rt: too many addresses specified
[  467.068836][T14289] netlink: 'syz.3.2189': attribute type 39 has an invalid length.
[  467.928583][T14307] x_tables: duplicate underflow at hook 4
[  468.208080][T14319] FAULT_INJECTION: forcing a failure.
[  468.208080][T14319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  468.208117][T14319] CPU: 1 UID: 0 PID: 14319 Comm: syz.0.2196 Not tainted syzkaller #0 PREEMPT(full) 
[  468.208144][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  468.208159][T14319] Call Trace:
[  468.208168][T14319]  <TASK>
[  468.208178][T14319]  dump_stack_lvl+0xe8/0x150
[  468.208219][T14319]  should_fail_ex+0x410/0x560
[  468.208250][T14319]  _copy_from_iter+0x1d3/0x1660
[  468.208278][T14319]  ? __alloc_skb+0x27a/0x7a0
[  468.208307][T14319]  ? __alloc_skb+0x27a/0x7a0
[  468.208335][T14319]  ? __alloc_skb+0x27a/0x7a0
[  468.208362][T14319]  ? __pfx__copy_from_iter+0x10/0x10
[  468.208386][T14319]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  468.208422][T14319]  ? __alloc_skb+0x27a/0x7a0
[  468.208446][T14319]  ? __alloc_skb+0x27a/0x7a0
[  468.208478][T14319]  ? netlink_sendmsg+0x650/0xb40
[  468.208512][T14319]  ? skb_put+0x112/0x210
[  468.208543][T14319]  netlink_sendmsg+0x6c0/0xb40
[  468.208587][T14319]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.208632][T14319]  ? apparmor_socket_sendmsg+0x98/0x360
[  468.208664][T14319]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.208697][T14319]  sock_sendmsg_nosec+0x13a/0x180
[  468.208737][T14319]  ____sys_sendmsg+0x54e/0x850
[  468.208782][T14319]  ? __pfx_____sys_sendmsg+0x10/0x10
[  468.208822][T14319]  ? import_iovec+0x73/0xa0
[  468.208852][T14319]  ___sys_sendmsg+0x2a5/0x360
[  468.208880][T14319]  ? __lock_acquire+0x747/0x2de0
[  468.208921][T14319]  ? __pfx____sys_sendmsg+0x10/0x10
[  468.208985][T14319]  ? __fget_files+0x2a/0x420
[  468.209014][T14319]  ? __fget_files+0x3a2/0x420
[  468.209054][T14319]  __x64_sys_sendmsg+0x1b1/0x290
[  468.209086][T14319]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  468.209137][T14319]  do_syscall_64+0x166/0x520
[  468.209161][T14319]  ? trace_irq_disable+0x3b/0x140
[  468.209184][T14319]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.209219][T14319]  ? clear_bhb_loop+0x70/0xc0
[  468.209244][T14319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.209266][T14319] RIP: 0033:0x7f5950b9e159
[  468.209285][T14319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.209304][T14319] RSP: 002b:00007f5951980028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  468.209328][T14319] RAX: ffffffffffffffda RBX: 00007f5950e25fa0 RCX: 00007f5950b9e159
[  468.209344][T14319] RDX: 0000000010000000 RSI: 00002000000012c0 RDI: 0000000000000004
[  468.209358][T14319] RBP: 00007f5951980090 R08: 0000000000000000 R09: 0000000000000000
[  468.209372][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.209385][T14319] R13: 00007f5950e26038 R14: 00007f5950e25fa0 R15: 00007fff882455e8
[  468.209418][T14319]  </TASK>
[  468.512885][T14322] tipc: Resetting bearer <eth:syzkaller0>
[  468.615041][T14322] tipc: Disabling bearer <eth:syzkaller0>
[  468.995669][T14341] __nla_validate_parse: 3 callbacks suppressed
[  468.995696][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'.
[  469.108769][T14338] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2201'.
[  469.112526][T14338] net_ratelimit: 2 callbacks suppressed
[  469.112544][T14338] A link change request failed with some changes committed already. Interface macvlan2 may have been left with an inconsistent configuration, please check.
[  469.611368][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2205'.
[  469.961858][T14371] FAULT_INJECTION: forcing a failure.
[  469.961858][T14371] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.961899][T14371] CPU: 0 UID: 0 PID: 14371 Comm: syz.4.2209 Not tainted syzkaller #0 PREEMPT(full) 
[  469.961938][T14371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  469.961959][T14371] Call Trace:
[  469.961969][T14371]  <TASK>
[  469.961978][T14371]  dump_stack_lvl+0xe8/0x150
[  469.962018][T14371]  should_fail_ex+0x410/0x560
[  469.962145][T14371]  _copy_to_user+0x31/0xb0
[  469.962228][T14371]  simple_read_from_buffer+0xe1/0x170
[  469.962266][T14371]  proc_fail_nth_read+0x1bb/0x230
[  469.962301][T14371]  ? common_file_perm+0x20e/0x2b0
[  469.962386][T14371]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  469.962426][T14371]  ? rw_verify_area+0x24a/0x4c0
[  469.962462][T14371]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  469.962497][T14371]  vfs_read+0x213/0xa80
[  469.962538][T14371]  ? __pfx___mutex_lock+0x10/0x10
[  469.962573][T14371]  ? __pfx_vfs_read+0x10/0x10
[  469.962608][T14371]  ? __fget_files+0x2a/0x420
[  469.962645][T14371]  ? __fget_files+0x3a2/0x420
[  469.962675][T14371]  ? __fget_files+0x2a/0x420
[  469.962715][T14371]  ksys_read+0x150/0x270
[  469.962763][T14371]  ? __pfx_ksys_read+0x10/0x10
[  469.962811][T14371]  do_syscall_64+0x166/0x520
[  469.962835][T14371]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.962858][T14371]  ? clear_bhb_loop+0x70/0xc0
[  469.962885][T14371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.962908][T14371] RIP: 0033:0x7f569eb5e98e
[  469.962928][T14371] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  469.962947][T14371] RSP: 002b:00007f569fa39fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  469.962972][T14371] RAX: ffffffffffffffda RBX: 00007f569fa3a6c0 RCX: 00007f569eb5e98e
[  469.962988][T14371] RDX: 000000000000000f RSI: 00007f569fa3a0a0 RDI: 0000000000000005
[  469.963002][T14371] RBP: 00007f569fa3a090 R08: 0000000000000000 R09: 0000000000000000
[  469.963016][T14371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.963030][T14371] R13: 00007f569ee26038 R14: 00007f569ee25fa0 R15: 00007fff5a422b88
[  469.963065][T14371]  </TASK>
[  470.249064][T14375] bridge0: entered allmulticast mode
[  470.670286][T14378] netlink: 'syz.4.2212': attribute type 1 has an invalid length.
[  470.670310][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2212'.
[  470.940921][T14383] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2213'.
[  470.976086][T14390] bridge0: entered allmulticast mode
[  470.987935][T14390] dummy0: left allmulticast mode
[  470.988003][T14390] dummy0: left promiscuous mode
[  470.989967][T14390] bridge0: port 1(dummy0) entered disabled state
[  471.122692][T14397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2218'.
[  471.235067][T14394] syzkaller0: entered promiscuous mode
[  471.235092][T14394] syzkaller0: entered allmulticast mode
[  471.583729][T14415] netlink: 'syz.1.2221': attribute type 1 has an invalid length.
[  471.608590][T14418] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0)
[  471.608634][T14418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  471.759302][T14420] netlink: 'syz.3.2222': attribute type 10 has an invalid length.
[  471.816770][T14424] netlink: 'syz.3.2222': attribute type 10 has an invalid length.
[  471.900365][T14426] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0)
[  471.900407][T14426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  471.964777][T14432] netlink: 'syz.3.2222': attribute type 10 has an invalid length.
[  471.982899][T14427] netlink: 'syz.3.2222': attribute type 10 has an invalid length.
[  472.606379][T14419] veth7: entered allmulticast mode
[  472.647247][T14419] bond9: (slave veth7): Enslaving as an active interface with a down link
[  472.657025][T14420] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  472.682739][T14420] team0: Port device netdevsim1 added
[  472.713995][T14424] team0: Port device netdevsim1 removed
[  472.729563][T14424] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  472.770083][T14415] macvlan3: entered promiscuous mode
[  472.770111][T14415] macvlan3: entered allmulticast mode
[  472.771331][T14415] bond9: entered promiscuous mode
[  472.774532][T14415] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  472.775510][T14415] bond9: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  472.776826][T14415] bond9: left promiscuous mode
[  472.974240][T14432] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  472.976243][T14432] team0: Port device netdevsim1 added
[  473.005298][T14427] team0: Port device netdevsim1 removed
[  473.015071][T14427] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  473.123189][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2223'.
[  473.985742][T14477] ieee802154 phy1 wpan1: encryption failed: -22
[  474.524572][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  475.498122][T14527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'.
[  475.563694][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'.
[  475.587059][T14535] netlink: 'syz.1.2243': attribute type 10 has an invalid length.
[  475.587083][T14535] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2243'.
[  475.599359][T14536] netlink: 'syz.1.2243': attribute type 10 has an invalid length.
[  475.599553][T14536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2243'.
[  475.675881][T14535] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2243'.
[  475.753728][T14542] netlink: 'syz.0.2245': attribute type 13 has an invalid length.
[  475.904110][T14545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2246'.
[  475.937245][T14545] veth1_to_team: entered promiscuous mode
[  475.946716][T14545] gretap0: entered promiscuous mode
[  475.964005][T14545] hsr1: entered promiscuous mode
[  476.060715][T14547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2247'.
[  476.694316][T14577] sit2: entered promiscuous mode
[  477.203914][T14595] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2264'.
[  477.472997][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2266'.
[  477.474965][T14602] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2266'.
[  477.892698][T14623] ip6tnl4: entered allmulticast mode
[  477.986684][T14625] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  477.986727][T14625] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  477.986773][T14625] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  478.122327][T14625] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  478.211425][T14628] netlink: 'syz.2.2270': attribute type 9 has an invalid length.
[  478.211449][T14628] netlink: 'syz.2.2270': attribute type 6 has an invalid length.
[  478.211462][T14628] netlink: 'syz.2.2270': attribute type 7 has an invalid length.
[  478.211475][T14628] netlink: 'syz.2.2270': attribute type 8 has an invalid length.
[  478.243862][T14628] netlink: 'syz.2.2270': attribute type 3 has an invalid length.
[  478.803044][T14655] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  478.880423][T14654] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  479.004962][T14663] ipvlan4: entered allmulticast mode
[  479.004987][T14663] virt_wifi0: entered allmulticast mode
[  479.584548][T14673] Cannot find del_set index 2 as target
[  479.695982][T14673] nbd2: detected capacity change from 0 to 127
[  480.278674][T14709] unsupported nla_type 216
[  480.414933][ T4932] block nbd2: Receive control failed (result -104)
[  480.748720][T14714] __nla_validate_parse: 7 callbacks suppressed
[  480.748745][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'.
[  481.144645][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2297'.
[  481.435410][T14740] bridge0: entered allmulticast mode
[  481.437635][T14740] bridge_slave_1: left promiscuous mode
[  481.438624][T14740] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.465719][T14740] bridge_slave_0: left allmulticast mode
[  481.476960][T14740] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.616561][T14747] sctp: [Deprecated]: syz.1.2303 (pid 14747) Use of int in max_burst socket option.
[  481.616561][T14747] Use struct sctp_assoc_value instead
[  481.761755][T14756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2305'.
[  481.791252][T14749] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  481.915558][T14752] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  481.992513][T14752] bond10 (unregistering): Released all slaves
[  482.306571][T14773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2311'.
[  482.802152][T14780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2314'.
[  482.802570][T14781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2314'.
[  483.343232][T14803] bridge0: entered allmulticast mode
[  483.369923][T14803] mac80211_hwsim hwsim31 wlan1: left allmulticast mode
[  483.369956][T14803] mac80211_hwsim hwsim31 wlan1: left promiscuous mode
[  483.370177][T14803] bridge0: port 1(wlan1) entered disabled state
[  483.432177][ T1724] block nbd2: Connection timed out, retrying (0/1 alive)
[  483.435648][ T1724] block nbd2: Connection timed out, retrying (0/1 alive)
[  483.435711][ T1724] block nbd2: Connection timed out, retrying (0/1 alive)
[  483.435758][ T1724] block nbd2: Connection timed out, retrying (0/1 alive)
[  483.436273][ T1724] block nbd2: Dead connection, failed to find a fallback
[  483.436294][ T1724] block nbd2: shutting down sockets
[  483.436372][ T1724] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.436501][ T1724] Buffer I/O error on dev nbd2, logical block 3, async page read
[  483.437499][ T1724] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.437531][ T1724] Buffer I/O error on dev nbd2, logical block 2, async page read
[  483.437557][ T1724] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.437582][ T1724] Buffer I/O error on dev nbd2, logical block 1, async page read
[  483.437605][ T1724] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.437631][ T1724] Buffer I/O error on dev nbd2, logical block 0, async page read
[  483.449331][ T1724] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.449364][ T1724] Buffer I/O error on dev nbd2, logical block 0, async page read
[  483.457179][ T1724] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.457213][ T1724] Buffer I/O error on dev nbd2, logical block 1, async page read
[  483.464776][ T1724] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.464809][ T1724] Buffer I/O error on dev nbd2, logical block 2, async page read
[  483.472607][ T1724] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.472638][ T1724] Buffer I/O error on dev nbd2, logical block 3, async page read
[  483.473109][ T1724] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.473137][ T1724] Buffer I/O error on dev nbd2, logical block 0, async page read
[  483.481873][ T1724] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.481906][ T1724] Buffer I/O error on dev nbd2, logical block 1, async page read
[  483.613651][T14318] ldm_validate_partition_table(): Disk read failed.
[  483.692744][T14318] Dev nbd2: unable to read RDB block 0
[  483.711284][T14318]  nbd2: unable to read partition table
[  483.778170][T14318] ldm_validate_partition_table(): Disk read failed.
[  483.800692][T14318] Dev nbd2: unable to read RDB block 0
[  483.804499][T14318]  nbd2: unable to read partition table
[  484.971682][T14847] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2328'.
[  486.003805][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2335'.
[  486.496842][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'.
[  486.496874][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'.
[  486.517917][T14893] netlink: 'syz.3.2337': attribute type 1 has an invalid length.
[  486.953483][T14893] bond10: option mode: invalid value (11)
[  486.968431][T14893] bond10 (unregistering): Released all slaves
[  487.862505][T14943] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  487.862764][T14943] Cannot find map_set index 2 as target
[  488.012444][T14943] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2347'.
[  488.349886][T14948] bond4: option primary_reselect: invalid value (6)
[  488.353061][T14963] ip_tables: iptables: counters copy to user failed while replacing table
[  488.505927][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2351'.
[  488.987592][T14948] bond4 (unregistering): Released all slaves
[  489.263691][T14983] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  489.300022][T14966] bridge0: port 3(vlan2) entered blocking state
[  489.300243][T14966] bridge0: port 3(vlan2) entered disabled state
[  489.300394][T14966] vlan2: entered allmulticast mode
[  489.300411][T14966] geneve0: entered allmulticast mode
[  489.302747][T14966] vlan2: entered promiscuous mode
[  489.302767][T14966] geneve0: entered promiscuous mode
[  489.588114][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2357'.
[  489.588304][T14987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2357'.
[  489.681409][T14987] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  489.732306][T14993] syzkaller1: entered promiscuous mode
[  489.732518][T14993] syzkaller1: entered allmulticast mode
[  489.735383][T14987] block nbd2: NBD_DISCONNECT
[  489.735467][T14987] block nbd2: Send disconnect failed -32
[  489.926939][T14999] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2358'.
[  490.537375][T15031] ip6gre1: entered promiscuous mode
[  490.537401][T15031] ip6gre1: entered allmulticast mode
[  490.585150][ T1010] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  490.585393][ T1010] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  490.609115][ T5618] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  490.734815][T15032] syzkaller1: entered promiscuous mode
[  490.735025][T15032] syzkaller1: entered allmulticast mode
[  491.180049][ T5618] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  491.399266][ T5618] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  491.999814][T15084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2374'.
[  491.999846][T15084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2374'.
[  492.088504][T15085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2374'.
[  492.100065][T15092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2374'.
[  492.149419][T15085] ip6gre3: entered promiscuous mode
[  492.149603][T15085] ip6gre3: entered allmulticast mode
[  492.231392][T15085] netlink: 'syz.0.2374': attribute type 6 has an invalid length.
[  492.231416][T15085] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2374'.
[  492.236415][T15092] netlink: 'syz.0.2374': attribute type 6 has an invalid length.
[  492.236438][T15092] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2374'.
[  492.558348][T15105] netlink: 'syz.4.2377': attribute type 1 has an invalid length.
[  492.577044][T15106] netlink: 'syz.2.2376': attribute type 1 has an invalid length.
[  492.577066][T15106] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2376'.
[  492.680817][T15105] 8021q: adding VLAN 0 to HW filter on device bond4
[  492.809533][T15114] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2379'.
[  492.964943][T15109] bond4: (slave veth1): Enslaving as an active interface with a down link
[  493.035465][T15105] 8021q: adding VLAN 0 to HW filter on device batadv1
[  493.073733][T15105] bond4: (slave batadv1): making interface the new active one
[  493.142222][T15105] batadv1: entered promiscuous mode
[  493.143853][T15105] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  493.396789][T15128] ip6gretap2: entered allmulticast mode
[  493.933327][T15143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2384'.
[  493.955735][T15143] netlink: 'syz.2.2384': attribute type 1 has an invalid length.
[  494.279171][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  494.337091][T15152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2385'.
[  494.429433][T15151] syzkaller0: entered promiscuous mode
[  494.429638][T15151] syzkaller0: entered allmulticast mode
[  494.510105][T15157] IPVS: nq: FWM 3 0x00000003 - no destination available
[  494.513751][T15157] netlink: 'syz.0.2389': attribute type 1 has an invalid length.
[  494.770518][T15162] netlink: 'syz.0.2391': attribute type 9 has an invalid length.
[  494.770558][T15162] netlink: 'syz.0.2391': attribute type 6 has an invalid length.
[  494.770573][T15162] netlink: 'syz.0.2391': attribute type 7 has an invalid length.
[  494.770587][T15162] netlink: 'syz.0.2391': attribute type 8 has an invalid length.
[  495.114144][T15173] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20002
[  495.977701][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.977726][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.018280][T15198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  496.064268][T15200] syz.3.2404: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  496.064556][T15200] CPU: 1 UID: 0 PID: 15200 Comm: syz.3.2404 Not tainted syzkaller #0 PREEMPT(full) 
[  496.064581][T15200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  496.064594][T15200] Call Trace:
[  496.064603][T15200]  <TASK>
[  496.064612][T15200]  dump_stack_lvl+0xe8/0x150
[  496.064653][T15200]  warn_alloc+0x24d/0x270
[  496.064677][T15200]  ? kasan_save_track+0x4f/0x80
[  496.064699][T15200]  ? kasan_save_track+0x3e/0x80
[  496.064725][T15200]  ? __pfx_warn_alloc+0x10/0x10
[  496.064743][T15200]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  496.064770][T15200]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.064815][T15200]  __vmalloc_node_range_noprof+0x127/0x1540
[  496.064880][T15200]  ? rcu_is_watching+0x16/0xb0
[  496.064914][T15200]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  496.064947][T15200]  ? __kmalloc_cache_noprof+0x321/0x600
[  496.064968][T15200]  ? __kmalloc_cache_noprof+0x14d/0x600
[  496.064990][T15200]  ? xskq_create+0x56/0x220
[  496.065017][T15200]  xskq_create+0x148/0x220
[  496.065061][T15200]  ? xsk_init_queue+0x8a/0xe0
[  496.065098][T15200]  xsk_init_queue+0x8a/0xe0
[  496.065137][T15200]  xsk_setsockopt+0x52a/0x960
[  496.065174][T15200]  ? __pfx_xsk_setsockopt+0x10/0x10
[  496.065209][T15200]  ? __pfx_aa_sk_perm+0x10/0x10
[  496.065331][T15200]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  496.065360][T15200]  ? __pfx_xsk_setsockopt+0x10/0x10
[  496.065396][T15200]  do_sock_setsockopt+0x17c/0x1b0
[  496.065431][T15200]  __x64_sys_setsockopt+0x13d/0x1b0
[  496.065467][T15200]  do_syscall_64+0x166/0x520
[  496.065491][T15200]  ? trace_irq_disable+0x3b/0x140
[  496.065514][T15200]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.065539][T15200]  ? clear_bhb_loop+0x70/0xc0
[  496.065568][T15200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.065591][T15200] RIP: 0033:0x7f7ddf19e159
[  496.065613][T15200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  496.065633][T15200] RSP: 002b:00007f7de00ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  496.065658][T15200] RAX: ffffffffffffffda RBX: 00007f7ddf425fa0 RCX: 00007f7ddf19e159
[  496.065675][T15200] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  496.065689][T15200] RBP: 00007f7ddf23503b R08: 0000000000000004 R09: 0000000000000000
[  496.065704][T15200] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  496.065719][T15200] R13: 00007f7ddf426038 R14: 00007f7ddf425fa0 R15: 00007ffee085e768
[  496.065758][T15200]  </TASK>
[  496.288676][T15200] Mem-Info:
[  496.288726][T15200] active_anon:5910 inactive_anon:0 isolated_anon:0
[  496.288726][T15200]  active_file:0 inactive_file:43646 isolated_file:0
[  496.288726][T15200]  unevictable:0 dirty:319 writeback:0
[  496.288726][T15200]  slab_reclaimable:11801 slab_unreclaimable:107686
[  496.288726][T15200]  mapped:30710 shmem:524 pagetables:1192
[  496.288726][T15200]  sec_pagetables:0 bounce:0
[  496.288726][T15200]  kernel_misc_reclaimable:0
[  496.288726][T15200]  free:1311521 free_pcp:11116 free_cma:0
[  496.289711][T15200] Node 0 active_anon:23640kB inactive_anon:0kB active_file:0kB inactive_file:174380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122840kB dirty:1276kB writeback:0kB shmem:2096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13960kB pagetables:4644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  496.289858][T15200] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  496.290553][T15200] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  496.290724][T15200] lowmem_reserve[]: 0 2486 2486 2486 2486
[  496.290851][T15200] Node 0 DMA32 free:1287692kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23640kB inactive_anon:0kB active_file:0kB inactive_file:174380kB unevictable:0kB writepending:1276kB zspages:0kB present:3129332kB managed:2546620kB mlocked:0kB bounce:0kB free_pcp:42956kB local_pcp:20828kB free_cma:0kB
[  496.291018][T15200] lowmem_reserve[]: 0 0 0 0 0
[  496.291657][T15200] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  496.291817][T15200] lowmem_reserve[]: 0 0 0 0 0
[  496.313295][T15200] Node 1 Normal free:3943032kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1508kB local_pcp:1508kB free_cma:0kB
[  496.313477][T15200] lowmem_reserve[]: 0 0 0 0 0
[  496.313583][T15200] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  496.314411][T15200] Node 0 DMA32: 1521*4kB (UM) 675*8kB (UME) 183*16kB (UME) 120*32kB (UME) 87*64kB (UME) 58*128kB (UME) 22*256kB (UM) 3*512kB (UM) 10*1024kB (M) 5*2048kB (UM) 300*4096kB (UM) = 1287692kB
[  496.314870][T15200] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  496.340588][T15200] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3943032kB
[  496.341089][T15200] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  496.341150][T15200] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  496.341228][T15200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  496.341278][T15200] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  496.341321][T15200] 44166 total pagecache pages
[  496.341360][T15200] 0 pages in swap cache
[  496.341382][T15200] Free swap  = 124996kB
[  496.341414][T15200] Total swap = 124996kB
[  496.341438][T15200] 2097051 pages RAM
[  496.341474][T15200] 0 pages HighMem/MovableOnly
[  496.341504][T15200] 428780 pages reserved
[  496.341539][T15200] 0 pages cma reserved
[  496.915954][T15200] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  497.628021][T15219] veth1_vlan: left promiscuous mode
[  497.649820][T15219] veth0_vlan: left promiscuous mode
[  497.666828][T15219] veth0_vlan: entered promiscuous mode
[  497.693413][T15219] veth1_vlan: entered promiscuous mode
[  497.770257][T15219] veth1_macvtap: left promiscuous mode
[  497.827651][T15237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  497.841398][T15219] veth1_macvtap: entered promiscuous mode
[  497.842993][T15219] geneve0: entered promiscuous mode
[  497.847794][T15219] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  497.867776][T15219] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  497.877128][T15219] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  497.886760][T15219] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  497.899821][T15219] 8021q: adding VLAN 0 to HW filter on device bond1
[  497.900932][T15219] 8021q: adding VLAN 0 to HW filter on device bond2
[  497.902063][T15219] 8021q: adding VLAN 0 to HW filter on device bond3
[  497.904197][T15219] 8021q: adding VLAN 0 to HW filter on device bond4
[  497.908141][T15219] 8021q: adding VLAN 0 to HW filter on device bond5
[  497.950086][T15219] 8021q: adding VLAN 0 to HW filter on device bond6
[  497.967746][T15219] 8021q: adding VLAN 0 to HW filter on device bond7
[  497.983458][T15219] 8021q: adding VLAN 0 to HW filter on device bond8
[  497.987080][T15219] 8021q: adding VLAN 0 to HW filter on device bond9
[  498.014301][ T1213] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  498.014358][ T1213] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  498.066188][T13699] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  498.066228][T13699] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  498.281557][ T1213] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  498.281598][ T1213] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  498.282702][ T1213] bond9: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  498.282984][ T1213] bond9: (slave veth3): making interface the new active one
[  498.284830][ T1213] bond9: active interface up!
[  498.359319][T13702] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  498.359361][T13702] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.208238][T15258] xt_hashlimit: size too large, truncated to 1048576
[  499.261079][T15257] __nla_validate_parse: 6 callbacks suppressed
[  499.261108][T15257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2418'.
[  499.350697][T15262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2420'.
[  499.350733][T15262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2420'.
[  499.659919][T15268] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2422'.
[  500.044733][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2425'.
[  500.044762][T15275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2425'.
[  500.315145][T15281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2425'.
[  500.329103][T15281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2425'.
[  500.651416][T15289] validate_nla: 1 callbacks suppressed
[  500.651445][T15289] netlink: 'syz.2.2428': attribute type 1 has an invalid length.
[  500.874057][T15289] bond5: entered promiscuous mode
[  500.875229][T15289] 8021q: adding VLAN 0 to HW filter on device bond5
[  500.943247][T15287] bond5: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  500.943278][T15287] bond5: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  500.943297][T15287] bond5: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode
[  501.412465][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  501.944858][T15326] netlink: 'syz.1.2434': attribute type 9 has an invalid length.
[  501.944887][T15326] netlink: 'syz.1.2434': attribute type 6 has an invalid length.
[  501.944902][T15326] netlink: 'syz.1.2434': attribute type 7 has an invalid length.
[  501.944921][T15326] netlink: 'syz.1.2434': attribute type 8 has an invalid length.
[  501.946644][T15326] netlink: 'syz.1.2434': attribute type 3 has an invalid length.
[  502.038975][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  502.166198][T15333] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2435'.
[  502.553377][T15326] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  502.553422][T15326] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.653595][T15346] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  503.114989][T15326] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.115031][T15326] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.529181][T15372] xt_hashlimit: size too large, truncated to 1048576
[  504.061346][T15326] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.061390][T15326] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.149901][T15380] syzkaller0: left promiscuous mode
[  504.150090][T15380] syzkaller0: left allmulticast mode
[  504.224779][T15390] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2443'.
[  504.475386][T15326] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.475427][T15326] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.828992][ T1010] batadv1: left promiscuous mode
[  505.119369][ T1213] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  505.119410][ T1213] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  505.210344][T13700] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  505.210383][T13700] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  505.248229][ T1213] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  505.248269][ T1213] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  505.304767][T15413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2447'.
[  505.329157][ T1213] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  505.329196][ T1213] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  505.416971][T15420] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  505.524979][T15415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2446'.
[  505.820540][T15430] netlink: 'syz.3.2451': attribute type 2 has an invalid length.
[  506.114844][T15403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2445'.
[  506.114872][T15403] nbd: must specify at least one socket
[  506.186824][T15403] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2445'.
[  506.257938][T15442] syz_tun: entered promiscuous mode
[  506.266256][T15442] macsec1: entered promiscuous mode
[  506.274113][T15442] macsec1: entered allmulticast mode
[  506.274186][T15442] syz_tun: entered allmulticast mode
[  506.304730][T15442] syz_tun: left allmulticast mode
[  506.314474][T15442] syz_tun: left promiscuous mode
[  507.167510][T15473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.176449][T15471] syzkaller0: entered promiscuous mode
[  507.176473][T15471] syzkaller0: entered allmulticast mode
[  507.357669][T15471] tipc: Resetting bearer <eth:syzkaller0>
[  507.447475][T15471] tipc: Disabling bearer <eth:syzkaller0>
[  507.593055][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2458'.
[  507.593087][T15495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2458'.
[  507.921821][T15502] syzkaller0: entered promiscuous mode
[  507.921850][T15502] syzkaller0: entered allmulticast mode
[  508.191896][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'.
[  508.289151][T15523] netlink: 'syz.4.2465': attribute type 1 has an invalid length.
[  508.503072][T15526] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  509.427352][T15525] gretap1: entered allmulticast mode
[  509.530211][T15536] bridge0: entered promiscuous mode
[  509.530417][T15536] bridge0: entered allmulticast mode
[  509.557409][T15536] team0: Port device bridge0 added
[  509.571394][T15537] bridge0: port 1(team0) entered blocking state
[  509.571831][T15537] bridge0: port 1(team0) entered disabled state
[  509.572168][T15537] team0: entered allmulticast mode
[  509.644186][T15537] team0: left allmulticast mode
[  509.703583][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2473'.
[  509.771973][T15554] batman_adv: batadv0: Removing interface: batadv_slave_1
[  509.957348][T15570] netlink: 'syz.3.2474': attribute type 1 has an invalid length.
[  509.957374][T15570] netlink: 'syz.3.2474': attribute type 7 has an invalid length.
[  509.957389][T15570] netlink: 'syz.3.2474': attribute type 8 has an invalid length.
[  509.957404][T15570] netlink: 'syz.3.2474': attribute type 1 has an invalid length.
[  509.957419][T15570] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2474'.
[  510.405746][T15593] smbdirect: ib_dev[syz1] removed
[  510.456254][T15598] ip6tnl3: entered promiscuous mode
[  510.456281][T15598] ip6tnl3: entered allmulticast mode
[  510.595282][T15600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2478'.
[  511.026292][T15620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  511.180606][T15627] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20000
[  511.583013][T15635] netlink: 'syz.4.2487': attribute type 9 has an invalid length.
[  511.583037][T15635] netlink: 'syz.4.2487': attribute type 6 has an invalid length.
[  511.583052][T15635] netlink: 'syz.4.2487': attribute type 7 has an invalid length.
[  511.583064][T15635] netlink: 'syz.4.2487': attribute type 8 has an invalid length.
[  511.623817][T15635] netlink: 'syz.4.2487': attribute type 3 has an invalid length.
[  511.763188][T15626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2483'.
[  511.859279][T15622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2483'.
[  512.062051][T15649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2490'.
[  512.442121][T15657] sock: sock_timestamping_bind_phc: sock not bind to device
[  512.625963][T15666] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  513.189727][T15678] netlink: 4416 bytes leftover after parsing attributes in process `syz.4.2498'.
[  513.931666][T15694] syzkaller1: entered promiscuous mode
[  513.931692][T15694] syzkaller1: entered allmulticast mode
[  514.618591][ T4932] block nbd2: Receive control failed (result -32)
[  514.618678][ T4932] block nbd2: Receive control failed (result -32)
[  514.953600][T15728] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2507'.
[  515.022269][T15731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'.
[  515.066874][T15735] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2510'.
[  515.067233][T15735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2510'.
[  515.772445][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2515'.
[  515.776023][T15721] block nbd3: Receive control failed (result -1)
[  516.378315][T15773] netlink: 'syz.2.2517': attribute type 4 has an invalid length.
[  516.451540][T15773] netlink: 'syz.2.2517': attribute type 4 has an invalid length.
[  516.707121][T15741] infiniband syz1: set active
[  516.707240][T15741] infiniband syz1: added bond0
[  516.745241][T15741] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  516.753620][T15741] infiniband syz1: Couldn't open port 1
[  516.753997][T15741] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  516.754031][T15741] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  516.754075][T15741] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  516.803681][T15781] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2519'.
[  516.998615][T15741] RDS/IB: syz1: added
[  517.027695][T15741] smc: adding ib device syz1 with port count 1
[  517.028029][T15741] smc:    ib device syz1 port 1 has no pnetid
[  517.072975][T15790] netlink: 'syz.0.2521': attribute type 1 has an invalid length.
[  517.269189][T15792] FAULT_INJECTION: forcing a failure.
[  517.269189][T15792] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  517.269228][T15792] CPU: 1 UID: 0 PID: 15792 Comm: syz.1.2523 Not tainted syzkaller #0 PREEMPT(full) 
[  517.269253][T15792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  517.269267][T15792] Call Trace:
[  517.269275][T15792]  <TASK>
[  517.269285][T15792]  dump_stack_lvl+0xe8/0x150
[  517.269324][T15792]  should_fail_ex+0x410/0x560
[  517.269355][T15792]  _copy_from_user+0x2d/0xb0
[  517.269385][T15792]  ___sys_sendmsg+0x1c6/0x360
[  517.269422][T15792]  ? __pfx____sys_sendmsg+0x10/0x10
[  517.269448][T15792]  ? __lock_acquire+0x747/0x2de0
[  517.269523][T15792]  __sys_sendmmsg+0x273/0x4d0
[  517.269559][T15792]  ? __pfx___sys_sendmmsg+0x10/0x10
[  517.269599][T15792]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  517.269644][T15792]  ? ksys_write+0x242/0x270
[  517.269680][T15792]  ? __pfx_ksys_write+0x10/0x10
[  517.269722][T15792]  __x64_sys_sendmmsg+0xa0/0xc0
[  517.269754][T15792]  do_syscall_64+0x166/0x520
[  517.269778][T15792]  ? trace_irq_disable+0x3b/0x140
[  517.269801][T15792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.269824][T15792]  ? clear_bhb_loop+0x70/0xc0
[  517.269852][T15792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.269876][T15792] RIP: 0033:0x7f94ef19e159
[  517.269897][T15792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  517.269917][T15792] RSP: 002b:00007f94f00b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  517.269942][T15792] RAX: ffffffffffffffda RBX: 00007f94ef425fa0 RCX: 00007f94ef19e159
[  517.269959][T15792] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 000000000000000a
[  517.269981][T15792] RBP: 00007f94f00b9090 R08: 0000000000000000 R09: 0000000000000000
[  517.269996][T15792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  517.270010][T15792] R13: 00007f94ef426038 R14: 00007f94ef425fa0 R15: 00007ffdb087c068
[  517.270045][T15792]  </TASK>
[  517.735718][T15800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2522'.
[  517.935316][T15804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2525'.
[  517.965961][T15806] x_tables: unsorted entry at hook 3
[  518.023628][T15806] netlink: 'syz.1.2526': attribute type 1 has an invalid length.
[  518.023655][T15806] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2526'.
[  518.033200][T15806] IPv6: addrconf: prefix option has invalid lifetime
[  518.046685][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2526'.
[  518.046953][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  518.338590][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2527'.
[  518.436630][T15811] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  518.496155][T15813] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2527'.
[  518.568528][T15816] tls_set_device_offload_rx: netdev not found
[  518.863394][T15834] netlink: 3596 bytes leftover after parsing attributes in process `syz.1.2531'.
[  519.558442][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2538'.
[  520.071968][T13700] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x32
[  520.661422][T15880] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  520.966646][T15895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2548'.
[  520.966681][T15895] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  521.032347][T15895] ipip1: entered promiscuous mode
[  521.265246][T15901] FAULT_INJECTION: forcing a failure.
[  521.265246][T15901] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  521.265282][T15901] CPU: 0 UID: 0 PID: 15901 Comm: syz.4.2550 Not tainted syzkaller #0 PREEMPT(full) 
[  521.265308][T15901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  521.265321][T15901] Call Trace:
[  521.265330][T15901]  <TASK>
[  521.265339][T15901]  dump_stack_lvl+0xe8/0x150
[  521.265376][T15901]  should_fail_ex+0x410/0x560
[  521.265407][T15901]  _copy_from_user+0x2d/0xb0
[  521.265436][T15901]  ___sys_sendmsg+0x1c6/0x360
[  521.265471][T15901]  ? __pfx____sys_sendmsg+0x10/0x10
[  521.265498][T15901]  ? __lock_acquire+0x747/0x2de0
[  521.265575][T15901]  __sys_sendmmsg+0x273/0x4d0
[  521.265611][T15901]  ? __pfx___sys_sendmmsg+0x10/0x10
[  521.265651][T15901]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  521.265700][T15901]  ? ksys_write+0x242/0x270
[  521.265737][T15901]  ? __pfx_ksys_write+0x10/0x10
[  521.265778][T15901]  __x64_sys_sendmmsg+0xa0/0xc0
[  521.265810][T15901]  do_syscall_64+0x166/0x520
[  521.265833][T15901]  ? trace_irq_disable+0x3b/0x140
[  521.265856][T15901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.265879][T15901]  ? clear_bhb_loop+0x70/0xc0
[  521.265906][T15901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.265929][T15901] RIP: 0033:0x7f569eb9e159
[  521.265949][T15901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  521.265968][T15901] RSP: 002b:00007f569fa3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  521.265992][T15901] RAX: ffffffffffffffda RBX: 00007f569ee25fa0 RCX: 00007f569eb9e159
[  521.266008][T15901] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 000000000000000a
[  521.266023][T15901] RBP: 00007f569fa3a090 R08: 0000000000000000 R09: 0000000000000000
[  521.266037][T15901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  521.266050][T15901] R13: 00007f569ee26038 R14: 00007f569ee25fa0 R15: 00007fff5a422b88
[  521.266086][T15901]  </TASK>
[  521.958209][T15916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2555'.
[  521.960063][T15917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2555'.
[  522.094212][T15919] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2556'.
[  522.509920][T15940] netlink: 'syz.2.2560': attribute type 55 has an invalid length.
[  522.674787][T15947] v: renamed from veth0_vlan
[  522.913574][T15951] netlink: 'syz.2.2564': attribute type 1 has an invalid length.
[  523.030945][T15954] team0: Port device team_slave_0 removed
[  523.038292][T15954] team0: Port device team_slave_1 removed
[  523.044578][T15954] batman_adv: batadv0: Removing interface: batadv_slave_0
[  523.058485][T15954] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  523.108197][T15951] gretap1: entered allmulticast mode
[  523.122741][T15951] bond6: (slave gretap1): making interface the new active one
[  523.125526][T15951] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  523.150562][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'.
[  523.187597][T15954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2565'.
[  523.187625][T15954] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2565'.
[  523.187644][T15954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2565'.
[  523.188445][T15954] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2565'.
[  523.204763][T15954] veth0: entered promiscuous mode
[  523.210212][T15953] veth0: left promiscuous mode
[  523.277210][T15960] netlink: 'syz.0.2566': attribute type 9 has an invalid length.
[  523.277234][T15960] netlink: 'syz.0.2566': attribute type 6 has an invalid length.
[  523.277248][T15960] netlink: 'syz.0.2566': attribute type 7 has an invalid length.
[  523.277262][T15960] netlink: 'syz.0.2566': attribute type 8 has an invalid length.
[  523.278439][T15960] netlink: 'syz.0.2566': attribute type 3 has an invalid length.
[  523.374281][T15963] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2567'.
[  523.782864][T15974] openvswitch: netlink: Message has 8 unknown bytes.
[  525.499120][ T5618] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  525.510327][ T5618] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  525.593446][T16025] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  525.669390][ T5618] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  525.699205][ T5618] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  525.739070][   T45] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  525.839143][   T45] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  526.047029][T16043] siw: device registration error -23
[  526.146247][T16049] netlink: 'syz.2.2588': attribute type 9 has an invalid length.
[  526.146272][T16049] netlink: 'syz.2.2588': attribute type 6 has an invalid length.
[  526.146287][T16049] netlink: 'syz.2.2588': attribute type 7 has an invalid length.
[  526.220143][   T45] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  526.267479][T16047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2587'.
[  526.305385][T16047] block nbd0: reconnected socket
[  526.305412][T16047] block nbd0: Unsupported socket: should be TCP or UNIX.
[  526.316153][T16053] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20003
[  526.389909][T15721] block nbd0: Receive control failed (result -32)
[  526.681812][T16066] IPVS: Error connecting to the multicast addr
[  527.136933][T16079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2595'.
[  527.701359][T16098] 
[  527.703764][T16098] ======================================================
[  527.710801][T16098] WARNING: possible circular locking dependency detected
[  527.717877][T16098] syzkaller #0 Not tainted
[  527.722330][T16098] ------------------------------------------------------
[  527.729387][T16098] syz.2.2599/16098 is trying to acquire lock:
[  527.735478][T16098] ffff88801c2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430
[  527.746072][T16098] 
[  527.746072][T16098] but task is already holding lock:
[  527.753485][T16098] ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  527.763631][T16098] 
[  527.763631][T16098] which lock already depends on the new lock.
[  527.763631][T16098] 
[  527.774062][T16098] 
[  527.774062][T16098] the existing dependency chain (in reverse order) is:
[  527.783118][T16098] 
[  527.783118][T16098] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  527.790906][T16098]        cpus_read_lock+0x42/0x160
[  527.796068][T16098]        static_key_slow_inc+0x12/0x30
[  527.801567][T16098]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  527.807925][T16098]        nbd_genl_foreach_sock+0x265/0x450
[  527.813768][T16098]        nbd_genl_reconfigure+0xbbb/0x1040
[  527.819617][T16098]        genl_family_rcv_msg_doit+0x233/0x340
[  527.825742][T16098]        genl_rcv_msg+0x614/0x7a0
[  527.830803][T16098]        netlink_rcv_skb+0x226/0x4a0
[  527.836156][T16098]        genl_rcv+0x28/0x40
[  527.840699][T16098]        netlink_unicast+0x7bd/0x940
[  527.846030][T16098]        netlink_sendmsg+0x813/0xb40
[  527.851349][T16098]        sock_sendmsg_nosec+0x13a/0x180
[  527.856946][T16098]        ____sys_sendmsg+0x54e/0x850
[  527.862281][T16098]        ___sys_sendmsg+0x2a5/0x360
[  527.867549][T16098]        __x64_sys_sendmsg+0x1b1/0x290
[  527.873042][T16098]        do_syscall_64+0x166/0x520
[  527.878200][T16098]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.884659][T16098] 
[  527.884659][T16098] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  527.892351][T16098]        __mutex_lock+0x19d/0x1550
[  527.897499][T16098]        nbd_queue_rq+0x373/0xff0
[  527.902557][T16098]        blk_mq_dispatch_rq_list+0x499/0x1990
[  527.908758][T16098]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  527.915709][T16098]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  527.922256][T16098]        blk_mq_run_work_fn+0x16c/0x300
[  527.927875][T16098]        process_scheduled_works+0xc3d/0x1630
[  527.933985][T16098]        worker_thread+0xa47/0xfb0
[  527.939132][T16098]        kthread+0x38b/0x480
[  527.943751][T16098]        ret_from_fork+0x514/0xb70
[  527.948895][T16098]        ret_from_fork_asm+0x1a/0x30
[  527.954239][T16098] 
[  527.954239][T16098] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  527.961479][T16098]        __mutex_lock+0x19d/0x1550
[  527.966648][T16098]        nbd_queue_rq+0xc1/0xff0
[  527.971645][T16098]        blk_mq_dispatch_rq_list+0x499/0x1990
[  527.977739][T16098]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  527.984670][T16098]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  527.991214][T16098]        blk_mq_run_work_fn+0x16c/0x300
[  527.996810][T16098]        process_scheduled_works+0xc3d/0x1630
[  528.002929][T16098]        worker_thread+0xa47/0xfb0
[  528.008086][T16098]        kthread+0x38b/0x480
[  528.012708][T16098]        ret_from_fork+0x514/0xb70
[  528.017844][T16098]        ret_from_fork_asm+0x1a/0x30
[  528.023176][T16098] 
[  528.023176][T16098] -> #4 (set->srcu){.+.+}-{0:0}:
[  528.030335][T16098]        __synchronize_srcu+0xc9/0x2f0
[  528.035825][T16098]        elevator_switch+0x1e8/0x7b0
[  528.041239][T16098]        elevator_change+0x2fa/0x480
[  528.046569][T16098]        elevator_set_default+0x375/0x440
[  528.052323][T16098]        blk_register_queue+0x3f3/0x4e0
[  528.057994][T16098]        __add_disk+0x6b8/0xdb0
[  528.062892][T16098]        add_disk_fwnode+0x100/0x3a0
[  528.068219][T16098]        nbd_dev_add+0x733/0xb60
[  528.073187][T16098]        nbd_init+0x168/0x1f0
[  528.077906][T16098]        do_one_initcall+0x250/0x870
[  528.083237][T16098]        do_initcall_level+0x10a/0x1a0
[  528.088736][T16098]        do_initcalls+0x59/0xa0
[  528.093622][T16098]        kernel_init_freeable+0x29d/0x3e0
[  528.099367][T16098]        kernel_init+0x22/0x1d0
[  528.104250][T16098]        ret_from_fork+0x514/0xb70
[  528.109395][T16098]        ret_from_fork_asm+0x1a/0x30
[  528.114726][T16098] 
[  528.114726][T16098] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  528.122605][T16098]        __mutex_lock+0x19d/0x1550
[  528.127760][T16098]        elevator_change+0x1af/0x480
[  528.133101][T16098]        elevator_set_none+0xb5/0x140
[  528.138510][T16098]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  528.144892][T16098]        nbd_start_device+0x189/0xb30
[  528.150302][T16098]        nbd_genl_connect+0x167d/0x1cd0
[  528.156011][T16098]        genl_family_rcv_msg_doit+0x233/0x340
[  528.162122][T16098]        genl_rcv_msg+0x614/0x7a0
[  528.167183][T16098]        netlink_rcv_skb+0x226/0x4a0
[  528.172515][T16098]        genl_rcv+0x28/0x40
[  528.177057][T16098]        netlink_unicast+0x7bd/0x940
[  528.182384][T16098]        netlink_sendmsg+0x813/0xb40
[  528.187720][T16098]        sock_sendmsg_nosec+0x13a/0x180
[  528.193325][T16098]        ____sys_sendmsg+0x54e/0x850
[  528.198640][T16098]        ___sys_sendmsg+0x2a5/0x360
[  528.203879][T16098]        __x64_sys_sendmsg+0x1b1/0x290
[  528.209381][T16098]        do_syscall_64+0x166/0x520
[  528.214525][T16098]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.220969][T16098] 
[  528.220969][T16098] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  528.229633][T16098]        blk_alloc_queue+0x544/0x690
[  528.234948][T16098]        __blk_mq_alloc_disk+0x194/0x390
[  528.240609][T16098]        nbd_dev_add+0x494/0xb60
[  528.245572][T16098]        nbd_init+0x168/0x1f0
[  528.250287][T16098]        do_one_initcall+0x250/0x870
[  528.255611][T16098]        do_initcall_level+0x10a/0x1a0
[  528.261156][T16098]        do_initcalls+0x59/0xa0
[  528.266040][T16098]        kernel_init_freeable+0x29d/0x3e0
[  528.271783][T16098]        kernel_init+0x22/0x1d0
[  528.276663][T16098]        ret_from_fork+0x514/0xb70
[  528.281798][T16098]        ret_from_fork_asm+0x1a/0x30
[  528.287113][T16098] 
[  528.287113][T16098] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  528.294355][T16098]        fs_reclaim_acquire+0x71/0x100
[  528.299843][T16098]        kmem_cache_alloc_noprof+0x5f/0x600
[  528.305775][T16098]        __kernfs_iattrs+0xdd/0x380
[  528.311018][T16098]        kernfs_iop_setattr+0xe6/0x3f0
[  528.316529][T16098]        notify_change+0xbba/0xea0
[  528.321716][T16098]        do_truncate+0x1c2/0x250
[  528.326707][T16098]        path_openat+0x15b5/0x1d60
[  528.331845][T16098]        do_file_open+0x23e/0x4a0
[  528.336899][T16098]        do_sys_openat2+0x115/0x200
[  528.342123][T16098]        __x64_sys_openat+0x138/0x170
[  528.347525][T16098]        do_syscall_64+0x166/0x520
[  528.352682][T16098]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.359132][T16098] 
[  528.359132][T16098] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  528.367686][T16098]        __lock_acquire+0x164c/0x2de0
[  528.373111][T16098]        lock_acquire+0x115/0x350
[  528.378176][T16098]        down_read+0x4a/0x330
[  528.382892][T16098]        kernfs_iop_permission+0x7f/0x430
[  528.388661][T16098]        inode_permission+0x3de/0x5f0
[  528.394081][T16098]        cgroup_attach_permissions+0x28e/0x9f0
[  528.400308][T16098]        __cgroup_procs_write+0x24b/0x320
[  528.406066][T16098]        cgroup_threads_write+0x24/0x50
[  528.411659][T16098]        cgroup_file_write+0x331/0x8f0
[  528.417197][T16098]        kernfs_fop_write_iter+0x3a4/0x540
[  528.423053][T16098]        vfs_write+0x612/0xba0
[  528.427892][T16098]        ksys_write+0x150/0x270
[  528.432794][T16098]        do_syscall_64+0x166/0x520
[  528.437936][T16098]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.444406][T16098] 
[  528.444406][T16098] other info that might help us debug this:
[  528.444406][T16098] 
[  528.454673][T16098] Chain exists of:
[  528.454673][T16098]   &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock
[  528.454673][T16098] 
[  528.468740][T16098]  Possible unsafe locking scenario:
[  528.468740][T16098] 
[  528.476218][T16098]        CPU0                    CPU1
[  528.481621][T16098]        ----                    ----
[  528.487018][T16098]   rlock(cpu_hotplug_lock);
[  528.491649][T16098]                                lock(&nsock->tx_lock);
[  528.498620][T16098]                                lock(cpu_hotplug_lock);
[  528.505691][T16098]   rlock(&root->kernfs_iattr_rwsem);
[  528.511102][T16098] 
[  528.511102][T16098]  *** DEADLOCK ***
[  528.511102][T16098] 
[  528.519270][T16098] locks held by syz.2.2599/16098: 5, last CPU#1:
[  528.525622][T16098]  #0: ffff8880773bd430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  528.534737][T16098]  #1: ffff888032b22460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  528.543680][T16098]  #2: ffff888055780080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  528.553468][T16098]  #3: ffffffff8ed9c760 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  528.563293][T16098]  #4: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  528.573886][T16098] 
[  528.573886][T16098] stack backtrace:
[  528.579800][T16098] CPU: 1 UID: 0 PID: 16098 Comm: syz.2.2599 Not tainted syzkaller #0 PREEMPT(full) 
[  528.589192][T16098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  528.599271][T16098] Call Trace:
[  528.602572][T16098]  <TASK>
[  528.605538][T16098]  dump_stack_lvl+0xe8/0x150
[  528.610171][T16098]  print_circular_bug+0x2e2/0x300
[  528.615255][T16098]  check_noncircular+0x12f/0x150
[  528.620232][T16098]  __lock_acquire+0x164c/0x2de0
[  528.625127][T16098]  ? __lock_acquire+0x747/0x2de0
[  528.630107][T16098]  lock_acquire+0x115/0x350
[  528.634642][T16098]  ? kernfs_iop_permission+0x7f/0x430
[  528.640061][T16098]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  528.645930][T16098]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  528.651804][T16098]  down_read+0x4a/0x330
[  528.656047][T16098]  ? kernfs_iop_permission+0x7f/0x430
[  528.661479][T16098]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  528.667432][T16098]  kernfs_iop_permission+0x7f/0x430
[  528.672680][T16098]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  528.678536][T16098]  inode_permission+0x3de/0x5f0
[  528.683438][T16098]  cgroup_attach_permissions+0x28e/0x9f0
[  528.689126][T16098]  __cgroup_procs_write+0x24b/0x320
[  528.694363][T16098]  cgroup_threads_write+0x24/0x50
[  528.699434][T16098]  ? __pfx_cgroup_threads_write+0x10/0x10
[  528.705208][T16098]  cgroup_file_write+0x331/0x8f0
[  528.710190][T16098]  ? __pfx_cgroup_file_write+0x10/0x10
[  528.715692][T16098]  ? __kmalloc_noprof+0x38c/0x720
[  528.720769][T16098]  ? __pfx_cgroup_file_write+0x10/0x10
[  528.726277][T16098]  kernfs_fop_write_iter+0x3a4/0x540
[  528.731629][T16098]  vfs_write+0x612/0xba0
[  528.735953][T16098]  ? __pfx_vfs_write+0x10/0x10
[  528.740795][T16098]  ? __fget_files+0x2a/0x420
[  528.745458][T16098]  ksys_write+0x150/0x270
[  528.749839][T16098]  ? __pfx_ksys_write+0x10/0x10
[  528.754741][T16098]  do_syscall_64+0x166/0x520
[  528.759370][T16098]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.765506][T16098]  ? clear_bhb_loop+0x70/0xc0
[  528.770227][T16098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.776150][T16098] RIP: 0033:0x7f3d0079e159
[  528.780599][T16098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.800279][T16098] RSP: 002b:00007f3d016b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  528.808731][T16098] RAX: ffffffffffffffda RBX: 00007f3d00a26090 RCX: 00007f3d0079e159
[  528.816741][T16098] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000009
[  528.824741][T16098] RBP: 00007f3d0083503b R08: 0000000000000000 R09: 0000000000000000
[  528.832757][T16098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  528.840769][T16098] R13: 00007f3d00a26128 R14: 00007f3d00a26090 R15: 00007ffcf779dc58
[  528.848779][T16098]  </TASK>