last executing test programs:

4.711746676s ago: executing program 1 (id=6498):
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000700f8ffffffb703000008000000b70400000000000c85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x2c060000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc044}, 0x4c050) (async)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4c044)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) (async)
sendmsg$NL80211_CMD_START_NAN(r3, 0x0, 0x2000804) (async)
sendmsg$BATADV_CMD_SET_MESH(r2, 0x0, 0x40000) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)

4.467481175s ago: executing program 1 (id=6500):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r7, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
close(0x3)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r8}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r8, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x1017, &(0x7f0000001980)=ANY=[], &(0x7f0000001940)={0x1, 0x4, [0xeca, 0x993, 0x158, 0xcb8]})
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000004000000000800040001000000", 0x24)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=<r10=>0x0)
bind$nfc_llcp(r9, &(0x7f0000000040)={0x27, r10, 0x0, 0x6, 0xc0, 0x1, "784dbeef27644b659b031c17397ea7247721b54a8476db930a5105c8166f130b29b2e0e169f15e649f2714300ebc3a5955356cc3f7a311a4c04f6d0e7e4c70", 0x2}, 0x60)

4.182415752s ago: executing program 0 (id=6502):
pipe(0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xc, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x92, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$kcm(0x23, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900), 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff8e}, 0xba)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00'})
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[], 0xd40}, 0x1, 0x0, 0x0, 0x4004800}, 0x8)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
sendmsg$tipc(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01009dba8d760d00b1c828000000280000000a898663d9000000080000000100000f0500010094af65767797cde50a000000040000000000000e020000000000000000300000cf0000002e00c9318638203377f762899cf6a3bfcd71004da56da8723965f59e4fa1bdfb89df3506d20f8adb2d0aa88b9f01b59b5c6ffd602e6fcd867041259bee6d9565bda801d35db6a01bbe0b"], &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6}, 0x28)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f00000000c0))
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006"], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x571f68543cec8180)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x20010, 0xffffffffffffffff, 0x215e7000)

3.342675362s ago: executing program 1 (id=6508):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000001200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}, 0x0)

3.141487034s ago: executing program 1 (id=6509):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x1010000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x102}, @generic={0x66, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

3.056307797s ago: executing program 0 (id=6511):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x14) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x14)
preadv(r3, &(0x7f00000008c0)=[{&(0x7f0000000b40)=""/28, 0x1c}, {0x0}], 0x2, 0x1, 0xfffffffe) (async)
preadv(r3, &(0x7f00000008c0)=[{&(0x7f0000000b40)=""/28, 0x1c}, {0x0}], 0x2, 0x1, 0xfffffffe)
r5 = socket(0xa, 0x3, 0x3a)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ffffffff000000008000000000000000ac1414aa00000000000700000000000000000000427c9aba0a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000601000000004400050000000000000000000000ffffffffffff000000003c00000002000000ac1414aa000000000000000000000000060000000403"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='reno', 0x4)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xb7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r10, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c76436ffffff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x1, 0x0, @local, 0x4}, {0xa, 0x4e21, 0x0, @empty}, 0xfffd, {[0x0, 0x20000, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x1, 0x0, @local, 0x4}, {0xa, 0x4e21, 0x0, @empty}, 0xfffd, {[0x0, 0x20000, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r11)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xac, r12, 0x520, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x94}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="050000000000000080000000000000008510000002000000850000002316000095000000000100009500a50500000000bee2e3e9bf955ae795d36de322b2150793895ec1129bb9ef3b1d88d1aaaab15c4521b878b6bbd30facb8488f38db9b3276845544f787747fdef8023cc2398c7bd9641ce39df1a6d74d6769af08cf72826cc4c6e9820015029f122a1e3efa4c9c88a253d9f6ed1cf50f8021"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2.947708234s ago: executing program 1 (id=6512):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value=0x8000000}, 0x94)

2.761641337s ago: executing program 1 (id=6515):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

2.69968369s ago: executing program 0 (id=6516):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0x27}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x30, 0x0, 0x0, 0x8}, 0x94)

2.69937839s ago: executing program 3 (id=6517):
r0 = socket$inet(0xa, 0x801, 0x84)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x11, @local, 0x4e20, 0x0, 'rr\x00', 0x11, 0x2, 0x35}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x8, 0x8000006, 0x2}}, 0x44)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
getsockopt$bt_hci(r3, 0x11a, 0x3, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000000000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa330040"], 0x0)
sendto$inet(r0, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
shutdown(r1, 0x0)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

2.646768198s ago: executing program 4 (id=6518):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000720010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)

2.632898433s ago: executing program 0 (id=6519):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000400), &(0x7f0000000440)=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r6, 0x0}, 0x20)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000)
pselect6(0x0, 0x0, 0x0, &(0x7f0000001380)={0x80000000, 0x8, 0x401, 0xfffffffffffffffa, 0x3, 0x9, 0xfffffffffffffff9, 0x9}, &(0x7f00000013c0)={0x77359400}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2c}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='wlan0\x00'})
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$sock(r5, &(0x7f0000000680)={&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x4, @multicast, 'erspan0\x00'}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)="5ebc1d4cc34bc907357339c7ab109bab04b4bf3f5eec312dbbe41814f396234b4c34c4f3272b7778d07eaea975cb801b5c3f2aaeeb61af85e827af14527e710cfc381e17b4ea7bb3fe77ca8dcbf0ccc127845fb06662a89ba5be640eb2ce28150cb461fdf7c71bfd55fd9dd71e07ca2883cbfb81ad8690ba143d65832d680fa3e7d74b09be954a9f51c3a10fd221f73bcb355ab21a7b4f6683e4f2d5965b65f18732a36e3a4658e2b8b6139b0e4590fd", 0xb0}], 0x1, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000006a0001012bbd7000fedb0090a35316"], 0x18}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000800)
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000080)={0x69, "ef40cd87b23b9b73d233d55426a041b979993acaeba14b6761e2a27774e5022aee2c37e0dc2ae62eef1f3882bb520c5d740c306d171f57d7e62e61a998afff922bee10c6230df1d2404244dd879bf8ec7bcc2658e2a965fd3511163ce207b22bc8afd55a5d4a377d929ba27daa7ecd415855ed6420085fa12cfdda770f368f55"})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYRESDEC], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x37, 0x0, 0x0, 0x10, 0x8000000}, 0x94)

2.363423966s ago: executing program 4 (id=6520):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x1017, &(0x7f0000001980)=ANY=[], &(0x7f0000001940)={0x1, 0x4, [0xeca, 0x993, 0x158, 0xcb8]})
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000002c0)={<r5=>r4, &(0x7f0000000000)='+*\x00', 0x400, &(0x7f0000000040)={@align=0x5, {0x4, 0x92, 0x10001, 0x13a}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000280)=0x10000})
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000300), 0x4)

2.219696856s ago: executing program 4 (id=6521):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x0, 0xf, 0xc}, &(0x7f00000001c0)=0x10)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380100001000130429bd70000000000000000000000000000000000000000000fc010000000000000000000000000000000000004e280000000000200c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010102000000000000000000000000000000003c000000e0000001000000000000000000000000ff03000000000000feffffffffffffff0000000000000000ffffffffffffffffffffffffffffffff000008000000000081000000000000000000000000000000030000000000000005000000000000000400000000000000060000040000000000000800f9ff0000000000000000000a0001816800000000000000480002006374722d6165732d636500"/235], 0x138}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x4e, 0x7ff, 0x7ff, 0x1, 0xc, 0x6}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r7, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050)

2.133675625s ago: executing program 2 (id=6522):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x1010000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x103}, @generic={0x66, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

2.074677008s ago: executing program 3 (id=6523):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r1, 0x1100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '$:^['}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0xc000)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040004)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) (async)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0)
sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r8, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4048881)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000580)={0x0, 'veth1_vlan\x00', {}, 0x5})
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000005c0)=0x1)
socket$packet(0x11, 0x3, 0x300)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
listen(r4, 0xfffff800)
ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, &(0x7f0000000700)={r4, 0x0, 0x7, 0x9, 0x7, 0x2})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r8, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000880)=0x3, 0x4) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000880)=0x3, 0x4)
r10 = socket(0x2a, 0x6, 0x1)
vmsplice(r3, &(0x7f0000002c00)=[{&(0x7f00000008c0)="117f89a4b3e92573fc3168d9d1b596261bbc81c4c62095cc4a2274b8557eb46f09c61031fb511b787ca03b9d790faba779648a888ac1ef42be4ee3e28ec1bd1f5cb6f3df08f5704542aaa51babfa53cd0e838357a971e677fe15c4ea81bcfc0d915c6f584ad217d7ca71b2e6869f20acc9e9eb9dd9eec9ee8937327e440506d30787c6b48dd61f2824857dbb1d72b67838780932a5", 0x95}, {&(0x7f0000000980)="6b9532a6f083964718cc9f42cf597e0e09db250aa25a1145bea7eeeb01d36c3de10fbeeadab6b1a374aaaf0b65cc19634bd520c627c42bd06f95e2cf04d66e1ada4cb55e8e689d90b8588fdd9b8888dcf5f54eb748a057d6acc858347f17435e46b1bcc1cf446201bf177ecd5fed41181ee7977db6df8ea5b8d328e87a3b746ded71b6b14ee29d02aab8b79f20774ef3", 0x90}, {&(0x7f0000000a40)="8cef34f78ac67601d6efb0875553930c948394b4ce5128fd29ed429129d881c18937ea97345e460e1e0a4855ca32ceb9ca3a4acac1287cd3d7fe34aa3fd06ac69ac9ded55897a08fede9b38ac6d17f962dedcf09549a9950656f4ea1648d5e7e4b2840b7b6cd2412a178eedfc07fa9c35b1359cfb58d357a0d0714c2b69c95e422a301a63a7effe6b671780ea76e785a8f4b8350dedf1bd38bd34dfa5c95777be5e8dd6b19727fbfce27eb856160", 0xae}, {&(0x7f0000000b00)="6e926f0d43cf8505276e27e94b580e2297eff5a40219dc7b7ace857d115f976b85d9be5380fa324b7ad70c71", 0x2c}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="2a60a92a38c217de747f4c95033c5c0128fb7ffe0d56addab51d03bebe38c21d75df60fe38e6f721c08ba5fa5c4c7021163fb62bfc1148a17a4e42e4a321da6234e8b408722f0be26e01161737bf9092e63b5b6bc6af695a4656b9cb805416f878b0b18ba4bd188d95b7c98523effcb33eb188f2a86d88624676c7c1a53ed8a629991d789cf0ec2999ae8e9d35d5ee1a61c1b27c8077611b94098ad417efecc8f5887292229cba88d62eaddf9fcb94f3fe481d1acca2b937deb35a5ceef5", 0xbe}], 0x7, 0x1)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002cc0)={'xfrm0\x00', <r11=>0x0})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002d00), &(0x7f0000002d40)=0xc) (async)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002d00)={0x0, <r12=>0x0}, &(0x7f0000002d40)=0xc)
sendmsg$nl_xfrm(r10, &(0x7f0000002e40)={&(0x7f0000002c80), 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)=@getpolicy={0x58, 0x15, 0x200, 0x70bd25, 0x25dfdbff, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e24, 0x4, 0x4e23, 0x5, 0x2, 0x80, 0x0, 0x33, r11, r12}, 0x6e6bbd}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x40)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r13 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r13, &(0x7f0000002e80)={0x2, 0x4e21, @loopback}, 0x10) (async)
connect$inet(r13, &(0x7f0000002e80)={0x2, 0x4e21, @loopback}, 0x10)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000002ec0), r14)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002f00), r0) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002f00), r0)

1.943609378s ago: executing program 2 (id=6524):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffeba, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24008840}, 0x40810) (fail_nth: 1)

1.621316512s ago: executing program 4 (id=6525):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async)
r1 = socket(0x2a, 0x2, 0xffffffff)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001) (async, rerun: 32)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x0, 0x8, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff}) (async)
unshare(0x2a060400) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x28, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0x7fffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x80, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) (async, rerun: 64)
r7 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local, r2}, 0xc) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 64)
getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (async, rerun: 64)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r8=>0x0}) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) (async)
unshare(0x400) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000200000008500000086fffe009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.484119138s ago: executing program 2 (id=6526):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value=0x9000000}, 0x94)

1.367484094s ago: executing program 3 (id=6527):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x440088c4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b2000ed00ffdbdf25030000000100000008000a0002000000080005"], 0x28}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x440088c4) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b2000ed00ffdbdf25030000000100000008000a0002000000080005"], 0x28}}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async)

1.263440874s ago: executing program 2 (id=6528):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x3, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f00000001c0)={'veth1_to_bond\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}})
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000001cc0), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x40, r7, 0x821, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8010)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="67f8b54229e0", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, @loopback, @private=0xa810102}, "00186371ae9b1c03"}}}}}, 0x0)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
unshare(0x2a060400)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0xfdae, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xfb}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x840}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000))

1.244789622s ago: executing program 4 (id=6529):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f08906", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.054120831s ago: executing program 3 (id=6530):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28)
bind$inet(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000140)=0xdf6, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@empty, @in=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0xd, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffc, 0x800000000000002}}}, 0xb8}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@loopback, @in6=@mcast2, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)=@getsadinfo={0x2d4, 0x23, 0x300, 0x70bd2d, 0x25dfdbfb, 0x0, [@policy_type={0xa}, @lifetime_val={0x24, 0x9, {0x2, 0x7fff, 0x40, 0x4}}, @lifetime_val={0x24, 0x9, {0x1000, 0x1, 0x7a3b, 0x728e}}, @policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e24, 0x7ff, 0x4e21, 0xd, 0xa, 0x60, 0x80, 0x3a, 0x0, r5}, {0x9, 0x3, 0xfffffffffffffffb, 0x100000000, 0x5, 0x0, 0x3, 0x6}, {0x5, 0x8, 0x0, 0x2}, 0x1ff, 0x0, 0x2, 0x91533789824d8097, 0x1}}, @sec_ctx={0xf9, 0x8, {0xf5, 0x8, 0x0, 0x8, 0xed, "ce4fb2a7dbc04aea9cd76460d942680d12989651fc7512783f0d18fa551f70cb5d177cc736777dd67f3a122b8d57ad3f286dade149697d889e5181a0874656bd0eee690926930eb5333e6b533d62e235bd6e3f8c03af89ffaa67c6224379778746a9059e11bf40c6450b82b38beea3e57463580fd075b33ed64776a3f7e7b1521d8917279c21a8f40c3eb3a0bc32ca72732ea5e9c67ac4121de8153a497edf5cb683eb841b4b5b8a52e627d17b02aaa4ab3eca8521f58500253b0ec161f2c883657c9907a809ccb2034875c111c8acaa574a0b7b206c6387dba2e669fb0e1ff4779428e1f751776380f905f4ae"}}, @algo_aead={0xbb, 0x12, {{'gcm-aes-ce\x00'}, 0x378, 0x180, "72cdf82c9e748298c6317a56bac7e3f1ba615151b7f91b3afd162446149492563e418e4ff1ff425dcd2d6cdb7da34da402f4e97d079551daed6df87033f1309f67739ec5e43424bfef8f7bf61353cba26c31c962a69f0d6f7a74e5ff798f0e7c7787659366eb3e5b9da14c5a93d2b0"}}, @etimer_thresh={0x8, 0xc, 0xac3}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4040010}, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xe4, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0xd0, 0x6, "d733622f57804911506d62b401a30c68a9b1d1f5c825102eb42df7d55ab4f6556d6db8c565ffa0a2e43a223330015330e48d015ac3237a08cde46c59bb83df40d34677f89aeb454f574c26a635088ed1e671b11d6c542a2f18fcec3a5fc500acbaa93bc97bc24bba261db39052b947b723b81905725155ab515d03575f6e0b647a8d64c9b344e9c54521aa4e99097a7f80f97f59525d81b55e9d1959ce01ce24f1f82559dcffccdeb94a2efc21dc37dc1c10582795de2d49f0ea0d16861c0467061a6f70b56f12fd3fe6fe25"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x16c}, 0x1, 0x0, 0x0, 0x40081}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.052784063s ago: executing program 4 (id=6531):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000d0}, 0x40000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0xc, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x12, 0x0, 0x0, 0x400}, 0x28)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
r5 = socket$inet6_sctp(0xa, 0x6, 0x84)
setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10)
sendfile(r0, r4, 0x0, 0x20000000002)

877.616187ms ago: executing program 0 (id=6532):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="0000181200"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095", @ANYRESOCT=r0], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$inet(0x2, 0x5, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000800)={{&(0x7f0000000580)=[{0x5, 0x0, 0x8, {0x7, 0x2}, 0xfb7, 0x9}], 0x1, 0x40, 0x45, 0x4}, {&(0x7f0000000680)=[{0x100000, 0xc}, {0x1ff, 0x4f7a}, {0x1f4, 0x8}, {0x5, 0x7}, {0x40, 0xffffffff}, {0x7, 0x4}, {0x5, 0x5}, {0xfffffffffffff612, 0x8000}], 0x8, 0x10, 0xa212, 0x8}, {&(0x7f0000000700)=[0x8000000000000000], 0x1, 0x8, 0x0, 0x6}, {&(0x7f0000000740)=[{0x8000000000000000, 0x1, 0x2, 0x7, 0x1}, {0x0, 0x5, 0x7bd, 0xa566, 0x3398}, {0x9, 0x3ff, 0x8, 0x5, 0x3f5}], 0x3, 0x28, 0x5, 0xd96}, {&(0x7f00000007c0), 0x0, 0x8, 0xc, 0x7}})
shutdown(r2, 0x0) (async)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02739daf71a351238f6fbf7b9ba", 0x0, 0xe89f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x34, r6, 0x16d35d4799791a7b, 0x70bd0b, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x18, 0x7ffffffc, @udp='udp:syz0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4044054) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2f, 0x3d}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000000301010b00"], 0x24}}, 0x0) (async)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7fff}}, 0x1, 0x4, 0x0, 0x6, 0x28, 0x6, 0x81}, &(0x7f0000000200)=0x9c) (async, rerun: 32)
splice(r7, 0x0, r4, 0x0, 0x10000008eba, 0x4) (async, rerun: 32)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r11=>0x0})
read(r10, &(0x7f0000000080)=""/38, 0x26)
bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000540)={&(0x7f0000000500)=[{0x2, 0x0, 0x6000000000, 0x7, 0x3, 0x4, 0x9, 0x3}], 0x1, 0x38, 0x1, 0x5}) (async, rerun: 64)
setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (rerun: 64)
sendmmsg$sock(r10, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0)
ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x4000}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @l2tp={0x2, 0x0, @broadcast, 0x3}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='dvmrp0\x00', 0x5, 0x5, 0xc46})

875.438483ms ago: executing program 3 (id=6533):
r0 = socket$inet(0xa, 0x801, 0x84)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x11, @local, 0x4e20, 0x0, 'rr\x00', 0x11, 0x2, 0x35}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x8, 0x8000006, 0x2}}, 0x44)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
getsockopt$bt_hci(r3, 0x11a, 0x3, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000000000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa330040"], 0x0)
sendto$inet(r0, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
shutdown(r1, 0x0)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

662.851411ms ago: executing program 0 (id=6534):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4040)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
unshare(0x26000400)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0xffffffffffffff4d, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20040840}, 0x804)

261.181306ms ago: executing program 3 (id=6535):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1, 0x4e21, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0x20, 0x5c}, {0x8, 0x5, 0x1, 0x1, 0x2, 0x6, 0x2, 0x7fffffffffffffff}, {0x70, 0x6, 0xf432, 0x9}, 0x7, 0x6e6bb6, 0x1, 0x1, 0x3}, {{@in6=@private1, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3500, 0x2, 0x2, 0x76, 0x0, 0x4, 0x9}}, 0xe8)
sendmmsg$inet6(r0, &(0x7f00000050c0)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x5, @remote}, 0x1c, 0x0}}], 0x1, 0x4000000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0xc76d5000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000580)="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", 0x168}, {&(0x7f0000000440)="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", 0xfc}], 0x2}, 0x80c1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20300, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r4)
sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00ad9600ac0000", @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf25030000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x10000)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x3, 0x2, 0x1}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0xffffffff, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xa1, 0x58b8ce59, 0x0, 0x0, r8, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0xf}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES64=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4)
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffa0acff0000000300000000000000580065000004ff0378ac1414000000a0000000000b000000020d000800050077dd080088be00000002130923cc01000000000000d6080022eb000000022f030905020000000000080000069a0f0800655800000001"], 0x0)

162.79085ms ago: executing program 2 (id=6536):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0xfff5, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)

0s ago: executing program 2 (id=6537):
socket$inet(0x2b, 0x801, 0x0)
socket(0x9, 0x3, 0x402) (async)
r0 = socket(0x9, 0x3, 0x402)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=ANY=[@ANYBLOB="1800000052000102"], 0x18}}, 0x20000000)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000000, 0x1, 0x0, 0x0, 0xfffc, 0x8}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000000, 0x1, 0x0, 0x0, 0xfffc, 0x8}, 0x20)
getsockopt$sock_int(r2, 0x1, 0x2c, 0x0, &(0x7f0000000500)) (async)
getsockopt$sock_int(r2, 0x1, 0x2c, 0x0, &(0x7f0000000500))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0xfffffffe)
syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r7)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d042dbd7000fbffdd1f00000000", @ANYRES32=r8, @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="cfc267e4a36c1a8f00080000e300020008000a00", @ANYRES32=r4, @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="cfc267e4a36c1a8f00080000e300020008000a00", @ANYRES32=r4, @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0)
getpid()
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r9, 0x400448e6, &(0x7f0000000080)="05910b209454cb17016d974887c71ca47d0495e0dcbee690e3f7a917646cf23bcbe07e5f15a7015ae9779075cf204519011849")
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x88, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x5, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0)
openat$cgroup_procs(r5, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r11, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)
socket$alg(0x26, 0x5, 0x0)

kernel console output (not intermixed with test programs):

][T26809] tipc: Resetting bearer <eth:syzkaller0>
[  747.316583][ T1317] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  747.331002][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  747.868727][ T5624] Bluetooth: hci1: command tx timeout
[  748.482198][T26809] tipc: Disabling bearer <eth:syzkaller0>
[  748.853824][T26856] pim6reg: entered allmulticast mode
[  748.885151][T26862] pim6reg: left allmulticast mode
[  748.977625][T26865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5888'.
[  749.009723][T26865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5888'.
[  749.036588][T26865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5888'.
[  749.046278][T26869] block nbd0: Unsupported socket: should be TCP or UNIX.
[  749.053652][T26865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5888'.
[  749.080419][T26865] netlink: 'syz.4.5888': attribute type 6 has an invalid length.
[  749.103643][T26869] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5887'.
[  749.130590][T26869] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5887'.
[  749.261407][T26877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5891'.
[  749.417894][T26877] xt_socket: unknown flags 0xc
[  749.700120][T26881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5892'.
[  749.833585][T26693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  749.948659][ T5624] Bluetooth: hci1: command tx timeout
[  750.036242][T26693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.192223][T26899] xt_hashlimit: size too large, truncated to 1048576
[  750.225805][T26693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.509674][   T10] block nbd3: Possible stuck request ffff888026bee000: control (read@0,2048B). Runtime 150 seconds
[  750.529506][ T1600] block nbd4: Possible stuck request ffff88802701e000: control (read@0,2048B). Runtime 150 seconds
[  750.769155][T26693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.790274][T26919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5902'.
[  750.974623][T26928] block nbd0: Unsupported socket: should be TCP or UNIX.
[  751.500881][T26928] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5903'.
[  751.523779][T26928] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5903'.
[  751.783287][T26943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5910'.
[  752.133337][T26693] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  752.161570][T26693] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  752.167480][T26953] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5913'.
[  752.180759][T26693] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  752.204123][T26693] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  752.272277][T26693] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  752.295306][T26693] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  752.328279][T26693] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  752.350895][T26693] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  752.596624][T26693] 8021q: adding VLAN 0 to HW filter on device bond0
[  752.663557][T26980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5918'.
[  752.798020][T26693] 8021q: adding VLAN 0 to HW filter on device team0
[  752.842146][T25551] bridge0: port 1(bridge_slave_0) entered blocking state
[  752.849409][T25551] bridge0: port 1(bridge_slave_0) entered forwarding state
[  752.925418][T25551] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.932671][T25551] bridge0: port 2(bridge_slave_1) entered forwarding state
[  753.442741][T27010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5926'.
[  753.565347][T27013] netlink: 'syz.2.5928': attribute type 1 has an invalid length.
[  754.106995][T27033] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5932'.
[  754.129321][T27033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5932'.
[  754.145587][T27033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5932'.
[  754.412560][T26693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  754.448125][T27053] netlink: 'syz.3.5935': attribute type 3 has an invalid length.
[  754.576231][T27056] xt_hashlimit: size too large, truncated to 1048576
[  754.662057][T26693] veth0_vlan: entered promiscuous mode
[  754.720548][T26693] veth1_vlan: entered promiscuous mode
[  754.814683][T27065] netlink: 'syz.3.5941': attribute type 1 has an invalid length.
[  754.839405][T26693] veth0_macvtap: entered promiscuous mode
[  754.856144][T27067] FAULT_INJECTION: forcing a failure.
[  754.856144][T27067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  754.869662][T26693] veth1_macvtap: entered promiscuous mode
[  754.891407][T27067] CPU: 1 UID: 0 PID: 27067 Comm: syz.0.5942 Not tainted syzkaller #0 PREEMPT(full) 
[  754.891436][T27067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  754.891450][T27067] Call Trace:
[  754.891459][T27067]  <TASK>
[  754.891477][T27067]  dump_stack_lvl+0xe8/0x150
[  754.891517][T27067]  should_fail_ex+0x40c/0x560
[  754.891549][T27067]  _copy_from_iter+0x1d3/0x1660
[  754.891577][T27067]  ? kmem_cache_alloc_node_noprof+0x1b1/0x610
[  754.891607][T27067]  ? rcu_is_watching+0x15/0xb0
[  754.891642][T27067]  ? trace_kmem_cache_alloc+0x29/0xe0
[  754.891671][T27067]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  754.891698][T27067]  ? __pfx__copy_from_iter+0x10/0x10
[  754.891726][T27067]  ? __alloc_skb+0x276/0x7a0
[  754.891754][T27067]  ? __alloc_skb+0x276/0x7a0
[  754.891789][T27067]  ? netlink_sendmsg+0x650/0xb40
[  754.891823][T27067]  ? skb_put+0x112/0x210
[  754.891859][T27067]  netlink_sendmsg+0x6c0/0xb40
[  754.891904][T27067]  ? __pfx_netlink_sendmsg+0x10/0x10
[  754.891943][T27067]  ? aa_sock_msg_perm+0xf1/0x1b0
[  754.891971][T27067]  ? __pfx_netlink_sendmsg+0x10/0x10
[  754.892001][T27067]  sock_sendmsg_nosec+0x13a/0x180
[  754.892030][T27067]  ____sys_sendmsg+0x54e/0x850
[  754.892070][T27067]  ? __pfx_____sys_sendmsg+0x10/0x10
[  754.892113][T27067]  ? import_iovec+0x73/0xa0
[  754.892148][T27067]  ___sys_sendmsg+0x2a5/0x360
[  754.892180][T27067]  ? __lock_acquire+0x683/0x2cf0
[  754.892216][T27067]  ? __pfx____sys_sendmsg+0x10/0x10
[  754.892290][T27067]  ? __fget_files+0x2a/0x420
[  754.892318][T27067]  ? __fget_files+0x3a2/0x420
[  754.892358][T27067]  __x64_sys_sendmsg+0x1b1/0x290
[  754.892395][T27067]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  754.892473][T27067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.892498][T27067]  do_syscall_64+0x174/0x580
[  754.892527][T27067]  ? trace_irq_disable+0x3b/0x140
[  754.892555][T27067]  ? clear_bhb_loop+0x40/0x90
[  754.892583][T27067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.892606][T27067] RIP: 0033:0x7f98e859de59
[  754.892629][T27067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  754.892648][T27067] RSP: 002b:00007f98e94d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  754.892672][T27067] RAX: ffffffffffffffda RBX: 00007f98e8825fa0 RCX: 00007f98e859de59
[  754.892689][T27067] RDX: 0000000004040010 RSI: 00002000000012c0 RDI: 0000000000000004
[  754.892705][T27067] RBP: 00007f98e94d1090 R08: 0000000000000000 R09: 0000000000000000
[  754.892719][T27067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  754.892732][T27067] R13: 00007f98e8826038 R14: 00007f98e8825fa0 R15: 00007ffca628c268
[  754.892769][T27067]  </TASK>
[  755.007480][T26693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  755.238619][T27065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  755.282522][T26693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  755.301398][   T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  755.315719][T27054] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  755.327766][T27054] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  755.374116][   T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  755.385711][   T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  755.398298][   T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  755.412721][T27054] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  755.418886][T27054] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  755.556731][T27088] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  755.605516][T27054] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  755.615100][T27054] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  755.677980][T27054] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  755.685563][T27054] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  755.934284][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  755.952296][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  756.040978][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  756.063226][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  756.083332][T27080] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  756.308692][T27102] __nla_validate_parse: 1 callbacks suppressed
[  756.308714][T27102] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5949'.
[  756.408527][T27106] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5950'.
[  756.501195][T27109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5949'.
[  756.987548][T27123] bridge5: entered allmulticast mode
[  757.061465][T27127] veth0: entered promiscuous mode
[  757.156357][T27127] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  757.225091][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  757.243988][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  757.255886][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  757.268687][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  757.280924][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  757.424445][T27125] veth0: left promiscuous mode
[  757.783279][T27147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5956'.
[  757.816156][T27145] syzkaller0: entered promiscuous mode
[  757.838577][T27145] syzkaller0: entered allmulticast mode
[  757.936625][T16600] syz_tun (unregistering): left allmulticast mode
[  757.950903][T16600] syz_tun (unregistering): left promiscuous mode
[  757.966959][T16600] bridge0: port 3(syz_tun) entered disabled state
[  758.841734][T23795] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  758.887347][T27128] ±ÿ speed is unknown, defaulting to 1000
[  758.899706][T27178] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5968'.
[  758.950997][T27128] lo speed is unknown, defaulting to 1000
[  759.088018][T27182] netlink: 'syz.4.5969': attribute type 11 has an invalid length.
[  759.116175][T27182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5969'.
[  759.312669][ T5638] Bluetooth: hci5: command tx timeout
[  759.814064][T27209] netlink: 'syz.2.5977': attribute type 4 has an invalid length.
[  759.858535][T27209] netlink: 'syz.2.5977': attribute type 5 has an invalid length.
[  759.874001][T27209] netlink: 'syz.2.5977': attribute type 27 has an invalid length.
[  759.907045][T27209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5977'.
[  759.957355][T27213] sctp: [Deprecated]: syz.1.5979 (pid 27213) Use of int in max_burst socket option.
[  759.957355][T27213] Use struct sctp_assoc_value instead
[  760.090724][T27128] bridge0: port 1(bridge_slave_0) entered blocking state
[  760.098082][T27128] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.105433][T27128] bridge_slave_0: entered allmulticast mode
[  760.114840][T27128] bridge_slave_0: entered promiscuous mode
[  760.130030][T27128] bridge0: port 2(bridge_slave_1) entered blocking state
[  760.137404][T27128] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.144957][T27128] bridge_slave_1: entered allmulticast mode
[  760.153184][T27128] bridge_slave_1: entered promiscuous mode
[  760.209732][T27225] netlink: 'syz.1.5983': attribute type 11 has an invalid length.
[  760.227988][T27225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5983'.
[  760.264639][T27128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  760.299705][T27128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  760.361974][T27128] team0: Port device team_slave_0 added
[  760.373306][T27128] team0: Port device team_slave_1 added
[  760.422469][T27229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  760.424677][T27128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  760.452704][T27128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  760.485299][T27128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  760.527130][T27128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  760.538136][T27128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  760.566270][T27128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  760.706082][T27128] hsr_slave_0: entered promiscuous mode
[  760.715219][T27128] hsr_slave_1: entered promiscuous mode
[  760.734971][T27128] debugfs: 'hsr0' already exists in 'hsr'
[  760.741631][T27128] Cannot create hsr debugfs directory
[  760.971118][T27244] netlink: 'syz.0.5988': attribute type 32 has an invalid length.
[  760.990472][T27244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5988'.
[  761.074838][T27244] bond2: option coupled_control: invalid value (255)
[  761.098961][T27244] bond2 (unregistering): Released all slaves
[  761.157686][T27246] syz_tun: entered promiscuous mode
[  761.167815][T27246] syz_tun: entered allmulticast mode
[  761.185362][T27246] team0: Port device syz_tun added
[  761.269748][T27244] netlink: 'syz.0.5988': attribute type 23 has an invalid length.
[  761.298999][T27258] openvswitch: netlink: VXLAN extension 317 out of range max 1
[  761.389879][ T5638] Bluetooth: hci5: command tx timeout
[  761.934481][T27259] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5990'.
[  761.979463][T27259] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5990'.
[  762.103431][T27253] block nbd0: Unsupported socket: should be TCP or UNIX.
[  762.143693][T27266] netlink: 'syz.2.5993': attribute type 11 has an invalid length.
[  762.170044][T27266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5993'.
[  762.319896][T27273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5992'.
[  762.338203][T27128] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.602074][T27128] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.971795][T27296] FAULT_INJECTION: forcing a failure.
[  762.971795][T27296] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  763.018115][T27296] CPU: 0 UID: 0 PID: 27296 Comm: syz.4.6002 Not tainted syzkaller #0 PREEMPT(full) 
[  763.018146][T27296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  763.018160][T27296] Call Trace:
[  763.018169][T27296]  <TASK>
[  763.018179][T27296]  dump_stack_lvl+0xe8/0x150
[  763.018218][T27296]  should_fail_ex+0x40c/0x560
[  763.018246][T27296]  _copy_from_user+0x2d/0xb0
[  763.018279][T27296]  do_sock_getsockopt+0x200/0x7e0
[  763.018317][T27296]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  763.018367][T27296]  ? __fget_files+0x3a2/0x420
[  763.018400][T27296]  ? __fget_files+0x2a/0x420
[  763.018447][T27296]  __x64_sys_getsockopt+0x1a4/0x240
[  763.018487][T27296]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.018512][T27296]  do_syscall_64+0x174/0x580
[  763.018542][T27296]  ? trace_irq_disable+0x3b/0x140
[  763.018570][T27296]  ? clear_bhb_loop+0x40/0x90
[  763.018597][T27296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.018620][T27296] RIP: 0033:0x7fc5ac99de59
[  763.018641][T27296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  763.018661][T27296] RSP: 002b:00007fc5ad815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  763.018684][T27296] RAX: ffffffffffffffda RBX: 00007fc5acc25fa0 RCX: 00007fc5ac99de59
[  763.018701][T27296] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003
[  763.018715][T27296] RBP: 00007fc5ad815090 R08: 0000200000000400 R09: 0000000000000000
[  763.018729][T27296] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  763.018743][T27296] R13: 00007fc5acc26038 R14: 00007fc5acc25fa0 R15: 00007fffc4948ae8
[  763.018780][T27296]  </TASK>
[  763.431653][T27299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6003'.
[  763.478686][ T5638] Bluetooth: hci5: command tx timeout
[  765.558551][ T5638] Bluetooth: hci5: command tx timeout
[  766.582443][T27128] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  766.603989][T27292] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  766.616034][T27292] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  766.630523][T27292] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  766.784523][T27128] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  766.798218][T27316] netlink: 'syz.2.6008': attribute type 11 has an invalid length.
[  767.109495][T27330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6013'.
[  767.549882][T27353] netlink: 'syz.0.6020': attribute type 9 has an invalid length.
[  767.676079][T27350] pimreg: entered allmulticast mode
[  767.700927][T27350] pimreg: left allmulticast mode
[  767.715868][T27356] netlink: 212 bytes leftover after parsing attributes in process `syz.2.6019'.
[  767.743652][T27356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6019'.
[  767.755380][T27356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6019'.
[  767.824794][T27128] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  767.846373][T27128] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  767.879422][T27128] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  767.943549][T27128] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  767.969946][T27128] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  768.006647][T27128] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  768.033814][T27128] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  768.059381][T27128] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  768.159683][T27371] syzkaller0: entered promiscuous mode
[  768.175726][T27371] syzkaller0: entered allmulticast mode
[  768.385914][T27377] FAULT_INJECTION: forcing a failure.
[  768.385914][T27377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  768.455630][T27377] CPU: 1 UID: 0 PID: 27377 Comm: syz.1.6023 Not tainted syzkaller #0 PREEMPT(full) 
[  768.455662][T27377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  768.455675][T27377] Call Trace:
[  768.455685][T27377]  <TASK>
[  768.455694][T27377]  dump_stack_lvl+0xe8/0x150
[  768.455734][T27377]  should_fail_ex+0x40c/0x560
[  768.455766][T27377]  _copy_from_user+0x2d/0xb0
[  768.455798][T27377]  ___sys_sendmsg+0x1c6/0x360
[  768.455831][T27377]  ? __lock_acquire+0x683/0x2cf0
[  768.455866][T27377]  ? __pfx____sys_sendmsg+0x10/0x10
[  768.455937][T27377]  ? __fget_files+0x2a/0x420
[  768.455966][T27377]  ? __fget_files+0x3a2/0x420
[  768.456008][T27377]  __x64_sys_sendmsg+0x1b1/0x290
[  768.456055][T27377]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  768.456108][T27377]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.456133][T27377]  do_syscall_64+0x174/0x580
[  768.456163][T27377]  ? trace_irq_disable+0x3b/0x140
[  768.456192][T27377]  ? clear_bhb_loop+0x40/0x90
[  768.456219][T27377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.456242][T27377] RIP: 0033:0x7f851079de59
[  768.456264][T27377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  768.456283][T27377] RSP: 002b:00007f85115aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  768.456306][T27377] RAX: ffffffffffffffda RBX: 00007f8510a25fa0 RCX: 00007f851079de59
[  768.456323][T27377] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  768.456337][T27377] RBP: 00007f85115aa090 R08: 0000000000000000 R09: 0000000000000000
[  768.456351][T27377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  768.456365][T27377] R13: 00007f8510a26038 R14: 00007f8510a25fa0 R15: 00007ffe522a62d8
[  768.456399][T27377]  </TASK>
[  768.780042][T27128] 8021q: adding VLAN 0 to HW filter on device bond0
[  768.805396][T27128] 8021q: adding VLAN 0 to HW filter on device team0
[  768.820425][T23795] bridge0: port 1(bridge_slave_0) entered blocking state
[  768.827679][T23795] bridge0: port 1(bridge_slave_0) entered forwarding state
[  768.888210][T27389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6029'.
[  768.926741][T23795] bridge0: port 2(bridge_slave_1) entered blocking state
[  768.934140][T23795] bridge0: port 2(bridge_slave_1) entered forwarding state
[  769.000493][T27393] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6027'.
[  769.064289][T27393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  769.115633][T27393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  769.145217][T27393] bond0 (unregistering): Released all slaves
[  769.194551][T27399] FAULT_INJECTION: forcing a failure.
[  769.194551][T27399] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  769.213622][T27399] CPU: 0 UID: 0 PID: 27399 Comm: syz.2.6030 Not tainted syzkaller #0 PREEMPT(full) 
[  769.213653][T27399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  769.213665][T27399] Call Trace:
[  769.213674][T27399]  <TASK>
[  769.213685][T27399]  dump_stack_lvl+0xe8/0x150
[  769.213724][T27399]  should_fail_ex+0x40c/0x560
[  769.213755][T27399]  _copy_from_user+0x2d/0xb0
[  769.213789][T27399]  copy_from_sockptr_offset+0x66/0xa0
[  769.213906][T27399]  do_tcp_getsockopt+0x1d62/0x2980
[  769.213943][T27399]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[  769.213969][T27399]  ? sock_common_getsockopt+0x20/0xb0
[  769.213998][T27399]  ? aa_file_perm+0x18b/0x15f0
[  769.214037][T27399]  ? aa_label_sk_perm+0x532/0x6e0
[  769.214082][T27399]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  769.214119][T27399]  ? _parse_integer_limit+0x192/0x1e0
[  769.214158][T27399]  ? __lock_acquire+0x683/0x2cf0
[  769.214192][T27399]  ? kstrtouint+0x6e/0xe0
[  769.214256][T27399]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  769.214284][T27399]  tcp_getsockopt+0x83/0x130
[  769.214309][T27399]  ? sock_common_getsockopt+0x20/0xb0
[  769.214335][T27399]  ? sock_common_getsockopt+0x20/0xb0
[  769.214362][T27399]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  769.214389][T27399]  do_sock_getsockopt+0x51d/0x7e0
[  769.214428][T27399]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  769.214479][T27399]  ? __fget_files+0x3a2/0x420
[  769.214508][T27399]  ? __fget_files+0x2a/0x420
[  769.214544][T27399]  __x64_sys_getsockopt+0x1a4/0x240
[  769.214583][T27399]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.214609][T27399]  do_syscall_64+0x174/0x580
[  769.214639][T27399]  ? trace_irq_disable+0x3b/0x140
[  769.214667][T27399]  ? clear_bhb_loop+0x40/0x90
[  769.214695][T27399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.214718][T27399] RIP: 0033:0x7fef2219de59
[  769.214741][T27399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  769.214760][T27399] RSP: 002b:00007fef22fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  769.214783][T27399] RAX: ffffffffffffffda RBX: 00007fef22426180 RCX: 00007fef2219de59
[  769.214800][T27399] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003
[  769.214813][T27399] RBP: 00007fef22fb6090 R08: 0000200000000400 R09: 0000000000000000
[  769.214828][T27399] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  769.214842][T27399] R13: 00007fef22426218 R14: 00007fef22426180 R15: 00007ffdb27dd638
[  769.214879][T27399]  </TASK>
[  769.367355][T27128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  769.493447][T27128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  769.567715][T27406] netlink: 'syz.0.6033': attribute type 12 has an invalid length.
[  770.138051][T27424] ±ÿ speed is unknown, defaulting to 1000
[  770.157780][T27424] lo speed is unknown, defaulting to 1000
[  770.305120][T27434] xt_hashlimit: size too large, truncated to 1048576
[  770.563735][T27441] IPVS: set_ctl: invalid protocol: 115 10.1.1.1:20066
[  770.664593][T27444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6041'.
[  770.851112][T27128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  771.004157][T27128] veth0_vlan: entered promiscuous mode
[  771.037029][T27128] veth1_vlan: entered promiscuous mode
[  771.101020][T27128] veth0_macvtap: entered promiscuous mode
[  771.121998][T27128] veth1_macvtap: entered promiscuous mode
[  771.170976][T27128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  771.203156][T27128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  771.246016][T23791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  771.278032][T23791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  771.311024][T23791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  771.330418][T23791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  771.629069][   T10] block nbd9: Possible stuck request ffff8880272a0000: control (read@0,1024B). Runtime 30 seconds
[  771.641234][   T10] block nbd9: Possible stuck request ffff8880272a01c0: control (read@1024,1024B). Runtime 30 seconds
[  771.652748][   T10] block nbd9: Possible stuck request ffff8880272a0380: control (read@2048,1024B). Runtime 30 seconds
[  771.664044][   T10] block nbd9: Possible stuck request ffff8880272a0540: control (read@3072,1024B). Runtime 30 seconds
[  771.680540][T27459] No such timeout policy "syz1"
[  771.690533][T23791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  771.713442][T23791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  771.842978][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  771.866817][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  772.050587][T27478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6054'.
[  772.087198][T27478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.232511][T27488] ip6t_srh: unknown srh invflags 4000
[  772.441607][T27492] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6056'.
[  772.464874][T27494] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  772.475022][T27492] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6056'.
[  772.486345][T27494] IPVS: set_ctl: invalid protocol: 48 2.3.1.2:0
[  772.502233][T27492] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6056'.
[  772.519667][T27496] block nbd1: not configured, cannot reconfigure
[  772.700191][T27500] syzkaller0: entered promiscuous mode
[  772.730223][T27500] syzkaller0: entered allmulticast mode
[  772.752835][T27499] TC_ACT_REPEAT abuse ?
[  772.867405][T27509] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6063'.
[  773.087700][T27516] xt_hashlimit: size too large, truncated to 1048576
[  773.791939][T27525] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  774.085686][T27538] block nbd0: Unsupported socket: should be TCP or UNIX.
[  774.120899][T27538] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6072'.
[  774.167106][T27538] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6072'.
[  774.630277][T27558] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  774.657845][T27558] ip6tnl3: entered allmulticast mode
[  774.667787][T23791] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  774.682744][T27560] netlink: 'syz.1.6079': attribute type 4 has an invalid length.
[  774.690628][T15470] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  774.700093][T23791] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  775.010434][T27568] FAULT_INJECTION: forcing a failure.
[  775.010434][T27568] name failslab, interval 1, probability 0, space 0, times 0
[  775.023835][T27568] CPU: 0 UID: 0 PID: 27568 Comm: syz.4.6081 Not tainted syzkaller #0 PREEMPT(full) 
[  775.023867][T27568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  775.023881][T27568] Call Trace:
[  775.023890][T27568]  <TASK>
[  775.023900][T27568]  dump_stack_lvl+0xe8/0x150
[  775.023940][T27568]  should_fail_ex+0x40c/0x560
[  775.023969][T27568]  ? nf_hook_entries_grow+0x287/0x740
[  775.023995][T27568]  should_failslab+0xa8/0x100
[  775.024030][T27568]  __kvmalloc_node_noprof+0x176/0x860
[  775.024066][T27568]  ? __nf_register_net_hook+0x232/0x930
[  775.024089][T27568]  ? nf_hook_entries_grow+0x287/0x740
[  775.024114][T27568]  ? __pfx___mutex_lock+0x10/0x10
[  775.024151][T27568]  nf_hook_entries_grow+0x287/0x740
[  775.024192][T27568]  __nf_register_net_hook+0x2c9/0x930
[  775.024230][T27568]  nf_register_net_hook+0xb2/0x190
[  775.024258][T27568]  nf_register_net_hooks+0x44/0x1b0
[  775.024286][T27568]  nf_ct_netns_do_get+0x212/0x5c0
[  775.024317][T27568]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[  775.024345][T27568]  ? synproxy_pernet+0x45/0x270
[  775.024387][T27568]  ? synproxy_pernet+0x45/0x270
[  775.024427][T27568]  ? nf_ct_netns_get+0xe9/0x320
[  775.024457][T27568]  nft_synproxy_do_init+0x1d1/0x4c0
[  775.024491][T27568]  nf_tables_newrule+0x179e/0x28a0
[  775.024540][T27568]  ? __pfx_nf_tables_newrule+0x10/0x10
[  775.024566][T27568]  ? nfnl_pernet+0x23/0x240
[  775.024603][T27568]  ? nfnl_pernet+0x23/0x240
[  775.024643][T27568]  ? __nla_parse+0x40/0x60
[  775.024677][T27568]  nfnetlink_rcv+0x1288/0x28c0
[  775.024749][T27568]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  775.024804][T27568]  ? ref_tracker_free+0x689/0x830
[  775.024863][T27568]  ? skb_clone+0x246/0x3a0
[  775.024905][T27568]  ? __netlink_deliver_tap+0x811/0x860
[  775.024951][T27568]  ? netlink_deliver_tap+0x2e/0x1b0
[  775.024984][T27568]  ? netlink_deliver_tap+0x2e/0x1b0
[  775.025025][T27568]  netlink_unicast+0x7bb/0x940
[  775.025068][T27568]  netlink_sendmsg+0x813/0xb40
[  775.025114][T27568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.025154][T27568]  ? aa_sock_msg_perm+0xf1/0x1b0
[  775.025184][T27568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.025217][T27568]  sock_sendmsg_nosec+0x13a/0x180
[  775.025247][T27568]  ____sys_sendmsg+0x54e/0x850
[  775.025286][T27568]  ? __pfx_____sys_sendmsg+0x10/0x10
[  775.025331][T27568]  ? import_iovec+0x73/0xa0
[  775.025368][T27568]  ___sys_sendmsg+0x2a5/0x360
[  775.025398][T27568]  ? __lock_acquire+0x683/0x2cf0
[  775.025434][T27568]  ? __pfx____sys_sendmsg+0x10/0x10
[  775.025512][T27568]  ? __fget_files+0x2a/0x420
[  775.025541][T27568]  ? __fget_files+0x3a2/0x420
[  775.025591][T27568]  __x64_sys_sendmsg+0x1b1/0x290
[  775.025628][T27568]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  775.025683][T27568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.025709][T27568]  do_syscall_64+0x174/0x580
[  775.025739][T27568]  ? trace_irq_disable+0x3b/0x140
[  775.025767][T27568]  ? clear_bhb_loop+0x40/0x90
[  775.025796][T27568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.025819][T27568] RIP: 0033:0x7fc5ac99de59
[  775.025841][T27568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  775.025860][T27568] RSP: 002b:00007fc5ad815028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  775.025885][T27568] RAX: ffffffffffffffda RBX: 00007fc5acc25fa0 RCX: 00007fc5ac99de59
[  775.025902][T27568] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003
[  775.025917][T27568] RBP: 00007fc5ad815090 R08: 0000000000000000 R09: 0000000000000000
[  775.025932][T27568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  775.025945][T27568] R13: 00007fc5acc26038 R14: 00007fc5acc25fa0 R15: 00007fffc4948ae8
[  775.025984][T27568]  </TASK>
[  775.481721][T11338] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  775.492159][T11338] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  775.792437][T27588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6088'.
[  775.837801][T27581] ±ÿ speed is unknown, defaulting to 1000
[  775.876312][T27581] lo speed is unknown, defaulting to 1000
[  776.132543][T27595] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6091'.
[  776.165746][T27595] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6091'.
[  776.189527][T27596] macvtap1: entered allmulticast mode
[  776.205837][T27596] batadv0: entered allmulticast mode
[  776.218148][T27596] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  776.257759][T27596] batadv0: left allmulticast mode
[  776.485567][T27601] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  776.910730][T27620] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  778.032172][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  778.428837][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  779.818872][ T4988] udevd[4988]: worker [9057] /devices/virtual/block/nbd3 timeout; kill it
[  779.828708][ T4988] udevd[4988]: seq 35640 '/devices/virtual/block/nbd3' killed
[  780.052488][T27624] xt_hashlimit: size too large, truncated to 1048576
[  780.075954][T27629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6098'.
[  780.086701][T27629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6098'.
[  780.104881][T27632] x_tables: duplicate underflow at hook 3
[  780.591235][ T1600] block nbd4: Possible stuck request ffff88802701e000: control (read@0,2048B). Runtime 180 seconds
[  780.591261][   T10] block nbd3: Possible stuck request ffff888026bee000: control (read@0,2048B). Runtime 180 seconds
[  780.755869][T27659] syzkaller1: entered promiscuous mode
[  780.762008][T27659] syzkaller1: entered allmulticast mode
[  780.800477][T27659] bond0: option fail_over_mac: invalid value (127)
[  780.809012][T27659] bond0 (unregistering): Released all slaves
[  780.842790][T27658] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6109'.
[  780.853839][T27658] FAULT_INJECTION: forcing a failure.
[  780.853839][T27658] name failslab, interval 1, probability 0, space 0, times 0
[  780.886799][T27658] CPU: 0 UID: 0 PID: 27658 Comm: syz.4.6109 Not tainted syzkaller #0 PREEMPT(full) 
[  780.886828][T27658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  780.886841][T27658] Call Trace:
[  780.886850][T27658]  <TASK>
[  780.886859][T27658]  dump_stack_lvl+0xe8/0x150
[  780.886895][T27658]  should_fail_ex+0x40c/0x560
[  780.886924][T27658]  should_failslab+0xa8/0x100
[  780.886955][T27658]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  780.886985][T27658]  ? local_lock_release+0x9c/0x160
[  780.887019][T27658]  ? __alloc_skb+0x1d7/0x7a0
[  780.887042][T27658]  ? __alloc_skb+0x1d7/0x7a0
[  780.887075][T27658]  __alloc_skb+0x1d7/0x7a0
[  780.887108][T27658]  br_info_notify+0x105/0x280
[  780.887218][T27658]  br_device_event+0x8d5/0x9c0
[  780.887295][T27658]  ? __pfx_rt6_sync_up+0x10/0x10
[  780.887345][T27658]  ? __pfx_br_device_event+0x10/0x10
[  780.887379][T27658]  ? lockdep_rtnl_is_held+0x26/0x40
[  780.887405][T27658]  notifier_call_chain+0x1a5/0x3d0
[  780.887444][T27658]  netif_state_change+0x27d/0x3a0
[  780.887500][T27658]  ? __pfx_netif_state_change+0x10/0x10
[  780.887522][T27658]  ? console_unlock+0x150/0x1c0
[  780.887544][T27658]  ? validate_linkmsg+0x765/0x950
[  780.887573][T27658]  do_setlink+0x3c57/0x4670
[  780.887606][T27658]  ? __wake_up_klogd+0xe6/0x120
[  780.887634][T27658]  ? __pfx_vprintk_emit+0x10/0x10
[  780.887659][T27658]  ? __pfx_do_setlink+0x10/0x10
[  780.887689][T27658]  ? _printk+0xdd/0x130
[  780.887772][T27658]  ? lockdep_hardirqs_on+0x7a/0x110
[  780.887802][T27658]  ? rcu_is_watching+0x15/0xb0
[  780.887838][T27658]  ? __asan_memset+0x22/0x50
[  780.887860][T27658]  ? br_switchdev_set_port_flag+0x1e3/0x3b0
[  780.887954][T27658]  ? __pfx_br_switchdev_set_port_flag+0x10/0x10
[  780.887997][T27658]  ? __mutex_lock+0x1092/0x1550
[  780.888028][T27658]  ? br_port_flags_change+0x19f/0x1f0
[  780.888054][T27658]  ? __mutex_lock+0x5d4/0x1550
[  780.888084][T27658]  ? br_setport+0x1388/0x17d0
[  780.888103][T27658]  ? rtnl_newlink+0x8a3/0x1bd0
[  780.888136][T27658]  ? __pfx_br_setport+0x10/0x10
[  780.888167][T27658]  ? lockdep_rtnl_is_held+0x26/0x40
[  780.888186][T27658]  ? br_port_slave_changelink+0xa3/0x130
[  780.888213][T27658]  rtnl_newlink+0x15c2/0x1bd0
[  780.888241][T27658]  ? rtnl_newlink+0x851/0x1bd0
[  780.888275][T27658]  ? __pfx_rtnl_newlink+0x10/0x10
[  780.888300][T27658]  ? do_syscall_64+0x174/0x580
[  780.888326][T27658]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.888383][T27658]  ? kasan_quarantine_put+0xbb/0x1f0
[  780.888408][T27658]  ? lockdep_hardirqs_on+0x7a/0x110
[  780.888439][T27658]  ? nlmon_xmit+0xb0/0x100
[  780.888502][T27658]  ? kmem_cache_free+0x182/0x650
[  780.888539][T27658]  ? __lock_acquire+0x683/0x2cf0
[  780.888571][T27658]  ? __dev_queue_xmit+0x29b/0x37f0
[  780.888594][T27658]  ? __local_bh_enable_ip+0xd0/0x130
[  780.888617][T27658]  ? lockdep_hardirqs_on+0x7a/0x110
[  780.888643][T27658]  ? __dev_queue_xmit+0x29b/0x37f0
[  780.888660][T27658]  ? __local_bh_enable_ip+0xd0/0x130
[  780.888681][T27658]  ? __dev_queue_xmit+0x29b/0x37f0
[  780.888716][T27658]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  780.888759][T27658]  ? __pfx_rtnl_newlink+0x10/0x10
[  780.888784][T27658]  rtnetlink_rcv_msg+0x802/0xc00
[  780.888815][T27658]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  780.888840][T27658]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  780.888865][T27658]  ? ref_tracker_free+0x689/0x830
[  780.888892][T27658]  ? __pfx_ref_tracker_free+0x10/0x10
[  780.888933][T27658]  netlink_rcv_skb+0x226/0x4a0
[  780.888965][T27658]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  780.888994][T27658]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  780.889037][T27658]  ? netlink_deliver_tap+0x2e/0x1b0
[  780.889067][T27658]  ? netlink_deliver_tap+0x2e/0x1b0
[  780.889102][T27658]  netlink_unicast+0x7bb/0x940
[  780.889141][T27658]  netlink_sendmsg+0x813/0xb40
[  780.889182][T27658]  ? __pfx_netlink_sendmsg+0x10/0x10
[  780.889218][T27658]  ? aa_sock_msg_perm+0xf1/0x1b0
[  780.889244][T27658]  ? __pfx_netlink_sendmsg+0x10/0x10
[  780.889274][T27658]  sock_sendmsg_nosec+0x13a/0x180
[  780.889300][T27658]  ____sys_sendmsg+0x54e/0x850
[  780.889336][T27658]  ? __pfx_____sys_sendmsg+0x10/0x10
[  780.889375][T27658]  ? import_iovec+0x73/0xa0
[  780.889408][T27658]  ___sys_sendmsg+0x2a5/0x360
[  780.889435][T27658]  ? __lock_acquire+0x683/0x2cf0
[  780.889467][T27658]  ? __pfx____sys_sendmsg+0x10/0x10
[  780.889534][T27658]  ? __fget_files+0x2a/0x420
[  780.889559][T27658]  ? __fget_files+0x3a2/0x420
[  780.889595][T27658]  __x64_sys_sendmsg+0x1b1/0x290
[  780.889627][T27658]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  780.889676][T27658]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.889708][T27658]  do_syscall_64+0x174/0x580
[  780.889743][T27658]  ? trace_irq_disable+0x3b/0x140
[  780.889769][T27658]  ? clear_bhb_loop+0x40/0x90
[  780.889794][T27658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.889820][T27658] RIP: 0033:0x7fc5ac99de59
[  780.889841][T27658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  780.889858][T27658] RSP: 002b:00007fc5ad815028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  780.889880][T27658] RAX: ffffffffffffffda RBX: 00007fc5acc25fa0 RCX: 00007fc5ac99de59
[  780.889895][T27658] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  780.889908][T27658] RBP: 00007fc5ad815090 R08: 0000000000000000 R09: 0000000000000000
[  780.889920][T27658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  780.889932][T27658] R13: 00007fc5acc26038 R14: 00007fc5acc25fa0 R15: 00007fffc4948ae8
[  780.889965][T27658]  </TASK>
[  781.884747][T27674] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  782.002833][T27686] xt_hashlimit: size too large, truncated to 1048576
[  782.010487][T27685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6121'.
[  782.037764][T27685] vxcan1: tx drop: invalid da for name 0x0000000000000015
[  782.244460][T27696] netlink: 'syz.3.6124': attribute type 1 has an invalid length.
[  782.284330][T27693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6123'.
[  782.303662][T27693] vlan3: entered promiscuous mode
[  782.324604][T27703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6124'.
[  782.334003][T27703] tipc: Started in network mode
[  782.339444][T27703] tipc: Node identity 4246, cluster identity 4711
[  782.346169][T27703] tipc: Node number set to 16966
[  782.383102][T27696] team0: entered promiscuous mode
[  782.393517][T27696] team_slave_0: entered promiscuous mode
[  782.399890][T27696] team_slave_1: entered promiscuous mode
[  782.407450][T27696] team0: entered allmulticast mode
[  782.418743][T27696] team_slave_0: entered allmulticast mode
[  782.424885][T27696] team_slave_1: entered allmulticast mode
[  782.813046][T27725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6130'.
[  782.823512][T27725] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6130'.
[  782.837011][T27725] netlink: 'syz.3.6130': attribute type 1 has an invalid length.
[  782.845639][T27725] netlink: 'syz.3.6130': attribute type 1 has an invalid length.
[  782.853891][T27725] netlink: 'syz.3.6130': attribute type 1 has an invalid length.
[  782.862299][T27725] netlink: 'syz.3.6130': attribute type 1 has an invalid length.
[  782.871017][T27725] netlink: 'syz.3.6130': attribute type 1 has an invalid length.
[  782.879552][T27725] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6130'.
[  783.074126][T27730] syzkaller0: entered promiscuous mode
[  783.080914][T27730] syzkaller0: entered allmulticast mode
[  783.097006][T27730] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  783.110365][T27729] tipc: Resetting bearer <eth:syzkaller0>
[  783.140078][T27729] tipc: Disabling bearer <eth:syzkaller0>
[  783.150281][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  783.193929][T27734] FAULT_INJECTION: forcing a failure.
[  783.193929][T27734] name failslab, interval 1, probability 0, space 0, times 0
[  783.216972][T27734] CPU: 0 UID: 0 PID: 27734 Comm: syz.1.6134 Not tainted syzkaller #0 PREEMPT(full) 
[  783.217004][T27734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  783.217018][T27734] Call Trace:
[  783.217027][T27734]  <TASK>
[  783.217038][T27734]  dump_stack_lvl+0xe8/0x150
[  783.217077][T27734]  should_fail_ex+0x40c/0x560
[  783.217109][T27734]  should_failslab+0xa8/0x100
[  783.217144][T27734]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  783.217172][T27734]  ? skb_clone+0x212/0x3a0
[  783.217203][T27734]  ? skb_clone+0x212/0x3a0
[  783.217244][T27734]  skb_clone+0x212/0x3a0
[  783.217282][T27734]  __netlink_deliver_tap+0x413/0x860
[  783.217329][T27734]  ? netlink_deliver_tap+0x2e/0x1b0
[  783.217368][T27734]  netlink_deliver_tap+0x19c/0x1b0
[  783.217403][T27734]  netlink_unicast+0x77f/0x940
[  783.217447][T27734]  netlink_sendmsg+0x813/0xb40
[  783.217492][T27734]  ? __pfx_netlink_sendmsg+0x10/0x10
[  783.217531][T27734]  ? aa_sock_msg_perm+0xf1/0x1b0
[  783.217561][T27734]  ? __pfx_netlink_sendmsg+0x10/0x10
[  783.217601][T27734]  sock_sendmsg_nosec+0x13a/0x180
[  783.217631][T27734]  ____sys_sendmsg+0x54e/0x850
[  783.217670][T27734]  ? __pfx_____sys_sendmsg+0x10/0x10
[  783.217714][T27734]  ? import_iovec+0x73/0xa0
[  783.217750][T27734]  ___sys_sendmsg+0x2a5/0x360
[  783.217781][T27734]  ? __lock_acquire+0x683/0x2cf0
[  783.217817][T27734]  ? __pfx____sys_sendmsg+0x10/0x10
[  783.217891][T27734]  ? __fget_files+0x2a/0x420
[  783.217919][T27734]  ? __fget_files+0x3a2/0x420
[  783.217960][T27734]  __x64_sys_sendmsg+0x1b1/0x290
[  783.217996][T27734]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  783.218051][T27734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.218076][T27734]  do_syscall_64+0x174/0x580
[  783.218107][T27734]  ? trace_irq_disable+0x3b/0x140
[  783.218135][T27734]  ? clear_bhb_loop+0x40/0x90
[  783.218163][T27734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.218186][T27734] RIP: 0033:0x7f851079de59
[  783.218208][T27734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  783.218227][T27734] RSP: 002b:00007f85115aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  783.218251][T27734] RAX: ffffffffffffffda RBX: 00007f8510a25fa0 RCX: 00007f851079de59
[  783.218268][T27734] RDX: 000000002004c000 RSI: 00002000000000c0 RDI: 0000000000000003
[  783.218283][T27734] RBP: 00007f85115aa090 R08: 0000000000000000 R09: 0000000000000000
[  783.218297][T27734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  783.218311][T27734] R13: 00007f8510a26038 R14: 00007f8510a25fa0 R15: 00007ffe522a62d8
[  783.218349][T27734]  </TASK>
[  783.277138][T27736] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6135'.
[  783.603249][T27736] syzkaller1: entered promiscuous mode
[  783.622020][T27743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  783.644218][T27736] syzkaller1: entered allmulticast mode
[  783.729004][T27747] xt_hashlimit: size too large, truncated to 1048576
[  784.368616][T27764] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  784.418993][T27766] FAULT_INJECTION: forcing a failure.
[  784.418993][T27766] name failslab, interval 1, probability 0, space 0, times 0
[  784.470921][T27766] CPU: 0 UID: 0 PID: 27766 Comm: syz.2.6144 Not tainted syzkaller #0 PREEMPT(full) 
[  784.470951][T27766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  784.470966][T27766] Call Trace:
[  784.470975][T27766]  <TASK>
[  784.470985][T27766]  dump_stack_lvl+0xe8/0x150
[  784.471025][T27766]  should_fail_ex+0x40c/0x560
[  784.471057][T27766]  should_failslab+0xa8/0x100
[  784.471093][T27766]  __kmalloc_noprof+0xfe/0x720
[  784.471122][T27766]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  784.471151][T27766]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  784.471189][T27766]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  784.471227][T27766]  genl_family_rcv_msg_doit+0xda/0x340
[  784.471263][T27766]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  784.471295][T27766]  ? __pfx_genl_get_cmd+0x10/0x10
[  784.471318][T27766]  ? stack_trace_save+0xa9/0x100
[  784.471343][T27766]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  784.471477][T27766]  ? __lock_acquire+0x683/0x2cf0
[  784.471520][T27766]  genl_rcv_msg+0x614/0x7a0
[  784.471555][T27766]  ? __pfx_genl_rcv_msg+0x10/0x10
[  784.471581][T27766]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  784.471631][T27766]  netlink_rcv_skb+0x226/0x4a0
[  784.471667][T27766]  ? __pfx_genl_rcv_msg+0x10/0x10
[  784.471696][T27766]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  784.471747][T27766]  ? down_read+0x2be/0x330
[  784.471785][T27766]  genl_rcv+0x28/0x40
[  784.471809][T27766]  netlink_unicast+0x7bb/0x940
[  784.471852][T27766]  netlink_sendmsg+0x813/0xb40
[  784.471897][T27766]  ? __pfx_netlink_sendmsg+0x10/0x10
[  784.472015][T27766]  ? aa_sock_msg_perm+0xf1/0x1b0
[  784.472046][T27766]  ? __pfx_netlink_sendmsg+0x10/0x10
[  784.472078][T27766]  sock_sendmsg_nosec+0x13a/0x180
[  784.472108][T27766]  ____sys_sendmsg+0x54e/0x850
[  784.472149][T27766]  ? __pfx_____sys_sendmsg+0x10/0x10
[  784.472192][T27766]  ? import_iovec+0x73/0xa0
[  784.472229][T27766]  ___sys_sendmsg+0x2a5/0x360
[  784.472261][T27766]  ? __lock_acquire+0x683/0x2cf0
[  784.472296][T27766]  ? __pfx____sys_sendmsg+0x10/0x10
[  784.472372][T27766]  ? __fget_files+0x2a/0x420
[  784.472401][T27766]  ? __fget_files+0x3a2/0x420
[  784.472457][T27766]  __x64_sys_sendmsg+0x1b1/0x290
[  784.472490][T27766]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  784.472545][T27766]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.472571][T27766]  do_syscall_64+0x174/0x580
[  784.472600][T27766]  ? trace_irq_disable+0x3b/0x140
[  784.472628][T27766]  ? clear_bhb_loop+0x40/0x90
[  784.472666][T27766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.472690][T27766] RIP: 0033:0x7fef2219de59
[  784.472712][T27766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  784.472731][T27766] RSP: 002b:00007fef22ff8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  784.472754][T27766] RAX: ffffffffffffffda RBX: 00007fef22425fa0 RCX: 00007fef2219de59
[  784.472772][T27766] RDX: 0000000000008010 RSI: 00002000000001c0 RDI: 0000000000000004
[  784.472786][T27766] RBP: 00007fef22ff8090 R08: 0000000000000000 R09: 0000000000000000
[  784.472801][T27766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  784.472814][T27766] R13: 00007fef22426038 R14: 00007fef22425fa0 R15: 00007ffdb27dd638
[  784.472852][T27766]  </TASK>
[  784.892715][T27773] FAULT_INJECTION: forcing a failure.
[  784.892715][T27773] name failslab, interval 1, probability 0, space 0, times 0
[  784.906647][T27773] CPU: 1 UID: 0 PID: 27773 Comm: syz.3.6146 Not tainted syzkaller #0 PREEMPT(full) 
[  784.906686][T27773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  784.906701][T27773] Call Trace:
[  784.906710][T27773]  <TASK>
[  784.906720][T27773]  dump_stack_lvl+0xe8/0x150
[  784.906765][T27773]  should_fail_ex+0x40c/0x560
[  784.906798][T27773]  should_failslab+0xa8/0x100
[  784.906832][T27773]  __kmalloc_noprof+0xfe/0x720
[  784.906862][T27773]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  784.906891][T27773]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  784.906928][T27773]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  784.906965][T27773]  genl_family_rcv_msg_doit+0xda/0x340
[  784.907002][T27773]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  784.907039][T27773]  ? apparmor_capable+0x126/0x170
[  784.907160][T27773]  ? bpf_lsm_capable+0x9/0x20
[  784.907187][T27773]  ? security_capable+0x7e/0x2c0
[  784.907229][T27773]  genl_rcv_msg+0x614/0x7a0
[  784.907264][T27773]  ? __pfx_genl_rcv_msg+0x10/0x10
[  784.907290][T27773]  ? __pfx_ovs_meter_cmd_set+0x10/0x10
[  784.907358][T27773]  ? __pfx_ref_tracker_free+0x10/0x10
[  784.907399][T27773]  netlink_rcv_skb+0x226/0x4a0
[  784.907443][T27773]  ? __pfx_genl_rcv_msg+0x10/0x10
[  784.907472][T27773]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  784.907523][T27773]  ? down_read+0x2be/0x330
[  784.907562][T27773]  genl_rcv+0x28/0x40
[  784.907589][T27773]  netlink_unicast+0x7bb/0x940
[  784.907634][T27773]  netlink_sendmsg+0x813/0xb40
[  784.907680][T27773]  ? __pfx_netlink_sendmsg+0x10/0x10
[  784.907719][T27773]  ? aa_sock_msg_perm+0xf1/0x1b0
[  784.907748][T27773]  ? __pfx_netlink_sendmsg+0x10/0x10
[  784.907782][T27773]  sock_sendmsg_nosec+0x13a/0x180
[  784.907812][T27773]  ____sys_sendmsg+0x54e/0x850
[  784.907851][T27773]  ? __pfx_____sys_sendmsg+0x10/0x10
[  784.907895][T27773]  ? import_iovec+0x73/0xa0
[  784.907932][T27773]  ___sys_sendmsg+0x2a5/0x360
[  784.907962][T27773]  ? __lock_acquire+0x683/0x2cf0
[  784.908005][T27773]  ? __pfx____sys_sendmsg+0x10/0x10
[  784.908081][T27773]  ? __fget_files+0x2a/0x420
[  784.908109][T27773]  ? __fget_files+0x3a2/0x420
[  784.908150][T27773]  __x64_sys_sendmsg+0x1b1/0x290
[  784.908184][T27773]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  784.908240][T27773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.908266][T27773]  do_syscall_64+0x174/0x580
[  784.908295][T27773]  ? trace_irq_disable+0x3b/0x140
[  784.908322][T27773]  ? clear_bhb_loop+0x40/0x90
[  784.908350][T27773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.908372][T27773] RIP: 0033:0x7fd24139de59
[  784.908393][T27773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  784.908421][T27773] RSP: 002b:00007fd2421a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  784.908446][T27773] RAX: ffffffffffffffda RBX: 00007fd241625fa0 RCX: 00007fd24139de59
[  784.908462][T27773] RDX: 000000002004c000 RSI: 00002000000000c0 RDI: 0000000000000003
[  784.908477][T27773] RBP: 00007fd2421a4090 R08: 0000000000000000 R09: 0000000000000000
[  784.908491][T27773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  784.908505][T27773] R13: 00007fd241626038 R14: 00007fd241625fa0 R15: 00007ffe1445b568
[  784.908542][T27773]  </TASK>
[  785.477654][T27792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6151'.
[  785.553674][T27792] batadv0: entered promiscuous mode
[  785.559589][T27794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6155'.
[  785.575269][T27792] 8021q: adding VLAN 0 to HW filter on device macsec1
[  785.673039][T27796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6156'.
[  785.693282][T27796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6156'.
[  785.708667][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  785.770492][T27796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6156'.
[  785.796176][T27796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6156'.
[  785.825464][T27796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6156'.
[  785.850390][T27796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6156'.
[  785.872639][T27796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6156'.
[  785.897313][T27796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6156'.
[  786.041391][T27796] gre1: left promiscuous mode
[  786.067031][T27796] bridge5: left allmulticast mode
[  786.192286][T23795] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  786.225011][T23795] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  786.237358][T15470] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  786.299076][T27819] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode
[  786.318052][T27819] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode
[  786.328161][T27819] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  786.615892][T27829] FAULT_INJECTION: forcing a failure.
[  786.615892][T27829] name failslab, interval 1, probability 0, space 0, times 0
[  786.629371][T15470] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  786.680833][T27829] CPU: 1 UID: 0 PID: 27829 Comm: syz.1.6168 Not tainted syzkaller #0 PREEMPT(full) 
[  786.680864][T27829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  786.680878][T27829] Call Trace:
[  786.680887][T27829]  <TASK>
[  786.680896][T27829]  dump_stack_lvl+0xe8/0x150
[  786.680936][T27829]  should_fail_ex+0x40c/0x560
[  786.680966][T27829]  should_failslab+0xa8/0x100
[  786.681001][T27829]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  786.681027][T27829]  ? local_lock_release+0x9c/0x160
[  786.681058][T27829]  ? __alloc_skb+0x1d7/0x7a0
[  786.681084][T27829]  ? __alloc_skb+0x1d7/0x7a0
[  786.681120][T27829]  __alloc_skb+0x1d7/0x7a0
[  786.681154][T27829]  netlink_sendmsg+0x5d4/0xb40
[  786.681200][T27829]  ? __pfx_netlink_sendmsg+0x10/0x10
[  786.681238][T27829]  ? aa_sock_msg_perm+0xf1/0x1b0
[  786.681267][T27829]  ? __pfx_netlink_sendmsg+0x10/0x10
[  786.681300][T27829]  sock_sendmsg_nosec+0x13a/0x180
[  786.681329][T27829]  ____sys_sendmsg+0x54e/0x850
[  786.681369][T27829]  ? __pfx_____sys_sendmsg+0x10/0x10
[  786.681412][T27829]  ? import_iovec+0x73/0xa0
[  786.681448][T27829]  ___sys_sendmsg+0x2a5/0x360
[  786.681479][T27829]  ? __lock_acquire+0x683/0x2cf0
[  786.681513][T27829]  ? __pfx____sys_sendmsg+0x10/0x10
[  786.681586][T27829]  ? __fget_files+0x2a/0x420
[  786.681613][T27829]  ? __fget_files+0x3a2/0x420
[  786.681655][T27829]  __x64_sys_sendmsg+0x1b1/0x290
[  786.681691][T27829]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  786.681745][T27829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.681770][T27829]  do_syscall_64+0x174/0x580
[  786.681809][T27829]  ? trace_irq_disable+0x3b/0x140
[  786.681837][T27829]  ? clear_bhb_loop+0x40/0x90
[  786.681865][T27829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.681888][T27829] RIP: 0033:0x7f851079de59
[  786.681910][T27829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  786.681929][T27829] RSP: 002b:00007f85115aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  786.681954][T27829] RAX: ffffffffffffffda RBX: 00007f8510a25fa0 RCX: 00007f851079de59
[  786.681971][T27829] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003
[  786.681986][T27829] RBP: 00007f85115aa090 R08: 0000000000000000 R09: 0000000000000000
[  786.682000][T27829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  786.682013][T27829] R13: 00007f8510a26038 R14: 00007f8510a25fa0 R15: 00007ffe522a62d8
[  786.682050][T27829]  </TASK>
[  786.851571][ T5772] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  787.001979][T27839] FAULT_INJECTION: forcing a failure.
[  787.001979][T27839] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  787.053118][T27839] CPU: 0 UID: 0 PID: 27839 Comm: syz.0.6171 Not tainted syzkaller #0 PREEMPT(full) 
[  787.053148][T27839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  787.053162][T27839] Call Trace:
[  787.053172][T27839]  <TASK>
[  787.053182][T27839]  dump_stack_lvl+0xe8/0x150
[  787.053221][T27839]  should_fail_ex+0x40c/0x560
[  787.053259][T27839]  _copy_to_user+0x31/0xb0
[  787.053295][T27839]  simple_read_from_buffer+0xe1/0x170
[  787.053333][T27839]  proc_fail_nth_read+0x1bb/0x230
[  787.053366][T27839]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  787.053401][T27839]  ? rw_verify_area+0x24a/0x4c0
[  787.053436][T27839]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  787.053465][T27839]  vfs_read+0x213/0xa80
[  787.053504][T27839]  ? __pfx___mutex_lock+0x10/0x10
[  787.053537][T27839]  ? __pfx_vfs_read+0x10/0x10
[  787.053571][T27839]  ? __fget_files+0x2a/0x420
[  787.053605][T27839]  ? __fget_files+0x3a2/0x420
[  787.053633][T27839]  ? __fget_files+0x2a/0x420
[  787.053672][T27839]  ksys_read+0x150/0x270
[  787.053708][T27839]  ? __pfx_ksys_read+0x10/0x10
[  787.053750][T27839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.053777][T27839]  do_syscall_64+0x174/0x580
[  787.053805][T27839]  ? trace_irq_disable+0x3b/0x140
[  787.053833][T27839]  ? clear_bhb_loop+0x40/0x90
[  787.053861][T27839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.053884][T27839] RIP: 0033:0x7f98e855e68e
[  787.053904][T27839] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  787.053922][T27839] RSP: 002b:00007f98e94d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  787.053945][T27839] RAX: ffffffffffffffda RBX: 00007f98e94d16c0 RCX: 00007f98e855e68e
[  787.053962][T27839] RDX: 000000000000000f RSI: 00007f98e94d10a0 RDI: 0000000000000003
[  787.053976][T27839] RBP: 00007f98e94d1090 R08: 0000000000000000 R09: 0000000000000000
[  787.053991][T27839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  787.054004][T27839] R13: 00007f98e8826038 R14: 00007f98e8825fa0 R15: 00007ffca628c268
[  787.054046][T27839]  </TASK>
[  787.398196][T27841] netlink: 'syz.4.6172': attribute type 1 has an invalid length.
[  787.406630][T27848] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  787.680628][T27858] FAULT_INJECTION: forcing a failure.
[  787.680628][T27858] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  787.695241][T27858] CPU: 0 UID: 0 PID: 27858 Comm: syz.4.6177 Not tainted syzkaller #0 PREEMPT(full) 
[  787.695272][T27858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  787.695285][T27858] Call Trace:
[  787.695294][T27858]  <TASK>
[  787.695304][T27858]  dump_stack_lvl+0xe8/0x150
[  787.695344][T27858]  should_fail_ex+0x40c/0x560
[  787.695373][T27858]  _copy_from_iter+0x1d3/0x1660
[  787.695400][T27858]  ? skb_set_owner_w+0x263/0x3d0
[  787.695447][T27858]  ? __pfx__copy_from_iter+0x10/0x10
[  787.695485][T27858]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  787.695525][T27858]  skb_copy_datagram_from_iter+0xe6/0x720
[  787.695637][T27858]  ? skb_put+0x112/0x210
[  787.695669][T27858]  tun_get_user+0x1520/0x4370
[  787.695716][T27858]  ? aa_file_perm+0x18b/0x15f0
[  787.695745][T27858]  ? aa_file_perm+0x4ed/0x15f0
[  787.695775][T27858]  ? __pfx_tun_get_user+0x10/0x10
[  787.695808][T27858]  ? __lock_acquire+0x683/0x2cf0
[  787.695842][T27858]  ? kstrtoull+0x12f/0x1d0
[  787.695877][T27858]  ? ref_tracker_alloc+0x341/0x4b0
[  787.695902][T27858]  ? get_pid_task+0x20/0x1f0
[  787.695935][T27858]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  787.695965][T27858]  ? tun_get+0x1c/0x2f0
[  787.695995][T27858]  ? tun_get+0x1c/0x2f0
[  787.696029][T27858]  ? tun_get+0x1c/0x2f0
[  787.696057][T27858]  ? tun_get+0x1c/0x2f0
[  787.696090][T27858]  tun_chr_write_iter+0x113/0x200
[  787.696122][T27858]  vfs_write+0x612/0xba0
[  787.696169][T27858]  ? __pfx_vfs_write+0x10/0x10
[  787.696212][T27858]  ? __fget_files+0x2a/0x420
[  787.696248][T27858]  ksys_write+0x150/0x270
[  787.696281][T27858]  ? __pfx_ksys_write+0x10/0x10
[  787.696315][T27858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.696335][T27858]  do_syscall_64+0x174/0x580
[  787.696390][T27858]  ? trace_irq_disable+0x3b/0x140
[  787.696413][T27858]  ? clear_bhb_loop+0x40/0x90
[  787.696436][T27858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.696453][T27858] RIP: 0033:0x7fc5ac95e68e
[  787.696471][T27858] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  787.696487][T27858] RSP: 002b:00007fc5ad814fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  787.696506][T27858] RAX: ffffffffffffffda RBX: 00007fc5ad8156c0 RCX: 00007fc5ac95e68e
[  787.696533][T27858] RDX: 0000000000000d81 RSI: 00002000000006c0 RDI: 00000000000000c8
[  787.696544][T27858] RBP: 00007fc5ad815090 R08: 0000000000000000 R09: 0000000000000000
[  787.696556][T27858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  787.696567][T27858] R13: 00007fc5acc26038 R14: 00007fc5acc25fa0 R15: 00007fffc4948ae8
[  787.696595][T27858]  </TASK>
[  788.043963][T27864] bridge0: port 3(syz_tun) entered blocking state
[  788.083679][T27864] bridge0: port 3(syz_tun) entered disabled state
[  788.120998][T27864] syz_tun: entered allmulticast mode
[  788.128191][T27864] syz_tun: entered promiscuous mode
[  788.134396][T27864] bridge0: port 3(syz_tun) entered blocking state
[  788.140994][T27864] bridge0: port 3(syz_tun) entered forwarding state
[  788.905649][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  788.924522][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  788.934035][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  788.942644][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  788.950794][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  789.448742][T27923] netlink: 'syz.0.6195': attribute type 6 has an invalid length.
[  789.456872][T27923] netlink: 'syz.0.6195': attribute type 7 has an invalid length.
[  789.466548][T27923] netlink: 'syz.0.6195': attribute type 8 has an invalid length.
[  789.990978][T27904] ±ÿ speed is unknown, defaulting to 1000
[  790.016708][T27904] lo speed is unknown, defaulting to 1000
[  790.108911][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  790.242526][T27939] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  790.561548][T27943] netlink: 'syz.3.6200': attribute type 4 has an invalid length.
[  790.623440][T27943] netlink: 'syz.3.6200': attribute type 4 has an invalid length.
[  790.748178][T27954] netlink: 'syz.0.6203': attribute type 3 has an invalid length.
[  790.804136][T27960] __nla_validate_parse: 89 callbacks suppressed
[  790.804158][T27960] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6204'.
[  790.866681][T27963] xt_CT: You must specify a L4 protocol and not use inversions on it
[  790.946396][T27904] bridge0: port 1(bridge_slave_0) entered blocking state
[  790.956238][T27904] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.977516][T27904] bridge_slave_0: entered allmulticast mode
[  791.000045][T27904] bridge_slave_0: entered promiscuous mode
[  791.024656][T27904] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.034203][T27904] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.041967][T27904] bridge_slave_1: entered allmulticast mode
[  791.050923][T27904] bridge_slave_1: entered promiscuous mode
[  791.068659][ T5624] Bluetooth: hci0: command tx timeout
[  791.095155][T27971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6207'.
[  791.146154][T27904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  791.264606][T27978] xt_hashlimit: size too large, truncated to 1048576
[  791.330847][T27904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  791.421531][T27904] team0: Port device team_slave_0 added
[  791.433890][T27904] team0: Port device team_slave_1 added
[  791.506000][T27904] batman_adv: batadv0: Adding interface: batadv_slave_0
[  791.526793][T27904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  791.580682][T27904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  791.594370][T27904] batman_adv: batadv0: Adding interface: batadv_slave_1
[  791.601841][T27904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  791.676345][T27904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  791.828829][T27904] hsr_slave_0: entered promiscuous mode
[  791.853758][T27904] hsr_slave_1: entered promiscuous mode
[  791.872213][T27904] debugfs: 'hsr0' already exists in 'hsr'
[  791.891065][T27904] Cannot create hsr debugfs directory
[  791.935976][T27991] syzkaller0: entered promiscuous mode
[  791.949260][T27991] syzkaller0: entered allmulticast mode
[  792.041722][T28000] tipc: Started in network mode
[  792.062801][T28000] tipc: Node identity 829fb9974551, cluster identity 4711
[  792.084255][T28000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  792.145292][T27990] tipc: Resetting bearer <eth:syzkaller0>
[  792.252721][T27990] tipc: Disabling bearer <eth:syzkaller0>
[  792.285523][T27995] ±ÿ speed is unknown, defaulting to 1000
[  792.389233][T27995] lo speed is unknown, defaulting to 1000
[  792.392758][T28004] netlink: 'syz.0.6218': attribute type 30 has an invalid length.
[  792.613009][T28012] syz_tun: entered allmulticast mode
[  792.699081][T28015] syz_tun (unregistering): left allmulticast mode
[  792.788155][T28024] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6222'.
[  792.812112][T28024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6222'.
[  792.943488][T28028] netlink: 'syz.2.6223': attribute type 13 has an invalid length.
[  792.951542][T28028] netlink: 'syz.2.6223': attribute type 17 has an invalid length.
[  793.112094][T28031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6223'.
[  793.148548][ T5624] Bluetooth: hci0: command tx timeout
[  793.168968][T11338] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  793.295065][T28014] syzkaller0: entered promiscuous mode
[  793.300619][T28014] syzkaller0: entered allmulticast mode
[  794.190943][ T5772] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  795.072110][ T4988] udevd[4988]: worker [7811] /devices/virtual/block/nbd4 timeout; kill it
[  795.080994][ T4988] udevd[4988]: seq 35644 '/devices/virtual/block/nbd4' killed
[  795.228522][ T5624] Bluetooth: hci0: command tx timeout
[  796.863541][T27904] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  796.874514][T27904] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.896298][T28051] FAULT_INJECTION: forcing a failure.
[  796.896298][T28051] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  796.922204][T28051] CPU: 0 UID: 0 PID: 28051 Comm: syz.2.6228 Not tainted syzkaller #0 PREEMPT(full) 
[  796.922233][T28051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  796.922246][T28051] Call Trace:
[  796.922256][T28051]  <TASK>
[  796.922266][T28051]  dump_stack_lvl+0xe8/0x150
[  796.922303][T28051]  should_fail_ex+0x40c/0x560
[  796.922336][T28051]  _copy_from_user+0x2d/0xb0
[  796.922370][T28051]  kstrtouint_from_user+0xd6/0x180
[  796.922401][T28051]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  796.922448][T28051]  proc_fail_nth_write+0x8e/0x210
[  796.922479][T28051]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  796.922516][T28051]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  796.922541][T28051]  vfs_write+0x296/0xba0
[  796.922578][T28051]  ? __pfx_vfs_write+0x10/0x10
[  796.922611][T28051]  ? __fget_files+0x2a/0x420
[  796.922642][T28051]  ? __fget_files+0x3a2/0x420
[  796.922665][T28051]  ? __fget_files+0x2a/0x420
[  796.922698][T28051]  ksys_write+0x150/0x270
[  796.922732][T28051]  ? __pfx_ksys_write+0x10/0x10
[  796.922771][T28051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.922795][T28051]  do_syscall_64+0x174/0x580
[  796.922824][T28051]  ? trace_irq_disable+0x3b/0x140
[  796.922854][T28051]  ? clear_bhb_loop+0x40/0x90
[  796.922874][T28051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.922890][T28051] RIP: 0033:0x7fef2215e68e
[  796.922905][T28051] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  796.922918][T28051] RSP: 002b:00007fef22ff7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  796.922935][T28051] RAX: ffffffffffffffda RBX: 00007fef22ff86c0 RCX: 00007fef2215e68e
[  796.922947][T28051] RDX: 0000000000000001 RSI: 00007fef22ff80a0 RDI: 0000000000000004
[  796.922957][T28051] RBP: 00007fef22ff8090 R08: 0000000000000000 R09: 0000000000000000
[  796.922967][T28051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  796.922977][T28051] R13: 00007fef22426038 R14: 00007fef22425fa0 R15: 00007ffdb27dd638
[  796.923002][T28051]  </TASK>
[  797.248094][T28055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6230'.
[  797.308500][ T5624] Bluetooth: hci0: command tx timeout
[  797.360162][T28060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6232'.
[  797.369154][T28060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6232'.
[  797.408145][T28060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6232'.
[  797.417124][T28060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6232'.
[  797.426090][T28060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6232'.
[  797.435030][T28060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6232'.
[  797.443988][T28060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6232'.
[  797.452944][T28060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6232'.
[  797.461879][T28060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6232'.
[  797.652738][T27904] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  797.666106][T27904] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.096647][T27904] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.107210][T27904] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.144894][T28083] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  798.322505][T27904] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.333177][T27904] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.441952][T28086] tipc: Invalid UDP bearer configuration
[  798.442009][T28086] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  798.456219][T28087] tipc: Invalid UDP bearer configuration
[  798.456270][T28087] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  798.514628][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  798.566539][T28090] netlink: 'syz.0.6239': attribute type 2 has an invalid length.
[  798.574447][T28090] netlink: 'syz.0.6239': attribute type 2 has an invalid length.
[  798.775618][T28092] FAULT_INJECTION: forcing a failure.
[  798.775618][T28092] name failslab, interval 1, probability 0, space 0, times 0
[  798.788295][T28092] CPU: 1 UID: 0 PID: 28092 Comm: syz.0.6242 Not tainted syzkaller #0 PREEMPT(full) 
[  798.788324][T28092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  798.788338][T28092] Call Trace:
[  798.788346][T28092]  <TASK>
[  798.788355][T28092]  dump_stack_lvl+0xe8/0x150
[  798.788393][T28092]  should_fail_ex+0x40c/0x560
[  798.788427][T28092]  ? nf_hook_entries_grow+0x287/0x740
[  798.788456][T28092]  should_failslab+0xa8/0x100
[  798.788490][T28092]  __kvmalloc_node_noprof+0x176/0x860
[  798.788525][T28092]  ? __nf_register_net_hook+0x232/0x930
[  798.788547][T28092]  ? nf_hook_entries_grow+0x287/0x740
[  798.788571][T28092]  ? __pfx___mutex_lock+0x10/0x10
[  798.788607][T28092]  nf_hook_entries_grow+0x287/0x740
[  798.788647][T28092]  __nf_register_net_hook+0x2c9/0x930
[  798.788684][T28092]  nf_register_net_hook+0xb2/0x190
[  798.788712][T28092]  nf_register_net_hooks+0x44/0x1b0
[  798.788741][T28092]  nf_ct_netns_do_get+0x212/0x5c0
[  798.788772][T28092]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[  798.788800][T28092]  ? synproxy_pernet+0x45/0x270
[  798.788828][T28092]  ? synproxy_pernet+0x45/0x270
[  798.788856][T28092]  ? nf_ct_netns_get+0xe9/0x320
[  798.788885][T28092]  nft_synproxy_do_init+0x1d1/0x4c0
[  798.788920][T28092]  nf_tables_newrule+0x179e/0x28a0
[  798.788969][T28092]  ? __pfx_nf_tables_newrule+0x10/0x10
[  798.788996][T28092]  ? nfnl_pernet+0x23/0x240
[  798.789034][T28092]  ? nfnl_pernet+0x23/0x240
[  798.789075][T28092]  ? __nla_parse+0x40/0x60
[  798.789109][T28092]  nfnetlink_rcv+0x1288/0x28c0
[  798.789180][T28092]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  798.789231][T28092]  ? ref_tracker_free+0x689/0x830
[  798.789289][T28092]  ? skb_clone+0x246/0x3a0
[  798.789326][T28092]  ? __netlink_deliver_tap+0x811/0x860
[  798.789370][T28092]  ? netlink_deliver_tap+0x2e/0x1b0
[  798.789403][T28092]  ? netlink_deliver_tap+0x2e/0x1b0
[  798.789463][T28092]  netlink_unicast+0x7bb/0x940
[  798.789508][T28092]  netlink_sendmsg+0x813/0xb40
[  798.789552][T28092]  ? __pfx_netlink_sendmsg+0x10/0x10
[  798.789590][T28092]  ? aa_sock_msg_perm+0xf1/0x1b0
[  798.789618][T28092]  ? __pfx_netlink_sendmsg+0x10/0x10
[  798.789651][T28092]  sock_sendmsg_nosec+0x13a/0x180
[  798.789681][T28092]  ____sys_sendmsg+0x54e/0x850
[  798.789720][T28092]  ? __pfx_____sys_sendmsg+0x10/0x10
[  798.789765][T28092]  ? import_iovec+0x73/0xa0
[  798.789802][T28092]  ___sys_sendmsg+0x2a5/0x360
[  798.789833][T28092]  ? __lock_acquire+0x683/0x2cf0
[  798.789869][T28092]  ? __pfx____sys_sendmsg+0x10/0x10
[  798.789931][T28092]  ? __fget_files+0x2a/0x420
[  798.789954][T28092]  ? __fget_files+0x3a2/0x420
[  798.789986][T28092]  __x64_sys_sendmsg+0x1b1/0x290
[  798.790023][T28092]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  798.790068][T28092]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  798.790087][T28092]  do_syscall_64+0x174/0x580
[  798.790111][T28092]  ? trace_irq_disable+0x3b/0x140
[  798.790133][T28092]  ? clear_bhb_loop+0x40/0x90
[  798.790156][T28092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  798.790174][T28092] RIP: 0033:0x7f98e859de59
[  798.790193][T28092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  798.790210][T28092] RSP: 002b:00007f98e94d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  798.790229][T28092] RAX: ffffffffffffffda RBX: 00007f98e8825fa0 RCX: 00007f98e859de59
[  798.790241][T28092] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003
[  798.790253][T28092] RBP: 00007f98e94d1090 R08: 0000000000000000 R09: 0000000000000000
[  798.790263][T28092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  798.790274][T28092] R13: 00007f98e8826038 R14: 00007f98e8825fa0 R15: 00007ffca628c268
[  798.790303][T28092]  </TASK>
[  799.316730][T27904] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  799.346444][T27904] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  799.376103][T27904] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  799.439003][T27904] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  799.514108][T27904] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  799.536064][T27904] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  799.559981][T27904] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  799.605323][T27904] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  799.631700][T28114] mac80211_hwsim hwsim35 »»»»»»: renamed from wlan0 (while UP)
[  799.925237][T27904] 8021q: adding VLAN 0 to HW filter on device bond0
[  799.991276][T27904] 8021q: adding VLAN 0 to HW filter on device team0
[  800.043549][T23795] bridge0: port 1(bridge_slave_0) entered blocking state
[  800.050831][T23795] bridge0: port 1(bridge_slave_0) entered forwarding state
[  800.090823][T23795] bridge0: port 2(bridge_slave_1) entered blocking state
[  800.098073][T23795] bridge0: port 2(bridge_slave_1) entered forwarding state
[  800.150553][T28136] xt_hashlimit: invalid rate
[  800.262838][T28139] batadv1: entered promiscuous mode
[  800.270076][T28139] batadv1: entered allmulticast mode
[  800.429791][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  800.639729][T28160] bond0: option broadcast_neighbor: invalid value (4)
[  800.648860][T28160] bond0 (unregistering): Released all slaves
[  800.771899][T27904] 8021q: adding VLAN 0 to HW filter on device batadv0
[  801.514950][T28193] SET target dimension over the limit!
[  801.724582][   T10] block nbd9: Possible stuck request ffff8880272a0000: control (read@0,1024B). Runtime 60 seconds
[  801.735832][   T10] block nbd9: Possible stuck request ffff8880272a01c0: control (read@1024,1024B). Runtime 60 seconds
[  801.748312][   T10] block nbd9: Possible stuck request ffff8880272a0380: control (read@2048,1024B). Runtime 60 seconds
[  801.760418][   T10] block nbd9: Possible stuck request ffff8880272a0540: control (read@3072,1024B). Runtime 60 seconds
[  802.305866][T28178] syzkaller1: entered promiscuous mode
[  802.312005][T28178] syzkaller1: entered allmulticast mode
[  802.345359][T28193] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  802.358688][ T4988] udevd[4988]: worker [7814] /devices/virtual/block/nbd9 is taking a long time
[  802.531903][T28199] IPVS: ip_vs_add_dest(): server weight less than zero
[  802.539360][T28199] IPVS: fo: FWM 3 0x00000003 - no destination available
[  802.572695][T27904] veth0_vlan: entered promiscuous mode
[  802.617596][T27904] veth1_vlan: entered promiscuous mode
[  802.635945][T28202] macsec1: entered promiscuous mode
[  802.641887][T28202] bridge0: entered promiscuous mode
[  802.754147][T27904] veth0_macvtap: entered promiscuous mode
[  802.774158][T27904] veth1_macvtap: entered promiscuous mode
[  802.805650][T27904] batman_adv: batadv0: Interface activated: batadv_slave_0
[  802.826612][T27904] batman_adv: batadv0: Interface activated: batadv_slave_1
[  802.862454][   T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  802.873787][T28212] netlink: 'syz.2.6269': attribute type 1 has an invalid length.
[  802.986845][T28212] 8021q: adding VLAN 0 to HW filter on device bond5
[  802.995269][   T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  803.004850][   T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  803.067412][T28216] bond5: (slave veth15): Enslaving as an active interface with a down link
[  803.080667][   T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  803.104354][T28212] 8021q: adding VLAN 0 to HW filter on device batadv1
[  803.114827][T28212] bond5: (slave batadv1): making interface the new active one
[  803.125258][T28212] batadv1: entered promiscuous mode
[  803.133200][T28212] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  803.305275][T23795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  803.327229][T23795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.422392][T23795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  803.430283][T23795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.438041][T28222] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  803.948110][T28248] __nla_validate_parse: 9 callbacks suppressed
[  803.948131][T28248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6282'.
[  803.966296][T28243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6281'.
[  804.305209][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  804.326472][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  804.337967][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  804.355401][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  804.363540][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  804.922583][T28272] syzkaller0: entered promiscuous mode
[  804.953293][T28272] syzkaller0: entered allmulticast mode
[  804.998947][T28272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  805.007678][T28271] tipc: Resetting bearer <eth:syzkaller0>
[  805.082635][T28271] tipc: Disabling bearer <eth:syzkaller0>
[  805.255078][T28254] ±ÿ speed is unknown, defaulting to 1000
[  805.262165][T28254] lo speed is unknown, defaulting to 1000
[  805.637648][T28291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6292'.
[  805.653213][T28291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6292'.
[  805.869123][T28291] lo: entered allmulticast mode
[  805.877394][T28291] tunl0: entered allmulticast mode
[  805.884217][T28291] gre0: entered allmulticast mode
[  805.917935][T28291] gretap0: entered allmulticast mode
[  805.926146][T28291] erspan0: entered allmulticast mode
[  805.934029][T28291] ip_vti0: entered allmulticast mode
[  805.974002][T28291] ip6_vti0: entered allmulticast mode
[  805.985521][T28291] sit0: entered allmulticast mode
[  805.996789][T28291] ip6tnl0: entered allmulticast mode
[  806.005920][T28291] ip6gre0: entered allmulticast mode
[  806.019879][T28291] ip6gretap0: entered allmulticast mode
[  806.031830][T28291] bridge0: port 4(team0) entered disabled state
[  806.039507][T28291] bridge0: port 3(macvlan0) entered disabled state
[  806.046254][T28291] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.064160][T28291] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.096618][T28291] bridge0: entered allmulticast mode
[  806.108056][T28291] vcan0: entered allmulticast mode
[  806.115289][T28291] bond0: entered allmulticast mode
[  806.120535][T28291] bond_slave_0: entered allmulticast mode
[  806.126316][T28291] bond_slave_1: entered allmulticast mode
[  806.140341][T28291] dummy0: entered allmulticast mode
[  806.150811][T28291] nlmon0: entered allmulticast mode
[  806.158976][T28291] batadv0: entered allmulticast mode
[  806.182204][T28291] vxcan0: entered allmulticast mode
[  806.189137][T28291] vxcan1: entered allmulticast mode
[  806.200826][T28291] veth0: entered allmulticast mode
[  806.210197][T28291] veth1: entered allmulticast mode
[  806.218572][T28291] wg0: entered allmulticast mode
[  806.226603][T28291] wg1: entered allmulticast mode
[  806.234613][T28291] wg2: entered allmulticast mode
[  806.242307][T28291] veth0_to_bridge: entered allmulticast mode
[  806.254330][T28291] veth1_to_bridge: entered allmulticast mode
[  806.266216][T28291] veth0_to_bond: entered allmulticast mode
[  806.299760][T28291] veth1_to_bond: entered allmulticast mode
[  806.310523][T28291] veth0_to_team: entered allmulticast mode
[  806.323585][T28291] veth1_to_team: entered allmulticast mode
[  806.336860][T28291] veth0_to_batadv: entered allmulticast mode
[  806.346629][T28291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  806.356387][T28291] batadv_slave_0: entered allmulticast mode
[  806.366719][T28291] veth1_to_batadv: entered allmulticast mode
[  806.376635][T28291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  806.384140][T28291] batadv_slave_1: entered allmulticast mode
[  806.421327][T28291] xfrm0: entered allmulticast mode
[  806.430579][T28291] veth0_to_hsr: entered allmulticast mode
[  806.431286][ T5638] Bluetooth: hci2: command tx timeout
[  806.443627][T28291] hsr_slave_0: entered allmulticast mode
[  806.452019][T28291] veth1_to_hsr: entered allmulticast mode
[  806.461675][T28291] hsr_slave_1: entered allmulticast mode
[  806.472244][T28291] 0·: entered allmulticast mode
[  806.480269][T28291] veth1_virt_wifi: entered allmulticast mode
[  806.489651][T28291] veth0_virt_wifi: entered allmulticast mode
[  806.499266][T28291] virt_wifi0: entered allmulticast mode
[  806.527288][T28291] veth0_vlan: entered allmulticast mode
[  806.535541][T28291] vlan0: entered allmulticast mode
[  806.543748][T28291] vlan1: entered allmulticast mode
[  806.555299][T28291] macvlan1: entered allmulticast mode
[  806.564893][T28291] ipvlan0: entered allmulticast mode
[  806.573771][T28291] ipvlan1: entered allmulticast mode
[  806.581802][T28291] geneve0: entered allmulticast mode
[  806.590305][T28291] geneve1: entered allmulticast mode
[  806.599690][T28291] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  806.610315][T28291] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  806.625717][T28291] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  806.643343][T28291] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[  806.657934][T28291] mac80211_hwsim hwsim35 »»»»»»: entered allmulticast mode
[  806.667165][T28291] veth0.2: entered allmulticast mode
[  806.676475][T28291] ip6tnl1: entered allmulticast mode
[  806.684094][T28291] ip6tnl2: entered allmulticast mode
[  806.691837][T28291] bridge1: entered allmulticast mode
[  806.700893][T28291] sit1: entered allmulticast mode
[  806.726342][T28291] veth2: entered allmulticast mode
[  806.734431][T28291] veth3: entered allmulticast mode
[  806.742598][T28291] bond1: entered allmulticast mode
[  806.752854][T28291] geneve2: entered allmulticast mode
[  806.760654][T28291] ip6tnl3: entered allmulticast mode
[  806.768216][T28291] bridge2: entered allmulticast mode
[  806.778252][T28291] geneve3: entered allmulticast mode
[  806.787015][T28291] macvlan2: entered allmulticast mode
[  806.796964][T28291] macvlan3: entered allmulticast mode
[  806.804672][T28291] gre1: entered allmulticast mode
[  806.814169][T28291] nicvf0: entered allmulticast mode
[  806.822605][T28291] bridge4: entered allmulticast mode
[  806.831729][T28291] geneve4: entered allmulticast mode
[  806.842037][T28291] bridge5: entered allmulticast mode
[  806.853110][T28291] vlan2: entered allmulticast mode
[  806.860704][T28291] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode
[  806.870571][T28291] bridge6: entered allmulticast mode
[  806.876280][T28291] bond2: entered allmulticast mode
[  806.933879][T28325] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  806.953784][T25553] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  807.032208][T25553] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  807.048688][T25553] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  807.087523][T28254] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.095769][T28254] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.105043][T28254] bridge_slave_0: entered allmulticast mode
[  807.121355][T28254] bridge_slave_0: entered promiscuous mode
[  807.152743][T28254] bridge0: port 2(bridge_slave_1) entered blocking state
[  807.186380][T28254] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.223265][T28254] bridge_slave_1: entered allmulticast mode
[  807.250523][T28254] bridge_slave_1: entered promiscuous mode
[  807.264467][T28340] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6300'.
[  807.326318][T25553] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  807.513706][T28254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  807.541969][T28254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  807.675783][T28254] team0: Port device team_slave_0 added
[  807.707699][T28254] team0: Port device team_slave_1 added
[  807.723309][T28351] tipc: Started in network mode
[  807.728626][T28351] tipc: Node identity 12a8fe2d4837, cluster identity 4711
[  807.736063][T28351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  807.764327][T28351] syzkaller0: entered promiscuous mode
[  807.771812][T28351] syzkaller0: entered allmulticast mode
[  807.837443][T28351] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6305'.
[  807.851526][T28254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  807.862721][T28254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.900025][T28254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  807.919427][T28254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  807.926494][T28254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.988513][T28254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  808.017652][T28352] tipc: Resetting bearer <eth:syzkaller0>
[  808.055278][T28348] tipc: Resetting bearer <eth:syzkaller0>
[  808.092409][T28348] tipc: Disabling bearer <eth:syzkaller0>
[  808.198300][T28254] hsr_slave_0: entered promiscuous mode
[  808.205444][T28254] hsr_slave_1: entered promiscuous mode
[  808.216815][T28254] debugfs: 'hsr0' already exists in 'hsr'
[  808.224233][T28254] Cannot create hsr debugfs directory
[  808.286589][T28376] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  808.508524][ T5638] Bluetooth: hci2: command tx timeout
[  808.753891][ T1317] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  808.764140][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  808.889583][T28392] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  809.039719][T28396] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6319'.
[  809.187872][T28401] Cannot find add_set index 2 as target
[  809.215194][T28401] Cannot find add_set index 2 as target
[  809.389225][T28390] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6317'.
[  809.982360][T28405] nbd: socks must be embedded in a SOCK_ITEM attr
[  810.589425][ T5638] Bluetooth: hci2: command tx timeout
[  810.670711][   T10] block nbd3: Possible stuck request ffff888026bee000: control (read@0,2048B). Runtime 210 seconds
[  810.682575][ T1600] block nbd4: Possible stuck request ffff88802701e000: control (read@0,2048B). Runtime 210 seconds
[  811.846348][T28396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  812.028026][T28411] netlink: 'syz.1.6325': attribute type 1 has an invalid length.
[  812.210165][T28411] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  812.213866][T28421] netlink: 'syz.4.6327': attribute type 11 has an invalid length.
[  812.545531][T28432] block nbd0: Unsupported socket: should be TCP or UNIX.
[  812.555942][T28435] ±ÿ speed is unknown, defaulting to 1000
[  812.563725][T28435] lo speed is unknown, defaulting to 1000
[  812.571728][T28432] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6329'.
[  812.609800][T28432] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6329'.
[  812.668864][ T5638] Bluetooth: hci2: command tx timeout
[  812.814712][T28445] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6334'.
[  812.815577][T28446] xt_hashlimit: size too large, truncated to 1048576
[  812.838315][T28445] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6334'.
[  812.864482][T28445] netlink: 'syz.0.6334': attribute type 5 has an invalid length.
[  812.895658][T28445] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6334'.
[  812.928308][T28451] xt_connbytes: Forcing CT accounting to be enabled
[  813.583350][T28460] xt_hashlimit: size too large, truncated to 1048576
[  813.702815][T28463] bridge1: entered allmulticast mode
[  814.003884][T28254] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  814.078773][T28254] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  814.127416][T28254] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  814.172039][T28254] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  814.193442][T28254] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  814.247818][T28254] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  814.311954][T28254] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  814.357077][T28254] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  814.375348][T28488] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6345'.
[  814.426342][T28487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6346'.
[  814.576891][T28487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6346'.
[  814.699779][T28502] ±ÿ speed is unknown, defaulting to 1000
[  814.742523][T28502] lo speed is unknown, defaulting to 1000
[  814.864199][T28509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6352'.
[  814.895419][T28508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6351'.
[  814.912734][T28254] 8021q: adding VLAN 0 to HW filter on device bond0
[  814.962771][T28509] vlan3: entered allmulticast mode
[  814.980147][T28509] bridge8: entered allmulticast mode
[  815.139927][T28513] erspan0: left allmulticast mode
[  815.156536][T28513] bridge8: port 1(erspan0) entered blocking state
[  815.180620][T28513] bridge8: port 1(erspan0) entered disabled state
[  815.199075][T28513] erspan0: entered allmulticast mode
[  815.222605][T28513] erspan0: entered promiscuous mode
[  815.272909][T28254] 8021q: adding VLAN 0 to HW filter on device team0
[  815.295449][T25553] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.302713][T25553] bridge0: port 1(bridge_slave_0) entered forwarding state
[  815.403028][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.410328][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  815.642363][T28525] xt_hashlimit: size too large, truncated to 1048576
[  815.729357][T23795] batadv1: left promiscuous mode
[  816.721437][T28546] xt_hashlimit: size too large, truncated to 1048576
[  816.829086][T28549] bridge0: port 1(bridge_slave_0) entered disabled state
[  816.862902][T28553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6359'.
[  816.975920][T28549] bridge_slave_0 (unregistering): left allmulticast mode
[  817.139570][T28549] bridge_slave_0 (unregistering): left promiscuous mode
[  817.155135][T28549] bridge0: port 1(bridge_slave_0) entered disabled state
[  817.372664][T28254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  817.592632][T28254] veth0_vlan: entered promiscuous mode
[  817.671990][T28254] veth1_vlan: entered promiscuous mode
[  818.001871][T28254] veth0_macvtap: entered promiscuous mode
[  818.121335][T28254] veth1_macvtap: entered promiscuous mode
[  818.182905][T28601] xt_hashlimit: size too large, truncated to 1048576
[  818.324321][T28254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  818.413400][T28254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  818.467046][T23795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  818.494506][T23795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  818.525854][T23795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  818.767957][T23795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  819.416833][T28611] syzkaller1: entered promiscuous mode
[  819.423732][T28611] syzkaller1: entered allmulticast mode
[  819.583889][ T8386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  819.603447][ T8386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  819.751838][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  819.782759][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  820.071919][T28632] netlink: 'syz.2.6279': attribute type 8 has an invalid length.
[  820.093222][T28632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6279'.
[  820.728800][T28648] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6383'.
[  821.168934][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  821.187161][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  821.197331][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  821.253485][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  821.280180][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  821.999559][T17352] syz_tun (unregistering): left promiscuous mode
[  822.009177][T17352] team0: Port device syz_tun removed
[  822.257374][T28653] ±ÿ speed is unknown, defaulting to 1000
[  822.282136][T28653] lo speed is unknown, defaulting to 1000
[  822.693972][T28683] nbd: nbd4 already in use
[  822.708261][T28683] block nbd4: NBD_DISCONNECT
[  822.737614][T28683] block nbd4: Send disconnect failed -32
[  822.748048][T28683] block nbd4: shutting down sockets
[  822.785793][    C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  822.795335][    C1] Buffer I/O error on dev nbd4, logical block 0, async page read
[  822.816268][ T1600] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  822.832484][ T1600] Buffer I/O error on dev nbd4, logical block 0, async page read
[  822.844975][ T1600] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  822.856309][ T1600] Buffer I/O error on dev nbd4, logical block 0, async page read
[  822.864677][ T1600] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  822.874219][ T1600] Buffer I/O error on dev nbd4, logical block 0, async page read
[  822.882673][ T7811] ldm_validate_partition_table(): Disk read failed.
[  822.890443][   T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  822.899684][   T25] Buffer I/O error on dev nbd4, logical block 0, async page read
[  822.908178][T28688] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  822.917775][T28688] Buffer I/O error on dev nbd4, logical block 0, async page read
[  822.926392][T28688] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  822.935822][T28688] Buffer I/O error on dev nbd4, logical block 0, async page read
[  822.947704][T28688] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  822.958265][T28688] Buffer I/O error on dev nbd4, logical block 0, async page read
[  822.966620][T28688] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  822.976030][T28688] Buffer I/O error on dev nbd4, logical block 0, async page read
[  822.983958][ T7811] Dev nbd4: unable to read RDB block 0
[  822.990592][T28688] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  823.000084][T28688] Buffer I/O error on dev nbd4, logical block 0, async page read
[  823.010470][ T7811]  nbd4: unable to read partition table
[  823.018804][ T7811] nbd4: partition table beyond EOD, truncated
[  823.061006][ T4988] udevd[4988]: worker [7811] terminated by signal 9 (Killed)
[  823.072669][ T4988] udevd[4988]: worker [7811] failed while handling '/devices/virtual/block/nbd4'
[  823.113286][T28511] Set syz1 is full, maxelem 65536 reached
[  823.186167][T28653] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.203489][T28653] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.217926][T28653] bridge_slave_0: entered allmulticast mode
[  823.235399][T28653] bridge_slave_0: entered promiscuous mode
[  823.272497][T28653] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.292886][T28653] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.355988][T28696] xt_hashlimit: size too large, truncated to 1048576
[  823.382239][T28653] bridge_slave_1: entered allmulticast mode
[  823.389729][ T5624] Bluetooth: hci4: command tx timeout
[  823.401078][T28653] bridge_slave_1: entered promiscuous mode
[  823.446524][T28653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  823.460071][T28653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  823.508823][T28653] team0: Port device team_slave_0 added
[  823.517694][T28653] team0: Port device team_slave_1 added
[  823.652297][T28653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  823.660831][T28653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  823.736654][T28653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  823.866668][T28653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  823.892170][T28653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  823.923830][T28653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  824.099170][T28653] hsr_slave_0: entered promiscuous mode
[  824.119964][T28653] hsr_slave_1: entered promiscuous mode
[  824.152816][T28653] debugfs: 'hsr0' already exists in 'hsr'
[  824.174175][T28653] Cannot create hsr debugfs directory
[  824.337275][T28714] netlink: 'syz.4.6400': attribute type 8 has an invalid length.
[  825.053324][T28732] syzkaller1: entered promiscuous mode
[  825.103616][T28732] syzkaller1: entered allmulticast mode
[  825.190672][T28736] netlink: 'syz.3.6405': attribute type 21 has an invalid length.
[  825.206270][T28736] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6405'.
[  825.257271][T28736] netlink: 'syz.3.6405': attribute type 4 has an invalid length.
[  825.265618][T28736] netlink: 'syz.3.6405': attribute type 5 has an invalid length.
[  825.273649][T28736] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6405'.
[  825.468868][ T5624] Bluetooth: hci4: command tx timeout
[  826.253278][T28758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6412'.
[  826.266854][T28757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  826.443419][T28760] xt_hashlimit: size too large, truncated to 1048576
[  826.669184][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.722731][T28765] mac80211_hwsim hwsim54 syzkaller0: entered promiscuous mode
[  826.747004][T28765] mac80211_hwsim hwsim54 syzkaller0: entered allmulticast mode
[  826.791887][T28769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  826.870471][T28653] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  826.893140][T28653] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  826.920784][T28653] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  826.974986][T28653] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  827.005157][T28653] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  827.027058][T28653] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  827.046890][T28653] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  827.083441][T28653] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  827.347541][T11336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.413633][T28653] 8021q: adding VLAN 0 to HW filter on device bond0
[  827.541500][T28653] 8021q: adding VLAN 0 to HW filter on device team0
[  827.549264][ T5624] Bluetooth: hci4: command tx timeout
[  827.580084][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state
[  827.587242][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  827.649434][T28785] ±ÿ speed is unknown, defaulting to 1000
[  827.672197][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state
[  827.679446][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  827.700605][T28785] lo speed is unknown, defaulting to 1000
[  827.795973][T28653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  827.807369][T28653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  827.840825][T28790] sctp: [Deprecated]: syz.1.6421 (pid 28790) Use of struct sctp_assoc_value in delayed_ack socket option.
[  827.840825][T28790] Use struct sctp_sack_info instead
[  827.931243][ T5733] tipc: Node number set to 1520434733
[  827.950287][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  828.022474][T28799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6424'.
[  828.205019][T28799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6424'.
[  828.304479][T28806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.314897][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.352008][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.389342][T28806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6425'.
[  828.409971][T28806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6425'.
[  828.754572][T28815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.765940][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.388859][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.425154][T28653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  829.530467][T28837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.556369][T28653] veth0_vlan: entered promiscuous mode
[  829.569749][T28837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.598837][T28653] veth1_vlan: entered promiscuous mode
[  829.603442][T28837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.628516][ T5624] Bluetooth: hci4: command tx timeout
[  829.672843][T28653] veth0_macvtap: entered promiscuous mode
[  829.675122][T13037] IPVS: starting estimator thread 0...
[  829.687787][T28653] veth1_macvtap: entered promiscuous mode
[  829.710252][T13037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.732188][T28653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  829.761800][T28653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  829.778595][T28843] IPVS: using max 29 ests per chain, 69600 per kthread
[  829.824489][T23796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  829.876305][T23796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  829.930833][T23796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  829.987561][T23796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  830.310687][T28856] FAULT_INJECTION: forcing a failure.
[  830.310687][T28856] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  830.325628][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  830.370404][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  830.411790][T28856] CPU: 0 UID: 0 PID: 28856 Comm: syz.1.6436 Not tainted syzkaller #0 PREEMPT(full) 
[  830.411820][T28856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  830.411835][T28856] Call Trace:
[  830.411849][T28856]  <TASK>
[  830.411859][T28856]  dump_stack_lvl+0xe8/0x150
[  830.411899][T28856]  should_fail_ex+0x40c/0x560
[  830.411931][T28856]  _copy_from_user+0x2d/0xb0
[  830.411965][T28856]  ___sys_sendmsg+0x1c6/0x360
[  830.411998][T28856]  ? __lock_acquire+0x683/0x2cf0
[  830.412032][T28856]  ? __pfx____sys_sendmsg+0x10/0x10
[  830.412107][T28856]  ? __fget_files+0x2a/0x420
[  830.412135][T28856]  ? __fget_files+0x3a2/0x420
[  830.412175][T28856]  __x64_sys_sendmsg+0x1b1/0x290
[  830.412209][T28856]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  830.412262][T28856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  830.412287][T28856]  do_syscall_64+0x174/0x580
[  830.412316][T28856]  ? trace_irq_disable+0x3b/0x140
[  830.412343][T28856]  ? clear_bhb_loop+0x40/0x90
[  830.412379][T28856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  830.412401][T28856] RIP: 0033:0x7f851079de59
[  830.412422][T28856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  830.412441][T28856] RSP: 002b:00007f850e9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  830.412464][T28856] RAX: ffffffffffffffda RBX: 00007f8510a26180 RCX: 00007f851079de59
[  830.412481][T28856] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005
[  830.412494][T28856] RBP: 00007f850e9f6090 R08: 0000000000000000 R09: 0000000000000000
[  830.412508][T28856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  830.412522][T28856] R13: 00007f8510a26218 R14: 00007f8510a26180 R15: 00007ffe522a62d8
[  830.412558][T28856]  </TASK>
[  830.417318][T28859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6438'.
[  830.655587][T23796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  830.680879][T23796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  831.006371][T28869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6442'.
[  831.129234][T28881] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6384'.
[  831.239244][T28881] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6384'.
[  831.799973][   T10] block nbd9: Possible stuck request ffff8880272a0000: control (read@0,1024B). Runtime 90 seconds
[  831.811072][   T10] block nbd9: Possible stuck request ffff8880272a01c0: control (read@1024,1024B). Runtime 90 seconds
[  831.822278][   T10] block nbd9: Possible stuck request ffff8880272a0380: control (read@2048,1024B). Runtime 90 seconds
[  831.833580][   T10] block nbd9: Possible stuck request ffff8880272a0540: control (read@3072,1024B). Runtime 90 seconds
[  832.336516][T28904] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6449'.
[  832.405335][T28904] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6449'.
[  832.474431][T28914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6452'.
[  832.508206][T28907] lo: entered allmulticast mode
[  832.519787][T28907] tunl0: entered allmulticast mode
[  832.551129][T28907] gre0: entered allmulticast mode
[  832.567837][T28907] gretap0: entered allmulticast mode
[  832.589531][T28907] erspan0: entered allmulticast mode
[  832.609882][T28907] ip_vti0: entered allmulticast mode
[  832.645180][T28907] ip6_vti0: entered allmulticast mode
[  832.665481][T28907] sit0: entered allmulticast mode
[  832.694625][T28907] ip6tnl0: entered allmulticast mode
[  832.703441][T28907] ip6gre0: entered allmulticast mode
[  832.734338][T28907] syz_tun: entered allmulticast mode
[  832.761122][T28907] ip6gretap0: entered allmulticast mode
[  832.794600][T28907] bridge0: entered allmulticast mode
[  832.821718][T28907] vcan0: entered allmulticast mode
[  832.850314][T28907] bond0: entered allmulticast mode
[  832.864911][T28907] bond_slave_0: entered allmulticast mode
[  832.877793][T28907] bond_slave_1: entered allmulticast mode
[  832.893873][T28907] team0: left promiscuous mode
[  832.905935][T28907] team_slave_0: left promiscuous mode
[  832.920498][T28907] team_slave_1: left promiscuous mode
[  832.934796][T28907] dummy0: entered allmulticast mode
[  832.951519][T28907] nlmon0: entered allmulticast mode
[  832.958149][T28907] batadv0: entered allmulticast mode
[  832.975186][T28907] vxcan0: entered allmulticast mode
[  832.985616][T28907] vxcan1: entered allmulticast mode
[  832.996426][T28907] veth0: entered allmulticast mode
[  833.004466][T28907] veth1: entered allmulticast mode
[  833.011253][T28907] wg0: entered allmulticast mode
[  833.017336][T28907] wg2: entered allmulticast mode
[  833.048258][T28907] veth0_to_bridge: entered allmulticast mode
[  833.064835][T28907] veth1_to_bridge: entered allmulticast mode
[  833.090296][T28907] veth0_to_bond: entered allmulticast mode
[  833.100150][T28907] veth1_to_bond: entered allmulticast mode
[  833.107568][T28907] veth0_to_team: entered allmulticast mode
[  833.116273][T28907] veth1_to_team: entered allmulticast mode
[  833.125837][T28907] veth0_to_batadv: entered allmulticast mode
[  833.134168][T28907] batadv_slave_0: entered allmulticast mode
[  833.142348][T28907] veth1_to_batadv: entered allmulticast mode
[  833.160590][T28907] batadv_slave_1: entered allmulticast mode
[  833.179110][T28907] xfrm0: entered allmulticast mode
[  833.193857][T28907] veth0_to_hsr: entered allmulticast mode
[  833.203770][T28907] hsr_slave_0: entered allmulticast mode
[  833.211078][T28907] veth1_to_hsr: entered allmulticast mode
[  833.217754][T28907] hsr_slave_1: entered allmulticast mode
[  833.228135][T28907] hsr0: entered allmulticast mode
[  833.235909][T28907] veth1_virt_wifi: entered allmulticast mode
[  833.244290][T28907] veth0_virt_wifi: entered allmulticast mode
[  833.252233][T28907] virt_wifi0: entered allmulticast mode
[  833.258257][T28907] veth1_vlan: entered allmulticast mode
[  833.265942][T28907] veth0_vlan: entered allmulticast mode
[  833.273621][T28907] vlan0: entered allmulticast mode
[  833.280928][T28907] vlan1: entered allmulticast mode
[  833.286972][T28907] macvlan0: entered allmulticast mode
[  833.295397][T28907] macvlan1: entered allmulticast mode
[  833.304131][T28907] ipvlan0: entered allmulticast mode
[  833.314102][T28907] ipvlan1: entered allmulticast mode
[  833.320984][T28907] geneve0: entered allmulticast mode
[  833.327899][T28907] geneve1: entered allmulticast mode
[  833.344006][T28907] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  833.355976][T28907] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  833.374074][T28907] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  833.383331][T28907] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  833.394372][T28907] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode
[  833.405648][T28907] mac80211_hwsim hwsim53 wlan1: entered allmulticast mode
[  833.414457][T28907] macsec1: entered allmulticast mode
[  833.420848][T28907] bridge1: entered allmulticast mode
[  833.426393][T28907] bridge2: entered allmulticast mode
[  833.445266][T28920] net_ratelimit: 12 callbacks suppressed
[  833.445288][T28920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  833.690957][T28932] syzkaller0: entered promiscuous mode
[  833.710849][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.719671][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.730268][T28932] syzkaller0: entered allmulticast mode
[  833.852016][T28932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  833.859650][T28943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6463'.
[  833.892709][T28931] tipc: Resetting bearer <eth:syzkaller0>
[  833.998131][T28931] tipc: Disabling bearer <eth:syzkaller0>
[  834.074625][T28947] vlan2: entered promiscuous mode
[  834.112252][T28953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6468'.
[  834.139137][T28947] bridge0: entered promiscuous mode
[  834.249941][T28956] Bluetooth: MGMT ver 1.23
[  834.728831][T28979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.752118][T11336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.764714][T28979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.789459][T28979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.832772][T28979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.876131][T28979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.909000][T28979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.076131][T28993] syzkaller0: entered promiscuous mode
[  835.092487][T28993] syzkaller0: entered allmulticast mode
[  835.115005][T28993] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  835.143547][T28992] tipc: Resetting bearer <eth:syzkaller0>
[  835.275252][T28992] tipc: Disabling bearer <eth:syzkaller0>
[  835.296896][   T30] audit: type=1804 audit(1783519248.415:15): pid=29005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6483" name="/newroot/8/cgroup.controllers" dev="tmpfs" ino=60 res=1 errno=0
[  835.341100][   T30] audit: type=1800 audit(1783519248.415:16): pid=29005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6483" name="cgroup.controllers" dev="tmpfs" ino=60 res=0 errno=0
[  836.053628][T29039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  836.061009][T29039] IPv6: NLM_F_CREATE should be set when creating new route
[  836.305824][T29046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6499'.
[  836.392925][T29046] netlink: 'syz.2.6499': attribute type 8 has an invalid length.
[  836.433756][T29046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6499'.
[  836.487051][T29062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6501'.
[  836.549703][T23795] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  836.562167][T29046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6499'.
[  836.589743][T23795] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  836.611981][T23795] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  836.625637][T29046] netlink: 'syz.2.6499': attribute type 8 has an invalid length.
[  836.655052][T23795] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  836.689500][T29046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6499'.
[  836.749304][T29070] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6502'.
[  836.768312][T29046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6499'.
[  836.794253][T29071] xt_hashlimit: size too large, truncated to 1048576
[  836.815337][T29046] netlink: 'syz.2.6499': attribute type 8 has an invalid length.
[  836.845257][T29046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6499'.
[  836.867154][T29076] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6502'.
[  836.899996][T29076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6502'.
[  836.935793][T29078] netlink: 'syz.3.6504': attribute type 6 has an invalid length.
[  836.958535][T29078] netlink: 'syz.3.6504': attribute type 5 has an invalid length.
[  837.237151][T29083] netlink: 'syz.3.6506': attribute type 30 has an invalid length.
[  837.352065][T29083] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  837.386744][T29083] bond1 (unregistering): Released all slaves
[  837.757036][T29099] netlink: 'syz.0.6511': attribute type 12 has an invalid length.
[  838.154091][T29117] xt_hashlimit: size too large, truncated to 1048576
[  838.573274][T29127] Bluetooth: MGMT ver 1.23
[  838.584615][T29127] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  838.643709][T29127] ipvlan2: entered allmulticast mode
[  838.650688][T29127] team0: entered allmulticast mode
[  838.655902][T29127] team_slave_0: entered allmulticast mode
[  838.674304][T29127] team_slave_1: entered allmulticast mode
[  838.690545][T29127] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  838.774988][T29136] FAULT_INJECTION: forcing a failure.
[  838.774988][T29136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  838.810021][T29136] CPU: 0 UID: 0 PID: 29136 Comm: syz.2.6524 Not tainted syzkaller #0 PREEMPT(full) 
[  838.810052][T29136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  838.810066][T29136] Call Trace:
[  838.810075][T29136]  <TASK>
[  838.810085][T29136]  dump_stack_lvl+0xe8/0x150
[  838.810124][T29136]  should_fail_ex+0x40c/0x560
[  838.810156][T29136]  _copy_from_user+0x2d/0xb0
[  838.810190][T29136]  ___sys_sendmsg+0x1c6/0x360
[  838.810223][T29136]  ? __lock_acquire+0x683/0x2cf0
[  838.810258][T29136]  ? __pfx____sys_sendmsg+0x10/0x10
[  838.810332][T29136]  ? __fget_files+0x2a/0x420
[  838.810361][T29136]  ? __fget_files+0x3a2/0x420
[  838.810402][T29136]  __x64_sys_sendmsg+0x1b1/0x290
[  838.810439][T29136]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  838.810494][T29136]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.810520][T29136]  do_syscall_64+0x174/0x580
[  838.810551][T29136]  ? trace_irq_disable+0x3b/0x140
[  838.810580][T29136]  ? clear_bhb_loop+0x40/0x90
[  838.810608][T29136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.810631][T29136] RIP: 0033:0x7f155bb9de59
[  838.810652][T29136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  838.810672][T29136] RSP: 002b:00007f1559df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  838.810696][T29136] RAX: ffffffffffffffda RBX: 00007f155be25fa0 RCX: 00007f155bb9de59
[  838.810721][T29136] RDX: 0000000000040810 RSI: 0000200000000180 RDI: 0000000000000041
[  838.810737][T29136] RBP: 00007f1559df6090 R08: 0000000000000000 R09: 0000000000000000
[  838.810751][T29136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  838.810765][T29136] R13: 00007f155be26038 R14: 00007f155be25fa0 R15: 00007ffc84444f68
[  838.810801][T29136]  </TASK>
[  839.015506][ T5740] net_ratelimit: 8 callbacks suppressed
[  839.015527][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.078731][T29113] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  839.147872][T29113] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  839.373234][T29143] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  839.528172][T29113] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  839.555441][T29113] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  839.672841][T29164] block nbd0: Unsupported socket: should be TCP or UNIX.
[  839.788860][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.932664][T29177] xt_hashlimit: size too large, truncated to 1048576
[  840.028867][T11336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.596735][T29113] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  840.617880][T29113] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  840.728051][ T5624] block nbd1: Receive control failed (result -1)
[  840.734820][ T5624] 
[  840.737186][ T5624] ======================================================
[  840.744236][ T5624] WARNING: possible circular locking dependency detected
[  840.751393][ T5624] syzkaller #0 Not tainted
[  840.755839][ T5624] ------------------------------------------------------
[  840.762891][ T5624] kworker/u9:2/5624 is trying to acquire lock:
[  840.769080][ T5624] ffff88804a7d6e60 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390
[  840.778631][ T5624] 
[  840.778631][ T5624] but task is already holding lock:
[  840.786022][ T5624] ffff88807fcc5068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10
[  840.789010][   T10] block nbd3: Possible stuck request ffff888026bee000: control (read@0,2048B). Runtime 240 seconds
[  840.795122][ T5624] 
[  840.795122][ T5624] which lock already depends on the new lock.
[  840.795122][ T5624] 
[  840.795135][ T5624] 
[  840.795135][ T5624] the existing dependency chain (in reverse order) is:
[  840.795144][ T5624] 
[  840.795144][ T5624] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  840.795181][ T5624]        __mutex_lock+0x19d/0x1550
[  840.838058][ T5624]        nbd_queue_rq+0x373/0x1150
[  840.843207][ T5624]        blk_mq_dispatch_rq_list+0x499/0x1990
[  840.849379][ T5624]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  840.856324][ T5624]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  840.862847][ T5624]        blk_mq_run_work_fn+0x16c/0x300
[  840.868414][ T5624]        process_scheduled_works+0xa8e/0x14e0
[  840.874505][ T5624]        worker_thread+0xa47/0xfb0
[  840.879643][ T5624]        kthread+0x388/0x470
[  840.884260][ T5624]        ret_from_fork+0x514/0xb70
[  840.889398][ T5624]        ret_from_fork_asm+0x1a/0x30
[  840.894723][ T5624] 
[  840.894723][ T5624] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  840.901957][ T5624]        __mutex_lock+0x19d/0x1550
[  840.907095][ T5624]        nbd_queue_rq+0xc1/0x1150
[  840.912151][ T5624]        blk_mq_dispatch_rq_list+0x499/0x1990
[  840.918244][ T5624]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  840.925113][ T5624]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  840.931653][ T5624]        blk_mq_run_work_fn+0x16c/0x300
[  840.937214][ T5624]        process_scheduled_works+0xa8e/0x14e0
[  840.943301][ T5624]        worker_thread+0xa47/0xfb0
[  840.948523][ T5624]        kthread+0x388/0x470
[  840.953158][ T5624]        ret_from_fork+0x514/0xb70
[  840.958290][ T5624]        ret_from_fork_asm+0x1a/0x30
[  840.963607][ T5624] 
[  840.963607][ T5624] -> #4 (set->srcu){.+.+}-{0:0}:
[  840.970752][ T5624]        __synchronize_srcu+0xc9/0x2f0
[  840.976232][ T5624]        elevator_switch+0x1e8/0x7b0
[  840.981619][ T5624]        elevator_change+0x2fa/0x480
[  840.986928][ T5624]        elevator_set_default+0x375/0x440
[  840.992688][ T5624]        blk_register_queue+0x3f3/0x4e0
[  840.998385][ T5624]        __add_disk+0x6cb/0xe30
[  841.003266][ T5624]        add_disk_fwnode+0xfb/0x4b0
[  841.008477][ T5624]        nbd_dev_add+0x733/0xb60
[  841.013450][ T5624]        nbd_init+0x15f/0x1e0
[  841.018149][ T5624]        do_one_initcall+0x250/0x870
[  841.023471][ T5624]        do_initcall_level+0x10a/0x1a0
[  841.028959][ T5624]        do_initcalls+0x59/0xa0
[  841.033838][ T5624]        kernel_init_freeable+0x29d/0x3e0
[  841.039589][ T5624]        kernel_init+0x1d/0x1d0
[  841.044456][ T5624]        ret_from_fork+0x514/0xb70
[  841.049591][ T5624]        ret_from_fork_asm+0x1a/0x30
[  841.054895][ T5624] 
[  841.054895][ T5624] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  841.062738][ T5624]        __mutex_lock+0x19d/0x1550
[  841.067872][ T5624]        elevator_change+0x1af/0x480
[  841.073177][ T5624]        elevator_set_none+0xb5/0x140
[  841.078580][ T5624]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  841.084969][ T5624]        nbd_start_device+0x189/0xb30
[  841.090367][ T5624]        nbd_genl_connect+0x1597/0x1c10
[  841.095938][ T5624]        genl_family_rcv_msg_doit+0x233/0x340
[  841.102026][ T5624]        genl_rcv_msg+0x614/0x7a0
[  841.107068][ T5624]        netlink_rcv_skb+0x226/0x4a0
[  841.112378][ T5624]        genl_rcv+0x28/0x40
[  841.116898][ T5624]        netlink_unicast+0x7bb/0x940
[  841.122200][ T5624]        netlink_sendmsg+0x813/0xb40
[  841.127513][ T5624]        sock_sendmsg_nosec+0x13a/0x180
[  841.133087][ T5624]        ____sys_sendmsg+0x54e/0x850
[  841.138397][ T5624]        ___sys_sendmsg+0x2a5/0x360
[  841.143632][ T5624]        __x64_sys_sendmsg+0x1b1/0x290
[  841.149121][ T5624]        do_syscall_64+0x174/0x580
[  841.154257][ T5624]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.160690][ T5624] 
[  841.160690][ T5624] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  841.169358][ T5624]        blk_alloc_queue+0x544/0x690
[  841.174685][ T5624]        __blk_mq_alloc_disk+0x194/0x390
[  841.180436][ T5624]        nbd_dev_add+0x494/0xb60
[  841.185485][ T5624]        nbd_init+0x15f/0x1e0
[  841.190191][ T5624]        do_one_initcall+0x250/0x870
[  841.195501][ T5624]        do_initcall_level+0x10a/0x1a0
[  841.201009][ T5624]        do_initcalls+0x59/0xa0
[  841.205886][ T5624]        kernel_init_freeable+0x29d/0x3e0
[  841.211624][ T5624]        kernel_init+0x1d/0x1d0
[  841.216493][ T5624]        ret_from_fork+0x514/0xb70
[  841.221632][ T5624]        ret_from_fork_asm+0x1a/0x30
[  841.226955][ T5624] 
[  841.226955][ T5624] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  841.234188][ T5624]        fs_reclaim_acquire+0x71/0x100
[  841.239679][ T5624]        __kmalloc_noprof+0xbc/0x720
[  841.244984][ T5624]        tls_sw_sendmsg+0x599/0x2860
[  841.250359][ T5624]        sock_sendmsg_nosec+0x90/0x180
[  841.255838][ T5624]        sock_sendmsg+0x1ca/0x2d0
[  841.260879][ T5624]        splice_to_socket+0xb5e/0x12a0
[  841.266370][ T5624]        direct_splice_actor+0x101/0x160
[  841.272026][ T5624]        splice_direct_to_actor+0x57b/0xcb0
[  841.277950][ T5624]        do_splice_direct+0x195/0x290
[  841.283353][ T5624]        do_sendfile+0x52e/0x7c0
[  841.288314][ T5624]        __se_sys_sendfile64+0x144/0x1a0
[  841.293967][ T5624]        do_syscall_64+0x174/0x580
[  841.299101][ T5624]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.305530][ T5624] 
[  841.305530][ T5624] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}:
[  841.313722][ T5624]        __lock_acquire+0x1520/0x2cf0
[  841.319123][ T5624]        lock_acquire+0x106/0x350
[  841.324266][ T5624]        lock_sock_nested+0x41/0x100
[  841.329586][ T5624]        inet_shutdown+0x6a/0x390
[  841.334636][ T5624]        nbd_mark_nsock_dead+0x2cb/0x550
[  841.340303][ T5624]        recv_work+0x1cee/0x1e10
[  841.345252][ T5624]        process_scheduled_works+0xa8e/0x14e0
[  841.351339][ T5624]        worker_thread+0xa47/0xfb0
[  841.356466][ T5624]        kthread+0x388/0x470
[  841.361078][ T5624]        ret_from_fork+0x514/0xb70
[  841.366213][ T5624]        ret_from_fork_asm+0x1a/0x30
[  841.371517][ T5624] 
[  841.371517][ T5624] other info that might help us debug this:
[  841.371517][ T5624] 
[  841.381753][ T5624] Chain exists of:
[  841.381753][ T5624]   sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock
[  841.381753][ T5624] 
[  841.394826][ T5624]  Possible unsafe locking scenario:
[  841.394826][ T5624] 
[  841.402297][ T5624]        CPU0                    CPU1
[  841.407677][ T5624]        ----                    ----
[  841.413059][ T5624]   lock(&nsock->tx_lock);
[  841.417499][ T5624]                                lock(&cmd->lock);
[  841.424016][ T5624]                                lock(&nsock->tx_lock);
[  841.430971][ T5624]   lock(sk_lock-AF_INET6-NBD);
[  841.436012][ T5624] 
[  841.436012][ T5624]  *** DEADLOCK ***
[  841.436012][ T5624] 
[  841.444192][ T5624] 3 locks held by kworker/u9:2/5624:
[  841.449511][ T5624]  #0: ffff888026976140 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  841.460791][ T5624]  #1: ffffc90004217c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  841.472559][ T5624]  #2: ffff88807fcc5068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10
[  841.481899][ T5624] 
[  841.481899][ T5624] stack backtrace:
[  841.487807][ T5624] CPU: 1 UID: 0 PID: 5624 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  841.487828][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  841.487842][ T5624] Workqueue: nbd1-recv recv_work
[  841.487861][ T5624] Call Trace:
[  841.487870][ T5624]  <TASK>
[  841.487880][ T5624]  dump_stack_lvl+0xe8/0x150
[  841.487907][ T5624]  print_circular_bug+0x2e1/0x300
[  841.487927][ T5624]  check_noncircular+0x12e/0x150
[  841.487958][ T5624]  __lock_acquire+0x1520/0x2cf0
[  841.487985][ T5624]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  841.488009][ T5624]  ? preempt_schedule_notrace+0x57/0x90
[  841.488031][ T5624]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  841.488051][ T5624]  ? __pfx_inet_shutdown+0x10/0x10
[  841.488076][ T5624]  ? inet_shutdown+0x6a/0x390
[  841.488097][ T5624]  lock_acquire+0x106/0x350
[  841.488119][ T5624]  ? inet_shutdown+0x6a/0x390
[  841.488148][ T5624]  lock_sock_nested+0x41/0x100
[  841.488168][ T5624]  ? inet_shutdown+0x6a/0x390
[  841.488193][ T5624]  inet_shutdown+0x6a/0x390
[  841.488216][ T5624]  nbd_mark_nsock_dead+0x2cb/0x550
[  841.488246][ T5624]  recv_work+0x1cee/0x1e10
[  841.488263][ T5624]  ? __lock_acquire+0x683/0x2cf0
[  841.488288][ T5624]  ? register_lock_class+0x31/0x2e0
[  841.488312][ T5624]  ? __lock_acquire+0x683/0x2cf0
[  841.488340][ T5624]  ? __pfx_recv_work+0x10/0x10
[  841.488360][ T5624]  ? do_raw_spin_lock+0x12b/0x2f0
[  841.488384][ T5624]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  841.488409][ T5624]  ? process_scheduled_works+0xa20/0x14e0
[  841.488438][ T5624]  ? rcu_is_watching+0x15/0xb0
[  841.488471][ T5624]  ? process_scheduled_works+0xa20/0x14e0
[  841.488494][ T5624]  process_scheduled_works+0xa8e/0x14e0
[  841.488535][ T5624]  ? __pfx_process_scheduled_works+0x10/0x10
[  841.488562][ T5624]  ? assign_work+0x3cf/0x5d0
[  841.488587][ T5624]  worker_thread+0xa47/0xfb0
[  841.488628][ T5624]  kthread+0x388/0x470
[  841.488657][ T5624]  ? __pfx_worker_thread+0x10/0x10
[  841.488686][ T5624]  ? __pfx_kthread+0x10/0x10
[  841.488714][ T5624]  ret_from_fork+0x514/0xb70
[  841.488740][ T5624]  ? __pfx_ret_from_fork+0x10/0x10
[  841.488765][ T5624]  ? __switch_to+0xc89/0x1420
[  841.488787][ T5624]  ? __pfx_kthread+0x10/0x10
[  841.488811][ T5624]  ret_from_fork_asm+0x1a/0x30
[  841.488835][ T5624]  </TASK>
[  841.619880][T29197] __nla_validate_parse: 14 callbacks suppressed
[  841.619938][T29197] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6537'.
[  841.726329][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  842.628179][T26693] bridge0: port 3(syz_tun) entered disabled state
[  842.645552][T26693] syz_tun (unregistering): left allmulticast mode
[  842.652244][T26693] syz_tun (unregistering): left promiscuous mode
[  842.681059][T15470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.700455][T26693] bridge0: port 3(syz_tun) entered disabled state
[  842.748923][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.830299][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.864515][T23795] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.955541][T23795] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.036223][T23795] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.114278][T23795] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.196311][T23795] bridge_slave_1: left allmulticast mode
[  843.202782][T23795] bridge_slave_1: left promiscuous mode
[  843.208721][T23795] bridge0: port 2(bridge_slave_1) entered disabled state
[  843.217308][T23795] bridge_slave_0: left allmulticast mode
[  843.223350][T23795] bridge_slave_0: left promiscuous mode
[  843.229539][T23795] bridge0: port 1(bridge_slave_0) entered disabled state
[  843.293122][T23795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  843.320190][T23795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  843.330078][T23795] bond0 (unregistering): Released all slaves
[  843.640577][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1
[  843.663713][T23795] hsr_slave_0: left promiscuous mode
[  843.670525][T23795] hsr_slave_1: left promiscuous mode
[  843.676434][T23795] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  843.684968][T23795] batman_adv: batadv0: Removing interface: batadv_slave_0
[  843.693137][T23795] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  843.702041][T23795] batman_adv: batadv0: Removing interface: batadv_slave_1
[  843.718516][T23795] veth1_macvtap: left promiscuous mode
[  843.724185][T23795] veth0_macvtap: left promiscuous mode
[  843.729936][T23795] veth1_vlan: left promiscuous mode
[  843.735219][T23795] veth0_vlan: left promiscuous mode
[  843.788869][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.896768][T23795] team0 (unregistering): Port device team_slave_1 removed
[  843.908565][T23795] team0 (unregistering): Port device team_slave_0 removed
[  843.949236][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.276429][T23795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  844.287072][T23795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.325099][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3
[  844.373724][T23795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  844.384242][T23795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.434977][T23795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  844.450110][T23795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.506198][T23795] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  844.523187][T23795] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.627126][T23795] bridge_slave_1: left allmulticast mode
[  844.634312][T23795] bridge_slave_1: left promiscuous mode
[  844.640379][T23795] bridge0: port 2(bridge_slave_1) entered disabled state
[  844.650718][T23795] bridge_slave_0: left allmulticast mode
[  844.660552][T23795] bridge_slave_0: left promiscuous mode
[  844.666364][T23795] bridge0: port 1(bridge_slave_0) entered disabled state
[  844.678724][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.687133][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.795660][T23795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  844.806700][T23795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  844.817010][T23795] bond0 (unregistering): Released all slaves
[  844.828140][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2
[  844.836211][T17084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.049278][T23795] hsr_slave_0: left promiscuous mode
[  845.055228][T23795] hsr_slave_1: left promiscuous mode
[  845.065897][T23795] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  845.074175][T23795] batman_adv: batadv0: Removing interface: batadv_slave_0
[  845.082772][T23795] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  845.090369][T23795] batman_adv: batadv0: Removing interface: batadv_slave_1
[  845.104163][T23795] veth1_macvtap: left promiscuous mode
[  845.109873][T23795] veth0_macvtap: left promiscuous mode
[  845.115440][T23795] veth1_vlan: left promiscuous mode
[  845.121171][T23795] veth0_vlan: left promiscuous mode
[  845.291058][T23795] team0 (unregistering): Port device team_slave_1 removed
[  845.303016][T23795] team0 (unregistering): Port device team_slave_0 removed
[  845.365834][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4
[  845.869280][T17084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.066235][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5
[  846.346415][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7
[  846.652357][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6
[  846.910572][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.943618][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8
[  846.989131][T15470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.950419][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.988646][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.028917][T17084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.037093][T17084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog