last executing test programs:

16.229901821s ago: executing program 3 (id=2812):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x358, 0xffffffff, 0x108, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502, {0x700}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r1, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x4005, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x80000001}, 0x1c)
sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x2d, 'io'}, {0x2b, 'perf_event'}, {0x2d, 'memory'}, {0x2d, 'devices'}, {0x2b, 'devices'}, {0x2b, 'devices'}, {0x2b, 'rlimit'}, {0x2d, 'devices'}, {0x2d, 'cpu'}, {0x2d, 'perf_event'}]}, 0x55)
recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast})
write$tun(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d15108004000b8014000c"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)

15.900167917s ago: executing program 3 (id=2815):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000050000000000000000040000850000002e0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000018000000b70300000000000085000000700000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.331234761s ago: executing program 2 (id=2902):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xf7, 0x5, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7800, 0x40, 0x3, 0x9}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$alg(0x26, 0x5, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f00000000c0), 0x10, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x801)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000140)={'c', ' *:* ', 'rwm\x00'}, 0xa)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r5=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r5}, 0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000d80)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)

5.574866871s ago: executing program 2 (id=2906):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0x808, 0x12)
r3 = accept4(r0, 0x0, 0x0, 0x80800)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000002c0)={0x10000018})
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd2d, 0x4001, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c055}, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000340), r3)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) (async)
write$cgroup_int(r2, &(0x7f0000000200)=0x808, 0x12) (async)
accept4(r0, 0x0, 0x0, 0x80800) (async)
epoll_create1(0x80000) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000002c0)={0x10000018}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd2d, 0x4001, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c055}, 0x0) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000340), r3) (async)

5.370177465s ago: executing program 2 (id=2909):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x12b8, 0x10, 0x1, 0x0, 0x4, "", [@nested={0x12a8, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x1296, 0x100, 0x0, 0x1, [@typed={0x8, 0xbe, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0xe5, 0x0, 0x0, @str='\\[,\x00'}, @generic='TI', @nested={0x117e, 0x37, 0x0, 0x1, [@generic="d2eda758b97f28c2c6a8df62f98d2a557c93398a535c1afeb96af0e3acbf2d34b9d51b21394290b3989dc3ab867928c9ba84df935a80e7d2472068f3267307fffe49debf06ace66ff0acadc5a9bf", @typed={0xc, 0x71, 0x0, 0x0, @u64=0xaa5}, @generic="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", @typed={0x8, 0x35, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x118, 0xa1, 0x0, 0x1, [@nested={0x4, 0x102}, @nested={0x4, 0x51}, @generic="c5b65e229bea65cca14b08a023eb4bafdfb4db0f8193bb48bf2498206b8d500ffcae54acae8e428c666c2953957d2b8a8981e94ecdd5dbdc8056e5c2e2621edfc5c0c34b832797b3b485ae5a4b0830c736f2f201af17c16e3144c860355a8a5f6bcf7acf012af2027c730f3574137e157e476f4dfda49db0d0ef0be2", @typed={0x69, 0x5f, 0x0, 0x0, @binary="469e034faae03cbeffbf0eb17deb5b406e272e229d0afd77a20cd1152681d6f4864be97cd1a9482e349e5c5843a44c050c99e58b7e0bb7897788ce2f0d3a4ffbdd2a816ca18900153ad79a240e9857933b6d42e7b8c6d16666da9c3e6600ce9b4cb3ef8b91"}, @nested={0x4, 0xfd}, @nested={0x4, 0x120}, @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x4b}, @nested={0x4, 0x115}]}]}, @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x14, 0xab, 0x0, 0x0, @ipv6=@private2}, @nested={0xc3, 0x60, 0x0, 0x1, [@nested={0x4, 0x14a}, @generic="6bce14665e1d9e012a16b8f26b439451dc1d1e5ae804500faf1e4cd37200b25ffc9d931782d24db1e5665521b8187a39976a88de734f24a33903260599e0a199803614a03da9e8223b5fe5584c7b855dd1f0172c88617a95ccf892a67119af22c69cecdef4ae8392bf210ff34be1b1b80394a4a52bd6ce3aad783832a5432ef962b12c3525168a9beff3a8c5799ad3278c6f12264a6047e56589645a8a7dac55617f23bc1406310e23b51ef74650a0f70de169f923688623747b4f"]}, @nested={0x20, 0x15f, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @u32=0x1}, @typed={0x14, 0xe7, 0x0, 0x0, @ipv6=@local}]}]}]}]}, 0x12b8}], 0x1, 0x0, 0x0, 0xb305e06daeb4c277}, 0x0)

5.162119981s ago: executing program 2 (id=2910):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000061f09c00000000001448a12e49899500", @ANYRESHEX, @ANYBLOB="96ba0cc23fe832f680f86715053076cc72747c3d929b2f22b0543b154299364c177e93840fec1a36283430a76e330073e16f2efbcbf45dd4fe9974a53e04b0e99ff4b2ee19714bd18eab4d797e10f839150a7a063a82c5ce922b9e148d25d61a1f449dc044d2b7615e63d1b7eaea82442e6ee6fd202f75b393"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

4.966164916s ago: executing program 2 (id=2914):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000e502000000000000000000000023b4c6576a1913b6f518d975fd084b08201e386374900622ef471c7a996aa0e56997bccaeca9532496053fcacb8d423b5d970ebfd52a8103b8d38faf4f2f557153c2b7bd993ff8736414d6dd9196a53800c0d6f99bc42209a696d4896e36f33b2fcbab0e2e0b0bf76e0a37ab9afd913e57175c70abe7027c"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f00000001c0), &(0x7f0000000180)=""/10, 0x2}, 0x20)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @loopback, <r1=>0x0}, &(0x7f0000000040)=0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x401, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50)

4.76671404s ago: executing program 2 (id=2916):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x10005865}}}}}}}, 0x3e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0)

4.724229579s ago: executing program 3 (id=2817):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0)={0x43}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket(0x23, 0x1, 0x4659)
getsockopt(r2, 0x200000000114, 0x2719, 0xffffffffffffffff, &(0x7f0000000000))
sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800100001040000ffff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200ea0000000800010003000000140003007866726d3000"/64], 0x58}}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@deltclass={0x40, 0x29, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9}, {0x9, 0xfff4}, {0x4, 0xffff}}, [@tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x10}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x40}}, 0x20000000)
r10 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@delqdisc={0xc8, 0x25, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2}, {0x9, 0x7}, {0x6, 0x7}}, [@TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xc, 0x30a, 0x995, 0x2, 0xe8fa, 0x692}}, {0x4}}, {{0x1c, 0x1, {0x99, 0x0, 0x8000, 0x34, 0x1, 0xe95, 0x6, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0xe, 0xd0, 0x0, 0x2, 0x1, 0x2, 0x2, 0x1}}, {0x6, 0x2, [0x1dcd]}}, {{0x1c, 0x1, {0x9, 0x9, 0x86, 0x4bc, 0x1, 0x28d, 0xbf48, 0x8}}, {0x14, 0x2, [0x4, 0x2, 0x3, 0x2, 0x2, 0x8a2f, 0xfff9, 0x8001]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44001}, 0x8010)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
sendto$packet(r9, &(0x7f00000003c0)="76ee5603230927bcf301fcc579438ed93f9be0355d90c53f4a4f1c912e381f993717e7c1abf7ea27c8d968d97f756cc987a198d96b888a6bc1be6959c26b3e45a2e0c6c35b778bcf6b7dfe15167535c3968f00aa4879e5e250ba81347155e5c80428ddb0f40b8c346d25f3620da58dc4a22bf7ebce", 0x75, 0x24000081, &(0x7f0000000440)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @local}, 0x14)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r12)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000006c0)={'wpan0\x00'})

3.326516524s ago: executing program 1 (id=2923):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0xa}, 0x50)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0)
sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x10, 0x3f8, 0x0, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_getaddrlabel={0x88, 0x4a, 0x100, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x3f, 0x0, 0x0, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x88}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r2, @ANYRESDEC=r1, @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x400c095}, 0x24000800)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001a00)=@filter={'filter\x00', 0x4, 0x4, 0x440, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xfeffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xff, 0xffffff00, 0xff], 0x4e20, 0x4e21, 0x4e21, 0x4e22, 0x5, 0x1, 0x9, 0x0, 0x1}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4}, 0x0, 0x138, 0x198, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x26, 0x8, 0x8, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff, 0xffffff00, 0xff, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff000000], [0xff000000], 0x72, 0x1674}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0xce24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0)
recvmmsg(r6, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x4d, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', <r9=>0x0})
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmmsg$sock(r10, &(0x7f0000002840)=[{{&(0x7f0000000600)=@can={0x1d, r9}, 0x80, 0x0}}], 0x1, 0x40050)

3.310335892s ago: executing program 3 (id=2924):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdf41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xc3}]}, &(0x7f0000000c40)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005000000058008000825b00f"], 0x4a)

3.100095229s ago: executing program 4 (id=2926):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f00000007c0)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0xda, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00', @ANYRES32=r1, @ANYRES64=0x0], 0x20)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000050)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syzkaller0\x00'})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f0000000300)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x102, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x80, &(0x7f00000001c0)}, 0x5)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000002, 0x100010, r10, 0x2000)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r12, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000)

2.606199382s ago: executing program 3 (id=2928):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r5, 0x215eb000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
r6 = socket(0x2a, 0x2, 0x0)
ioctl$HCIINQUIRY(r6, 0x800448f0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "193914", 0x48, 0x2f, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0xffff, [0x2be7, 0x1]}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x2, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], 0x0}, 0x94)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
accept4$inet6(r8, 0x0, 0x0, 0x80000)
shutdown(r8, 0x0)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, <r10=>0x0}, 0x8)
r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r10, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000800)={r11, r9, 0x4, r7}, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8)

2.604508185s ago: executing program 4 (id=2929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff4, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000030000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000004b180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8bfffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000180)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000fc0)={'c', ' *:* ', 'm\x00'}, 0x8)
recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
read$alg(r4, &(0x7f0000000300)=""/74, 0x4a)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
read$alg(r5, &(0x7f0000000000)=""/106, 0x6a)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000010c0)=ANY=[@ANYBLOB="1a000000003e920a04d01b6bf9bf6bf8be4a00000000000000000000000f00000018110000e15a685dbb0f454411565f2557dcee55", @ANYRES32=r2, @ANYRES8=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r6}, 0xc)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0)
r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendfile(r10, r9, 0x0, 0x100000000000ff)
write(r7, &(0x7f0000000080)="a5317d4564fed76be8947c50a7459067dfd3a17e023e944a3c9adadd0e22d32f460e32ff3b20acd9273d99c61b41441e2c7fbeea59db6cffdd995b62cdd4073d59769eff27a3b6588e8e5f98fdd3de24b38f013b8ca2996373263d8d5e2a9a7a164d54a1ad9bfa777abc145638fc0ad46128383df8d6d526cd4c78de3fd0642e58b2187376ad25bbb831430f185b33c4a00c9eef48a8a2ec74bf29849d8e78ffe94d440c47", 0xa5)
ioctl$OCFS2_IOC_GROUP_ADD64(r7, 0x40186f03, &(0x7f0000000140)={0x7, 0x7, 0x1, 0x2})
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @echo={0x8, 0x0, 0x0, 0x2, 0x9}}}}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001e0021002bbd700000ef8d7f04000000"], 0x14}, 0x1, 0x0, 0x0, 0x2008800}, 0x0)

1.938565432s ago: executing program 1 (id=2933):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x10, 0x803, 0x2)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$inet6(r9, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002740)="5cb142", 0x3}], 0x1}, 0x40)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1.537743268s ago: executing program 0 (id=2935):
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x2b, &(0x7f00000000c0)=0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000001000a0000000c00000005000000020000000000000500000000005f615f00b3756e74d3a86c2783c801e5b34202f6c23220bf49e0fd927ccb3255361d78aadabd9fece6a7049ef667c9828d5fa4a2d275005528c3f76b1d46dc59ee17b7b1c3972dda3626eb40c2bbad4b01cd94f14a42477c2589d70917e399789acfdd04ff06d1b937e2ff07e463e1684e76488c2c9d925375aec021e1b8372a524d08119d5dad7682df2f258aae5e807f195f4047d188f96ca0a4765fa8f8cb3d238334f3"], 0x0, 0x29, 0x0, 0x1}, 0x28)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4)
getsockopt$inet_opts(r1, 0x0, 0xd, 0x0, &(0x7f0000000340))
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="01dc1eae36b726a02500f0cb30e0cc689839aa3e77570fb158fbb5389389f6b4eb1bce43f5b47868e7a8fa6e3a293f065961d693d3d49478ba99c1688431be90bf67a1dae513b5cd393028", @ANYBLOB="017c8017174c6ee88dd5b60029bd84c8192719d93b2200001723fe503c7c1e61d9b230d61d811bba6e218ad75f9fd2821c135d54a10de152a8adee0c0c7f30c88035555030670f074619e1fc8260fae85041ced7bcbd1a8e1d649a5a8949fc49dfb100edd890fd5d073f3b709c7ab2fac5838ccca4204de3e2e371024a68e2d9bdb5307be40e1b6fff3ca9f3f07532fda549f1a512ded7813b995068bd77a6a38a8dec8d66824d39fc2a50afc006ee3d80f8484cdfd0ea27d2df62cb99f4887d89e252e0"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8015)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0x806000)
readv(r3, &(0x7f0000000740)=[{0x0}], 0x1)
sendfile(r4, r3, 0x0, 0xf03a0005)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendfile(r7, r7, 0x0, 0x9)
r8 = socket(0x400000000010, 0x3, 0x0)
getsockopt$sock_int(r8, 0x1, 0x22, 0x0, &(0x7f0000000180))
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000130004002dbd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1f6a0000150400001400030077673200"/28], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x9, 0x10, 0x0, 0xfffffff4}, {0x3c, 0x8, 0x8, 0x4}, {0x7, 0x4, 0xf, 0x10005}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x50, 0x4, 0x1}, {0x3, 0xff, 0x0, 0x9}, {0x9, 0x1a, 0x6, 0x1000}]}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r10=>0xffffffffffffffff})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0)

1.451671514s ago: executing program 4 (id=2936):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x3, 0x0, {0xa, 0x4e24, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x32)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0xba01, 0x0, 0x40}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x3, 0x0, {0xa, 0x4e24, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x32) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0xba01, 0x0, 0x40}, 0x4000) (async)

1.341506285s ago: executing program 0 (id=2937):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000002c0))
connect$unix(r2, &(0x7f0000000100)=@abs={0x1}, 0x6e)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
vmsplice(r3, &(0x7f0000000680)=[{&(0x7f0000000100)="2b6194dddfcb241bd7865b01dd5b5bb744554e0a2b85c6c6f1047db944a9fe23bb245d897954110015b45d8e9746fa995d4e4a416b144bc440da7f4d45ec6f92db30b67b", 0x44}, {&(0x7f0000000280)="9a9536cdb1", 0x5}, {&(0x7f0000000580)="94f4b597f7b58b08cd88712720eccbff9198923833eea267805109f59db2f0c482ec4240d05f49794fe1bdbdc9adc2cebde2926208b89bca343ff49d7b8730ecc1429cbc3c949fe066ea9919acc234289a0064f13423032bebe6e037904f3b1da04da5e927605fd14697be5a3409962a97cfd7b3e0b4fd9e84c522ac3fc389ff045599caf8fd8b4621f1cec2a644e830f9e93d648775c3448b7f2af2d0720e9ba19c23c53b755ba350f9cb3a319ceaabef3648f7817d9d305a71c3a2af6bc065d3a989980868c0beca68b82445ece86aa7c1de143a753d0d7fe5fe339a1c81121a0242a796658e7dffbb2b5770a61cd0d8ef8c1160a0", 0xf6}], 0x3, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000040087300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r7=>0x0})
r8 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r8, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffff7, @rand_addr=' \x01\x00', 0xac}}, 0x24)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000110000042bbd70009f2afa90e0f1c2ff", @ANYRES32=r7, @ANYBLOB="0010000084960000"], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$bt_BT_POWER(r9, 0x112, 0x9, &(0x7f0000000040)=0x9, &(0x7f00000000c0)=0x1)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

1.266541016s ago: executing program 4 (id=2938):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$rds(0x15, 0x5, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pipe(&(0x7f0000000080))
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000001c0), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5, 0x610, 0x4000001, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "a539762859e11a17"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000004000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.139408204s ago: executing program 1 (id=2939):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) (async)
ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000000)={'dvmrp0\x00'})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async)
r5 = socket(0x1e, 0x1, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) (async)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000002600000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, r4}, 0x94) (async)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002c00)=ANY=[@ANYBLOB="640000001900010026bd7000fddbdf251d010980c30012804c0030804600b6806e4c08fa9d68b144a31e67c46e67fb5d1758e1cee43c0537999c3c3635cf50b80cc3e329a40cc7c9df8fdc7b1faf453bad98ffac8da79422228a513b720dc0fbea250000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c000008000300"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x80)

920.373305ms ago: executing program 0 (id=2940):
syz_emit_ethernet(0x86, &(0x7f0000000280)={@local, @random="30cebbab0924", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001000", 0x50, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @remote, @private2, [@srh={0x2f, 0x2, 0x4, 0x1, 0x44, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x23}]}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}]}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={&(0x7f0000000000), 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x16c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x140, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8, 0x2}}, @TCA_RED_STAB={0x104}, @TCA_RED_MAX_P={0x8, 0x3, 0x100}, @TCA_RED_FLAGS={0xc, 0x4, {0x1, 0x1}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x2}]}}]}, 0x16c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={&(0x7f0000000000), 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})

770.441589ms ago: executing program 1 (id=2941):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) (async)
r5 = socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r8}, 0x50) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

756.624883ms ago: executing program 3 (id=2942):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$tipc(0x1e, 0x2, 0x0)
splice(r0, &(0x7f0000000000)=0x4, r0, &(0x7f0000000080)=0x4bd, 0x6e, 0x1) (async)
socket$tipc(0x1e, 0x2, 0x0)
close(0x4) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x215eb000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014)
recvmmsg(r2, &(0x7f0000004480), 0x40000c2, 0x12, 0x0)

756.120168ms ago: executing program 0 (id=2943):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x40, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
socket$kcm(0x10, 0x2, 0x0)

592.752004ms ago: executing program 1 (id=2944):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x58, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x800, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xc, 0xf989, "4870669d7821c471"}, @md5sig={0x13, 0x12, "6171cffc515318c1c852cc0ce8dbc955"}, @sack={0x5, 0xe, [0x1, 0x0, 0xfffffffa]}, @md5sig={0x13, 0x12, "9829e5b8831b669841f72541c6efc910"}, @fastopen={0x22, 0x3, "c6"}]}}}}}}}}, 0x0)
unshare(0x4000000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0a0000100001000000000000000000000000008f22a6dcdae418c258cf64fcf8ee5a184222b18e5a2f3c43e78dfb0fa24d06eae1b439d6048ac07128b94226ef5cb3138b05e0f2d09934795ce2bba556d7a049f10bb1b6bdea6d7148c2167fa3404a4372100d44de8b36e1118c49e82c5f9520908d8ac27570b217e6caa4e8ffb4dd0175bab064a80a05079994fdd77a214a0dfc9ca5ee7de3afeffc5b2e2313db0c6153b73270f8d1675d1ffbeda0f37a3b79d9d802e3e976cc1c9a8c23e0537425278f8856f6e3fa8e3afc0cb66d741e8c49df5e4ab209a8880b5de74ee7e9c83adfaa205d8351e2d9322f468bc6ea49b654b3c9e3", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800b00010062726964676500000c0002800500250001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@bridge_setlink={0x80, 0x13, 0x100, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x4a, 0x10}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x34eae}, @IFLA_VF_PORTS={0x18, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_PROFILE={0x8, 0x2, '/}(\x00'}]}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa01d}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_NET_NS_FD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000004)

544.649349ms ago: executing program 0 (id=2945):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="07fc8765b73ff154548c477bd280f38f30e7c54f65f60f3e42ea1e3c3efde3d57ab4ed0eb448aff067218eaefa428c361948acbca4b99f642e5bef27a8c2e47d6eeecfd051aad4015e7c4e6a77577f7ebeb02fd96452ce37c421d965cd7c55c920095168241e5dccc806597c01fe13efb63a3828e430fefd8009820f6600b04d636bab6afdc7f57b3edadf23efb078988792b8fdf1436c88e82f5ac700e35b21667a7d0d5609e2e3f5bbc7fe72c8", 0xae}, {&(0x7f0000000140)="8aee8f82feb086e0b585f0bac5307949cd5847d1c9d324ebda48a7231239b7109b539e2ca769527aa51ab6664eaac5d91e4d9eb08e0a53e1c22f3c7508bc5783745a4377853ee1e090c5f87b7ad61e93de99f0d71a156da1b4b48ca054eef838cd8d717515870f14bc91", 0x6a}], 0x2)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
vmsplice(r0, &(0x7f00000007c0)=[{&(0x7f0000000340)="b7", 0x1}], 0x1, 0xa)

478.766815ms ago: executing program 0 (id=2946):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x92, {{0x2, 0x4e22, @multicast2}}, 0x0, 0x4, [{{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @private=0xa010101}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @multicast2}}]}, 0x290)
mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000300)=@ctrl_frame=@rts={{}, {0x7ff8}, @device_b}, 0x10) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r2, &(0x7f0000000f00)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0xfdef)

325.361532ms ago: executing program 4 (id=2947):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x26, [0x6, 0x5, 0x1, 0x10, 0x7, 0x8, 0x9, 0xa, 0x1, 0x8, 0xa, 0x7, 0xb, 0xe, 0xf, 0xa], 0x0, [0x6, 0x7, 0x6, 0xe, 0x3, 0x0, 0x0, 0x2, 0x7, 0x132, 0x7ffc, 0x9, 0x5, 0x7, 0x1, 0x9], [0x40d3, 0x6, 0x4, 0x56, 0x9, 0xec6e, 0x1bea, 0x9, 0x1, 0x2, 0x401, 0x7f, 0x3, 0xff, 0x1, 0x167]}}]}}]}, 0x8c}}, 0x24040084)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x7, 0x2}, {0x6, 0xfd, 0xee, 0x2}]})
write$ppp(r0, &(0x7f00000001c0)="43f1", 0x2)

105.834255ms ago: executing program 1 (id=2948):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x2, [@datasec={0x8, 0x5, 0x0, 0xf, 0x1, [{0x5, 0x3ff, 0x8}, {0x5, 0x6, 0x1000}, {0x5, 0x6, 0x7}, {0x4, 0xa9be, 0x9}, {0x3, 0x6, 0x8}], "de"}, @enum={0x1, 0x5, 0x0, 0x6, 0x4, [{0x1, 0x5}, {0x0, 0x1d}, {0x10, 0x3}, {0x1, 0x7}, {0x3, 0x5}]}, @union={0xa, 0x1, 0x0, 0x5, 0x1, 0x3, [{0x7, 0x5, 0x10}]}, @ptr={0x7, 0x0, 0x0, 0x2, 0x4}, @const={0x4005, 0x0, 0x0, 0xa, 0x2}, @union={0xa, 0x9, 0x0, 0x5, 0x1, 0x7fff, [{0xc, 0x3, 0x3}, {0xb, 0x5, 0xfa7f}, {0xb, 0x2, 0x4}, {0x9, 0x1, 0x2}, {0xe, 0x4, 0xf1a0}, {0x10, 0x4}, {0x1, 0x2, 0x689}, {0x0, 0x0, 0xfffffffe}, {0x5, 0x5, 0x1ff}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000000400)=""/222, 0x14e, 0xde, 0x2, 0x4}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x128, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="bb5bbedc986f238966f182dd77eb441e418304179130aacc8885c160dd1c5b8b892e730210a571739fdd5395e393717a75b42d4a6f14e99dec443eddf25b4b50ad5236c6bd0b89a66ba56e1fa8dd273b70169c8b67bdda19a942856091ebd171473ccf35079a4ef5e66b42154f3a8c69a14cee7a96621e8b74914b13ba8f02f7ea68725a1dfe444c0f3b440a4ee999cdd72d25a4bf3a6e9bc301762e208e7649b0e76bef4ea57b1655f79c2ca5739fc81327de0ca09ca2bc890c5a4cf4716b0841f08946232e8b2d61ecb8", @typed={0x4, 0x3}, @generic="ddfbfd2c6cc1755ec1482a7f6f8ed20bf4e86f2a50d93a3bbd618b34000b99a0d1b8134cd6cddfb766655898772b616700"]}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x128}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x50)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x260, 0xffffff7a, 0xffffffff, 0x260, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a54f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000a1602a6800", 0x80, 0x3, {0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x1, 0x3, 0x1, 0x2, 0x4], 0x6}, {0x4, [0x6, 0x4, 0x3, 0x3, 0x1], 0x4, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x6, 0x8, [0x31, 0xc, 0x2a, 0x39, 0xa, 0x24, 0x6, 0x4, 0x18, 0x2f, 0x2c, 0x2e, 0x2, 0x3a, 0x2a, 0xd], 0x2, 0x80000000, 0x40}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358)
r3 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000e00)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000004d090100000000009500000000000000b7020000f8ffffff632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r5=>0x0})
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r6, 0x6, 0x24, 0x0, &(0x7f00000003c0))
sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@getchain={0x5c, 0x66, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x9}, {0x7, 0xb}, {0xfff2, 0xffe0}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x10000000}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xfc}, {0x8, 0xb, 0x73ed}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000d80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b40)={0x1d8, r8, 0x400, 0x5, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x1bc, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x62}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2cc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xbd}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000001}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xda7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xeb63}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x600}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffff15}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xbfaa}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5d}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x300c}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x77}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x44081}, 0x800)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f00000002c0)={'ip_vti0\x00', <r9=>r5, 0x40, 0x7800, 0x7, 0xfffffffc, {{0x34, 0x4, 0x0, 0x9, 0xd0, 0x68, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@cipso={0x86, 0x21, 0x3, [{0x6, 0xb, "c094f9166fdbb517d6"}, {0x2, 0x3, "9b"}, {0x2, 0xd, "bcf1aca026a5c4063a22d7"}]}, @timestamp_prespec={0x44, 0x24, 0x96, 0x3, 0x2, [{@multicast1, 0x6}, {@multicast2, 0x9}, {@multicast1, 0x2}, {@empty, 0x3}]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x2, [0x9, 0xfffff005, 0x9]}, @timestamp={0x44, 0x24, 0x72, 0x0, 0x7, [0xffff8000, 0x5, 0x8, 0x6, 0x7, 0x2, 0xfb, 0x6]}, @timestamp_addr={0x44, 0x14, 0x4d, 0x1, 0x9, [{@multicast1, 0x5}, {@local, 0x5}]}, @lsrr={0x83, 0x13, 0xfc, [@dev={0xac, 0x14, 0x14, 0x2e}, @local, @remote, @loopback]}, @end, @ssrr={0x89, 0x1b, 0x6, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @rand_addr=0x64010102, @broadcast]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', <r10=>r5, 0x8000, 0x80a0, 0x7ff, 0x938, {{0x12, 0x4, 0x0, 0x9, 0x48, 0x67, 0x0, 0x4, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x13}, {[@generic={0x44, 0x4, "bf94"}, @ssrr={0x89, 0x13, 0x16, [@empty, @broadcast, @local, @loopback]}, @generic={0x89, 0x10, "f592ef4d2d500040fe345f366ddd"}, @timestamp_addr={0x44, 0xc, 0xe2, 0x1, 0x1, [{@remote}]}]}}}}})
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockname(r11, 0x0, &(0x7f0000000480))
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000a00)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r7, @ANYBLOB="000427bd7000fbdbdf250900000040000180140002006e7230000000000000000000000000000800030000000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="080003000400000008000100", @ANYRES32=r10, @ANYBLOB="24000180080001", @ANYRES32=r9, @ANYBLOB="08000300030000000800030002000000080003000700000038000180140002006970766c616e30000000000000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="fb0c0100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="240001800800030003000000080003000100000008000300010000000800030001000000200001800800030001000000140002006d616376746170300000000000000000"], 0xf4}, 0x1, 0x0, 0x0, 0xf5f7914698daf32e}, 0x80)
sendmmsg$alg(r4, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="6deced9b9f3b082e0406d3346a653b1975b518b5ee2f56f4fb6fc04dba715189249ae2da6c8fdd98c105285c3792", 0x2e}], 0x1, &(0x7f0000000580)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x90, 0x117, 0x2, 0x7b, "9945330df1193c6345ba931245d7d86609d106f853087f9006c6eb3abf93e0fba436bf3bc31739fe7ceb2420f46cd07e09e837066ba30bba09b379897004d55e01d8f471e89729972659882e917cd4986de1a30648aa3188fdec969d685471ee39b43071aa10c49152fbff254e6edb726d77761d40f3d1b0ec6526"}, @iv={0x20, 0x117, 0x2, 0xc, "510c1bdb64433a4b02bbe18a"}, @assoc={0x18, 0x117, 0x4, 0x35f}, @assoc={0x18, 0x117, 0x4, 0x2d}], 0xf8, 0x80}], 0x1, 0x20000000)

0s ago: executing program 4 (id=2949):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}], 0x30}, 0xc4)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x23, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000140)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @loopback}}}]}]}, 0x50}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

kernel console output (not intermixed with test programs):

941] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.608484][T12954] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1743'.
[  370.692672][T12960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1745'.
[  370.768205][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'.
[  370.789809][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  370.905726][   T25] block nbd3: Possible stuck request ffff888027d05080: control (read@0,1024B). Runtime 150 seconds
[  370.917044][   T25] block nbd3: Possible stuck request ffff888027d05240: control (read@1024,3072B). Runtime 150 seconds
[  370.976855][T12975] Only authenc() type AEADs are supported by ESSIV
[  371.048802][T12979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1749'.
[  371.092719][T12980] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1749'.
[  371.183058][T12984] FAULT_INJECTION: forcing a failure.
[  371.183058][T12984] name failslab, interval 1, probability 0, space 0, times 0
[  371.205827][T12984] CPU: 1 UID: 0 PID: 12984 Comm: syz.4.1752 Not tainted syzkaller #0 PREEMPT(full) 
[  371.205854][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  371.205874][T12984] Call Trace:
[  371.205882][T12984]  <TASK>
[  371.205890][T12984]  dump_stack_lvl+0xe8/0x150
[  371.205926][T12984]  should_fail_ex+0x40c/0x560
[  371.205957][T12984]  should_failslab+0xa8/0x100
[  371.205989][T12984]  __kmalloc_noprof+0xfe/0x720
[  371.206017][T12984]  ? sock_kmalloc+0xd6/0x160
[  371.206041][T12984]  ? sock_kmalloc+0xd6/0x160
[  371.206073][T12984]  sock_kmalloc+0xd6/0x160
[  371.206102][T12984]  ____sys_sendmsg+0x1be/0x850
[  371.206134][T12984]  ? __pfx_____sys_sendmsg+0x10/0x10
[  371.206168][T12984]  ? import_iovec+0x73/0xa0
[  371.206191][T12984]  ___sys_sendmsg+0x2a5/0x360
[  371.206224][T12984]  ? __lock_acquire+0x683/0x2cf0
[  371.206255][T12984]  ? __pfx____sys_sendmsg+0x10/0x10
[  371.206315][T12984]  ? __fget_files+0x2a/0x420
[  371.206341][T12984]  ? __fget_files+0x3a2/0x420
[  371.206378][T12984]  __x64_sys_sendmsg+0x1b1/0x290
[  371.206406][T12984]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  371.206450][T12984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.206472][T12984]  do_syscall_64+0x174/0x580
[  371.206499][T12984]  ? trace_irq_disable+0x3b/0x140
[  371.206525][T12984]  ? clear_bhb_loop+0x40/0x90
[  371.206549][T12984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.206568][T12984] RIP: 0033:0x7f870bb9e019
[  371.206586][T12984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  371.206603][T12984] RSP: 002b:00007f870c9bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  371.206624][T12984] RAX: ffffffffffffffda RBX: 00007f870be25fa0 RCX: 00007f870bb9e019
[  371.206639][T12984] RDX: 0000000004040880 RSI: 0000200000000500 RDI: 0000000000000003
[  371.206651][T12984] RBP: 00007f870c9bf090 R08: 0000000000000000 R09: 0000000000000000
[  371.206664][T12984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.206676][T12984] R13: 00007f870be26038 R14: 00007f870be25fa0 R15: 00007fff062b55d8
[  371.206707][T12984]  </TASK>
[  371.384976][ T5774] tipc: Node number set to 2267659382
[  372.108251][T13022] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  372.126583][T13022] bond5: (slave macvlan1): Enslaving as an active interface with a down link
[  372.469034][T13048] 0·: renamed from hsr0 (while UP)
[  372.512615][T13048] 0·: entered allmulticast mode
[  372.518448][T13048] hsr_slave_0: entered allmulticast mode
[  372.543019][T13054] netlink: 'syz.0.1777': attribute type 2 has an invalid length.
[  372.566161][T13049] syzkaller0: entered promiscuous mode
[  372.573163][T13049] syzkaller0: entered allmulticast mode
[  372.719449][T13061] xt_ecn: cannot match TCP bits for non-tcp packets
[  372.802817][T13061] syzkaller1: entered promiscuous mode
[  372.808393][T13061] syzkaller1: entered allmulticast mode
[  372.879270][T13065] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20005
[  373.112056][ T5979] net_ratelimit: 36 callbacks suppressed
[  373.112077][ T5979] bond2: (slave gretap1): failed to get link speed/duplex
[  373.250765][ T5979] bond2: (slave gretap1): failed to get link speed/duplex
[  373.371009][   T80] bond2: (slave gretap1): failed to get link speed/duplex
[  373.499020][T13083] syzkaller1: entered promiscuous mode
[  373.505691][T13083] syzkaller1: entered allmulticast mode
[  373.631011][ T5980] bond2: (slave gretap1): failed to get link speed/duplex
[  373.638382][T13079] smbdirect: ib_dev[syz0] removed
[  373.762885][ T5980] bond2: (slave gretap1): failed to get link speed/duplex
[  373.888400][T13098] netlink: 'syz.1.1792': attribute type 14 has an invalid length.
[  373.896459][ T5979] bond2: (slave gretap1): failed to get link speed/duplex
[  374.002198][ T5979] bond2: (slave gretap1): failed to get link speed/duplex
[  374.140858][ T5979] bond2: (slave gretap1): failed to get link speed/duplex
[  374.260495][ T5979] bond2: (slave gretap1): failed to get link speed/duplex
[  374.340814][T13127] FAULT_INJECTION: forcing a failure.
[  374.340814][T13127] name failslab, interval 1, probability 0, space 0, times 0
[  374.354460][T13126] gre0: entered promiscuous mode
[  374.369404][T13126] gre0: entered allmulticast mode
[  374.390541][T12214] bond2: (slave gretap1): failed to get link speed/duplex
[  374.406981][T13127] CPU: 1 UID: 0 PID: 13127 Comm: syz.0.1803 Not tainted syzkaller #0 PREEMPT(full) 
[  374.407008][T13127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  374.407021][T13127] Call Trace:
[  374.407029][T13127]  <TASK>
[  374.407039][T13127]  dump_stack_lvl+0xe8/0x150
[  374.407085][T13127]  should_fail_ex+0x40c/0x560
[  374.407118][T13127]  should_failslab+0xa8/0x100
[  374.407152][T13127]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  374.407179][T13127]  ? dst_alloc+0x105/0x170
[  374.407207][T13127]  ? dst_alloc+0x105/0x170
[  374.407243][T13127]  dst_alloc+0x105/0x170
[  374.407278][T13127]  ip_route_output_key_hash_rcu+0x14ac/0x2720
[  374.407305][T13127]  ? ip_route_output_key_hash_rcu+0x1cf1/0x2720
[  374.407338][T13127]  ? ip_route_output_key_hash+0xd8/0x2a0
[  374.407364][T13127]  ip_route_output_key_hash+0x18d/0x2a0
[  374.407394][T13127]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  374.407426][T13127]  ? ip_cmsg_send+0x9c3/0xa70
[  374.407460][T13127]  ip_route_output_flow+0x2a/0x150
[  374.407482][T13127]  ? security_sk_classify_flow+0x6d/0x150
[  374.407516][T13127]  udp_sendmsg+0x144a/0x2140
[  374.407558][T13127]  ? __lock_acquire+0x683/0x2cf0
[  374.407590][T13127]  ? __pfx_udp_sendmsg+0x10/0x10
[  374.407627][T13127]  ? ip4_datagram_release_cb+0x976/0xbe0
[  374.407658][T13127]  ? reacquire_held_locks+0x104/0x190
[  374.407688][T13127]  ? inet_sendmsg+0x10d/0x320
[  374.407713][T13127]  ? inet_sendmsg+0x10d/0x320
[  374.407736][T13127]  ? __local_bh_enable_ip+0xd0/0x130
[  374.407761][T13127]  ? lockdep_hardirqs_on+0x7a/0x110
[  374.407789][T13127]  ? inet_sendmsg+0x10d/0x320
[  374.407812][T13127]  ? inet_sendmsg+0x23e/0x320
[  374.407839][T13127]  ? __pfx_inet_sendmsg+0x10/0x10
[  374.407862][T13127]  sock_sendmsg_nosec+0x10e/0x180
[  374.407898][T13127]  ____sys_sendmsg+0x54e/0x850
[  374.407932][T13127]  ? __pfx_____sys_sendmsg+0x10/0x10
[  374.407976][T13127]  ? import_iovec+0x73/0xa0
[  374.408019][T13127]  ___sys_sendmsg+0x2a5/0x360
[  374.408046][T13127]  ? __lock_acquire+0x683/0x2cf0
[  374.408088][T13127]  ? __pfx____sys_sendmsg+0x10/0x10
[  374.408157][T13127]  ? __fget_files+0x2a/0x420
[  374.408186][T13127]  ? __fget_files+0x3a2/0x420
[  374.408228][T13127]  __x64_sys_sendmsg+0x1b1/0x290
[  374.408259][T13127]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  374.408308][T13127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.408333][T13127]  do_syscall_64+0x174/0x580
[  374.408361][T13127]  ? trace_irq_disable+0x3b/0x140
[  374.408390][T13127]  ? clear_bhb_loop+0x40/0x90
[  374.408417][T13127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.408439][T13127] RIP: 0033:0x7fd9b4d9e019
[  374.408459][T13127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  374.408477][T13127] RSP: 002b:00007fd9b5c8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  374.408500][T13127] RAX: ffffffffffffffda RBX: 00007fd9b5025fa0 RCX: 00007fd9b4d9e019
[  374.408516][T13127] RDX: 0000000004040880 RSI: 0000200000000500 RDI: 0000000000000003
[  374.408530][T13127] RBP: 00007fd9b5c8b090 R08: 0000000000000000 R09: 0000000000000000
[  374.408542][T13127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.408555][T13127] R13: 00007fd9b5026038 R14: 00007fd9b5025fa0 R15: 00007fffa8d8d9a8
[  374.408592][T13127]  </TASK>
[  375.148712][T13137] syzkaller1: entered promiscuous mode
[  375.181440][T13137] syzkaller1: entered allmulticast mode
[  375.335623][T13146] __nla_validate_parse: 10 callbacks suppressed
[  375.335645][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'.
[  375.506908][T13150] bond0: (slave macvlan1): Error -22 calling dev_set_mtu
[  375.593058][T13146] bond0 (unregistering): Released all slaves
[  375.634699][T13152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1812'.
[  376.160839][T13169] netlink: 'syz.1.1817': attribute type 1 has an invalid length.
[  376.238802][T13169] 8021q: adding VLAN 0 to HW filter on device bond12
[  376.255203][T13167] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  376.326793][T13177] netlink: 'syz.1.1817': attribute type 1 has an invalid length.
[  376.390693][T13177] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1817'.
[  376.405223][T13172] bond12: (slave veth7): Enslaving as an active interface with a down link
[  376.514363][T13169] 8021q: adding VLAN 0 to HW filter on device batadv3
[  376.542790][T13169] bond12: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  376.717376][T13173] pimreg1: left allmulticast mode
[  376.771469][T13173] dummy0: left promiscuous mode
[  377.232927][T13173] 0·: left allmulticast mode
[  377.249690][T13173] hsr_slave_0: left allmulticast mode
[  377.392146][T13173] geneve2: left promiscuous mode
[  377.407848][T13173] geneve3: left allmulticast mode
[  377.422502][T13173] veth3: left allmulticast mode
[  377.439449][T13173] ip6gre1: left promiscuous mode
[  377.444885][T13173] ip6gre1: left allmulticast mode
[  377.477622][T13173] bridge4: left promiscuous mode
[  377.490070][T13173] bridge4: left allmulticast mode
[  377.570358][T13190] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  377.600114][T13190] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.628361][T13190] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  377.665016][T13190] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.727806][T13190] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  377.755963][T13190] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.779731][T13190] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  377.813324][T13190] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  378.180532][T13190] net_ratelimit: 12 callbacks suppressed
[  378.180552][T13190] bond2: (slave gretap1): failed to get link speed/duplex
[  378.274746][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'.
[  378.301450][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'.
[  378.321047][T13190] bond2: (slave gretap1): failed to get link speed/duplex
[  378.450108][ T5966] bond2: (slave gretap1): failed to get link speed/duplex
[  378.570011][ T5966] bond2: (slave gretap1): failed to get link speed/duplex
[  378.710382][T13190] bond2: (slave gretap1): failed to get link speed/duplex
[  378.843041][   T76] bond2: (slave gretap1): failed to get link speed/duplex
[  378.902609][T13263] netlink: 'syz.1.1834': attribute type 5 has an invalid length.
[  379.021729][T13192] bond2: (slave gretap1): failed to get link speed/duplex
[  379.151190][   T76] bond2: (slave gretap1): failed to get link speed/duplex
[  379.270226][T13192] bond2: (slave gretap1): failed to get link speed/duplex
[  379.410831][ T5968] bond2: (slave gretap1): failed to get link speed/duplex
[  379.474128][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1841'.
[  379.606419][T13294] bond13: option fail_over_mac: invalid value (127)
[  379.618183][T13294] bond13 (unregistering): Released all slaves
[  379.638969][T13292] netlink: 'syz.3.1842': attribute type 12 has an invalid length.
[  379.938066][T13305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.954606][T13310] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1847'.
[  379.968758][T13312] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1847'.
[  379.997990][T13305] tipc: Resetting bearer <eth:syzkaller0>
[  380.064504][T13305] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  380.106540][T13305] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  380.308604][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1849'.
[  380.745468][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'.
[  380.882853][T13345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1853'.
[  381.111371][ T5774] tipc: Node number set to 2583637980
[  381.167446][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1856'.
[  381.928351][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  382.029780][T13360] netlink: 'syz.0.1857': attribute type 4 has an invalid length.
[  382.076347][T13360] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1857'.
[  382.085519][T13382] netlink: 'syz.4.1862': attribute type 1 has an invalid length.
[  382.101651][T13360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1857'.
[  382.137914][T13360] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1857'.
[  382.197395][T13382] 8021q: adding VLAN 0 to HW filter on device bond6
[  382.236664][T13385] bridge6: entered promiscuous mode
[  382.264001][T13387] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  382.274622][T13390] tipc: Started in network mode
[  382.285393][T13390] tipc: Node identity 000000000000003a0000000000000001, cluster identity 4711
[  382.325024][T13390] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  382.356513][T13382] bond6: entered promiscuous mode
[  382.370867][T13382] bond6: entered allmulticast mode
[  382.596183][T13401] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1867'.
[  383.034295][T13424] netlink: 'syz.0.1868': attribute type 21 has an invalid length.
[  383.197153][T13424] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1868'.
[  383.240846][ T5976] net_ratelimit: 15 callbacks suppressed
[  383.240882][ T5976] bond2: (slave gretap1): failed to get link speed/duplex
[  383.380036][T13190] bond2: (slave gretap1): failed to get link speed/duplex
[  383.520363][T13190] bond2: (slave gretap1): failed to get link speed/duplex
[  383.541714][T13438] netlink: 'syz.4.1871': attribute type 1 has an invalid length.
[  383.705622][T13438] bond7: entered promiscuous mode
[  383.747637][T13445] ipt_REJECT: TCP_RESET invalid for non-tcp
[  383.760156][T13438] 8021q: adding VLAN 0 to HW filter on device bond7
[  383.773308][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1873'.
[  383.815938][T13438] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  383.832754][T13190] bond2: (slave gretap1): failed to get link speed/duplex
[  383.915960][T13438] macvtap1: entered allmulticast mode
[  383.992310][T13393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1865'.
[  384.021717][T13453] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20001
[  384.042985][T13443] macvtap2: entered allmulticast mode
[  384.067557][T13394] syzkaller0: left promiscuous mode
[  384.084727][T13394] syzkaller0: left allmulticast mode
[  384.136039][T13455] xt_TPROXY: Can be used only with -p tcp or -p udp
[  384.157837][T13438] bond7: (slave bridge0): making interface the new active one
[  384.167166][T13438] bridge0: entered promiscuous mode
[  384.180101][T13438] bond7: (slave bridge0): Enslaving as an active interface with an up link
[  384.200061][   T36] bond2: (slave gretap1): failed to get link speed/duplex
[  384.397620][T13463] openvswitch: netlink: Key 6 has unexpected len 147 expected 2
[  384.920459][T13481] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  384.934732][T13190] bond2: (slave gretap1): failed to get link speed/duplex
[  384.946309][T13484] xt_policy: output policy not valid in PREROUTING and INPUT
[  385.420982][ T5976] bond2: (slave gretap1): failed to get link speed/duplex
[  385.718070][T13505] bond5 (unregistering): Released all slaves
[  386.029738][T13525] Bluetooth: MGMT ver 1.23
[  386.169329][T13527] tipc: Failed to remove unknown binding: 66,1,1/1044003207:2461701340/2461701342
[  386.239348][T13533] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  386.352365][T13538] netlink: 'syz.2.1898': attribute type 3 has an invalid length.
[  386.590841][T13547] netlink: 'syz.3.1900': attribute type 13 has an invalid length.
[  386.653350][T13548] __nla_validate_parse: 4 callbacks suppressed
[  386.653365][T13548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1900'.
[  387.236210][T13548] bond_slave_0: entered promiscuous mode
[  387.257262][T13548] bond_slave_0: entered allmulticast mode
[  387.379071][T13554] syzkaller0: entered promiscuous mode
[  387.407021][T13554] syzkaller0: entered allmulticast mode
[  387.480322][T13551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1901'.
[  387.521701][T13551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1901'.
[  388.350348][   T36] net_ratelimit: 18 callbacks suppressed
[  388.350373][   T36] bond2: (slave gretap1): failed to get link speed/duplex
[  388.470566][ T5972] bond2: (slave gretap1): failed to get link speed/duplex
[  388.580446][ T5972] bond2: (slave gretap1): failed to get link speed/duplex
[  388.690529][ T5972] bond2: (slave gretap1): failed to get link speed/duplex
[  388.802333][ T5972] bond2: (slave gretap1): failed to get link speed/duplex
[  388.920357][   T36] bond2: (slave gretap1): failed to get link speed/duplex
[  389.031534][   T36] bond2: (slave gretap1): failed to get link speed/duplex
[  389.150792][   T36] bond2: (slave gretap1): failed to get link speed/duplex
[  389.260576][   T36] bond2: (slave gretap1): failed to get link speed/duplex
[  389.350702][T13538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  389.380361][   T36] bond2: (slave gretap1): failed to get link speed/duplex
[  389.601825][T13571] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  389.626499][T13574] netlink: 'syz.0.1907': attribute type 1 has an invalid length.
[  389.652635][T13571] netlink: 'syz.3.1906': attribute type 32 has an invalid length.
[  389.658644][T13580] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1909'.
[  389.682922][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'.
[  389.761942][T13574] 8021q: adding VLAN 0 to HW filter on device bond5
[  390.091628][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'.
[  390.492065][T13581] bond5: (slave veth5): Enslaving as an active interface with a down link
[  390.625567][T13571] bond0: option coupled_control: invalid value (56)
[  390.672993][T13571] bond0 (unregistering): Released all slaves
[  391.025050][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1920'.
[  392.170884][T13686] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1931'.
[  392.197963][T13686] unsupported nlmsg_type 40
[  392.442133][T13694] netlink: 'syz.3.1933': attribute type 30 has an invalid length.
[  392.521451][T13697] syzkaller0: entered promiscuous mode
[  392.527347][T13697] syzkaller0: entered allmulticast mode
[  392.630990][   T25] block nbd0: Possible stuck request ffff888027bd5080: control (read@0,1024B). Runtime 150 seconds
[  393.366488][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1942'.
[  393.409216][T13723] syzkaller0: entered promiscuous mode
[  393.413780][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1942'.
[  393.491546][T13737] syzkaller0: entered promiscuous mode
[  393.502548][T13737] syzkaller0: entered allmulticast mode
[  393.533948][T13737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1948'.
[  393.772340][T13754] sctp: [Deprecated]: syz.1.1952 (pid 13754) Use of struct sctp_assoc_value in delayed_ack socket option.
[  393.772340][T13754] Use struct sctp_sack_info instead
[  396.010243][ T5972] net_ratelimit: 23 callbacks suppressed
[  396.010262][ T5972] bond2: (slave gretap1): failed to get link speed/duplex
[  396.206866][T13774] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1957'.
[  396.343011][T13770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.914262][T13788] netlink: 'syz.3.1959': attribute type 4 has an invalid length.
[  396.962402][T13799] tipc: Resetting bearer <eth:syzkaller0>
[  397.000694][ T5972] bond2: (slave gretap1): failed to get link speed/duplex
[  397.122013][   T36] bond2: (slave gretap1): failed to get link speed/duplex
[  397.270111][ T5971] bond2: (slave gretap1): failed to get link speed/duplex
[  397.361492][T13816] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.422730][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  397.580830][T13820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1965'.
[  397.602841][T13820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1965'.
[  397.662027][T13820] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[  397.795632][T13832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1968'.
[  397.960122][ T5971] bond2: (slave gretap1): failed to get link speed/duplex
[  398.087770][T13846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1971'.
[  398.210005][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  398.360073][ T5972] bond2: (slave gretap1): failed to get link speed/duplex
[  398.511159][   T76] bond2: (slave gretap1): failed to get link speed/duplex
[  398.679061][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1978'.
[  399.000730][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1980'.
[  399.110947][T13868] gretap0: entered promiscuous mode
[  399.135432][T13868] erspan0: entered promiscuous mode
[  399.176881][T13871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1983'.
[  399.201862][T13868] 8021q: adding VLAN 0 to HW filter on device team0
[  399.222708][T13868] 8021q: adding VLAN 0 to HW filter on device batadv0
[  399.299757][T13868] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.330927][T13868] veth1_macvtap: left promiscuous mode
[  399.344967][T13868] veth0_macvtap: left promiscuous mode
[  399.357468][T13868] veth0_macvtap: entered promiscuous mode
[  399.371889][T13868] veth1_macvtap: entered promiscuous mode
[  399.415636][T13868] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  399.441335][T13868] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  399.464593][T13868] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  399.492377][T13868] 8021q: adding VLAN 0 to HW filter on device bond1
[  399.521631][T13868] 8021q: adding VLAN 0 to HW filter on device bond2
[  399.543448][T13868] 8021q: adding VLAN 0 to HW filter on device bond3
[  399.567362][T13868] 8021q: adding VLAN 0 to HW filter on device bond7
[  399.587312][T13868] 8021q: adding VLAN 0 to HW filter on device batadv1
[  399.611398][T13868] 8021q: adding VLAN 0 to HW filter on device bond9
[  399.634907][T13868] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.854223][ T1115] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  399.902948][ T1115] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  399.942491][ T1115] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  399.974870][T13900] xt_TCPMSS: Only works on TCP SYN packets
[  400.058593][T13902] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1991'.
[  400.086751][T13904] netlink: 'syz.2.1991': attribute type 1 has an invalid length.
[  400.111641][T13192] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  400.466444][T13923] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  400.685314][T13934] netlink: 'syz.1.2000': attribute type 2 has an invalid length.
[  400.891798][T13948] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2004'.
[  400.952446][   T25] block nbd3: Possible stuck request ffff888027d05080: control (read@0,1024B). Runtime 180 seconds
[  400.963410][   T25] block nbd3: Possible stuck request ffff888027d05240: control (read@1024,3072B). Runtime 180 seconds
[  401.081620][T13955] net_ratelimit: 12 callbacks suppressed
[  401.081639][T13955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.109169][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  401.211893][T13955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.262590][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  401.311571][T13970] 8021q: VLANs not supported on sit0
[  401.391051][T13192] bond2: (slave gretap1): failed to get link speed/duplex
[  401.520727][ T5972] bond2: (slave gretap1): failed to get link speed/duplex
[  401.552564][T13983] netlink: 'syz.3.2013': attribute type 10 has an invalid length.
[  401.701928][T13983] syz_tun: entered promiscuous mode
[  401.892095][T13990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2015'.
[  401.893014][T13192] bond2: (slave gretap1): failed to get link speed/duplex
[  402.042373][ T5972] bond2: (slave gretap1): failed to get link speed/duplex
[  402.102570][T14003] netlink: 'syz.0.2019': attribute type 13 has an invalid length.
[  402.170065][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  402.209422][T14001] netlink: 'syz.1.2018': attribute type 11 has an invalid length.
[  402.248904][T14012] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  402.270147][T14018] tunl0: Caught tx_queue_len zero misconfig
[  402.312887][   T76] bond2: (slave gretap1): failed to get link speed/duplex
[  402.593985][T14037] Bluetooth: MGMT ver 1.23
[  402.991637][T14054] __nla_validate_parse: 3 callbacks suppressed
[  402.991665][T14054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2033'.
[  403.028384][T14057] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2035'.
[  403.047404][T14060] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2035'.
[  403.109055][T14063] batadv0: entered promiscuous mode
[  403.319431][T14073] netlink: 'syz.2.2037': attribute type 1 has an invalid length.
[  403.355566][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2037'.
[  403.586051][T14076] syzkaller0: entered promiscuous mode
[  403.612598][T14076] syzkaller0: entered allmulticast mode
[  404.337748][T14115] SET target dimension over the limit!
[  404.378819][T14119] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  404.601885][T14133] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  404.642046][T14133] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  404.709437][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2051'.
[  404.725408][T14145] netlink: 'syz.0.2052': attribute type 1 has an invalid length.
[  404.908998][T14122] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[  404.938328][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'.
[  404.965691][T14151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2054'.
[  405.144632][T14145] bond6: entered promiscuous mode
[  405.161697][T14145] 8021q: adding VLAN 0 to HW filter on device bond6
[  405.212093][T14157] 8021q: adding VLAN 0 to HW filter on device bond6
[  405.231072][T14157] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address
[  405.260264][T14157] bond6: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  405.292891][T14157] bond6: (slave xfrm1): making interface the new active one
[  405.307643][T14157] xfrm1: entered promiscuous mode
[  405.326340][T14157] xfrm1: left promiscuous mode
[  405.573242][T14183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2061'.
[  405.708592][T14183] ip6gre0: Caught tx_queue_len zero misconfig
[  405.979479][T14203] ip6tnl3: entered allmulticast mode
[  406.014595][T13190] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  406.044402][ T5741] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  406.053165][T13190] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  406.072232][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'.
[  406.091253][ T1115] net_ratelimit: 21 callbacks suppressed
[  406.091270][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  406.166905][T14211] vlan1: entered promiscuous mode
[  406.204695][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'.
[  406.240115][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  406.280372][ T5741] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  406.370441][ T5972] bond2: (slave gretap1): failed to get link speed/duplex
[  406.493024][T13190] bond2: (slave gretap1): failed to get link speed/duplex
[  406.620069][T13190] bond2: (slave gretap1): failed to get link speed/duplex
[  406.790339][ T5741] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  406.946430][T14244] netlink: 'syz.0.2082': attribute type 63 has an invalid length.
[  407.198181][T14237] syz_tun: left promiscuous mode
[  407.454463][T14237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  407.657053][T14237] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  407.664909][T14237] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  407.825433][T14237] bond4: left allmulticast mode
[  407.911643][T14237] geneve2: left promiscuous mode
[  407.918243][T14237] geneve2: left allmulticast mode
[  407.943146][T14237] geneve0: left promiscuous mode
[  407.949045][T14237] macvlan2: left promiscuous mode
[  407.962052][T14237] tipc: Resetting bearer <eth:syzkaller0>
[  407.973834][T14237] bond5: left promiscuous mode
[  407.981575][T14237] bond6: left promiscuous mode
[  408.231379][ T5972] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  408.282329][ T5972] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.325612][ T5972] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  408.360404][ T5972] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.399986][T13190] bond2: (slave gretap1): failed to get link speed/duplex
[  408.430655][T13190] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  408.478019][T13190] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.556615][T14317] netlink: 'syz.0.2092': attribute type 13 has an invalid length.
[  408.568283][T13190] bond2: (slave gretap1): failed to get link speed/duplex
[  408.584326][T14317] netlink: 'syz.0.2092': attribute type 17 has an invalid length.
[  408.909427][T14317] bridge0: port 3(syz_tun) entered blocking state
[  408.916236][T14317] bridge0: port 3(syz_tun) entered forwarding state
[  408.932247][T14317] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.944574][T14317] 8021q: adding VLAN 0 to HW filter on device team0
[  408.959597][T14317] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.029809][T14317] batman_adv: batadv0: Interface activated: batadv_slave_0
[  409.041027][T14317] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.059586][T14317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  409.071544][T14317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  409.088463][T14317] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  409.108027][T14317] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  409.121127][T14317] 8021q: adding VLAN 0 to HW filter on device batadv1
[  409.129480][T14317] bond1: left promiscuous mode
[  409.135666][T14317] bridge1: left promiscuous mode
[  409.143290][T14317] 8021q: adding VLAN 0 to HW filter on device bond1
[  409.154079][T14317] vlan0: left allmulticast mode
[  409.159096][T14317] bond1: left allmulticast mode
[  409.164471][T14317] bridge1: left allmulticast mode
[  409.175947][T14317] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  409.192642][T14317] 8021q: adding VLAN 0 to HW filter on device bond2
[  409.253845][T14317] vlan1: left allmulticast mode
[  409.258914][T14317] bond0: left allmulticast mode
[  409.264855][T14317] bond_slave_0: left allmulticast mode
[  409.275167][T14317] bond_slave_1: left allmulticast mode
[  409.283497][T14317] 8021q: adding VLAN 0 to HW filter on device bond3
[  409.292238][T14317] 8021q: adding VLAN 0 to HW filter on device bond4
[  409.306304][T14317] 8021q: adding VLAN 0 to HW filter on device eth0
[  409.324090][T14317] 8021q: adding VLAN 0 to HW filter on device eth1
[  409.336953][T14317] 8021q: adding VLAN 0 to HW filter on device eth2
[  409.349530][T14317] 8021q: adding VLAN 0 to HW filter on device eth3
[  409.369194][T14317] 8021q: adding VLAN 0 to HW filter on device bond5
[  409.382670][T14317] 8021q: adding VLAN 0 to HW filter on device bond6
[  409.390649][T14320] __nla_validate_parse: 1 callbacks suppressed
[  409.390666][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'.
[  409.406942][T14320] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.428119][T13192] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.435366][T13192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.525536][T14346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.546522][T14348] netlink: 'syz.0.2099': attribute type 1 has an invalid length.
[  409.852996][T14355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2101'.
[  409.875884][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'.
[  409.910834][T14359] xt_connbytes: Forcing CT accounting to be enabled
[  409.974790][T14368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2104'.
[  410.094073][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.101344][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.205177][T14368] ip6gre2: entered promiscuous mode
[  410.239557][T14368] ip6gre2: entered allmulticast mode
[  410.297051][T14370] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  410.310250][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  410.346005][   T76] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.382218][T14376] netlink: 'syz.3.2104': attribute type 6 has an invalid length.
[  410.400842][T14376] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2104'.
[  410.445399][   T36] bond5: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  410.485278][   T36] bond5: (slave veth5): making interface the new active one
[  410.529657][   T36] bond5: active interface up!
[  410.564381][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'.
[  410.580848][T14396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2106'.
[  410.641689][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2108'.
[  410.757959][T14377] syzkaller0: entered promiscuous mode
[  410.776655][T14377] syzkaller0: entered allmulticast mode
[  410.784609][T14391] hsr0: entered allmulticast mode
[  410.794285][T14391] hsr_slave_0: entered allmulticast mode
[  410.800533][T14391] hsr_slave_1: entered allmulticast mode
[  410.820275][T14395] hsr_slave_0: left promiscuous mode
[  410.845961][T14395] hsr_slave_1: left promiscuous mode
[  410.881310][T14395] hsr0 (unregistering): left allmulticast mode
[  410.892165][T14409] FAULT_INJECTION: forcing a failure.
[  410.892165][T14409] name failslab, interval 1, probability 0, space 0, times 0
[  410.912754][T14409] CPU: 1 UID: 0 PID: 14409 Comm: syz.3.2110 Not tainted syzkaller #0 PREEMPT(full) 
[  410.912782][T14409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  410.912796][T14409] Call Trace:
[  410.912804][T14409]  <TASK>
[  410.912812][T14409]  dump_stack_lvl+0xe8/0x150
[  410.912849][T14409]  should_fail_ex+0x40c/0x560
[  410.912889][T14409]  should_failslab+0xa8/0x100
[  410.912925][T14409]  __kmalloc_noprof+0xfe/0x720
[  410.912954][T14409]  ? sock_kmalloc+0xd6/0x160
[  410.912981][T14409]  ? sock_kmalloc+0xd6/0x160
[  410.913015][T14409]  sock_kmalloc+0xd6/0x160
[  410.913045][T14409]  ____sys_sendmsg+0x1be/0x850
[  410.913079][T14409]  ? __pfx_____sys_sendmsg+0x10/0x10
[  410.913116][T14409]  ? import_iovec+0x73/0xa0
[  410.913141][T14409]  ___sys_sendmsg+0x2a5/0x360
[  410.913167][T14409]  ? __lock_acquire+0x683/0x2cf0
[  410.913201][T14409]  ? __pfx____sys_sendmsg+0x10/0x10
[  410.913264][T14409]  ? __fget_files+0x2a/0x420
[  410.913292][T14409]  ? __fget_files+0x3a2/0x420
[  410.913350][T14409]  __x64_sys_sendmsg+0x1b1/0x290
[  410.913382][T14409]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  410.913430][T14409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.913454][T14409]  do_syscall_64+0x174/0x580
[  410.913483][T14409]  ? trace_irq_disable+0x3b/0x140
[  410.913512][T14409]  ? clear_bhb_loop+0x40/0x90
[  410.913538][T14409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.913559][T14409] RIP: 0033:0x7f964e39e019
[  410.913580][T14409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.913599][T14409] RSP: 002b:00007f964f29e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  410.913634][T14409] RAX: ffffffffffffffda RBX: 00007f964e625fa0 RCX: 00007f964e39e019
[  410.913650][T14409] RDX: 0000000004040880 RSI: 0000200000000500 RDI: 0000000000000003
[  410.913664][T14409] RBP: 00007f964f29e090 R08: 0000000000000000 R09: 0000000000000000
[  410.913677][T14409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.913690][T14409] R13: 00007f964e626038 R14: 00007f964e625fa0 R15: 00007ffde8992a98
[  410.913742][T14409]  </TASK>
[  413.144079][T14404] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  413.163965][T14417] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2113'.
[  413.180310][T14417] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2113'.
[  413.222865][ T5971] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.259768][ T5971] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.311711][ T5971] bond2: (slave gretap1): failed to get link speed/duplex
[  413.358005][ T5971] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.393812][ T5971] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  413.423813][ T5971] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  413.461592][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  413.633195][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  413.742859][T14450] FAULT_INJECTION: forcing a failure.
[  413.742859][T14450] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  413.770974][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  413.780696][T14450] CPU: 0 UID: 0 PID: 14450 Comm: syz.3.2121 Not tainted syzkaller #0 PREEMPT(full) 
[  413.780723][T14450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  413.780737][T14450] Call Trace:
[  413.780745][T14450]  <TASK>
[  413.780755][T14450]  dump_stack_lvl+0xe8/0x150
[  413.780793][T14450]  should_fail_ex+0x40c/0x560
[  413.780827][T14450]  _copy_from_user+0x2d/0xb0
[  413.780854][T14450]  ____sys_sendmsg+0x303/0x850
[  413.780890][T14450]  ? __pfx_____sys_sendmsg+0x10/0x10
[  413.780929][T14450]  ? import_iovec+0x73/0xa0
[  413.780954][T14450]  ___sys_sendmsg+0x2a5/0x360
[  413.780981][T14450]  ? __lock_acquire+0x683/0x2cf0
[  413.781018][T14450]  ? __pfx____sys_sendmsg+0x10/0x10
[  413.781085][T14450]  ? __fget_files+0x2a/0x420
[  413.781115][T14450]  ? __fget_files+0x3a2/0x420
[  413.781157][T14450]  __x64_sys_sendmsg+0x1b1/0x290
[  413.781188][T14450]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  413.781238][T14450]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.781262][T14450]  do_syscall_64+0x174/0x580
[  413.781292][T14450]  ? trace_irq_disable+0x3b/0x140
[  413.781320][T14450]  ? clear_bhb_loop+0x40/0x90
[  413.781348][T14450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.781370][T14450] RIP: 0033:0x7f964e39e019
[  413.781390][T14450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.781409][T14450] RSP: 002b:00007f964f29e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  413.781432][T14450] RAX: ffffffffffffffda RBX: 00007f964e625fa0 RCX: 00007f964e39e019
[  413.781448][T14450] RDX: 0000000004040880 RSI: 0000200000000500 RDI: 0000000000000003
[  413.781463][T14450] RBP: 00007f964f29e090 R08: 0000000000000000 R09: 0000000000000000
[  413.781477][T14450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  413.781490][T14450] R13: 00007f964e626038 R14: 00007f964e625fa0 R15: 00007ffde8992a98
[  413.781526][T14450]  </TASK>
[  414.001269][T13192] bond2: (slave gretap1): failed to get link speed/duplex
[  414.054025][T14463] Bluetooth: hci0: Opcode 0x080f failed: -22
[  414.115164][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  414.233023][ T5972] bond2: (slave gretap1): failed to get link speed/duplex
[  414.350013][   T36] bond2: (slave gretap1): failed to get link speed/duplex
[  414.390527][    C0] ip6_tunnel: € xmit: Local address not yet configured!
[  414.405949][T14490] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  414.461169][ T5972] bond2: (slave gretap1): failed to get link speed/duplex
[  414.633232][ T5971] bond2: (slave gretap1): failed to get link speed/duplex
[  414.747002][T14506] netlink: 'syz.4.2132': attribute type 11 has an invalid length.
[  414.806192][T14510] __nla_validate_parse: 3 callbacks suppressed
[  414.806222][T14510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2133'.
[  414.921717][T14517] FAULT_INJECTION: forcing a failure.
[  414.921717][T14517] name failslab, interval 1, probability 0, space 0, times 0
[  414.957999][T14517] CPU: 1 UID: 0 PID: 14517 Comm: syz.3.2135 Not tainted syzkaller #0 PREEMPT(full) 
[  414.958029][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  414.958043][T14517] Call Trace:
[  414.958051][T14517]  <TASK>
[  414.958059][T14517]  dump_stack_lvl+0xe8/0x150
[  414.958098][T14517]  should_fail_ex+0x40c/0x560
[  414.958138][T14517]  should_failslab+0xa8/0x100
[  414.958174][T14517]  __kmalloc_noprof+0xfe/0x720
[  414.958210][T14517]  ? tomoyo_supervisor+0x4d2/0x1560
[  414.958238][T14517]  ? ip_options_get+0x51/0x570
[  414.958260][T14517]  ? ip_options_get+0x51/0x570
[  414.958283][T14517]  ? look_up_lock_class+0x57/0x110
[  414.958322][T14517]  ip_options_get+0x51/0x570
[  414.958354][T14517]  ip_cmsg_send+0x591/0xa70
[  414.958397][T14517]  udp_sendmsg+0xc09/0x2140
[  414.958439][T14517]  ? __lock_acquire+0x683/0x2cf0
[  414.958473][T14517]  ? __pfx_udp_sendmsg+0x10/0x10
[  414.958508][T14517]  ? ip4_datagram_release_cb+0x976/0xbe0
[  414.958540][T14517]  ? reacquire_held_locks+0x104/0x190
[  414.958572][T14517]  ? inet_sendmsg+0x10d/0x320
[  414.958597][T14517]  ? inet_sendmsg+0x10d/0x320
[  414.958622][T14517]  ? __local_bh_enable_ip+0xd0/0x130
[  414.958648][T14517]  ? lockdep_hardirqs_on+0x7a/0x110
[  414.958676][T14517]  ? inet_sendmsg+0x10d/0x320
[  414.958701][T14517]  ? inet_sendmsg+0x23e/0x320
[  414.958727][T14517]  ? __pfx_inet_sendmsg+0x10/0x10
[  414.958751][T14517]  sock_sendmsg_nosec+0x10e/0x180
[  414.958789][T14517]  ____sys_sendmsg+0x54e/0x850
[  414.958822][T14517]  ? __pfx_____sys_sendmsg+0x10/0x10
[  414.958860][T14517]  ? import_iovec+0x73/0xa0
[  414.958885][T14517]  ___sys_sendmsg+0x2a5/0x360
[  414.958912][T14517]  ? __lock_acquire+0x683/0x2cf0
[  414.958947][T14517]  ? __pfx____sys_sendmsg+0x10/0x10
[  414.959013][T14517]  ? __fget_files+0x2a/0x420
[  414.959042][T14517]  ? __fget_files+0x3a2/0x420
[  414.959083][T14517]  __x64_sys_sendmsg+0x1b1/0x290
[  414.959115][T14517]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  414.959163][T14517]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.959187][T14517]  do_syscall_64+0x174/0x580
[  414.959225][T14517]  ? trace_irq_disable+0x3b/0x140
[  414.959253][T14517]  ? clear_bhb_loop+0x40/0x90
[  414.959280][T14517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.959303][T14517] RIP: 0033:0x7f964e39e019
[  414.959324][T14517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.959343][T14517] RSP: 002b:00007f964f29e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  414.959366][T14517] RAX: ffffffffffffffda RBX: 00007f964e625fa0 RCX: 00007f964e39e019
[  414.959382][T14517] RDX: 0000000004040880 RSI: 0000200000000500 RDI: 0000000000000003
[  414.959396][T14517] RBP: 00007f964f29e090 R08: 0000000000000000 R09: 0000000000000000
[  414.959410][T14517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.959422][T14517] R13: 00007f964e626038 R14: 00007f964e625fa0 R15: 00007ffde8992a98
[  414.959457][T14517]  </TASK>
[  415.469231][T14513] bond9: (slave geneve2): Enslaving as an active interface with an up link
[  415.660134][T13192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  415.710503][T13192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  415.807537][T14546] netlink: 'syz.0.2143': attribute type 1 has an invalid length.
[  415.833380][T14508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  415.932951][T14546] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  415.940372][T14551] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  416.027826][T14508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  416.138497][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2146'.
[  416.162910][T14560] FAULT_INJECTION: forcing a failure.
[  416.162910][T14560] name failslab, interval 1, probability 0, space 0, times 0
[  416.198690][T14560] CPU: 1 UID: 0 PID: 14560 Comm: syz.3.2148 Not tainted syzkaller #0 PREEMPT(full) 
[  416.198720][T14560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  416.198734][T14560] Call Trace:
[  416.198742][T14560]  <TASK>
[  416.198752][T14560]  dump_stack_lvl+0xe8/0x150
[  416.198790][T14560]  should_fail_ex+0x40c/0x560
[  416.198824][T14560]  should_failslab+0xa8/0x100
[  416.198859][T14560]  __kmalloc_cache_noprof+0xa8/0x660
[  416.198888][T14560]  ? ipv4_mtu+0x23/0x670
[  416.198917][T14560]  ? ip_setup_cork+0x231/0x8f0
[  416.198940][T14560]  ? ip_setup_cork+0x231/0x8f0
[  416.198971][T14560]  ? ipv4_mtu+0x561/0x670
[  416.198998][T14560]  ip_setup_cork+0x231/0x8f0
[  416.199030][T14560]  ip_make_skb+0x156/0x440
[  416.199066][T14560]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  416.199094][T14560]  ? __pfx_ip_make_skb+0x10/0x10
[  416.199142][T14560]  udp_sendmsg+0x1937/0x2140
[  416.199189][T14560]  ? __lock_acquire+0x683/0x2cf0
[  416.199224][T14560]  ? __pfx_udp_sendmsg+0x10/0x10
[  416.199262][T14560]  ? ip4_datagram_release_cb+0x976/0xbe0
[  416.199294][T14560]  ? reacquire_held_locks+0x104/0x190
[  416.199331][T14560]  ? __local_bh_enable_ip+0xd0/0x130
[  416.199358][T14560]  ? lockdep_hardirqs_on+0x7a/0x110
[  416.199388][T14560]  ? inet_sendmsg+0x10d/0x320
[  416.199413][T14560]  ? inet_sendmsg+0x23e/0x320
[  416.199441][T14560]  ? __pfx_inet_sendmsg+0x10/0x10
[  416.199464][T14560]  sock_sendmsg_nosec+0x10e/0x180
[  416.199510][T14560]  ____sys_sendmsg+0x54e/0x850
[  416.199544][T14560]  ? __pfx_____sys_sendmsg+0x10/0x10
[  416.199583][T14560]  ? import_iovec+0x73/0xa0
[  416.199609][T14560]  ___sys_sendmsg+0x2a5/0x360
[  416.199636][T14560]  ? __lock_acquire+0x683/0x2cf0
[  416.199671][T14560]  ? __pfx____sys_sendmsg+0x10/0x10
[  416.199744][T14560]  ? __fget_files+0x2a/0x420
[  416.199774][T14560]  ? __fget_files+0x3a2/0x420
[  416.199815][T14560]  __x64_sys_sendmsg+0x1b1/0x290
[  416.199847][T14560]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  416.199896][T14560]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.199920][T14560]  do_syscall_64+0x174/0x580
[  416.199953][T14560]  ? trace_irq_disable+0x3b/0x140
[  416.199981][T14560]  ? clear_bhb_loop+0x40/0x90
[  416.200006][T14560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.200027][T14560] RIP: 0033:0x7f964e39e019
[  416.200047][T14560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.200066][T14560] RSP: 002b:00007f964f29e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  416.200089][T14560] RAX: ffffffffffffffda RBX: 00007f964e625fa0 RCX: 00007f964e39e019
[  416.200105][T14560] RDX: 0000000004040880 RSI: 0000200000000500 RDI: 0000000000000003
[  416.200120][T14560] RBP: 00007f964f29e090 R08: 0000000000000000 R09: 0000000000000000
[  416.200133][T14560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.200146][T14560] R13: 00007f964e626038 R14: 00007f964e625fa0 R15: 00007ffde8992a98
[  416.200181][T14560]  </TASK>
[  416.750586][   T76] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  416.766866][ T1115] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7
[  416.809681][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'.
[  416.881741][ T5971] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  417.018948][T14586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2154'.
[  417.032258][T14586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2154'.
[  417.048227][   T76] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  417.062353][   T76] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  417.113045][T14586] team0: entered promiscuous mode
[  417.118273][T14586] team_slave_0: entered promiscuous mode
[  417.124842][T14586] team_slave_1: entered promiscuous mode
[  417.133732][T14586] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  417.193927][T14586] bond0: entered promiscuous mode
[  417.199251][T14586] bond_slave_0: entered promiscuous mode
[  417.205656][T14586] bond_slave_1: entered promiscuous mode
[  417.218901][T14586] 8021q: adding VLAN 0 to HW filter on device hsr0
[  417.243140][T14595] syzkaller0: entered promiscuous mode
[  417.253892][T14595] syzkaller0: entered allmulticast mode
[  417.298684][T14598] xt_NFQUEUE: number of total queues is 0
[  417.391648][T14600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'.
[  417.514615][T14604] FAULT_INJECTION: forcing a failure.
[  417.514615][T14604] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.552255][T14604] CPU: 1 UID: 0 PID: 14604 Comm: syz.4.2161 Not tainted syzkaller #0 PREEMPT(full) 
[  417.552285][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  417.552299][T14604] Call Trace:
[  417.552308][T14604]  <TASK>
[  417.552317][T14604]  dump_stack_lvl+0xe8/0x150
[  417.552355][T14604]  should_fail_ex+0x40c/0x560
[  417.552388][T14604]  _copy_from_user+0x2d/0xb0
[  417.552410][T14604]  kstrtouint_from_user+0xd6/0x180
[  417.552442][T14604]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  417.552492][T14604]  proc_fail_nth_write+0x8e/0x210
[  417.552529][T14604]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  417.552569][T14604]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  417.552616][T14604]  vfs_write+0x296/0xba0
[  417.552648][T14604]  ? __pfx_vfs_write+0x10/0x10
[  417.552671][T14604]  ? __fget_files+0x2a/0x420
[  417.552706][T14604]  ? __fget_files+0x3a2/0x420
[  417.552734][T14604]  ? __fget_files+0x2a/0x420
[  417.552774][T14604]  ksys_write+0x150/0x270
[  417.552799][T14604]  ? __pfx_ksys_write+0x10/0x10
[  417.552831][T14604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.552855][T14604]  do_syscall_64+0x174/0x580
[  417.552884][T14604]  ? trace_irq_disable+0x3b/0x140
[  417.552913][T14604]  ? clear_bhb_loop+0x40/0x90
[  417.552939][T14604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.552968][T14604] RIP: 0033:0x7f870bb5e84e
[  417.552988][T14604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  417.553007][T14604] RSP: 002b:00007f870c9befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  417.553032][T14604] RAX: ffffffffffffffda RBX: 00007f870c9bf6c0 RCX: 00007f870bb5e84e
[  417.553048][T14604] RDX: 0000000000000001 RSI: 00007f870c9bf0a0 RDI: 0000000000000004
[  417.553062][T14604] RBP: 00007f870c9bf090 R08: 0000000000000000 R09: 0000000000000000
[  417.553075][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.553088][T14604] R13: 00007f870be26038 R14: 00007f870be25fa0 R15: 00007fff062b55d8
[  417.553124][T14604]  </TASK>
[  417.805344][T14608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2162'.
[  417.821894][T14608] ip6gre1: entered promiscuous mode
[  417.828239][T14608] ip6gre1: entered allmulticast mode
[  417.828592][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2165'.
[  417.888434][T14615] netlink: 'syz.4.2165': attribute type 10 has an invalid length.
[  417.993184][T14615] netdevsim netdevsim4 netdevsim1: left promiscuous mode
[  418.004038][T14615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  418.015516][T14615] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  418.028496][T14616] netlink: 'syz.2.2162': attribute type 6 has an invalid length.
[  418.050103][T14616] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2162'.
[  418.096583][T14608] batman_adv: batadv0: Removing interface: batadv_slave_0
[  418.226605][T14610] bond8 (unregistering): Released all slaves
[  418.262144][T14630] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2166'.
[  418.411213][ T5971] net_ratelimit: 7 callbacks suppressed
[  418.411233][ T5971] bond2: (slave gretap1): failed to get link speed/duplex
[  418.620021][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  418.638673][T14645] netlink: 'syz.1.2171': attribute type 29 has an invalid length.
[  418.653449][T14645] netlink: 'syz.1.2171': attribute type 29 has an invalid length.
[  418.670722][T14645] netlink: 'syz.1.2171': attribute type 29 has an invalid length.
[  418.690287][T14645] netlink: 'syz.1.2171': attribute type 29 has an invalid length.
[  418.709198][T14645] netlink: 'syz.1.2171': attribute type 29 has an invalid length.
[  418.762253][T14645] netlink: 'syz.1.2171': attribute type 29 has an invalid length.
[  418.770845][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  418.786419][T14645] netlink: 'syz.1.2171': attribute type 29 has an invalid length.
[  418.890220][T13192] bond2: (slave gretap1): failed to get link speed/duplex
[  419.009993][T13192] bond2: (slave gretap1): failed to get link speed/duplex
[  419.140204][T13192] bond2: (slave gretap1): failed to get link speed/duplex
[  419.262520][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  419.398538][ T5971] bond2: (slave gretap1): failed to get link speed/duplex
[  419.510708][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  419.520250][   T76] bond2: (slave gretap1): failed to get link speed/duplex
[  419.680138][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  419.950319][T14716] __nla_validate_parse: 36 callbacks suppressed
[  419.950365][T14716] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2190'.
[  419.970881][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'.
[  420.006959][T14716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2190'.
[  420.400656][T14734] IPv6: sit2: Disabled Multicast RS
[  420.592709][T14745] syzkaller0: entered promiscuous mode
[  420.608587][T14745] syzkaller0: entered allmulticast mode
[  420.735146][T14763] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  420.764321][T14755] tipc: Resetting bearer <eth:syzkaller0>
[  421.165294][T14775] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2205'.
[  421.464458][T14787] validate_nla: 29 callbacks suppressed
[  421.464472][T14787] netlink: 'syz.1.2209': attribute type 1 has an invalid length.
[  421.500129][T14787] 8021q: adding VLAN 0 to HW filter on device bond13
[  421.738499][T14798] netlink: 'syz.1.2212': attribute type 2 has an invalid length.
[  421.752444][T14798] 
: entered promiscuous mode
[  422.210806][T14802] gre0: left promiscuous mode
[  422.215668][T14802] gre0: left allmulticast mode
[  422.435570][T14802] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.442951][T14802] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.730968][   T25] block nbd0: Possible stuck request ffff888027bd5080: control (read@0,1024B). Runtime 180 seconds
[  422.761058][T14802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.797792][T14802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  423.277669][T14802] tipc: Resetting bearer <eth:syzkaller0>
[  423.290352][T14802] syzkaller0: left promiscuous mode
[  423.301397][T14802] syzkaller0: left allmulticast mode
[  423.334785][T14802] ip6tnl1: left allmulticast mode
[  423.341640][T14739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  423.358352][T14802] gretap3: left allmulticast mode
[  423.452476][T14802] bridge3: left promiscuous mode
[  423.594575][T14816] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2216'.
[  423.774824][T14802] ip6gre1: left promiscuous mode
[  423.784285][T14802] ip6gre1: left allmulticast mode
[  423.840039][T14802] bond8: left promiscuous mode
[  423.848684][T14802] bridge4: left promiscuous mode
[  423.933384][T14802] bond10: left promiscuous mode
[  423.941533][T14802] bridge5: left promiscuous mode
[  423.954843][T14802] macvtap1: left allmulticast mode
[  423.970436][T14802] macvtap2: left allmulticast mode
[  423.985524][T14802] veth5: left allmulticast mode
[  424.019631][T14802] bridge6: left promiscuous mode
[  424.034291][T14802] ip6tnl3: left allmulticast mode
[  424.222153][   T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  424.265690][   T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.330417][ T5971] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  424.359242][ T5971] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.409984][   T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  424.428474][   T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.465722][T14850] No such timeout policy "syz1"
[  424.466992][T14841] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  424.816855][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'.
[  424.834112][T14868] netlink: 'syz.4.2229': attribute type 1 has an invalid length.
[  424.865184][T14862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'.
[  425.170484][T14893] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2233'.
[  425.365017][T14895] IPVS: set_ctl: invalid protocol: 41 10.1.1.1:20002
[  425.633053][T14912] netlink: 'syz.2.2238': attribute type 23 has an invalid length.
[  425.726671][T14917] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2239'.
[  425.923322][ T5972] tipc: Subscription rejected, illegal request
[  426.646352][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2249'.
[  427.002599][T14963] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2253'.
[  427.510144][ T5630] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  427.534764][T14991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  427.571646][T14991] tipc: Resetting bearer <eth:syzkaller0>
[  427.613644][T14988] tipc: Disabling bearer <eth:syzkaller0>
[  427.682729][T15005] net_ratelimit: 19 callbacks suppressed
[  427.682750][T15005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  428.101569][T15022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2263'.
[  428.670971][T15047] geneve3: entered promiscuous mode
[  428.694981][T15047] bridge0: port 4(geneve3) entered blocking state
[  428.706659][T15047] bridge0: port 4(geneve3) entered disabled state
[  428.721268][T15053] netlink: 'syz.3.2271': attribute type 1 has an invalid length.
[  428.730503][T15047] geneve3: entered allmulticast mode
[  428.751072][ T5971] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  428.755930][T15052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2271'.
[  428.783230][ T5971] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  428.810001][ T5971] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  428.904532][T15052] veth9: entered allmulticast mode
[  428.980553][   T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  430.343493][T15090] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  430.513733][T15126] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20001
[  430.786007][T15141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2292'.
[  430.872839][T15141] ipvlan0: entered allmulticast mode
[  430.878461][T15141] syz_tun: entered allmulticast mode
[  430.920198][T15146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2293'.
[  430.930997][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2293'.
[  430.941061][T15146] ip6gretap0: left allmulticast mode
[  430.946566][T15146] ip6gretap0: left promiscuous mode
[  430.956698][T15146] bridge0: port 3(ip6gretap0) entered disabled state
[  431.032067][   T25] block nbd3: Possible stuck request ffff888027d05080: control (read@0,1024B). Runtime 210 seconds
[  431.043790][   T25] block nbd3: Possible stuck request ffff888027d05240: control (read@1024,3072B). Runtime 210 seconds
[  431.274928][T15161] netlink: 'syz.1.2299': attribute type 39 has an invalid length.
[  431.338117][T15162] x_tables: duplicate underflow at hook 2
[  431.468323][T15167] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  431.497809][T15167] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  431.522235][T15167] pimreg1: port 4(wlan1) entered disabled state
[  431.579557][T15167] vlan0: left allmulticast mode
[  431.597921][T15167] geneve0: left allmulticast mode
[  431.610910][T15167] vlan0: left promiscuous mode
[  431.632268][T15167] geneve0: left promiscuous mode
[  431.653823][T15167] pimreg1: port 3(vlan0) entered disabled state
[  431.723135][T15172] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2302'.
[  431.883646][T15181] netlink: 'syz.1.2305': attribute type 1 has an invalid length.
[  431.948671][T15181] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  432.131200][T15195] netlink: 'syz.1.2310': attribute type 21 has an invalid length.
[  432.150954][T15191] erspan0: left promiscuous mode
[  432.199558][T15191] 8021q: adding VLAN 0 to HW filter on device team0
[  432.236231][T15191] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.382794][T15191] batman_adv: batadv0: Interface activated: batadv_slave_0
[  432.422024][T15191] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  432.497202][T15195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2310'.
[  432.697901][T15221] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2314'.
[  433.006829][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2318'.
[  433.017982][T15245] batadv_slave_0: Caught tx_queue_len zero misconfig
[  433.401434][T15261] FAULT_INJECTION: forcing a failure.
[  433.401434][T15261] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  433.441563][T15261] CPU: 1 UID: 0 PID: 15261 Comm: syz.2.2323 Not tainted syzkaller #0 PREEMPT(full) 
[  433.441590][T15261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  433.441602][T15261] Call Trace:
[  433.441611][T15261]  <TASK>
[  433.441619][T15261]  dump_stack_lvl+0xe8/0x150
[  433.441654][T15261]  should_fail_ex+0x40c/0x560
[  433.441684][T15261]  _copy_to_user+0x31/0xb0
[  433.441706][T15261]  simple_read_from_buffer+0xe1/0x170
[  433.441749][T15261]  proc_fail_nth_read+0x1bb/0x230
[  433.441782][T15261]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  433.441814][T15261]  ? rw_verify_area+0x24a/0x4c0
[  433.441835][T15261]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  433.441862][T15261]  vfs_read+0x213/0xa80
[  433.441887][T15261]  ? __pfx___mutex_lock+0x10/0x10
[  433.441916][T15261]  ? __pfx_vfs_read+0x10/0x10
[  433.441937][T15261]  ? __fget_files+0x2a/0x420
[  433.441968][T15261]  ? __fget_files+0x3a2/0x420
[  433.441995][T15261]  ? __fget_files+0x2a/0x420
[  433.442040][T15261]  ksys_read+0x150/0x270
[  433.442061][T15261]  ? __pfx_ksys_read+0x10/0x10
[  433.442087][T15261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.442107][T15261]  do_syscall_64+0x174/0x580
[  433.442132][T15261]  ? trace_irq_disable+0x3b/0x140
[  433.442173][T15261]  ? clear_bhb_loop+0x40/0x90
[  433.442198][T15261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.442217][T15261] RIP: 0033:0x7fc83735e84e
[  433.442236][T15261] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  433.442254][T15261] RSP: 002b:00007fc838195fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  433.442275][T15261] RAX: ffffffffffffffda RBX: 00007fc8381966c0 RCX: 00007fc83735e84e
[  433.442289][T15261] RDX: 000000000000000f RSI: 00007fc8381960a0 RDI: 0000000000000004
[  433.442301][T15261] RBP: 00007fc838196090 R08: 0000000000000000 R09: 0000000000000000
[  433.442314][T15261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  433.442325][T15261] R13: 00007fc837626038 R14: 00007fc837625fa0 R15: 00007ffd53d3b168
[  433.442358][T15261]  </TASK>
[  433.680782][T15217] netlink: 'syz.4.2313': attribute type 1 has an invalid length.
[  434.465004][T15296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2332'.
[  434.637228][T15305] syz_tun: left allmulticast mode
[  434.657478][T15305] syz_tun: left promiscuous mode
[  434.675288][T15305] bridge0: port 3(syz_tun) entered disabled state
[  434.743070][T15305] bridge_slave_0: left allmulticast mode
[  434.748793][T15305] bridge_slave_0: left promiscuous mode
[  434.781591][T15305] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.813258][T15305] bridge_slave_1: left promiscuous mode
[  434.833844][T15305] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.894557][T15305] bond0: (slave bond_slave_0): Releasing backup interface
[  434.919132][T15321] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2338'.
[  434.967813][T15305] bond0: (slave bond_slave_1): Releasing backup interface
[  434.993010][T15305] team0: Port device team_slave_0 removed
[  435.013927][T15305] team0: Port device team_slave_1 removed
[  435.031604][T15305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.049975][T15305] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.080582][T15305] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.097289][T15305] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.133824][T15305] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  435.217227][T15332] xt_hashlimit: size too large, truncated to 1048576
[  435.239190][T15311] team0: Mode changed to "loadbalance"
[  435.477736][T15341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2341'.
[  435.835292][T15363] gre0: Caught tx_queue_len zero misconfig
[  435.904542][ T9105] udevd[9105]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  436.015698][ T8682] udevd[8682]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  436.190011][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2348'.
[  436.361343][T15379] TC_ACT_REPEAT abuse ?
[  436.451057][T15381] sctp: [Deprecated]: syz.4.2351 (pid 15381) Use of struct sctp_assoc_value in delayed_ack socket option.
[  436.451057][T15381] Use struct sctp_sack_info instead
[  436.518932][T15383] ip6gretap0: entered promiscuous mode
[  436.526670][T15383] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  436.571309][T15383] bond0 (unregistering): left promiscuous mode
[  436.594386][T15383] bond_slave_0: left promiscuous mode
[  436.612450][T15383] bond_slave_1: left promiscuous mode
[  436.631259][T15383] ip6gretap0: left promiscuous mode
[  436.653856][T15383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  436.671982][T15388] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2354'.
[  436.706888][T15383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  436.734803][T15383] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface
[  436.763406][T15383] bond0 (unregistering): Released all slaves
[  437.038567][T15400] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20000
[  437.273901][T15381] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  437.637338][T15422] netlink: 'syz.1.2364': attribute type 10 has an invalid length.
[  437.682916][T15422] bond9: (slave dummy0): Releasing active interface
[  437.727420][T15422] dummy0: entered promiscuous mode
[  437.744924][T15422] team0: Port device dummy0 added
[  438.105388][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'.
[  438.407654][T15449] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  438.744302][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'.
[  438.931152][T15462] 8021q: adding VLAN 0 to HW filter on device bond7
[  439.056940][T15467] 8021q: adding VLAN 0 to HW filter on device batadv2
[  439.109538][T15467] bond7: (slave batadv2): Enslaving as an active interface with an up link
[  439.144893][T15477] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2377'.
[  439.163130][T15471] bond7 (unregistering): (slave batadv2): Releasing backup interface
[  439.201008][T15471] bond7 (unregistering): Released all slaves
[  439.247671][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2379'.
[  439.262099][T15484] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2377'.
[  439.272908][T15482] block nbd2: Unsupported socket: should be TCP or UNIX.
[  439.306993][T15477] gretap0: entered promiscuous mode
[  439.332793][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2377'.
[  439.371999][T15478] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2375'.
[  439.390707][T15484] 0ªî{X¹¦: renamed from gretap0
[  439.425260][T15484] 0ªî{X¹¦: left promiscuous mode
[  439.443941][T15484] 0ªî{X¹¦: entered allmulticast mode
[  439.463024][T15484] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  439.771998][T15505] xt_cgroup: invalid path, errno=-2
[  440.040445][T15526] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2388'.
[  440.056414][ T5972] tipc: Subscription rejected, illegal request
[  440.264112][T15536] netlink: 'syz.2.2389': attribute type 12 has an invalid length.
[  440.401630][T15537] netlink: 'syz.2.2389': attribute type 12 has an invalid length.
[  440.671133][T15548] sctp: [Deprecated]: syz.3.2393 (pid 15548) Use of int in maxseg socket option.
[  440.671133][T15548] Use struct sctp_assoc_value instead
[  440.702399][T15550] netlink: 'syz.3.2393': attribute type 7 has an invalid length.
[  440.720465][T15546] xt_l2tp: invalid flags combination: 8
[  440.743521][T15546] netlink: 'syz.2.2392': attribute type 1 has an invalid length.
[  440.756802][T15550] netlink: 'syz.3.2393': attribute type 8 has an invalid length.
[  440.784288][T15550] netlink: 'syz.3.2393': attribute type 7 has an invalid length.
[  440.786638][T15546] gre0: entered promiscuous mode
[  440.814048][T15546] gre0: entered allmulticast mode
[  440.814803][T15550] netlink: 'syz.3.2393': attribute type 8 has an invalid length.
[  440.848744][T15550] netlink: 'syz.3.2393': attribute type 7 has an invalid length.
[  440.875195][T15550] netlink: 'syz.3.2393': attribute type 8 has an invalid length.
[  440.941754][T15528] dvmrp0: entered allmulticast mode
[  440.991228][ T5972] dvmrp0: left allmulticast mode
[  441.208927][T15550] __nla_validate_parse: 31 callbacks suppressed
[  441.208945][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2393'.
[  441.250285][T15550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'.
[  441.291873][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2393'.
[  441.316436][T15550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'.
[  441.360912][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2393'.
[  441.401937][T15550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'.
[  441.472768][T15570] batman_adv: batadv0: Adding interface: ip6gretap0
[  441.492554][T15573] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2398'.
[  441.514842][T15570] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.552766][T15570] batman_adv: batadv0: Not using interface ip6gretap0 (retrying later): interface not active
[  441.837075][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2405'.
[  441.875238][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2404'.
[  441.917187][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2404'.
[  441.964546][T15601] hsr_slave_1 (unregistering): left promiscuous mode
[  442.556709][T15635] bond7: option lacp_rate: invalid value (201)
[  442.574717][T15635] bond7 (unregistering): Released all slaves
[  443.747652][T15700] bond9: Unable to set down delay as MII monitoring is disabled
[  443.782564][T15700] bond9 (unregistering): Released all slaves
[  444.021394][T15725] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  444.213823][T15719] bridge_slave_1: left allmulticast mode
[  444.411008][T15734] batman_adv: batadv0: Adding interface: macvtap0
[  444.430273][T15734] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.491533][T15734] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  444.549438][T15737] batman_adv: batadv0: Removing interface: macvtap0
[  444.755624][T15745] bridge7: entered promiscuous mode
[  444.770407][T15745] bridge7: entered allmulticast mode
[  444.805394][T15745] team0: Port device bridge7 added
[  444.833360][   T76] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  444.857119][   T76] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  444.948885][T15754] bridge8: entered promiscuous mode
[  444.979465][T15754] bridge8: entered allmulticast mode
[  445.004726][T15754] team0: Port device bridge8 added
[  445.052674][T15782] validate_nla: 31 callbacks suppressed
[  445.052694][T15782] netlink: 'syz.4.2436': attribute type 2 has an invalid length.
[  445.109536][T15782] : entered promiscuous mode
[  445.132118][   T76] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  445.173309][   T76] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.260104][   T76] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  445.294829][   T76] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.329550][   T76] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  445.356240][   T76] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.537010][T15805] netlink: 'syz.0.2443': attribute type 1 has an invalid length.
[  445.941912][T15805] bond7: entered promiscuous mode
[  445.962279][T15805] 8021q: adding VLAN 0 to HW filter on device bond7
[  446.064447][T15816] bond7: (slave bridge5): making interface the new active one
[  446.076647][T15816] bridge5: entered promiscuous mode
[  446.084925][T15816] bond7: (slave bridge5): Enslaving as an active interface with an up link
[  446.234259][T15840] __nla_validate_parse: 12 callbacks suppressed
[  446.234277][T15840] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2449'.
[  446.419339][T15851] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2451'.
[  446.460432][T15855] sctp: [Deprecated]: syz.1.2452 (pid 15855) Use of int in maxseg socket option.
[  446.460432][T15855] Use struct sctp_assoc_value instead
[  447.165387][T15886] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2460'.
[  447.192803][T15886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2460'.
[  447.226273][T15890] hsr0: entered allmulticast mode
[  447.243859][T15890] hsr_slave_0: entered allmulticast mode
[  447.264608][T15889] hsr0: left allmulticast mode
[  447.284563][T15889] hsr_slave_0: left allmulticast mode
[  447.982240][T15936] hsr0: entered allmulticast mode
[  447.989292][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2472'.
[  448.003750][T15936] hsr_slave_0: entered allmulticast mode
[  448.023595][T15936] hsr_slave_1: entered allmulticast mode
[  448.041682][T15933] hsr0: left allmulticast mode
[  448.073269][T15941] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2472'.
[  448.086621][T15933] hsr_slave_0: left allmulticast mode
[  448.105747][T15933] hsr_slave_1: left allmulticast mode
[  448.621228][T15935] syzkaller1: entered promiscuous mode
[  448.641735][T15935] syzkaller1: entered allmulticast mode
[  449.087344][T15996] syzkaller1: entered promiscuous mode
[  449.124006][T15996] syzkaller1: entered allmulticast mode
[  449.235519][T16007] hsr0: entered allmulticast mode
[  449.256701][T16007] hsr_slave_0: entered allmulticast mode
[  449.436057][T16006] hsr0: left allmulticast mode
[  449.451090][T16006] hsr_slave_0: left allmulticast mode
[  449.487355][T16014] FAULT_INJECTION: forcing a failure.
[  449.487355][T16014] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  449.506571][T16014] CPU: 0 UID: 0 PID: 16014 Comm: syz.3.2487 Not tainted syzkaller #0 PREEMPT(full) 
[  449.506597][T16014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  449.506609][T16014] Call Trace:
[  449.506617][T16014]  <TASK>
[  449.506625][T16014]  dump_stack_lvl+0xe8/0x150
[  449.506661][T16014]  should_fail_ex+0x40c/0x560
[  449.506692][T16014]  _copy_to_user+0x31/0xb0
[  449.506714][T16014]  simple_read_from_buffer+0xe1/0x170
[  449.506748][T16014]  proc_fail_nth_read+0x1bb/0x230
[  449.506780][T16014]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  449.506811][T16014]  ? rw_verify_area+0x24a/0x4c0
[  449.506832][T16014]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  449.506871][T16014]  vfs_read+0x213/0xa80
[  449.506895][T16014]  ? __pfx___mutex_lock+0x10/0x10
[  449.506924][T16014]  ? __pfx_vfs_read+0x10/0x10
[  449.506944][T16014]  ? __fget_files+0x2a/0x420
[  449.506975][T16014]  ? __fget_files+0x3a2/0x420
[  449.507000][T16014]  ? __fget_files+0x2a/0x420
[  449.507035][T16014]  ksys_read+0x150/0x270
[  449.507058][T16014]  ? __pfx_ksys_read+0x10/0x10
[  449.507085][T16014]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.507108][T16014]  do_syscall_64+0x174/0x580
[  449.507135][T16014]  ? trace_irq_disable+0x3b/0x140
[  449.507178][T16014]  ? clear_bhb_loop+0x40/0x90
[  449.507204][T16014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.507225][T16014] RIP: 0033:0x7f964e35e84e
[  449.507244][T16014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  449.507263][T16014] RSP: 002b:00007f964f27cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  449.507285][T16014] RAX: ffffffffffffffda RBX: 00007f964f27d6c0 RCX: 00007f964e35e84e
[  449.507301][T16014] RDX: 000000000000000f RSI: 00007f964f27d0a0 RDI: 0000000000000004
[  449.507314][T16014] RBP: 00007f964f27d090 R08: 0000000000000000 R09: 0000000000000000
[  449.507328][T16014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.507341][T16014] R13: 00007f964e626128 R14: 00007f964e626090 R15: 00007ffde8992a98
[  449.507377][T16014]  </TASK>
[  449.536573][T16019] openvswitch: netlink: Multiple metadata blocks provided
[  449.634737][T16021] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2488'.
[  449.876936][T16025] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  450.234489][T16062] tipc: Enabled bearer <eth:ip6gre0>, priority 2
[  450.719534][T16082] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  451.452959][T16121] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2516'.
[  451.844868][T16133] syzkaller0: entered promiscuous mode
[  451.865865][T16133] syzkaller0: entered allmulticast mode
[  451.892806][T16133] sctp: [Deprecated]: syz.0.2519 (pid 16133) Use of int in maxseg socket option.
[  451.892806][T16133] Use struct sctp_assoc_value instead
[  452.028169][T16146] netlink: 'syz.4.2521': attribute type 10 has an invalid length.
[  452.087116][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2521'.
[  452.241079][T16144] netlink: 'syz.4.2521': attribute type 10 has an invalid length.
[  452.282807][T16144] syz_tun: entered promiscuous mode
[  452.302865][T16144] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  452.318576][T16150] ip6gre2: entered promiscuous mode
[  452.342524][T16150] ip6gre2: entered allmulticast mode
[  452.366643][T16163] IPVS: set_ctl: invalid protocol: 137 172.20.20.60:0
[  452.483322][T16167] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2526'.
[  452.561423][T16170] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2527'.
[  452.714762][T16181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  452.715159][T16180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  452.791680][   T25] block nbd0: Possible stuck request ffff888027bd5080: control (read@0,1024B). Runtime 210 seconds
[  452.820846][T16186] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2533'.
[  452.880205][T16189] 8021q: adding VLAN 0 to HW filter on device batadv1
[  452.922936][T16192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2534'.
[  453.308938][T16213] syzkaller0: entered promiscuous mode
[  453.322438][T16213] syzkaller0: entered allmulticast mode
[  453.374436][T16219] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2543'.
[  453.672268][T16227] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20000
[  454.593833][T16270] syzkaller0: entered promiscuous mode
[  454.625324][T16270] syzkaller0: entered allmulticast mode
[  454.697318][T16270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  454.728334][T16268] tipc: Resetting bearer <eth:syzkaller0>
[  454.817727][T16268] tipc: Disabling bearer <eth:syzkaller0>
[  454.837815][T16278] syzkaller1: entered promiscuous mode
[  454.855361][T16278] syzkaller1: entered allmulticast mode
[  455.046028][T16271] GUP no longer grows the stack in syz.4.2550 (16271): 200000003000-20000000a000 (200000001000)
[  455.057968][T16295] netlink: 'syz.2.2556': attribute type 22 has an invalid length.
[  455.066312][T16271] CPU: 1 UID: 0 PID: 16271 Comm: syz.4.2550 Not tainted syzkaller #0 PREEMPT(full) 
[  455.066341][T16271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  455.066355][T16271] Call Trace:
[  455.066363][T16271]  <TASK>
[  455.066372][T16271]  dump_stack_lvl+0xe8/0x150
[  455.066413][T16271]  __get_user_pages+0x238c/0x2720
[  455.066441][T16271]  ? __gup_longterm_locked+0xc3b/0x15c0
[  455.066498][T16271]  __gup_longterm_locked+0xd52/0x15c0
[  455.066526][T16271]  ? lock_acquire+0x106/0x350
[  455.066574][T16271]  gup_fast_fallback+0x1d8c/0x20e0
[  455.066634][T16271]  ? __pfx_gup_fast_fallback+0x10/0x10
[  455.066663][T16271]  ? is_valid_gup_args+0x11f/0x200
[  455.066689][T16271]  ? get_user_pages_fast+0x4d/0xb0
[  455.066715][T16271]  __iov_iter_get_pages_alloc+0x378/0xa40
[  455.066756][T16271]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  455.066782][T16271]  iov_iter_get_pages2+0x5e/0xa0
[  455.066822][T16271]  __se_sys_vmsplice+0x7b5/0x1660
[  455.066887][T16271]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  455.066919][T16271]  ? __pfx_futex_wait+0x10/0x10
[  455.067012][T16271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.067033][T16271]  do_syscall_64+0x174/0x580
[  455.067071][T16271]  ? trace_irq_disable+0x3b/0x140
[  455.067098][T16271]  ? clear_bhb_loop+0x40/0x90
[  455.067123][T16271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.067144][T16271] RIP: 0033:0x7f870bb9e019
[  455.067163][T16271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.067181][T16271] RSP: 002b:00007f870c9bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  455.067203][T16271] RAX: ffffffffffffffda RBX: 00007f870be25fa0 RCX: 00007f870bb9e019
[  455.067219][T16271] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c
[  455.067232][T16271] RBP: 00007f870bc3500c R08: 0000000000000000 R09: 0000000000000000
[  455.067245][T16271] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  455.067257][T16271] R13: 00007f870be26038 R14: 00007f870be25fa0 R15: 00007fff062b55d8
[  455.067291][T16271]  </TASK>
[  455.664184][T16314] netlink: 'syz.0.2561': attribute type 1 has an invalid length.
[  455.703380][T16314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2561'.
[  455.723632][T16316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2563'.
[  455.740757][T16314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2561'.
[  455.752516][T16313] syzkaller0: entered promiscuous mode
[  455.781349][T16313] syzkaller0: entered allmulticast mode
[  456.172847][T16330] syzkaller0: entered promiscuous mode
[  456.191669][T16330] syzkaller0: entered allmulticast mode
[  456.208433][T16335] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  456.361979][T16347] netlink: 'syz.1.2570': attribute type 6 has an invalid length.
[  456.453440][T16354] bond0 (unregistering): Released all slaves
[  456.573745][T16359] __nla_validate_parse: 2 callbacks suppressed
[  456.573765][T16359] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2574'.
[  456.670234][T16362] nbd: must specify a size in bytes for the device
[  456.821639][T16369] xt_TCPMSS: Only works on TCP SYN packets
[  456.935783][T16378] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2579'.
[  457.410323][T16375] syzkaller0: entered promiscuous mode
[  457.422734][T16375] syzkaller0: entered allmulticast mode
[  457.658157][T16399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2584'.
[  457.737942][T16399] 8021q: adding VLAN 0 to HW filter on device bond10
[  457.813604][T16407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2585'.
[  457.907736][T16399] veth11: entered allmulticast mode
[  457.944993][T16399] bond10: (slave veth11): Enslaving as an active interface with an up link
[  457.998557][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2585'.
[  458.144031][T16424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2589'.
[  458.203899][T16426] vlan2: entered promiscuous mode
[  458.225033][T16426] bond_slave_1: entered promiscuous mode
[  458.386016][T16434] netlink: 'syz.2.2593': attribute type 12 has an invalid length.
[  458.410394][T16434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2593'.
[  458.793920][T16461] rdma_op ffff88807ab599f0 conn xmit_rdma 0000000000000000
[  458.910911][T16465] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2603'.
[  458.943612][T16468] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2602'.
[  458.980078][T16468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2602'.
[  459.047867][T16473] netlink: 'syz.2.2602': attribute type 18 has an invalid length.
[  460.640133][ T5976] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  460.659531][ T5976] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  460.678353][ T5976] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  460.707734][ T5976] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  461.111189][   T25] block nbd3: Possible stuck request ffff888027d05080: control (read@0,1024B). Runtime 240 seconds
[  461.122189][   T25] block nbd3: Possible stuck request ffff888027d05240: control (read@1024,3072B). Runtime 240 seconds
[  461.435468][T16579] bond0: entered promiscuous mode
[  461.456597][T16579] batadv0: entered promiscuous mode
[  461.479715][T16579] debugfs: 'hsr0' already exists in 'hsr'
[  461.496812][T16579] Cannot create hsr debugfs directory
[  461.512237][T16579] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  461.543069][T16579] 8021q: adding VLAN 0 to HW filter on device hsr0
[  461.571650][T16579] bond0: left promiscuous mode
[  461.578392][T16579] batadv0: left promiscuous mode
[  461.747954][T16590] __nla_validate_parse: 6 callbacks suppressed
[  461.747982][T16590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2641'.
[  461.846330][T16594] netlink: 'syz.3.2642': attribute type 32 has an invalid length.
[  461.865646][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'.
[  461.946500][T16594] bond11: option coupled_control: invalid value (12)
[  461.973664][T16594] bond11 (unregistering): Released all slaves
[  462.039082][T16600] tipc: Resetting bearer <eth:syzkaller0>
[  462.234121][T16609] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2645'.
[  462.547935][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2647'.
[  462.845921][T16633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2653'.
[  462.898746][T16632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2653'.
[  462.929187][T16632] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2653'.
[  462.979316][T16642] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  463.335379][T16660] xt_hashlimit: size too large, truncated to 1048576
[  463.439363][T16668] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2661'.
[  463.515685][T16677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  463.619829][T16680] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2664'.
[  463.639495][T16679] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2664'.
[  463.665739][T16670] ip6gre2: entered allmulticast mode
[  464.165738][T16704] netlink: 'syz.0.2669': attribute type 4 has an invalid length.
[  464.934350][T16744] netlink: 'syz.4.2682': attribute type 1 has an invalid length.
[  465.577206][T16772] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  465.614415][T16786] IPv6: NLM_F_CREATE should be specified when creating new route
[  465.815169][T16792] ip6t_srh: unknown srh invflags 4000
[  465.880539][T16796] netlink: 'syz.1.2691': attribute type 10 has an invalid length.
[  465.974776][T16799] Cannot find del_set index 17 as target
[  466.109023][T16799] tc_dump_action: action bad kind
[  466.302219][T16809] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  466.712281][T16831] IPVS: length: 199 != 24
[  466.908939][T16844] netlink: 'syz.2.2710': attribute type 4 has an invalid length.
[  466.957349][T16844] netlink: 'syz.2.2710': attribute type 4 has an invalid length.
[  466.973914][T16848] __nla_validate_parse: 14 callbacks suppressed
[  466.973931][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2711'.
[  467.054886][T16852] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  467.160883][T16862] lo speed is unknown, defaulting to 1000
[  467.166877][T16862] lo speed is unknown, defaulting to 1000
[  467.177922][T16862] lo speed is unknown, defaulting to 1000
[  467.200932][T16862] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  467.230157][T16862] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  467.269601][T16866] netlink: 'syz.4.2713': attribute type 2 has an invalid length.
[  467.288551][T16862] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  467.308331][T16866] netlink: 'syz.4.2713': attribute type 1 has an invalid length.
[  467.378311][T16862] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  467.465697][T16866] bond11: entered promiscuous mode
[  467.472786][T16866] 8021q: adding VLAN 0 to HW filter on device bond11
[  467.484933][T16862] lo speed is unknown, defaulting to 1000
[  467.500575][T16862] lo speed is unknown, defaulting to 1000
[  467.513850][T16862] lo speed is unknown, defaulting to 1000
[  467.522540][T16862] lo speed is unknown, defaulting to 1000
[  467.531553][T16862] lo speed is unknown, defaulting to 1000
[  468.095876][T16879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  468.214545][T16894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2722'.
[  468.238588][T16896] netlink: 'syz.2.2723': attribute type 3 has an invalid length.
[  468.254167][T16896] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2723'.
[  468.336478][T16905] x_tables: duplicate underflow at hook 2
[  468.397950][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2725'.
[  468.516777][T16912] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2727'.
[  468.822442][T16923] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes.
[  468.978851][T16929] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes.
[  468.989494][T16932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2733'.
[  469.155161][T16938] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  469.225242][T16938] bond0 (unregistering): Released all slaves
[  469.531234][T16960] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  469.723038][T16970] x_tables: duplicate underflow at hook 1
[  470.155780][T16996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  470.165340][T16996] syzkaller0: entered promiscuous mode
[  470.172422][T16996] syzkaller0: entered allmulticast mode
[  470.187890][T16996] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  470.249736][T16996] tipc: Resetting bearer <eth:syzkaller0>
[  470.293955][T16992] tipc: Resetting bearer <eth:syzkaller0>
[  470.339636][T16992] tipc: Disabling bearer <eth:syzkaller0>
[  470.676211][T17033] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2760'.
[  470.866502][T17038] bond11: entered allmulticast mode
[  470.873073][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'.
[  470.883075][T17038] netlink: 'syz.3.2761': attribute type 21 has an invalid length.
[  471.088519][T17051] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2764'.
[  471.306241][T17055] syzkaller0: entered promiscuous mode
[  471.326440][T17055] syzkaller0: entered allmulticast mode
[  471.333679][T17057] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001
[  471.404796][T17055] geneve4: entered promiscuous mode
[  471.424352][T17063] tipc: Enabling of bearer <h:gr> rejected, media not registered
[  471.526832][T17069] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2774'.
[  471.616027][T17072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  471.650351][T17071] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  471.674779][T17072] syzkaller0: entered promiscuous mode
[  471.686135][T17072] syzkaller0: entered allmulticast mode
[  471.715889][T17071] tipc: Resetting bearer <eth:syzkaller0>
[  471.737113][T17071] syzkaller0: left promiscuous mode
[  471.750605][T17071] syzkaller0: left allmulticast mode
[  471.765276][T17076] syzkaller0: entered promiscuous mode
[  471.781446][T17076] syzkaller0: entered allmulticast mode
[  471.818847][T17070] tipc: Resetting bearer <eth:syzkaller0>
[  471.832173][T17088] netlink: 'syz.1.2777': attribute type 1 has an invalid length.
[  471.880504][T17070] tipc: Disabling bearer <eth:syzkaller0>
[  471.977967][T17089] gretap4: entered allmulticast mode
[  471.996278][T17089] bond0: (slave gretap4): making interface the new active one
[  472.006355][T17089] bond0: (slave gretap4): Enslaving as an active interface with an up link
[  472.062853][T17088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2777'.
[  472.338568][T17112] netlink: 'syz.3.2784': attribute type 1 has an invalid length.
[  472.403419][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2784'.
[  472.498846][T17112] 8021q: adding VLAN 0 to HW filter on device bond12
[  472.624329][T17119] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  472.636399][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2788'.
[  472.669745][T17119] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  472.775774][T17119] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  472.796050][T17119] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  472.834246][   T30] audit: type=1804 audit(1785640129.952:5): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2788" name="/newroot/595/cgroup.controllers" dev="tmpfs" ino=3088 res=1 errno=0
[  472.872918][   T30] audit: type=1800 audit(1785640129.952:6): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2788" name="cgroup.controllers" dev="tmpfs" ino=3088 res=0 errno=0
[  472.936170][T17119] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  472.946901][T17119] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  473.001324][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2791'.
[  473.014147][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2791'.
[  473.026908][T17144] netlink: 'syz.1.2792': attribute type 3 has an invalid length.
[  473.036574][T17144] netlink: 'syz.1.2792': attribute type 3 has an invalid length.
[  473.048258][T17119] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  473.070857][T17119] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  473.250253][ T5976] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.268139][ T5976] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  473.334744][T17157] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2796'.
[  473.355155][ T5972] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.374618][ T5972] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  473.390406][ T5972] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.398859][ T5972] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  473.409017][ T5972] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  473.417560][ T5972] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  473.472280][T17163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2798'.
[  473.610883][T17176] netlink: 'syz.2.2799': attribute type 1 has an invalid length.
[  473.611977][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'.
[  473.632152][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'.
[  473.641251][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'.
[  473.651906][T17168] bond5: (slave macvlan1): Releasing active interface
[  473.674931][T17168] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  473.686030][T17168] bond12: (slave macvlan1): Enslaving as an active interface with an up link
[  473.699501][T17175] bond12 (unregistering): (slave macvlan1): Releasing backup interface
[  473.715699][T17175] bond12 (unregistering): Released all slaves
[  473.849508][T17181] veth9: entered allmulticast mode
[  473.881305][T17181] bond10: (slave veth9): Enslaving as an active interface with a down link
[  473.916973][T17169] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  474.792394][T17176] 8021q: adding VLAN 0 to HW filter on device bond10
[  475.077696][T17215] netlink: 'syz.3.2808': attribute type 1 has an invalid length.
[  475.090554][T17216] netlink: 'syz.1.2809': attribute type 50 has an invalid length.
[  475.529338][T17233] syzkaller1: entered promiscuous mode
[  475.543261][T17233] syzkaller1: entered allmulticast mode
[  475.567294][T17233] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  475.966389][T17246] netlink: 'syz.4.2816': attribute type 12 has an invalid length.
[  476.444894][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  476.462450][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  476.481740][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  476.492950][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  476.501318][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  476.701787][T17260] syzkaller0: entered promiscuous mode
[  476.723537][T17260] syzkaller0: entered allmulticast mode
[  477.323760][T17253] lo speed is unknown, defaulting to 1000
[  477.496874][T17284] xt_hashlimit: size too large, truncated to 1048576
[  477.921940][T17253] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.941436][T17253] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.961922][T17253] bridge_slave_0: entered allmulticast mode
[  477.996604][T17253] bridge_slave_0: entered promiscuous mode
[  478.031415][T17253] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.051445][T17253] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.074055][T17253] bridge_slave_1: entered allmulticast mode
[  478.091841][T17253] bridge_slave_1: entered promiscuous mode
[  478.201191][T17253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  478.257425][T17253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  478.429318][T17253] team0: Port device team_slave_0 added
[  478.448729][T17253] team0: Port device team_slave_1 added
[  478.551289][   T50] Bluetooth: hci5: command tx timeout
[  478.577856][T17253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  478.588876][T17313] __nla_validate_parse: 7 callbacks suppressed
[  478.588896][T17313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2829'.
[  478.595417][T17253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  478.595449][T17253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  478.607315][T17253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  478.660255][T17253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  478.700454][T17253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  479.009771][T17253] hsr_slave_0: entered promiscuous mode
[  479.032780][T17253] hsr_slave_1: entered promiscuous mode
[  479.055088][T17253] debugfs: 'hsr0' already exists in 'hsr'
[  479.066697][T17253] Cannot create hsr debugfs directory
[  479.128566][T17327] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  479.802410][T17365] netlink: 524 bytes leftover after parsing attributes in process `syz.2.2842'.
[  479.884939][T17253] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.035057][T17372] syzkaller0: entered promiscuous mode
[  480.069130][T17372] syzkaller0: entered allmulticast mode
[  480.176525][T17253] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.353152][T17253] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.353651][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'.
[  480.385140][T17386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2848'.
[  480.413199][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2848'.
[  480.447521][T17386] veth9: entered allmulticast mode
[  480.516264][T17384] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  480.536896][T17395] netlink: 'syz.0.2851': attribute type 13 has an invalid length.
[  480.545817][T17395] netlink: 'syz.0.2851': attribute type 17 has an invalid length.
[  480.581318][T17253] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.631450][   T50] Bluetooth: hci5: command tx timeout
[  480.686999][T17399] netlink: 'syz.2.2853': attribute type 13 has an invalid length.
[  480.695001][T17399] netlink: 'syz.2.2853': attribute type 17 has an invalid length.
[  480.740669][T17395] gretap0: refused to change device tx_queue_len
[  480.768099][T17395] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  480.807730][T14293] lo speed is unknown, defaulting to 1000
[  480.816541][T17399] gre0: left promiscuous mode
[  480.824610][T14293] syz2: Port: 1 Link ACTIVE
[  480.832560][T17399] gre0: left allmulticast mode
[  480.969254][T17409] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2857'.
[  481.012158][T17399] bridge0: port 4(geneve3) entered blocking state
[  481.018807][T17399] bridge0: port 4(geneve3) entered forwarding state
[  481.055781][T17399] 8021q: adding VLAN 0 to HW filter on device .`
[  481.077897][T17399] 8021q: adding VLAN 0 to HW filter on device team0
[  481.092731][T17399] batadv0: left promiscuous mode
[  481.099499][T17399] 8021q: adding VLAN 0 to HW filter on device batadv0
[  481.174291][T17399] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.195552][T17399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  481.210388][T17399] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  481.234670][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2860'.
[  481.260919][  T115] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.268141][  T115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  481.293618][  T115] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.300879][  T115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  481.558785][T17425] syzkaller0: entered promiscuous mode
[  481.582645][T17425] syzkaller0: entered allmulticast mode
[  481.924452][T17448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2866'.
[  482.348092][ T1115] bond10: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  482.358245][ T1115] bond10: (slave veth0_to_bond): making interface the new active one
[  482.372600][ T1115] veth0_to_bond: entered promiscuous mode
[  482.380634][ T1115] bond10: active interface up!
[  482.719197][   T50] Bluetooth: hci5: command tx timeout
[  482.747983][T17253] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  482.807076][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  482.815741][T17253] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  482.832228][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  482.840875][T17253] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  482.870577][   T25] block nbd0: Possible stuck request ffff888027bd5080: control (read@0,1024B). Runtime 240 seconds
[  482.892099][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  482.912001][T17481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2873'.
[  482.923587][T17473] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2875'.
[  482.935703][T17480] netlink: 'syz.2.2874': attribute type 13 has an invalid length.
[  482.946542][T17461] syzkaller0: left promiscuous mode
[  482.953321][T17461] syzkaller0: left allmulticast mode
[  482.966302][T17253] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  483.004409][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  483.194999][T17499] netlink: 'syz.2.2877': attribute type 1 has an invalid length.
[  483.232085][T17504] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.341782][T17499] bond11: entered promiscuous mode
[  483.370089][T17499] bond11: entered allmulticast mode
[  483.375787][T17499] 8021q: adding VLAN 0 to HW filter on device bond11
[  483.391295][T17505] erspan1: entered allmulticast mode
[  483.410548][T17505] bond11: (slave erspan1): making interface the new active one
[  483.418167][T17505] erspan1: entered promiscuous mode
[  483.426369][T17505] bond11: (slave erspan1): Enslaving as an active interface with an up link
[  483.477795][ T9105] udevd[9105]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  483.559693][T17503] lo speed is unknown, defaulting to 1000
[  483.870568][T17253] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.915664][T17253] 8021q: adding VLAN 0 to HW filter on device team0
[  483.946036][T13192] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.953236][T13192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.062142][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.069436][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.100761][T17538] __nla_validate_parse: 1 callbacks suppressed
[  484.100778][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'.
[  484.135434][T17538] ip6tnl3: entered allmulticast mode
[  484.156586][ T5976] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  484.343444][T17548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2890'.
[  484.354243][T17548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2890'.
[  484.622183][T17559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  484.790533][   T50] Bluetooth: hci5: command tx timeout
[  484.812487][T17563] bond8: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  484.863173][T17563] bond8 (unregistering): Released all slaves
[  485.139815][T17585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2897'.
[  485.269091][T17596] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2898'.
[  485.619723][T17253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.695875][T17253] veth0_vlan: entered promiscuous mode
[  485.713550][T17253] veth1_vlan: entered promiscuous mode
[  485.783985][T17253] veth0_macvtap: entered promiscuous mode
[  485.813116][T17253] veth1_macvtap: entered promiscuous mode
[  485.825843][T17605] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  485.844183][T17605] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  485.916732][T17253] batman_adv: batadv0: Interface activated: batadv_slave_0
[  485.953062][T17253] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.981952][ T5976] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  486.110230][ T5976] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  486.146574][ T5976] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.251780][ T5976] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.334333][T17625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2907'.
[  486.364157][T17625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2907'.
[  486.375105][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'.
[  486.431834][T17629] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  486.547558][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.566198][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.665298][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2912'.
[  486.678521][T17639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2913'.
[  486.730734][ T5976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.753563][ T5976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.972688][T17644] bond7: (slave syz_tun): speed changed to 0 on port 1
[  487.061609][T17644] 8021q: adding VLAN 0 to HW filter on device team0
[  487.120803][T17644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  487.163309][T17663] netlink: 'syz.3.2817': attribute type 49 has an invalid length.
[  487.187655][T17644] batman_adv: batadv0: Interface activated: batadv_slave_0
[  487.199770][T17644] batman_adv: batadv0: Interface activated: batadv_slave_1
[  487.216496][T17644] veth1_vlan: left promiscuous mode
[  487.224999][T17644] veth0_vlan: left promiscuous mode
[  487.245445][T17644] veth0_vlan: entered promiscuous mode
[  487.265514][T17644] veth1_vlan: entered promiscuous mode
[  487.275447][ T5972] tipc: Subscription rejected, illegal request
[  487.289359][T17644] veth1_macvtap: left promiscuous mode
[  487.299220][T17644] veth0_macvtap: entered promiscuous mode
[  487.306523][T17644] veth1_macvtap: entered promiscuous mode
[  487.314772][T17644] geneve0: left promiscuous mode
[  487.327091][T17644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  487.340352][T17644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  487.349010][T17644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  487.375487][T17644] 8021q: adding VLAN 0 to HW filter on device bond1
[  487.391179][T17644] 8021q: adding VLAN 0 to HW filter on device bond2
[  487.406612][T17644] geneve0: entered promiscuous mode
[  487.417950][T17644] 8021q: adding VLAN 0 to HW filter on device bond3
[  487.429487][T17644] 8021q: adding VLAN 0 to HW filter on device bond4
[  487.488492][T17644] 8021q: adding VLAN 0 to HW filter on device bond5
[  487.500082][ T5976] bond2: (slave gretap1): link status up again after 0 ms
[  487.507865][T17644] 8021q: adding VLAN 0 to HW filter on device bond6
[  487.520220][ T5972] bond2: (slave gretap1): link status up again after 0 ms
[  487.531381][T17644] 8021q: adding VLAN 0 to HW filter on device batadv1
[  487.542394][   T36] bond2: (slave gretap1): link status up again after 0 ms
[  487.550750][T17644] 8021q: adding VLAN 0 to HW filter on device batadv2
[  487.561603][   T36] bond7: (slave syz_tun): link status up again after 0 ms
[  487.567430][T17644] 8021q: adding VLAN 0 to HW filter on device bond7
[  487.576747][   T36] bond2: (slave gretap1): link status up again after 0 ms
[  487.584392][T17644] 8021q: adding VLAN 0 to HW filter on device bond8
[  487.591653][ T5972] bond7: (slave syz_tun): link status up again after 0 ms
[  487.605664][T17644] 8021q: adding VLAN 0 to HW filter on device bond9
[  487.610237][ T5972] bond2: (slave gretap1): link status up again after 0 ms
[  487.620059][T17644] 8021q: adding VLAN 0 to HW filter on device bond10
[  487.628515][T17644] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  487.635525][ T5972] bond7: (slave syz_tun): link status up again after 0 ms
[  487.640585][ T5972] bond2: (slave gretap1): link status up again after 0 ms
[  487.652062][T17644] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  487.663960][T17644] 8021q: adding VLAN 0 to HW filter on device bond11
[  487.683515][T17644] 8021q: adding VLAN 0 to HW filter on device bond12
[  487.697446][T17644] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  487.715424][T17644] hsr0: Slave A (team0) is not up; please bring it up to get a fully working HSR network
[  487.726379][T17644] 8021q: adding VLAN 0 to HW filter on device hsr0
[  487.735641][T17644] 8021q: adding VLAN 0 to HW filter on device bond13
[  487.781809][T17644] 8021q: adding VLAN 0 to HW filter on device bond0
[  487.801015][T14271] bridge5: entered promiscuous mode
[  487.811639][T17655] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  487.831660][  T115] bridge0: port 3(veth0) entered blocking state
[  487.846483][  T115] bridge0: port 3(veth0) entered listening state
[  487.880826][  T115] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.888040][  T115] bridge0: port 1(bridge_slave_0) entered listening state
[  487.899671][  T115] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.906872][  T115] bridge0: port 2(bridge_slave_1) entered listening state
[  488.122468][T17683] netlink: 'syz.1.2920': attribute type 361 has an invalid length.
[  488.150403][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  488.156291][T17683] netlink: 'syz.1.2920': attribute type 361 has an invalid length.
[  488.267119][ T1115] ip6_tunnel: € xmit: Local address not yet configured!
[  488.304570][T14271] ip6_tunnel: € xmit: Local address not yet configured!
[  488.314709][ T1115] ip6_tunnel: € xmit: Local address not yet configured!
[  488.348060][ T1115] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  488.385021][ T1115] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  488.394152][T14271] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  488.446224][ T1115] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  488.483192][T14280] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  488.493663][ T5976] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  488.535949][ T5976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  488.578157][ T5976] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  488.667801][  T115] bond12: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  488.713068][  T115] bond12: (slave veth7): making interface the new active one
[  488.765845][  T115] bond12: active interface up!
[  488.841506][ T5976] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  488.868669][ T5976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  488.894700][ T5976] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  488.904384][ T5976] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  488.916001][ T5976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  488.925292][ T5976] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  488.937413][T17701] syzkaller0: entered promiscuous mode
[  488.948843][T17701] syzkaller0: entered allmulticast mode
[  489.271873][T14287] ip6_tnl_xmit_ctl: 14 callbacks suppressed
[  489.271891][T14287] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  489.311246][ T1115] openvswitch: cpu_id mismatch with handler threads
[  489.315120][T17693] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  489.330755][T14287] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  489.343391][T14282] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  489.384273][T17693] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  489.430492][T14282] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  489.615226][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  489.629055][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  489.642518][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  489.654965][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  489.678499][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  489.723024][ T5638] team0: Port device syz_tun removed
[  489.767200][   T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  489.779587][   T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  489.788108][   T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  489.800624][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  489.814341][   T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  490.010510][T17738] tipc: New replicast peer: 255.255.255.255
[  490.025126][T17738] tipc: Enabled bearer <udp:syz2>, priority 10
[  490.035426][T17738] __nla_validate_parse: 5 callbacks suppressed
[  490.035445][T17738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2933'.
[  490.095833][T17738] netlink: 'syz.1.2933': attribute type 1 has an invalid length.
[  490.211429][T17743] block nbd0: reconnected socket
[  490.248947][ T5630] block nbd0: Receive control failed (result -32)
[  490.256930][T17738] bond14: entered promiscuous mode
[  490.262702][T17738] 8021q: adding VLAN 0 to HW filter on device bond14
[  490.293995][T17744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2933'.
[  490.379664][T17744] bond14: entered allmulticast mode
[  490.439616][T17738] bond14: (slave bridge9): making interface the new active one
[  490.448055][T17738] bridge9: entered promiscuous mode
[  490.456073][T17738] bridge9: entered allmulticast mode
[  490.468748][T17738] bond14: (slave bridge9): Enslaving as an active interface with an up link
[  490.485309][  T115] openvswitch: cpu_id mismatch with handler threads
[  490.485713][  T115] openvswitch: cpu_id mismatch with handler threads
[  490.676597][T17757] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2939'.
[  490.838064][T17706] lo speed is unknown, defaulting to 1000
[  491.060664][T14282] openvswitch: cpu_id mismatch with handler threads
[  491.180096][  T115] net_ratelimit: 119 callbacks suppressed
[  491.180116][  T115] bond7: (slave syz_tun): failed to get link speed/duplex
[  491.211195][   T25] block nbd3: Possible stuck request ffff888027d05080: control (read@0,1024B). Runtime 270 seconds
[  491.222245][   T25] block nbd3: Possible stuck request ffff888027d05240: control (read@1024,3072B). Runtime 270 seconds
[  491.284873][T17782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  491.295272][  T115] bond2: (slave gretap1): failed to get link speed/duplex
[  491.409994][   T76] bond7: (slave syz_tun): failed to get link speed/duplex
[  491.580789][  T115] bond7: (slave syz_tun): failed to get link speed/duplex
[  491.610510][  T115] bond2: (slave gretap1): failed to get link speed/duplex
[  491.625653][T17791] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  491.836713][ T5630] Bluetooth: hci1: command tx timeout
[  491.844633][T17706] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.874398][T17706] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.891059][T17706] bridge_slave_0: entered allmulticast mode
[  491.909002][T17706] bridge_slave_0: entered promiscuous mode
[  491.933660][T17706] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.950033][T17706] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.957835][T17706] bridge_slave_1: entered allmulticast mode
[  491.966443][T17706] bridge_slave_1: entered promiscuous mode
[  491.987916][T17706] 
[  491.990302][T17706] ======================================================
[  491.997342][T17706] WARNING: possible circular locking dependency detected
[  492.004403][T17706] syzkaller #0 Not tainted
[  492.008838][T17706] ------------------------------------------------------
[  492.015872][T17706] syz-executor/17706 is trying to acquire lock:
[  492.022128][T17706] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650
[  492.031318][T17706] 
[  492.031318][T17706] but task is already holding lock:
[  492.038702][T17706] ffffffff8ec5ed80 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900
[  492.048317][T17706] 
[  492.048317][T17706] which lock already depends on the new lock.
[  492.048317][T17706] 
[  492.058732][T17706] 
[  492.058732][T17706] the existing dependency chain (in reverse order) is:
[  492.067748][T17706] 
[  492.067748][T17706] -> #7 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  492.075494][T17706]        __mutex_lock+0x19d/0x1550
[  492.080619][T17706]        pcpu_alloc_noprof+0x231/0x1900
[  492.086169][T17706]        smpcfd_prepare_cpu+0xce/0x120
[  492.090532][    C1] ip6_tunnel: € xmit: Local address not yet configured!
[  492.091635][T17706]        cpuhp_invoke_callback+0x434/0x810
[  492.104491][T17706]        _cpu_up+0x2ce/0x5b0
[  492.109113][T17706]        cpu_up+0x1d2/0x220
[  492.113631][T17706]        cpuhp_bringup_mask+0xb2/0x1a0
[  492.119099][T17706]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  492.125442][T17706]        bringup_nonboot_cpus+0x17/0x30
[  492.131008][T17706]        smp_init+0x32/0x110
[  492.135614][T17706]        kernel_init_freeable+0x27f/0x3e0
[  492.141348][T17706]        kernel_init+0x1d/0x1d0
[  492.146227][T17706]        ret_from_fork+0x514/0xb70
[  492.151358][T17706]        ret_from_fork_asm+0x1a/0x30
[  492.156652][T17706] 
[  492.156652][T17706] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  492.164397][T17706]        cpus_read_lock+0x42/0x160
[  492.169525][T17706]        static_key_slow_inc+0x12/0x30
[  492.174996][T17706]        nbd_genl_reconfigure+0x1301/0x1e80
[  492.180895][T17706]        genl_family_rcv_msg_doit+0x233/0x340
[  492.186966][T17706]        genl_rcv_msg+0x614/0x7a0
[  492.192005][T17706]        netlink_rcv_skb+0x226/0x4a0
[  492.197302][T17706]        genl_rcv+0x28/0x40
[  492.201811][T17706]        netlink_unicast+0x7bb/0x940
[  492.207101][T17706]        netlink_sendmsg+0x813/0xb40
[  492.212408][T17706]        sock_sendmsg_nosec+0x13a/0x180
[  492.217964][T17706]        ____sys_sendmsg+0x54e/0x850
[  492.223268][T17706]        ___sys_sendmsg+0x2a5/0x360
[  492.228474][T17706]        __x64_sys_sendmsg+0x1b1/0x290
[  492.233941][T17706]        do_syscall_64+0x174/0x580
[  492.239065][T17706]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.245488][T17706] 
[  492.245488][T17706] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  492.253153][T17706]        __mutex_lock+0x19d/0x1550
[  492.258291][T17706]        nbd_queue_rq+0x373/0x1150
[  492.263409][T17706]        blk_mq_dispatch_rq_list+0x499/0x1990
[  492.269491][T17706]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  492.276354][T17706]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  492.282877][T17706]        blk_mq_run_work_fn+0x16c/0x300
[  492.288438][T17706]        process_scheduled_works+0xa8e/0x14e0
[  492.294524][T17706]        worker_thread+0xa47/0xfb0
[  492.299680][T17706]        kthread+0x388/0x470
[  492.304291][T17706]        ret_from_fork+0x514/0xb70
[  492.309424][T17706]        ret_from_fork_asm+0x1a/0x30
[  492.314723][T17706] 
[  492.314723][T17706] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  492.321949][T17706]        __mutex_lock+0x19d/0x1550
[  492.327083][T17706]        nbd_queue_rq+0xc1/0x1150
[  492.332110][T17706]        blk_mq_dispatch_rq_list+0x499/0x1990
[  492.338188][T17706]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  492.345055][T17706]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  492.351579][T17706]        blk_mq_run_work_fn+0x16c/0x300
[  492.357134][T17706]        process_scheduled_works+0xa8e/0x14e0
[  492.363215][T17706]        worker_thread+0xa47/0xfb0
[  492.368343][T17706]        kthread+0x388/0x470
[  492.372953][T17706]        ret_from_fork+0x514/0xb70
[  492.378081][T17706]        ret_from_fork_asm+0x1a/0x30
[  492.383406][T17706] 
[  492.383406][T17706] -> #3 (set->srcu){.+.+}-{0:0}:
[  492.390553][T17706]        __synchronize_srcu+0xc9/0x2f0
[  492.396042][T17706]        elevator_switch+0x1e8/0x7b0
[  492.401356][T17706]        elevator_change+0x2fa/0x480
[  492.406658][T17706]        elevator_set_default+0x375/0x440
[  492.412400][T17706]        blk_register_queue+0x3f3/0x4e0
[  492.417955][T17706]        __add_disk+0x6cb/0xe30
[  492.422814][T17706]        add_disk_fwnode+0x100/0x3a0
[  492.428107][T17706]        nbd_dev_add+0x733/0xb60
[  492.433058][T17706]        nbd_init+0x15f/0x1e0
[  492.437739][T17706]        do_one_initcall+0x250/0x870
[  492.443053][T17706]        do_initcall_level+0x10a/0x1a0
[  492.448568][T17706]        do_initcalls+0x59/0xa0
[  492.453446][T17706]        kernel_init_freeable+0x29d/0x3e0
[  492.459205][T17706]        kernel_init+0x1d/0x1d0
[  492.464075][T17706]        ret_from_fork+0x514/0xb70
[  492.469207][T17706]        ret_from_fork_asm+0x1a/0x30
[  492.474504][T17706] 
[  492.474504][T17706] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  492.482337][T17706]        __mutex_lock+0x19d/0x1550
[  492.487463][T17706]        elevator_change+0x1af/0x480
[  492.491788][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  492.492759][T17706]        elevator_set_none+0xb5/0x140
[  492.505590][T17706]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  492.511927][T17706]        nbd_start_device+0x189/0xb30
[  492.517309][T17706]        nbd_genl_connect+0x1597/0x1c10
[  492.522905][T17706]        genl_family_rcv_msg_doit+0x233/0x340
[  492.528977][T17706]        genl_rcv_msg+0x614/0x7a0
[  492.534008][T17706]        netlink_rcv_skb+0x226/0x4a0
[  492.539307][T17706]        genl_rcv+0x28/0x40
[  492.543845][T17706]        netlink_unicast+0x7bb/0x940
[  492.549138][T17706]        netlink_sendmsg+0x813/0xb40
[  492.554446][T17706]        sock_sendmsg_nosec+0x13a/0x180
[  492.560007][T17706]        ____sys_sendmsg+0x54e/0x850
[  492.565303][T17706]        ___sys_sendmsg+0x2a5/0x360
[  492.570506][T17706]        __x64_sys_sendmsg+0x1b1/0x290
[  492.575987][T17706]        do_syscall_64+0x174/0x580
[  492.581117][T17706]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.587546][T17706] 
[  492.587546][T17706] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  492.596176][T17706]        blk_alloc_queue+0x544/0x690
[  492.601481][T17706]        __blk_mq_alloc_disk+0x194/0x390
[  492.607129][T17706]        nbd_dev_add+0x494/0xb60
[  492.612072][T17706]        nbd_init+0x15f/0x1e0
[  492.616788][T17706]        do_one_initcall+0x250/0x870
[  492.622100][T17706]        do_initcall_level+0x10a/0x1a0
[  492.627662][T17706]        do_initcalls+0x59/0xa0
[  492.632521][T17706]        kernel_init_freeable+0x29d/0x3e0
[  492.638254][T17706]        kernel_init+0x1d/0x1d0
[  492.643118][T17706]        ret_from_fork+0x514/0xb70
[  492.648296][T17706]        ret_from_fork_asm+0x1a/0x30
[  492.653587][T17706] 
[  492.653587][T17706] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  492.660829][T17706]        __lock_acquire+0x1520/0x2cf0
[  492.666217][T17706]        lock_acquire+0x106/0x350
[  492.671271][T17706]        fs_reclaim_acquire+0x71/0x100
[  492.676744][T17706]        prepare_alloc_pages+0x15b/0x650
[  492.682389][T17706]        __alloc_frozen_pages_noprof+0x12f/0x380
[  492.688730][T17706]        __alloc_pages_noprof+0x10/0x100
[  492.694378][T17706]        pcpu_populate_chunk+0x181/0xb30
[  492.700022][T17706]        pcpu_alloc_noprof+0xbca/0x1900
[  492.705573][T17706]        ipv6_add_dev+0x536/0x13a0
[  492.710697][T17706]        addrconf_notify+0x771/0x1050
[  492.716079][T17706]        notifier_call_chain+0x1a5/0x3d0
[  492.721737][T17706]        register_netdevice+0x18a4/0x1eb0
[  492.727470][T17706]        veth_newlink+0x6a2/0xdd0
[  492.732505][T17706]        rtnl_newlink_create+0x305/0x7b0
[  492.738151][T17706]        rtnl_newlink+0x166d/0x1c30
[  492.743365][T17706]        rtnetlink_rcv_msg+0x802/0xc00
[  492.748848][T17706]        netlink_rcv_skb+0x226/0x4a0
[  492.754150][T17706]        netlink_unicast+0x7bb/0x940
[  492.759446][T17706]        netlink_sendmsg+0x813/0xb40
[  492.764780][T17706]        sock_sendmsg_nosec+0x13a/0x180
[  492.770339][T17706]        __sys_sendto+0x408/0x5a0
[  492.775370][T17706]        __x64_sys_sendto+0xde/0x100
[  492.780662][T17706]        do_syscall_64+0x174/0x580
[  492.785784][T17706]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.792204][T17706] 
[  492.792204][T17706] other info that might help us debug this:
[  492.792204][T17706] 
[  492.802452][T17706] Chain exists of:
[  492.802452][T17706]   fs_reclaim --> cpu_hotplug_lock --> pcpu_alloc_mutex
[  492.802452][T17706] 
[  492.815243][T17706]  Possible unsafe locking scenario:
[  492.815243][T17706] 
[  492.822719][T17706]        CPU0                    CPU1
[  492.828093][T17706]        ----                    ----
[  492.833465][T17706]   lock(pcpu_alloc_mutex);
[  492.837983][T17706]                                lock(cpu_hotplug_lock);
[  492.845018][T17706]                                lock(pcpu_alloc_mutex);
[  492.852051][T17706]   lock(fs_reclaim);
[  492.856049][T17706] 
[  492.856049][T17706]  *** DEADLOCK ***
[  492.856049][T17706] 
[  492.864218][T17706] 3 locks held by syz-executor/17706:
[  492.869603][T17706]  #0: ffffffff8f79a908 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  492.879119][T17706]  #1: ffffffff9002e500 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  492.888219][T17706]  #2: ffffffff8ec5ed80 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900
[  492.898263][T17706] 
[  492.898263][T17706] stack backtrace:
[  492.904182][T17706] CPU: 0 UID: 0 PID: 17706 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  492.904203][T17706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  492.904215][T17706] Call Trace:
[  492.904221][T17706]  <TASK>
[  492.904234][T17706]  dump_stack_lvl+0xe8/0x150
[  492.904261][T17706]  print_circular_bug+0x2e1/0x300
[  492.904282][T17706]  check_noncircular+0x12e/0x150
[  492.904303][T17706]  __lock_acquire+0x1520/0x2cf0
[  492.904330][T17706]  ? stack_depot_save_flags+0x33/0x800
[  492.904355][T17706]  ? __lock_acquire+0x683/0x2cf0
[  492.904382][T17706]  ? prepare_alloc_pages+0x15b/0x650
[  492.904405][T17706]  lock_acquire+0x106/0x350
[  492.904427][T17706]  ? prepare_alloc_pages+0x15b/0x650
[  492.904457][T17706]  fs_reclaim_acquire+0x71/0x100
[  492.904480][T17706]  ? prepare_alloc_pages+0x15b/0x650
[  492.904516][T17706]  prepare_alloc_pages+0x15b/0x650
[  492.904542][T17706]  __alloc_frozen_pages_noprof+0x12f/0x380
[  492.904568][T17706]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  492.904594][T17706]  ? pcpu_chunk_refresh_hint+0x80a/0x950
[  492.904621][T17706]  __alloc_pages_noprof+0x10/0x100
[  492.904645][T17706]  pcpu_populate_chunk+0x181/0xb30
[  492.904669][T17706]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  492.904693][T17706]  pcpu_alloc_noprof+0xbca/0x1900
[  492.904720][T17706]  ipv6_add_dev+0x536/0x13a0
[  492.904750][T17706]  addrconf_notify+0x771/0x1050
[  492.904770][T17706]  notifier_call_chain+0x1a5/0x3d0
[  492.904798][T17706]  register_netdevice+0x18a4/0x1eb0
[  492.904828][T17706]  ? __pfx_register_netdevice+0x10/0x10
[  492.904850][T17706]  ? __hw_addr_insert+0x1f8/0x220
[  492.904870][T17706]  ? dev_addr_mod+0x174/0x350
[  492.904893][T17706]  ? nla_strscpy+0x10f/0x170
[  492.904918][T17706]  veth_newlink+0x6a2/0xdd0
[  492.904940][T17706]  ? stack_depot_init+0x1a1/0x1b0
[  492.904961][T17706]  ? kasan_save_track+0x3e/0x80
[  492.904983][T17706]  ? __kasan_kmalloc+0x93/0xb0
[  492.905004][T17706]  ? __kvmalloc_node_noprof+0x53f/0x860
[  492.905028][T17706]  ? __pfx_veth_newlink+0x10/0x10
[  492.905048][T17706]  ? rtnetlink_rcv_msg+0x802/0xc00
[  492.905066][T17706]  ? netlink_unicast+0x7bb/0x940
[  492.905084][T17706]  ? netlink_sendmsg+0x813/0xb40
[  492.905104][T17706]  ? sock_sendmsg_nosec+0x13a/0x180
[  492.905129][T17706]  ? __x64_sys_sendto+0xde/0x100
[  492.905146][T17706]  ? do_syscall_64+0x174/0x580
[  492.905168][T17706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.905213][T17706]  ? validate_linkmsg+0x765/0x950
[  492.905250][T17706]  ? rtnl_create_link+0xa04/0xd70
[  492.905275][T17706]  ? __pfx_veth_newlink+0x10/0x10
[  492.905297][T17706]  rtnl_newlink_create+0x305/0x7b0
[  492.905320][T17706]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  492.905343][T17706]  ? __pfx___mutex_lock+0x10/0x10
[  492.905370][T17706]  ? full_name_hash+0x92/0xe0
[  492.905394][T17706]  rtnl_newlink+0x166d/0x1c30
[  492.905419][T17706]  ? __pfx_rtnl_newlink+0x10/0x10
[  492.905442][T17706]  ? __lock_acquire+0x683/0x2cf0
[  492.905488][T17706]  ? __kernel_text_address+0xd/0x30
[  492.905503][T17706]  ? unwind_get_return_address+0x4d/0x90
[  492.905520][T17706]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  492.905542][T17706]  ? arch_stack_walk+0xfb/0x150
[  492.905563][T17706]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  492.905589][T17706]  ? __pfx_rtnl_newlink+0x10/0x10
[  492.905606][T17706]  rtnetlink_rcv_msg+0x802/0xc00
[  492.905623][T17706]  ? netlink_sendmsg+0x5d4/0xb40
[  492.905646][T17706]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  492.905663][T17706]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  492.905682][T17706]  ? __lock_acquire+0x683/0x2cf0
[  492.905710][T17706]  netlink_rcv_skb+0x226/0x4a0
[  492.905733][T17706]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  492.905752][T17706]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  492.905778][T17706]  ? netlink_deliver_tap+0x2e/0x1b0
[  492.905799][T17706]  ? netlink_deliver_tap+0x2e/0x1b0
[  492.905822][T17706]  netlink_unicast+0x7bb/0x940
[  492.905846][T17706]  netlink_sendmsg+0x813/0xb40
[  492.905872][T17706]  ? __pfx_netlink_sendmsg+0x10/0x10
[  492.905895][T17706]  ? aa_sock_msg_perm+0xf1/0x1b0
[  492.905915][T17706]  ? __pfx_netlink_sendmsg+0x10/0x10
[  492.905936][T17706]  sock_sendmsg_nosec+0x13a/0x180
[  492.905963][T17706]  __sys_sendto+0x408/0x5a0
[  492.905983][T17706]  ? __pfx___sys_sendto+0x10/0x10
[  492.906000][T17706]  ? lockdep_hardirqs_on+0x7a/0x110
[  492.906027][T17706]  ? fput_close_sync+0x11f/0x240
[  492.906050][T17706]  ? kmem_cache_free+0x462/0x650
[  492.906077][T17706]  ? rcu_is_watching+0x15/0xb0
[  492.906095][T17706]  __x64_sys_sendto+0xde/0x100
[  492.906113][T17706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.906130][T17706]  do_syscall_64+0x174/0x580
[  492.906153][T17706]  ? trace_irq_disable+0x3b/0x140
[  492.906174][T17706]  ? clear_bhb_loop+0x40/0x90
[  492.906193][T17706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.906209][T17706] RIP: 0033:0x7f550715e84e
[  492.906224][T17706] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  492.906243][T17706] RSP: 002b:00007ffc2f55c748 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  492.906261][T17706] RAX: ffffffffffffffda RBX: 00005555749b3500 RCX: 00007f550715e84e
[  492.906273][T17706] RDX: 0000000000000088 RSI: 00007f5507f54670 RDI: 0000000000000003
[  492.906284][T17706] RBP: 0000000000000001 R08: 00007ffc2f55c7c4 R09: 000000000000000c
[  492.906295][T17706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  492.906304][T17706] R13: 0000000000000000 R14: 00007f5507f54670 R15: 0000000000000000
[  492.906323][T17706]  </TASK>
[  493.060565][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  493.110807][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  493.280287][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  493.323238][T17706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  493.610199][   T76] bond2: (slave gretap1): failed to get link speed/duplex
[  493.630324][   T76] bond7: (slave syz_tun): failed to get link speed/duplex
[  493.729948][T13192] bond2: (slave gretap1): failed to get link speed/duplex
[  493.739971][T13192] bond7: (slave syz_tun): failed to get link speed/duplex
[  493.912624][ T5630] Bluetooth: hci1: command tx timeout
[  494.032005][ T5629] bond7: (slave syz_tun): Removing an active aggregator
[  494.041976][ T5629] bond7: (slave syz_tun): Releasing backup interface
[  494.208948][T17798] bond0: (slave syz_tun): Releasing backup interface
[  494.220995][  T115] bridge_slave_1: left allmulticast mode
[  494.226776][  T115] bridge_slave_1: left promiscuous mode
[  494.232788][  T115] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.241527][  T115] bridge_slave_0: left allmulticast mode
[  494.247210][  T115] bridge_slave_0: left promiscuous mode
[  494.265945][  T115] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.299480][  T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  494.310185][    C1] openvswitch: cpu_id mismatch with handler threads
[  494.318870][  T115] bond0 (unregistering): Released all slaves
[  494.371821][   T76] veth0_to_bond: left promiscuous mode
[  494.798886][  T115] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.863894][  T115] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.915049][  T115] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.964270][  T115] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.043086][  T115] bridge_slave_1: left allmulticast mode
[  495.048901][  T115] bridge_slave_1: left promiscuous mode
[  495.055412][  T115] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.063872][  T115] bridge_slave_0: left allmulticast mode
[  495.069525][  T115] bridge_slave_0: left promiscuous mode
[  495.075421][  T115] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.135966][  T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  495.151500][  T115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  495.165550][  T115] bond0 (unregistering): Released all slaves
[  495.441970][  T115] hsr_slave_0: left promiscuous mode
[  495.448110][  T115] hsr_slave_1: left promiscuous mode
[  495.454081][  T115] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  495.461531][  T115] batman_adv: batadv0: Removing interface: batadv_slave_0
[  495.469191][  T115] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  495.481428][  T115] batman_adv: batadv0: Removing interface: batadv_slave_1
[  495.492971][  T115] veth1_macvtap: left promiscuous mode
[  495.498459][  T115] veth0_macvtap: left promiscuous mode
[  495.504033][  T115] veth1_vlan: left promiscuous mode
[  495.509281][  T115] veth0_vlan: left promiscuous mode
[  495.618238][  T115] team0 (unregistering): Port device team_slave_1 removed
[  495.631635][  T115] team0 (unregistering): Port device team_slave_0 removed
[  495.701380][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1
[  496.016441][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2
[  496.260352][ T5976] net_ratelimit: 18 callbacks suppressed
[  496.260373][ T5976] bond2: (slave gretap1): failed to get link speed/duplex
[  496.281801][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3
[  496.310014][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  496.380055][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  496.489952][ T5976] bond2: (slave gretap1): failed to get link speed/duplex
[  496.553516][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4
[  496.599948][ T5976] bond2: (slave gretap1): failed to get link speed/duplex
[  496.710122][  T115] bond2: (slave gretap1): failed to get link speed/duplex
[  496.819981][ T5976] bond2: (slave gretap1): failed to get link speed/duplex
[  496.929929][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  497.039972][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  497.149960][ T5976] bond2: (slave gretap1): failed to get link speed/duplex
[  497.260017][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  498.944336][ T4988] udevd[4988]: worker [9591] /devices/virtual/block/nbd0 timeout; kill it
[  498.953022][ T4988] udevd[4988]: seq 15658 '/devices/virtual/block/nbd0' killed
[  498.960665][ T4988] udevd[4988]: worker [8859] /devices/virtual/block/nbd3 timeout; kill it
[  498.969271][ T4988] udevd[4988]: seq 14604 '/devices/virtual/block/nbd3' killed
[  499.510112][    C1] ip6_tunnel: € xmit: Local address not yet configured!
[  500.789994][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  501.370024][  T115] net_ratelimit: 36 callbacks suppressed
[  501.370049][  T115] bond2: (slave gretap1): failed to get link speed/duplex
[  501.490063][  T115] bond2: (slave gretap1): failed to get link speed/duplex
[  501.600026][  T115] bond2: (slave gretap1): failed to get link speed/duplex
[  501.709993][ T1115] bond2: (slave gretap1): failed to get link speed/duplex
[  501.819965][T13192] bond2: (slave gretap1): failed to get link speed/duplex
[  501.930091][T13192] bond2: (slave gretap1): failed to get link speed/duplex