last executing test programs:

3m55.949670382s ago: executing program 3 (id=7669):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91", 0x1}], 0x1}}], 0x1, 0x2081)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20008060)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94)
poll(&(0x7f0000000040), 0x55, 0x0)

3m55.817216198s ago: executing program 3 (id=7670):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x6f, 0x0, &(0x7f0000000600)="07397834bf64ca66d21a54fbe6d5a3f041df4df801339dc72327c6000d21785844d532364e75f2a3be9864c16f94ca2665c3211eba45eb84465a35ce9d2488eb4a20afca85cb90f112013bc0f16fc97975edd76b82da8082383e2a02fcddc06089a05e4fd949d4ea0fb1c2108749bb", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x7, 0x0, 0x6c8c}, 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @multicast1}, {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x8}}}}}}, 0x0)
close(0x3)

3m55.755187727s ago: executing program 3 (id=7671):
pipe(0x0)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x400000, 0x25dfdbfa, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40085}, 0x40010)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)

3m53.43887285s ago: executing program 3 (id=7674):
socket$inet6(0xa, 0x3, 0x5)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
socket$netlink(0x10, 0x3, 0x4)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m53.280325544s ago: executing program 3 (id=7676):
socket$inet6(0xa, 0x3, 0x5)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
socket$netlink(0x10, 0x3, 0x4)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m53.238358073s ago: executing program 3 (id=7678):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4044804)

3m37.961262871s ago: executing program 32 (id=7678):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4044804)

2m23.301610328s ago: executing program 1 (id=8452):
syz_emit_ethernet(0x3e, &(0x7f0000000c40)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x8, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0xb}, @empty, {[@routing={0x87, 0x0, 0x0, 0x5}]}}}}}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000c40)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x8, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0xb}, @empty, {[@routing={0x87, 0x0, 0x0, 0x5}]}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x85}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90)

2m23.063070871s ago: executing program 1 (id=8457):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x50)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)

2m22.796549523s ago: executing program 1 (id=8463):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5e729bd7000fbdbb50f040000000c0001800800030001"], 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800)

2m22.560909948s ago: executing program 1 (id=8468):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165c9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x4040)

2m21.50369293s ago: executing program 1 (id=8486):
socket$inet6(0xa, 0x3, 0x5)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
socket$netlink(0x10, 0x3, 0x4)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m21.344470284s ago: executing program 1 (id=8490):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x0, 0x0, {0x3, 0x1}}, 0x14}}, 0xc000)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180006ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000140))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000009c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

2m5.761168595s ago: executing program 33 (id=8490):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x0, 0x0, {0x3, 0x1}}, 0x14}}, 0xc000)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180006ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000140))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000009c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

1m44.368566337s ago: executing program 2 (id=8841):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0xfffffffffffffffd, &(0x7f0000000340)=0x33)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)

1m44.071089831s ago: executing program 2 (id=8843):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xafff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m44.009521201s ago: executing program 2 (id=8845):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r1, 0x3)
accept4(r1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

1m42.859857912s ago: executing program 2 (id=8857):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400006010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40)

1m42.596175603s ago: executing program 2 (id=8859):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140), 0x0)
syz_emit_ethernet(0xb6, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private=0x4000, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}]}}}}}}}, 0x0)

1m42.308806585s ago: executing program 2 (id=8863):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
pselect6(0x40, &(0x7f0000000180), 0x0, 0xfffffffffffffffc, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc094}, 0x4048800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
syz_genetlink_get_family_id$nl80211(0x0, r3)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {0x4ec}, @device_b, @device_b, @initial, {0x4, 0xa}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x14, {0x0, 0x2, @void, @void, @val="ee31b229a64cbbf0d0d91223eb9bfe3f"}}}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r7 = accept4(r0, 0x0, &(0x7f00000002c0), 0x80000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r9, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=<r11=>0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)={0x2ac, r10, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0xe3, 0x19, "725a18de969fad087addfb675e23f98df2d01ebe979624e5b73cab76ee5d09eb9caf7efba3934f03b900a42647f23dea08f0821e4ace56b9732373ddb08427b858fc59a02255f15e4b454840272e48270ef7dceaa6be20ec23e91f98d8817b828a20b19a11ca2a17bbe9a359844a947ed50103c2655ee797b38de6e135c60d74cc870c9280bfd6376db53d2d9b32a7660c4ed21d527a60aaec5e7ccd63a1c3aec633de9ca6072804433d1253a5992dac8cf9c43b6f5f1ebaeecdefddbc1c94b2c65f930597e19925a1a752abe7b2f96a153439633fdbc40137e1ff4f4b225f"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0x9c, 0x19, "a41cbf4ffd5a9a13d26b414da2a0a87e11cbdfe08b02fc273e22097f16408d0aac5094a7ca0e9fbc10fd551ebba2f92c75d8987af6a5cf4616adf8a21e4daed84b69871e722f567033f40c2ad00515947c4c0752df59af407f0a7c0b9a00978c1400cf585fef62af225cbfa6e2e9116a9379d76ce0a6634e5637cc941df27908f9c7ae7ce4ef42474449588ab34e034c5dae76352f161ecf"}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_APDU={0xf9, 0x19, "8b358ddcfac0c7cd659d8a90d7f72ccf78a7a30b14ea3db0652f6258a67ebd02b9d234ea2c2c0ca9cf7f1372d84f9a380fac2624eab01557ac19d5759e6c5b80fc22e1dea641436fb399a45ec159a0ab9446f473e4a15f11b10b0d4bbb478112f00af7f6e52f487249f8feb100b69d1a21fdd3e6063c892bb2ed45e84eb8995cf56c5531cc39e43227e8c17ef55ce416cfd7b8dbd87dcfeafb28d4cd82e0458b56f10a34a2c75394f7ac5deb292222bb76f12fdfb8b16a6b707498d5b09adf9cf39e9ac13a5f7cd7247897363a1c7aac54c74d85a9b04f8fc4a080a78e783014175794c15741d47c1218960d58fc81af200a363485"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xa30010}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x400d1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffc, 0x2}]}]}}, 0x0, 0x3a}, 0x20)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)={0x80, "cacdbc8d9b2396be6b4a114be61fe884fc4bd5052ed2c44aea4f83072a2d1515888f1876025b3bb5f137e83c550d0cbff38e8aa3d840b553419b674d53d0613659433caca10a96224904f844e71d01910f008d42aea0929aeb8be499657cfb638032ba497fb8a221c9074b02b8642d471e2b3e7157ed6a15aee0254a925a5e36"})
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0)

1m27.180739135s ago: executing program 34 (id=8863):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
pselect6(0x40, &(0x7f0000000180), 0x0, 0xfffffffffffffffc, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc094}, 0x4048800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
syz_genetlink_get_family_id$nl80211(0x0, r3)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {0x4ec}, @device_b, @device_b, @initial, {0x4, 0xa}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x14, {0x0, 0x2, @void, @void, @val="ee31b229a64cbbf0d0d91223eb9bfe3f"}}}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r7 = accept4(r0, 0x0, &(0x7f00000002c0), 0x80000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r9, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=<r11=>0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)={0x2ac, r10, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0xe3, 0x19, "725a18de969fad087addfb675e23f98df2d01ebe979624e5b73cab76ee5d09eb9caf7efba3934f03b900a42647f23dea08f0821e4ace56b9732373ddb08427b858fc59a02255f15e4b454840272e48270ef7dceaa6be20ec23e91f98d8817b828a20b19a11ca2a17bbe9a359844a947ed50103c2655ee797b38de6e135c60d74cc870c9280bfd6376db53d2d9b32a7660c4ed21d527a60aaec5e7ccd63a1c3aec633de9ca6072804433d1253a5992dac8cf9c43b6f5f1ebaeecdefddbc1c94b2c65f930597e19925a1a752abe7b2f96a153439633fdbc40137e1ff4f4b225f"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0x9c, 0x19, "a41cbf4ffd5a9a13d26b414da2a0a87e11cbdfe08b02fc273e22097f16408d0aac5094a7ca0e9fbc10fd551ebba2f92c75d8987af6a5cf4616adf8a21e4daed84b69871e722f567033f40c2ad00515947c4c0752df59af407f0a7c0b9a00978c1400cf585fef62af225cbfa6e2e9116a9379d76ce0a6634e5637cc941df27908f9c7ae7ce4ef42474449588ab34e034c5dae76352f161ecf"}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_APDU={0xf9, 0x19, "8b358ddcfac0c7cd659d8a90d7f72ccf78a7a30b14ea3db0652f6258a67ebd02b9d234ea2c2c0ca9cf7f1372d84f9a380fac2624eab01557ac19d5759e6c5b80fc22e1dea641436fb399a45ec159a0ab9446f473e4a15f11b10b0d4bbb478112f00af7f6e52f487249f8feb100b69d1a21fdd3e6063c892bb2ed45e84eb8995cf56c5531cc39e43227e8c17ef55ce416cfd7b8dbd87dcfeafb28d4cd82e0458b56f10a34a2c75394f7ac5deb292222bb76f12fdfb8b16a6b707498d5b09adf9cf39e9ac13a5f7cd7247897363a1c7aac54c74d85a9b04f8fc4a080a78e783014175794c15741d47c1218960d58fc81af200a363485"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xa30010}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x400d1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffc, 0x2}]}]}}, 0x0, 0x3a}, 0x20)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)={0x80, "cacdbc8d9b2396be6b4a114be61fe884fc4bd5052ed2c44aea4f83072a2d1515888f1876025b3bb5f137e83c550d0cbff38e8aa3d840b553419b674d53d0613659433caca10a96224904f844e71d01910f008d42aea0929aeb8be499657cfb638032ba497fb8a221c9074b02b8642d471e2b3e7157ed6a15aee0254a925a5e36"})
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0)

7.129063729s ago: executing program 6 (id=9991):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1292015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)

6.90432117s ago: executing program 6 (id=9995):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)

6.732869215s ago: executing program 6 (id=10000):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff00000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000c70000000000000000000000000000000000000000bffec31d5ea8dc3d692c1834485baf1c68c1751e2230dfaa092a340d631a329f9e1bbcbf856d56f23488f725322ea3d5"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

6.551738615s ago: executing program 6 (id=10002):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0)

6.395174224s ago: executing program 6 (id=10007):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x50)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602110000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

6.174619512s ago: executing program 6 (id=10012):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x8000000, 0x4c0, 0x98, 0x138, 0x428, 0x0, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x9}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x32}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x8}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520)

2.963228685s ago: executing program 7 (id=10052):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001100)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x4f, 0x0, "39be251d1eabe5d383b83d7b7e3d8a239273c82b1fc06d23d50e17e69c6ee2848410590f6c0e2a534af6bf6748eb4c584401b16c30a714c496c77ddfd4e196378b7ab3ef23a522d8b89388ab4e3fb8d0"}, 0xd8)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2e0, 0x2e0, 0x0, 0x168, 0x2e0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xc}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffff, [0x0, 0x3, 0x0, 0x3]}, {0xffff, [0x2, 0x6, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x528d, 0x800, 0x2, 0x1, 0x0, "7bb6e1db6012e8a415416c3a753950639a046f7874289da47089813ebcebd75818b373a6560a0fa4c1513e591be9c70fcb89ed995a5b8d8e2e4f54dabf205fa3"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x2, 0x10}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @broadcast, 0xff000000, 0xff, 'ip6gre0\x00', 'vlan1\x00', {}, {}, 0x99, 0x3, 0xd}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7ffe, 0xe29e, @multicast1, 0x4e34}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x28, 0xa, 0x6, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x9, &(0x7f0000000100)=0xe2, 0x4)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r7)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf251700100054000680140003002d2d73353a5f2d5d482ee5364c4323843c00040067636d286165732900e8feffff00000000000000000000000000000000000000140000009ea2"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="e80300502800"})
r10 = socket(0x10, 0x3, 0x0)
sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0)
getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r6, 0x84, 0x80, &(0x7f00000000c0)={<r11=>0x0, 0x9}, &(0x7f0000000140)=0x8)
r12 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r13=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r13, 0x9}, 0x8)
accept4$bt_l2cap(r7, &(0x7f0000000400), &(0x7f0000000440)=0xe, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000280)={r11, 0x2, 0x61826888, 0x401, 0xff, 0x401, 0x2, 0x5, {r13, @in={{0x2, 0x4e21, @multicast2}}, 0x7, 0xe9d, 0x1db, 0x8, 0x8}}, &(0x7f0000000340)=0xb0)
r14 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r14, 0xfffffffffffffffc, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r10, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xcbff7456ecb94124}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048851}, 0x11)

2.572658748s ago: executing program 7 (id=10057):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8001, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x55, 0x4, 0x7fffffff, 0x4401, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0xe}, 0x50)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000000000b7fe0000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0, <r7=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pI4   \x00'}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000140)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000200)='GPL\x00', 0x0, 0x1a, &(0x7f0000000240)=""/26, 0x40f00, 0x2, '\x00', r3, 0x1b, r4, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xa, 0x0, 0x3}, 0x10, r6, 0x0, 0x0, &(0x7f0000000480)=[r7, r0], 0x0, 0x10, 0xf2da}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.499825215s ago: executing program 0 (id=10060):
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
write(0xca, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r1, 0x1, 0x2000, 0x100000, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x101, 0x0, 0x8}}}}, 0x30}}, 0x4009004)

2.432607312s ago: executing program 0 (id=10061):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x6d)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x3, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x3, "153e2c20706c6c460e47cb4f54c611344033aed8ba6c162ef0d68154eb3a39ba", "3d46696bcc306ff6585ec886e89b12d00dcd03eb8cb4a87738a3b2f2ef40880f55774630a7b8b6f81871857d51e01749", "ab292fb021862a006cd1e40f50a9b763d37ae55a17daa80d287ad345", {"e7da662530662bcb18acf3abfc2a7887", "90017e565337ee48958e7f4739b9bb74"}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x38, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}}, 0x804)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}})
r9 = socket$kcm(0x11, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x5c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xfffffff0}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xffffffff}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x401}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1000, 0x9}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000b0}, 0x7eacd519644544cc)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbc", 0xf}], 0x1}, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
close(0x3)

1.981979618s ago: executing program 7 (id=10064):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

1.631596475s ago: executing program 0 (id=10067):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc080}, 0x8080)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x140e, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

1.560606817s ago: executing program 4 (id=10068):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x5, 0x0, &(0x7f0000001100), &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000000)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10, 0x0}, 0x8040)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000000)={<r3=>0x0, "d012ef427b5358ab36579939564f94da"})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001200)={r3, 0x0, 0x8, 0x1})

1.525169737s ago: executing program 5 (id=10069):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0xe, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f00000004c0)={{0x80000001, 0x1, 0x8, 0x8, 0x2394}, [{0xab8b, 0x6, 0x7}, {0x1, 0x1, 0x9, 0x7}]})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x70b525, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x32ff5f671ead9f00}, 0x4008874)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4002814}, 0x8000814)

1.375818304s ago: executing program 7 (id=10070):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140), 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x2000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3, 0xdd}, @timestamp_prespec={0x44, 0x4}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)

1.375533983s ago: executing program 0 (id=10071):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000200", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.375340764s ago: executing program 4 (id=10072):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa00004}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x38dc, 0x80}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2e}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x40004)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@newtclass={0x24, 0x28, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x7}, {0x1, 0x8}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r3)
sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c044}, 0x8000)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x7, @mcast1, 0x1}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16)

1.324080057s ago: executing program 5 (id=10073):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x5, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffdfff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0xb42d, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffffc}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x400401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x9, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x65, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1bfd, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x8, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x4, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe37, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31", 0x24}], 0x1}, 0x0)

1.230267299s ago: executing program 7 (id=10074):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000e6a0"], 0x34}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.171839341s ago: executing program 0 (id=10075):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x6}})
syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0030000000000000000110000ac1414aa00000000830300070300443c00030a01010200010000e000000100000000ac1414aa00000000ac1414bb000000000000000000000000ac1414bb00"/130], 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r6, 0x19, 0x0, @val=@netfilter={0x3, 0x0, 0x666ce585}}, 0x20)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0x7, 0xffff}, {0xffe0, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20008810)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007100010010ab4be68e8da23507000000", @ANYRES32=r9, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0)
pread64(r0, &(0x7f0000000340)=""/88, 0x58, 0x8)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000)

1.085675536s ago: executing program 4 (id=10076):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)

985.117376ms ago: executing program 7 (id=10077):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0)
r7 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, &(0x7f00000007c0))
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000005c0)={0x1d4, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1b8, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_a, @from_mac, {0x3, 0x6}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x4a00, @random=0x1, 0x81, @void, @val={0x1, 0x1, [{0xc, 0x1}]}, @val={0x3, 0x1, 0x89ce1d27c7267eba}, @val={0x4, 0x6, {0x7, 0x0, 0xd968, 0xfff8}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x7f, 0x68}}, [{0xdd, 0x7a, "e83ba484d11116b52dc4d06d26ea38daed41429a534fe27ba285d239bfdb9632ab7a5a068e63c8cfcbf692726b1cb74ed7ba1c1bca64be27e479c1d9869e7a8ad80c3f03759aeb8d4d65788303f84c3a862169a614e8cf37b85d8e318d6c7486ebfe9177b6d47100f9f306570c8892d5ef71b767813d6fc5e7c0"}, {0xdd, 0xe2, "225769641bfd6bf2999a4167bdd4a30bcab64a78d53ef05d6740fe3accffb3ff458bdfc010294cc29486c56d7c6edb0e8f4c8c003b45db4d33b5849cb9400043d3f24332a8f562fcbe4d4fb5ba5ce8ddaa8c87408d1f1c3523d23645f79d09003e739c31640e8782a57a33ee51c3887dfdcd713f7c4ef58f5a0dba063f30de21497b5e233b3af0651b0aa27ae08b46d6036a0b00db576ae9494b33111668a5a930eb17b6eaafad2fdf15a66bf2ba1f34460786235bf41cdbc9cee19f494927617d5968afb8ac6e8e03dbfbd92a6cf2a61cf838ae2bda74ee03582dc6283751eddc64"}, {0xdd, 0x13, "cf2bed05c1c47b1e5777a57e830e25e6ecb725"}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa0, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="82ebd4a35089"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="983262e62457"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="aebcf05a4460"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="db8162e3cfaf"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bf7de21359a8"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1f39dd74c748"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4c36b7b5dffa"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8c1}, 0x20000000)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20004880)

844.043109ms ago: executing program 5 (id=10078):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r1, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

817.104819ms ago: executing program 4 (id=10079):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, <r1=>0xffffffffffffffff}, &(0x7f0000000040)=0xc)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r3=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)={r3}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r3, 0x4)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007e00), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000007f00)={0x0, 0x0, &(0x7f0000007ec0)={&(0x7f0000000080)={0x20, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

785.477316ms ago: executing program 0 (id=10080):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40010)
ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0x6) (async)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xa)
close(r0)

621.627836ms ago: executing program 5 (id=10081):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x140e, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (fail_nth: 4)

518.694792ms ago: executing program 4 (id=10082):
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={<r0=>0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x48000, &(0x7f00000000c0)={@align=0x3, {0x80, 0x40, 0x3, 0x6}}, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x9})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r1}, 0x38)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x1f, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x1, 0x0, 0x4, 0x9, 0x9, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94)

213.582218ms ago: executing program 5 (id=10083):
socket(0x2, 0x80805, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x6f, 0x0}}], 0x1, 0x40010000, 0x0)

98.738899ms ago: executing program 4 (id=10084):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffe, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x3ffffffe}, {}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x84}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff, 0x0, 0xffffffff}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x15c}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000140)="9fd3d3719b24d01fb60dc1289a6c4816f3c0e999af91b21648b86eb2fae25d2b3630cab5026f7e4717a0f30b0c25e087078762b48ef22ee125f8cd5e90e153731cfc2b3dc6f038b61686af7bb3dbad9955d814790774bb41333f5088269ded51b6d574479787d80f17bda0c1b4fa49cbd0b278c783f264826a156e0fcf0fefc2f8d59c70dbf5fb1ef5a97cc77dd81d0099572a29f4158a5ea036e8c309ca73e8ba820e3ee4f8df", 0xa7, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x0, 0x0, 0x3f8, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x73c3bfc5edc560a0, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000200))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

0s ago: executing program 5 (id=10085):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1405, 0x621, 0x0, 0x25dfdbff, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x10)

kernel console output (not intermixed with test programs):

[  749.584996][T29250]  </TASK>
[  749.634430][T29251] __nla_validate_parse: 5 callbacks suppressed
[  749.634452][T29251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8979'.
[  750.170941][T29272] netlink: 'syz.6.8985': attribute type 1 has an invalid length.
[  750.207502][T29272] bond1: entered promiscuous mode
[  750.207973][T29272] 8021q: adding VLAN 0 to HW filter on device bond1
[  750.249316][T29272] bond1: (slave bridge1): making interface the new active one
[  750.249344][T29272] bridge1: entered promiscuous mode
[  750.250795][T29272] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  750.368888][T29281] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8989'.
[  750.892656][T29264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  751.035796][T29291] openvswitch: netlink: Message has 8 unknown bytes.
[  751.524984][T29316] netlink: 'syz.0.8999': attribute type 1 has an invalid length.
[  751.565866][T29316] bond13: entered promiscuous mode
[  751.566355][T29316] 8021q: adding VLAN 0 to HW filter on device bond13
[  751.599229][T29316] bond13: (slave bridge14): making interface the new active one
[  751.599256][T29316] bridge14: entered promiscuous mode
[  751.600512][T29316] bond13: (slave bridge14): Enslaving as an active interface with an up link
[  751.633728][T29320] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  751.635728][T29319] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  751.662365][T29319] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  752.260024][T29356] openvswitch: netlink: Message has 8 unknown bytes.
[  752.293405][T29359] netlink: 'syz.6.9016': attribute type 1 has an invalid length.
[  752.359863][T29359] bond2: entered promiscuous mode
[  752.360326][T29359] 8021q: adding VLAN 0 to HW filter on device bond2
[  752.395842][T29365] FAULT_INJECTION: forcing a failure.
[  752.395842][T29365] name failslab, interval 1, probability 0, space 0, times 0
[  752.395879][T29365] CPU: 1 UID: 0 PID: 29365 Comm: syz.0.9018 Not tainted syzkaller #0 PREEMPT(full) 
[  752.395903][T29365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  752.395917][T29365] Call Trace:
[  752.395926][T29365]  <TASK>
[  752.395937][T29365]  dump_stack_lvl+0xe8/0x150
[  752.395975][T29365]  should_fail_ex+0x410/0x560
[  752.396009][T29365]  should_failslab+0xa8/0x100
[  752.396042][T29365]  __kmalloc_cache_noprof+0xa3/0x600
[  752.396069][T29365]  ? genl_start+0x1c9/0x6d0
[  752.396097][T29365]  ? genl_start+0x1c9/0x6d0
[  752.396141][T29365]  genl_start+0x1c9/0x6d0
[  752.396180][T29365]  __netlink_dump_start+0x442/0x7b0
[  752.396211][T29365]  genl_family_rcv_msg_dumpit+0x213/0x310
[  752.396246][T29365]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  752.396276][T29365]  ? genl_get_cmd+0x6cc/0x960
[  752.396311][T29365]  ? __pfx_genl_start+0x10/0x10
[  752.396337][T29365]  ? __pfx_genl_dumpit+0x10/0x10
[  752.396364][T29365]  ? __pfx_genl_done+0x10/0x10
[  752.396410][T29365]  genl_rcv_msg+0x5e1/0x7a0
[  752.396447][T29365]  ? __pfx_genl_rcv_msg+0x10/0x10
[  752.396475][T29365]  ? __pfx_ethnl_default_start+0x10/0x10
[  752.396499][T29365]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[  752.396525][T29365]  ? __pfx_ethnl_default_done+0x10/0x10
[  752.396565][T29365]  netlink_rcv_skb+0x226/0x4a0
[  752.396589][T29365]  ? __pfx_genl_rcv_msg+0x10/0x10
[  752.396620][T29365]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  752.396661][T29365]  ? down_read+0x2be/0x330
[  752.396698][T29365]  genl_rcv+0x28/0x40
[  752.396725][T29365]  netlink_unicast+0x7bd/0x940
[  752.396771][T29365]  netlink_sendmsg+0x813/0xb40
[  752.396806][T29365]  ? __pfx_netlink_sendmsg+0x10/0x10
[  752.396840][T29365]  ? apparmor_socket_sendmsg+0x18b/0x360
[  752.396870][T29365]  ? __pfx_netlink_sendmsg+0x10/0x10
[  752.396893][T29365]  sock_sendmsg_nosec+0x13a/0x180
[  752.396923][T29365]  ____sys_sendmsg+0x54e/0x850
[  752.396962][T29365]  ? __pfx_____sys_sendmsg+0x10/0x10
[  752.397006][T29365]  ? import_iovec+0x73/0xa0
[  752.397041][T29365]  ___sys_sendmsg+0x2a5/0x360
[  752.397072][T29365]  ? __lock_acquire+0x747/0x2de0
[  752.397102][T29365]  ? __pfx____sys_sendmsg+0x10/0x10
[  752.397180][T29365]  ? __fget_files+0x2a/0x420
[  752.397212][T29365]  ? __fget_files+0x3a2/0x420
[  752.397257][T29365]  __x64_sys_sendmsg+0x1b1/0x290
[  752.397293][T29365]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  752.397352][T29365]  do_syscall_64+0x166/0x520
[  752.397382][T29365]  ? trace_irq_disable+0x3b/0x140
[  752.397406][T29365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.397429][T29365]  ? clear_bhb_loop+0x70/0xc0
[  752.397457][T29365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.397479][T29365] RIP: 0033:0x7fcd3d19e199
[  752.397501][T29365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  752.397521][T29365] RSP: 002b:00007fcd3e008028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  752.397545][T29365] RAX: ffffffffffffffda RBX: 00007fcd3d425fa0 RCX: 00007fcd3d19e199
[  752.397562][T29365] RDX: 000000002000c800 RSI: 00002000000002c0 RDI: 0000000000000003
[  752.397577][T29365] RBP: 00007fcd3e008090 R08: 0000000000000000 R09: 0000000000000000
[  752.397591][T29365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  752.397605][T29365] R13: 00007fcd3d426038 R14: 00007fcd3d425fa0 R15: 00007fffc58a70a8
[  752.397643][T29365]  </TASK>
[  752.770097][T29359] bond2: (slave bridge2): making interface the new active one
[  752.770125][T29359] bridge2: entered promiscuous mode
[  752.771627][T29359] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  752.963038][T29373] 8021q: adding VLAN 0 to HW filter on device bond22
[  753.130901][T29390] Bluetooth: hci0: unsupported parameter 5134
[  753.130925][T29390] Bluetooth: hci0: unsupported parameter 8192
[  753.130949][T29390] Bluetooth: hci0: unsupported parameter 5134
[  753.130963][T29390] Bluetooth: hci0: unsupported parameter 8192
[  753.173614][T29389] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9025'.
[  753.174164][T29389] netlink: 'syz.6.9025': attribute type 4 has an invalid length.
[  753.174184][T29389] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9025'.
[  753.220823][T29389] .`: renamed from bond0 (while UP)
[  753.287111][T29394] netlink: 'syz.4.9026': attribute type 83 has an invalid length.
[  753.294017][T29394] ip_tables: iptables: counters copy to user failed while replacing table
[  753.481366][T29402] netlink: 'syz.0.9028': attribute type 10 has an invalid length.
[  753.481880][T29402] veth1_macvtap: left promiscuous mode
[  753.557311][T29404] netlink: 'syz.5.9030': attribute type 1 has an invalid length.
[  753.693660][T29413] netlink: 'syz.6.9033': attribute type 1 has an invalid length.
[  753.738462][T29417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9037'.
[  753.738487][T29417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9037'.
[  753.801851][T29413] bond0: entered promiscuous mode
[  753.804163][T29413] 8021q: adding VLAN 0 to HW filter on device bond0
[  753.820988][T29417] 8021q: adding VLAN 0 to HW filter on device bond0
[  753.823898][T29417] bond17: (slave bond0): Enslaving as an active interface with a down link
[  753.899242][T29420] bond0: (slave bridge3): making interface the new active one
[  753.899269][T29420] bridge3: entered promiscuous mode
[  753.907217][T29420] bond0: (slave bridge3): Enslaving as an active interface with an up link
[  754.125655][T29436] netlink: 'syz.5.9043': attribute type 1 has an invalid length.
[  754.218553][T29436] 8021q: adding VLAN 0 to HW filter on device bond2
[  754.221609][T29442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9043'.
[  754.331856][T29449] netlink: Unknown conntrack attr (type=205, max=9)
[  754.366688][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  754.553216][T29458] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  754.677001][T29465] netlink: 'syz.6.9051': attribute type 1 has an invalid length.
[  754.777591][T29465] bond3: entered promiscuous mode
[  754.779219][T29465] 8021q: adding VLAN 0 to HW filter on device bond3
[  754.818013][T29470] bond3: (slave bridge4): making interface the new active one
[  754.818042][T29470] bridge4: entered promiscuous mode
[  754.820321][T29470] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  754.982323][T29474] syzkaller0: entered promiscuous mode
[  754.982348][T29474] syzkaller0: entered allmulticast mode
[  755.095275][T29484] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[  755.223409][T29489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9060'.
[  755.425209][T29497] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9065'.
[  756.034797][T29514] netlink: 'syz.5.9070': attribute type 39 has an invalid length.
[  756.034824][T29514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9070'.
[  756.363180][T29540] netlink: 59 bytes leftover after parsing attributes in process `syz.5.9075'.
[  756.543611][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  756.546195][ T5623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  756.561967][ T5623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  756.562991][ T5623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  756.566700][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  756.645862][T29545] netlink: 'syz.6.9079': attribute type 1 has an invalid length.
[  756.733117][T29545] 8021q: adding VLAN 0 to HW filter on device bond4
[  756.810065][T29545] bond4: (slave geneve2): making interface the new active one
[  756.816768][T29556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9081'.
[  756.816793][T29556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9081'.
[  756.824504][T29545] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  757.000199][T29565] netlink: 'syz.4.9084': attribute type 10 has an invalid length.
[  757.000244][T29565] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  757.000268][T29565] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  757.020463][T29565] team0: Port device wlan0 added
[  757.495819][T29542] wlan1 speed is unknown, defaulting to 1000
[  757.552324][T29586] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9089'.
[  757.754491][T29594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9091'.
[  758.201784][T29609] openvswitch: netlink: Key type 8198 is out of range max 32
[  758.385631][T29616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9096'.
[  758.385662][T29616] block nbd2: Unsupported socket: should be TCP or UNIX.
[  758.606224][T29632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9100'.
[  758.629628][T29542] bridge0: port 1(bridge_slave_0) entered blocking state
[  758.629819][T29542] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.631841][T29542] bridge_slave_0: entered allmulticast mode
[  758.657952][T29542] bridge_slave_0: entered promiscuous mode
[  758.670949][T29542] bridge0: port 2(bridge_slave_1) entered blocking state
[  758.672693][T29542] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.672853][T29542] bridge_slave_1: entered allmulticast mode
[  758.674808][T29542] bridge_slave_1: entered promiscuous mode
[  758.690657][ T5623] Bluetooth: hci7: command tx timeout
[  758.745007][ T5623] block nbd2: Receive control failed (result -107)
[  758.863210][T29542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  758.889347][T29542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  758.941228][T29542] team0: Port device team_slave_0 added
[  758.944953][T29542] team0: Port device team_slave_1 added
[  758.995936][T29542] batman_adv: batadv0: Adding interface: batadv_slave_0
[  758.995957][T29542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  758.995985][T29542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  759.043105][T29542] batman_adv: batadv0: Adding interface: batadv_slave_1
[  759.043120][T29542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  759.043145][T29542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  759.113768][T29641] netlink: 'syz.0.9106': attribute type 1 has an invalid length.
[  759.231351][T29641] bond14: entered promiscuous mode
[  759.231961][T29641] 8021q: adding VLAN 0 to HW filter on device bond14
[  759.349452][T29542] hsr_slave_0: entered promiscuous mode
[  759.352583][T29542] hsr_slave_1: entered promiscuous mode
[  759.356135][T29542] debugfs: 'hsr0' already exists in 'hsr'
[  759.356159][T29542] Cannot create hsr debugfs directory
[  759.413752][T29641] bond14: (slave bridge17): making interface the new active one
[  759.413779][T29641] bridge17: entered promiscuous mode
[  759.449130][T29641] bond14: (slave bridge17): Enslaving as an active interface with an up link
[  760.188096][T29542] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  760.219762][T29542] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  760.222591][T29542] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  760.283513][T29542] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  760.286361][T29542] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  760.319444][T29542] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  760.323064][T29542] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  760.350390][T29542] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  760.373795][T29693] netlink: 'syz.6.9122': attribute type 1 has an invalid length.
[  760.417752][T29693] bond5: entered promiscuous mode
[  760.418195][T29693] 8021q: adding VLAN 0 to HW filter on device bond5
[  760.458221][T29693] bond5: (slave bridge5): making interface the new active one
[  760.458249][T29693] bridge5: entered promiscuous mode
[  760.459679][T29693] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  760.570573][T29705] __nla_validate_parse: 4 callbacks suppressed
[  760.570596][T29705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9124'.
[  760.652153][T29708] xt_hashlimit: size too large, truncated to 1048576
[  760.653049][T29708] netlink: 'syz.6.9126': attribute type 1 has an invalid length.
[  760.768256][ T5623] Bluetooth: hci7: command tx timeout
[  760.820151][T29716] x_tables: duplicate underflow at hook 2
[  760.898602][T29723] netlink: 'syz.5.9130': attribute type 1 has an invalid length.
[  760.898626][T29723] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9130'.
[  760.898657][T29723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9130'.
[  760.936295][T29542] 8021q: adding VLAN 0 to HW filter on device bond0
[  761.015390][T29542] 8021q: adding VLAN 0 to HW filter on device team0
[  761.061010][T14070] bridge0: port 1(bridge_slave_0) entered blocking state
[  761.061104][T14070] bridge0: port 1(bridge_slave_0) entered forwarding state
[  761.088627][T26451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  761.089279][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state
[  761.089389][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state
[  761.200217][  T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  761.366542][T29736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9137'.
[  762.048804][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  762.108290][T29777] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9149'.
[  762.126954][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  762.128971][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  762.173197][T29782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9151'.
[  762.235541][T29542] 8021q: adding VLAN 0 to HW filter on device batadv0
[  762.319240][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  762.458317][T29790] ip6gre5: entered promiscuous mode
[  762.658800][    C1] vcan0: j1939_tp_rxtimer: 0xffff888030768400: rx timeout, send abort
[  762.659244][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888030768400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  762.696711][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  762.846383][T29808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9157'.
[  762.847190][ T5623] Bluetooth: hci7: command tx timeout
[  762.865215][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  762.877930][T29811] netlink: 'syz.5.9159': attribute type 1 has an invalid length.
[  762.911495][T29811] bond3: entered promiscuous mode
[  762.912445][T29811] 8021q: adding VLAN 0 to HW filter on device bond3
[  762.985970][T29811] bond3: (slave bridge2): making interface the new active one
[  762.985998][T29811] bridge2: entered promiscuous mode
[  763.008808][T29811] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  763.056338][T29542] veth0_vlan: entered promiscuous mode
[  763.072769][T29542] veth1_vlan: entered promiscuous mode
[  763.128925][T29542] veth0_macvtap: entered promiscuous mode
[  763.169276][T29542] veth1_macvtap: entered promiscuous mode
[  763.170915][T26447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.220799][T29542] batman_adv: batadv0: Interface activated: batadv_slave_0
[  763.245171][T29542] batman_adv: batadv0: Interface activated: batadv_slave_1
[  763.294162][T29819] IPv6: NLM_F_REPLACE set, but no existing node found!
[  763.299216][   T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  763.427479][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  763.428468][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.428611][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  763.428655][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  763.593633][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  763.593657][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  763.660946][  T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  763.660969][  T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  763.878406][T29842] netlink: 420 bytes leftover after parsing attributes in process `syz.0.9166'.
[  764.002045][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.240394][T26451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.257596][T29848] netlink: Failed to add GPL helper -22
[  764.257658][T29848] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  764.347615][T29869] netlink: 'syz.5.9173': attribute type 1 has an invalid length.
[  764.528468][   T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.661062][T29876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9175'.
[  764.678375][T29876] netlink: 'syz.5.9175': attribute type 1 has an invalid length.
[  764.678400][T29876] netlink: 'syz.5.9175': attribute type 2 has an invalid length.
[  764.760594][T29881] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9177'.
[  764.787355][T29880] openvswitch: netlink: Key type 15622 is out of range max 32
[  764.845370][T29885] netlink: 'syz.5.9179': attribute type 14 has an invalid length.
[  764.948202][ T5623] Bluetooth: hci7: command tx timeout
[  764.970285][T29887] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  765.251775][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  765.638862][ T1051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.830021][T29915] __nla_validate_parse: 1 callbacks suppressed
[  767.830045][T29915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9186'.
[  768.212196][T29938] syzkaller0: left promiscuous mode
[  768.212221][T29938] syzkaller0: left allmulticast mode
[  768.323059][T29945] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9194'.
[  768.385144][T29945] syzkaller1: entered promiscuous mode
[  768.385170][T29945] syzkaller1: entered allmulticast mode
[  768.499949][T29957] net_ratelimit: 6 callbacks suppressed
[  768.499973][T29957] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  768.513183][T29953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  768.658981][T29966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9200'.
[  768.698884][T29966] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9200'.
[  768.751844][T29969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9200'.
[  768.913791][T29975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9204'.
[  768.941646][T29975] No such timeout policy "syz1"
[  768.971418][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.994387][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.006154][ T5349] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  769.008321][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.072662][T29976] team0: Device gtp8 is up. Set it down before adding it as a team port
[  769.134552][ T5620] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  769.176794][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.378484][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.406974][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.914474][T30026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9220'.
[  769.929667][T30026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9220'.
[  769.929833][T30026] FAULT_INJECTION: forcing a failure.
[  769.929833][T30026] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  769.929863][T30026] CPU: 0 UID: 0 PID: 30026 Comm: syz.0.9220 Not tainted syzkaller #0 PREEMPT(full) 
[  769.929888][T30026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  769.929902][T30026] Call Trace:
[  769.929911][T30026]  <TASK>
[  769.929922][T30026]  dump_stack_lvl+0xe8/0x150
[  769.929960][T30026]  should_fail_ex+0x410/0x560
[  769.929996][T30026]  _copy_to_user+0x31/0xb0
[  769.930030][T30026]  simple_read_from_buffer+0xe1/0x170
[  769.930074][T30026]  proc_fail_nth_read+0x1bb/0x230
[  769.930097][T30026]  ? common_file_perm+0x20e/0x2b0
[  769.930130][T30026]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  769.930158][T30026]  ? rw_verify_area+0x24a/0x4c0
[  769.930194][T30026]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  769.930218][T30026]  vfs_read+0x213/0xa80
[  769.930256][T30026]  ? __pfx___mutex_lock+0x10/0x10
[  769.930291][T30026]  ? __pfx_vfs_read+0x10/0x10
[  769.930327][T30026]  ? __fget_files+0x2a/0x420
[  769.930366][T30026]  ? __fget_files+0x3a2/0x420
[  769.930396][T30026]  ? __fget_files+0x2a/0x420
[  769.930439][T30026]  ksys_read+0x150/0x270
[  769.930464][T30026]  ? __pfx_ksys_read+0x10/0x10
[  769.930500][T30026]  do_syscall_64+0x166/0x520
[  769.930530][T30026]  ? trace_irq_disable+0x3b/0x140
[  769.930555][T30026]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.930580][T30026]  ? clear_bhb_loop+0x70/0xc0
[  769.930609][T30026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.930632][T30026] RIP: 0033:0x7fcd3d15e9ce
[  769.930654][T30026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  769.930674][T30026] RSP: 002b:00007fcd3e007fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  769.930698][T30026] RAX: ffffffffffffffda RBX: 00007fcd3e0086c0 RCX: 00007fcd3d15e9ce
[  769.930715][T30026] RDX: 000000000000000f RSI: 00007fcd3e0080a0 RDI: 0000000000000007
[  769.930730][T30026] RBP: 00007fcd3e008090 R08: 0000000000000000 R09: 0000000000000000
[  769.930746][T30026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  769.930760][T30026] R13: 00007fcd3d426038 R14: 00007fcd3d425fa0 R15: 00007fffc58a70a8
[  769.930806][T30026]  </TASK>
[  770.057652][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.111510][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.223837][T30027] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available
[  770.297141][T30030] netlink: 'syz.6.9224': attribute type 32 has an invalid length.
[  770.297169][T30030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9224'.
[  770.338249][T30030] bond6: option coupled_control: invalid value (192)
[  770.340509][T30030] bond6 (unregistering): Released all slaves
[  770.562248][T30044] netlink: 'syz.7.9231': attribute type 1 has an invalid length.
[  770.562274][T30044] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9231'.
[  770.682585][T30050] FAULT_INJECTION: forcing a failure.
[  770.682585][T30050] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  770.682625][T30050] CPU: 1 UID: 0 PID: 30050 Comm: syz.6.9232 Not tainted syzkaller #0 PREEMPT(full) 
[  770.682650][T30050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  770.682660][T30050] Call Trace:
[  770.682667][T30050]  <TASK>
[  770.682674][T30050]  dump_stack_lvl+0xe8/0x150
[  770.682704][T30050]  should_fail_ex+0x410/0x560
[  770.682729][T30050]  _copy_to_user+0x31/0xb0
[  770.682754][T30050]  bpf_verifier_vlog+0x496/0x900
[  770.682783][T30050]  bpf_verifier_log_write+0x11d/0x1a0
[  770.682805][T30050]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  770.682825][T30050]  ? __kvmalloc_node_noprof+0x345/0x820
[  770.682847][T30050]  ? bpf_insn_def32+0x1ae/0x650
[  770.682866][T30050]  bpf_compute_live_registers+0x17be/0x1ff0
[  770.682902][T30050]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  770.682932][T30050]  bpf_check+0x2746/0x2ef0
[  770.682965][T30050]  ? __pfx_bpf_check+0x10/0x10
[  770.682986][T30050]  ? bpf_obj_name_cpy+0x194/0x1e0
[  770.683015][T30050]  bpf_prog_load+0x14d6/0x1c20
[  770.683045][T30050]  ? __pfx_bpf_prog_load+0x10/0x10
[  770.683085][T30050]  __sys_bpf+0xd0d/0xd90
[  770.683111][T30050]  ? __pfx___sys_bpf+0x10/0x10
[  770.683139][T30050]  ? __fget_files+0x2a/0x420
[  770.683177][T30050]  ? ksys_write+0x242/0x270
[  770.683194][T30050]  ? __pfx_ksys_write+0x10/0x10
[  770.683214][T30050]  __x64_sys_bpf+0xba/0xd0
[  770.683233][T30050]  do_syscall_64+0x166/0x520
[  770.683257][T30050]  ? trace_irq_disable+0x3b/0x140
[  770.683281][T30050]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  770.683298][T30050]  ? clear_bhb_loop+0x70/0xc0
[  770.683318][T30050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  770.683335][T30050] RIP: 0033:0x7f4a8b79e199
[  770.683350][T30050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  770.683365][T30050] RSP: 002b:00007f4a8c5ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  770.683383][T30050] RAX: ffffffffffffffda RBX: 00007f4a8ba25fa0 RCX: 00007f4a8b79e199
[  770.683396][T30050] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[  770.683406][T30050] RBP: 00007f4a8c5ff090 R08: 0000000000000000 R09: 0000000000000000
[  770.683417][T30050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  770.683427][T30050] R13: 00007f4a8ba26038 R14: 00007f4a8ba25fa0 R15: 00007ffe007b9488
[  770.683453][T30050]  </TASK>
[  771.169075][T30065] netlink: 'syz.0.9236': attribute type 2 has an invalid length.
[  771.511173][T30092] bond0: left promiscuous mode
[  771.511200][T30092] bridge3: left promiscuous mode
[  771.917992][T30113] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  772.286941][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  772.680823][T30158] FAULT_INJECTION: forcing a failure.
[  772.680823][T30158] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  772.682859][T30158] CPU: 0 UID: 0 PID: 30158 Comm: syz.7.9271 Not tainted syzkaller #0 PREEMPT(full) 
[  772.682890][T30158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  772.682904][T30158] Call Trace:
[  772.682914][T30158]  <TASK>
[  772.682925][T30158]  dump_stack_lvl+0xe8/0x150
[  772.682965][T30158]  should_fail_ex+0x410/0x560
[  772.683000][T30158]  _copy_to_user+0x31/0xb0
[  772.683034][T30158]  bpf_verifier_vlog+0x496/0x900
[  772.683072][T30158]  bpf_verifier_log_write+0x11d/0x1a0
[  772.683113][T30158]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  772.683142][T30158]  ? __kvmalloc_node_noprof+0x345/0x820
[  772.683173][T30158]  ? bpf_insn_def32+0x1ae/0x650
[  772.683200][T30158]  bpf_compute_live_registers+0x1896/0x1ff0
[  772.683250][T30158]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  772.683292][T30158]  bpf_check+0x2746/0x2ef0
[  772.683341][T30158]  ? __pfx_bpf_check+0x10/0x10
[  772.683371][T30158]  ? bpf_obj_name_cpy+0x194/0x1e0
[  772.683411][T30158]  bpf_prog_load+0x14d6/0x1c20
[  772.683452][T30158]  ? __pfx_bpf_prog_load+0x10/0x10
[  772.683511][T30158]  __sys_bpf+0xd0d/0xd90
[  772.683548][T30158]  ? __pfx___sys_bpf+0x10/0x10
[  772.683588][T30158]  ? __fget_files+0x2a/0x420
[  772.683642][T30158]  ? ksys_write+0x242/0x270
[  772.683668][T30158]  ? __pfx_ksys_write+0x10/0x10
[  772.683696][T30158]  __x64_sys_bpf+0xba/0xd0
[  772.683725][T30158]  do_syscall_64+0x166/0x520
[  772.683758][T30158]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  772.683782][T30158]  ? clear_bhb_loop+0x70/0xc0
[  772.683811][T30158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  772.683834][T30158] RIP: 0033:0x7f2bceb9e199
[  772.683857][T30158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  772.683877][T30158] RSP: 002b:00007f2bcfa48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  772.683904][T30158] RAX: ffffffffffffffda RBX: 00007f2bcee25fa0 RCX: 00007f2bceb9e199
[  772.683922][T30158] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[  772.683937][T30158] RBP: 00007f2bcfa48090 R08: 0000000000000000 R09: 0000000000000000
[  772.683951][T30158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  772.683965][T30158] R13: 00007f2bcee26038 R14: 00007f2bcee25fa0 R15: 00007ffe5eb7e6f8
[  772.684002][T30158]  </TASK>
[  773.136793][T30163] bridge6: entered promiscuous mode
[  773.156215][T30170] __nla_validate_parse: 13 callbacks suppressed
[  773.156238][T30170] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9275'.
[  773.173113][T30170] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9275'.
[  773.226882][T30169] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9277'.
[  773.241271][T30166] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9273'.
[  773.259890][T30169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9277'.
[  773.313351][T30176] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9273'.
[  773.339405][T30175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9278'.
[  773.342362][T30175] FAULT_INJECTION: forcing a failure.
[  773.342362][T30175] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  773.342399][T30175] CPU: 0 UID: 0 PID: 30175 Comm: syz.4.9278 Not tainted syzkaller #0 PREEMPT(full) 
[  773.342427][T30175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  773.342443][T30175] Call Trace:
[  773.342454][T30175]  <TASK>
[  773.342466][T30175]  dump_stack_lvl+0xe8/0x150
[  773.342510][T30175]  should_fail_ex+0x410/0x560
[  773.342549][T30175]  _copy_from_iter+0x1d3/0x1660
[  773.342581][T30175]  ? __alloc_skb+0x27a/0x7a0
[  773.342631][T30175]  ? __alloc_skb+0x27a/0x7a0
[  773.342666][T30175]  ? __alloc_skb+0x27a/0x7a0
[  773.342700][T30175]  ? __pfx__copy_from_iter+0x10/0x10
[  773.342730][T30175]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  773.342755][T30175]  ? __alloc_skb+0x27a/0x7a0
[  773.342785][T30175]  ? __alloc_skb+0x27a/0x7a0
[  773.342826][T30175]  ? netlink_sendmsg+0x650/0xb40
[  773.342852][T30175]  ? skb_put+0x112/0x210
[  773.342890][T30175]  netlink_sendmsg+0x6c0/0xb40
[  773.342929][T30175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  773.342968][T30175]  ? apparmor_socket_sendmsg+0x98/0x360
[  773.343003][T30175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  773.343029][T30175]  sock_sendmsg_nosec+0x13a/0x180
[  773.343063][T30175]  ____sys_sendmsg+0x54e/0x850
[  773.343107][T30175]  ? __pfx_____sys_sendmsg+0x10/0x10
[  773.343155][T30175]  ? import_iovec+0x73/0xa0
[  773.343195][T30175]  ___sys_sendmsg+0x2a5/0x360
[  773.343230][T30175]  ? __lock_acquire+0x747/0x2de0
[  773.343265][T30175]  ? __pfx____sys_sendmsg+0x10/0x10
[  773.343353][T30175]  ? __fget_files+0x2a/0x420
[  773.343389][T30175]  ? __fget_files+0x3a2/0x420
[  773.343439][T30175]  __x64_sys_sendmsg+0x1b1/0x290
[  773.343481][T30175]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  773.343547][T30175]  do_syscall_64+0x166/0x520
[  773.343592][T30175]  ? trace_irq_disable+0x3b/0x140
[  773.343622][T30175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.343650][T30175]  ? clear_bhb_loop+0x70/0xc0
[  773.343683][T30175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.343708][T30175] RIP: 0033:0x7f8c6e79e199
[  773.343732][T30175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  773.343750][T30175] RSP: 002b:00007f8c6c9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  773.343772][T30175] RAX: ffffffffffffffda RBX: 00007f8c6ea25fa0 RCX: 00007f8c6e79e199
[  773.343787][T30175] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000005
[  773.343801][T30175] RBP: 00007f8c6c9f6090 R08: 0000000000000000 R09: 0000000000000000
[  773.343814][T30175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  773.343826][T30175] R13: 00007f8c6ea26038 R14: 00007f8c6ea25fa0 R15: 00007ffc2e5c89f8
[  773.343858][T30175]  </TASK>
[  773.572017][T26452] net_ratelimit: 17 callbacks suppressed
[  773.572092][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.632345][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.841615][T30187] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9283'.
[  774.213496][T30201] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9289'.
[  774.216249][T30201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9289'.
[  774.323178][T30203] syzkaller0: entered promiscuous mode
[  774.323206][T30203] syzkaller0: entered allmulticast mode
[  774.420650][T30211] FAULT_INJECTION: forcing a failure.
[  774.420650][T30211] name failslab, interval 1, probability 0, space 0, times 0
[  774.420692][T30211] CPU: 1 UID: 0 PID: 30211 Comm: syz.7.9294 Not tainted syzkaller #0 PREEMPT(full) 
[  774.420723][T30211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  774.420739][T30211] Call Trace:
[  774.420749][T30211]  <TASK>
[  774.420761][T30211]  dump_stack_lvl+0xe8/0x150
[  774.420803][T30211]  should_fail_ex+0x410/0x560
[  774.420842][T30211]  should_failslab+0xa8/0x100
[  774.420879][T30211]  __kmalloc_noprof+0xfe/0x720
[  774.420908][T30211]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  774.420944][T30211]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  774.420989][T30211]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  774.421048][T30211]  genl_family_rcv_msg_doit+0xda/0x340
[  774.421092][T30211]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  774.421140][T30211]  ? apparmor_capable+0x126/0x170
[  774.421169][T30211]  ? bpf_lsm_capable+0x9/0x20
[  774.421195][T30211]  ? security_capable+0x7e/0x2c0
[  774.421237][T30211]  genl_rcv_msg+0x614/0x7a0
[  774.421280][T30211]  ? __pfx_genl_rcv_msg+0x10/0x10
[  774.421313][T30211]  ? __pfx_netlbl_unlabel_staticremovedef+0x10/0x10
[  774.421512][T30211]  netlink_rcv_skb+0x226/0x4a0
[  774.421541][T30211]  ? __pfx_genl_rcv_msg+0x10/0x10
[  774.421577][T30211]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  774.421624][T30211]  ? down_read+0x2be/0x330
[  774.421668][T30211]  genl_rcv+0x28/0x40
[  774.421698][T30211]  netlink_unicast+0x7bd/0x940
[  774.421751][T30211]  netlink_sendmsg+0x813/0xb40
[  774.421791][T30211]  ? __pfx_netlink_sendmsg+0x10/0x10
[  774.421829][T30211]  ? apparmor_socket_sendmsg+0x98/0x360
[  774.421863][T30211]  ? __pfx_netlink_sendmsg+0x10/0x10
[  774.421889][T30211]  sock_sendmsg_nosec+0x13a/0x180
[  774.421923][T30211]  ____sys_sendmsg+0x54e/0x850
[  774.421968][T30211]  ? __pfx_____sys_sendmsg+0x10/0x10
[  774.422025][T30211]  ? import_iovec+0x73/0xa0
[  774.422065][T30211]  ___sys_sendmsg+0x2a5/0x360
[  774.422101][T30211]  ? __lock_acquire+0x747/0x2de0
[  774.422136][T30211]  ? __pfx____sys_sendmsg+0x10/0x10
[  774.422223][T30211]  ? __fget_files+0x2a/0x420
[  774.422260][T30211]  ? __fget_files+0x3a2/0x420
[  774.422310][T30211]  __x64_sys_sendmsg+0x1b1/0x290
[  774.422352][T30211]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  774.422419][T30211]  do_syscall_64+0x166/0x520
[  774.422454][T30211]  ? trace_irq_disable+0x3b/0x140
[  774.422481][T30211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.422508][T30211]  ? clear_bhb_loop+0x70/0xc0
[  774.422541][T30211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.422568][T30211] RIP: 0033:0x7f2bceb9e199
[  774.422593][T30211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  774.422615][T30211] RSP: 002b:00007f2bcfa48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  774.422643][T30211] RAX: ffffffffffffffda RBX: 00007f2bcee25fa0 RCX: 00007f2bceb9e199
[  774.422662][T30211] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000005
[  774.422680][T30211] RBP: 00007f2bcfa48090 R08: 0000000000000000 R09: 0000000000000000
[  774.422697][T30211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  774.422713][T30211] R13: 00007f2bcee26038 R14: 00007f2bcee25fa0 R15: 00007ffe5eb7e6f8
[  774.422756][T30211]  </TASK>
[  774.612770][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  774.836338][T30213] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  774.850285][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  774.868495][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.022455][T30222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  775.216087][T30215] veth0_macvtap: left promiscuous mode
[  775.297362][ T5623] block nbd3: Receive control failed (result -32)
[  775.298679][ T5624] block nbd3: Receive control failed (result -32)
[  775.391016][T30235] FAULT_INJECTION: forcing a failure.
[  775.391016][T30235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  775.405078][T30235] CPU: 1 UID: 0 PID: 30235 Comm: syz.7.9301 Not tainted syzkaller #0 PREEMPT(full) 
[  775.405110][T30235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  775.405124][T30235] Call Trace:
[  775.405134][T30235]  <TASK>
[  775.405144][T30235]  dump_stack_lvl+0xe8/0x150
[  775.405184][T30235]  should_fail_ex+0x410/0x560
[  775.405218][T30235]  _copy_to_user+0x31/0xb0
[  775.405252][T30235]  bpf_verifier_vlog+0x496/0x900
[  775.405289][T30235]  bpf_verifier_log_write+0x11d/0x1a0
[  775.405318][T30235]  ? __might_fault+0xaf/0x130
[  775.405352][T30235]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  775.405385][T30235]  ? bpf_vlog_reset+0x2aa/0x340
[  775.405412][T30235]  bpf_compute_subprog_arg_access+0xfdd/0x14d0
[  775.405482][T30235]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[  775.405518][T30235]  ? __kvmalloc_node_noprof+0x345/0x820
[  775.405545][T30235]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  775.405572][T30235]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  775.405610][T30235]  bpf_compute_live_registers+0x8d3/0x1ff0
[  775.405660][T30235]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  775.405702][T30235]  bpf_check+0x2746/0x2ef0
[  775.405749][T30235]  ? __pfx_bpf_check+0x10/0x10
[  775.405779][T30235]  ? bpf_obj_name_cpy+0x194/0x1e0
[  775.405819][T30235]  bpf_prog_load+0x14d6/0x1c20
[  775.405861][T30235]  ? __pfx_bpf_prog_load+0x10/0x10
[  775.405918][T30235]  __sys_bpf+0xd0d/0xd90
[  775.405955][T30235]  ? __pfx___sys_bpf+0x10/0x10
[  775.405996][T30235]  ? __fget_files+0x2a/0x420
[  775.406048][T30235]  ? ksys_write+0x242/0x270
[  775.406074][T30235]  ? __pfx_ksys_write+0x10/0x10
[  775.406103][T30235]  __x64_sys_bpf+0xba/0xd0
[  775.406131][T30235]  do_syscall_64+0x166/0x520
[  775.406163][T30235]  ? trace_irq_disable+0x3b/0x140
[  775.406187][T30235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.406211][T30235]  ? clear_bhb_loop+0x70/0xc0
[  775.406239][T30235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.406263][T30235] RIP: 0033:0x7f2bceb9e199
[  775.406285][T30235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  775.406308][T30235] RSP: 002b:00007f2bcfa48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  775.406333][T30235] RAX: ffffffffffffffda RBX: 00007f2bcee25fa0 RCX: 00007f2bceb9e199
[  775.406350][T30235] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[  775.406366][T30235] RBP: 00007f2bcfa48090 R08: 0000000000000000 R09: 0000000000000000
[  775.406381][T30235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  775.406395][T30235] R13: 00007f2bcee26038 R14: 00007f2bcee25fa0 R15: 00007ffe5eb7e6f8
[  775.406430][T30235]  </TASK>
[  775.663877][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.805179][T15871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.805204][T15871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  776.000062][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.133526][T30261] syzkaller0: entered promiscuous mode
[  776.133553][T30261] syzkaller0: entered allmulticast mode
[  776.140735][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.179600][T30266] veth0: entered promiscuous mode
[  776.468523][T30279] FAULT_INJECTION: forcing a failure.
[  776.468523][T30279] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  776.468559][T30279] CPU: 1 UID: 0 PID: 30279 Comm: syz.0.9316 Not tainted syzkaller #0 PREEMPT(full) 
[  776.468584][T30279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  776.468599][T30279] Call Trace:
[  776.468609][T30279]  <TASK>
[  776.468620][T30279]  dump_stack_lvl+0xe8/0x150
[  776.468658][T30279]  should_fail_ex+0x410/0x560
[  776.468694][T30279]  _copy_to_user+0x31/0xb0
[  776.468729][T30279]  bpf_verifier_vlog+0x496/0x900
[  776.468767][T30279]  bpf_verifier_log_write+0x11d/0x1a0
[  776.468798][T30279]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  776.468822][T30279]  ? __kvmalloc_node_noprof+0x345/0x820
[  776.468849][T30279]  ? bpf_insn_def32+0x1ae/0x650
[  776.468874][T30279]  bpf_compute_live_registers+0x1884/0x1ff0
[  776.468933][T30279]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  776.468972][T30279]  bpf_check+0x2746/0x2ef0
[  776.469020][T30279]  ? __pfx_bpf_check+0x10/0x10
[  776.469050][T30279]  ? bpf_obj_name_cpy+0x194/0x1e0
[  776.469112][T30279]  bpf_prog_load+0x14d6/0x1c20
[  776.469153][T30279]  ? __pfx_bpf_prog_load+0x10/0x10
[  776.469213][T30279]  __sys_bpf+0xd0d/0xd90
[  776.469250][T30279]  ? __pfx___sys_bpf+0x10/0x10
[  776.469291][T30279]  ? __fget_files+0x2a/0x420
[  776.469343][T30279]  ? ksys_write+0x242/0x270
[  776.469368][T30279]  ? __pfx_ksys_write+0x10/0x10
[  776.469395][T30279]  __x64_sys_bpf+0xba/0xd0
[  776.469424][T30279]  do_syscall_64+0x166/0x520
[  776.469456][T30279]  ? trace_irq_disable+0x3b/0x140
[  776.469480][T30279]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.469504][T30279]  ? clear_bhb_loop+0x70/0xc0
[  776.469533][T30279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.469556][T30279] RIP: 0033:0x7fcd3d19e199
[  776.469579][T30279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  776.469600][T30279] RSP: 002b:00007fcd3e008028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  776.469624][T30279] RAX: ffffffffffffffda RBX: 00007fcd3d425fa0 RCX: 00007fcd3d19e199
[  776.469640][T30279] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[  776.469655][T30279] RBP: 00007fcd3e008090 R08: 0000000000000000 R09: 0000000000000000
[  776.469670][T30279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  776.469685][T30279] R13: 00007fcd3d426038 R14: 00007fcd3d425fa0 R15: 00007fffc58a70a8
[  776.469722][T30279]  </TASK>
[  776.689933][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.898697][T30257] veth0: left promiscuous mode
[  777.923541][T30331] syzkaller0: entered promiscuous mode
[  777.923566][T30331] syzkaller0: entered allmulticast mode
[  777.951119][T30331] FAULT_INJECTION: forcing a failure.
[  777.951119][T30331] name failslab, interval 1, probability 0, space 0, times 0
[  777.951155][T30331] CPU: 1 UID: 0 PID: 30331 Comm: syz.0.9337 Not tainted syzkaller #0 PREEMPT(full) 
[  777.951180][T30331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  777.951199][T30331] Call Trace:
[  777.951210][T30331]  <TASK>
[  777.951221][T30331]  dump_stack_lvl+0xe8/0x150
[  777.951261][T30331]  should_fail_ex+0x410/0x560
[  777.951293][T30331]  ? __alloc_skb+0x1db/0x7a0
[  777.951323][T30331]  should_failslab+0xa8/0x100
[  777.951356][T30331]  ? __alloc_skb+0x1db/0x7a0
[  777.951383][T30331]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  777.951407][T30331]  ? __alloc_skb+0x18d/0x7a0
[  777.951437][T30331]  ? __alloc_skb+0x1db/0x7a0
[  777.951499][T30331]  __alloc_skb+0x1db/0x7a0
[  777.951534][T30331]  rtmsg_ifinfo_build_skb+0x7f/0x260
[  777.951570][T30331]  rtmsg_ifinfo+0x8c/0x1a0
[  777.951605][T30331]  netif_close_many+0x42f/0x660
[  777.951642][T30331]  ? __pfx_netif_close_many+0x10/0x10
[  777.951668][T30331]  ? seqcount_lockdep_reader_access+0xd4/0x100
[  777.951770][T30331]  unregister_netdevice_many_notify+0xb76/0x2140
[  777.951818][T30331]  ? do_raw_spin_unlock+0xf5/0x200
[  777.951851][T30331]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  777.951888][T30331]  ? do_raw_spin_unlock+0xf5/0x200
[  777.951947][T30331]  unregister_netdevice_queue+0x2f5/0x340
[  777.951991][T30331]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  777.952014][T30331]  ? queue_delayed_work_on+0x12f/0x1e0
[  777.952047][T30331]  ? lockdep_hardirqs_on+0x7b/0x110
[  777.952079][T30331]  ? queue_delayed_work_on+0x171/0x1e0
[  777.952119][T30331]  __tun_detach+0x1074/0x1900
[  777.952172][T30331]  tun_chr_close+0x10a/0x1c0
[  777.952198][T30331]  ? __pfx_tun_chr_close+0x10/0x10
[  777.952223][T30331]  __fput+0x418/0xa50
[  777.952262][T30331]  fput_close_sync+0x11f/0x240
[  777.952293][T30331]  ? __pfx_fput_close_sync+0x10/0x10
[  777.952331][T30331]  __x64_sys_close+0x7e/0x110
[  777.952364][T30331]  do_syscall_64+0x166/0x520
[  777.952395][T30331]  ? trace_irq_disable+0x3b/0x140
[  777.952418][T30331]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  777.952442][T30331]  ? clear_bhb_loop+0x70/0xc0
[  777.952471][T30331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  777.952493][T30331] RIP: 0033:0x7fcd3d19e199
[  777.952514][T30331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  777.952534][T30331] RSP: 002b:00007fcd3e008028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  777.952558][T30331] RAX: ffffffffffffffda RBX: 00007fcd3d425fa0 RCX: 00007fcd3d19e199
[  777.952574][T30331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  777.952588][T30331] RBP: 00007fcd3e008090 R08: 0000000000000000 R09: 0000000000000000
[  777.952603][T30331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  777.952616][T30331] R13: 00007fcd3d426038 R14: 00007fcd3d425fa0 R15: 00007fffc58a70a8
[  777.952654][T30331]  </TASK>
[  778.057197][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  778.538322][T30351] Bluetooth: hci0: load_link_keys: too big key_count value 5120
[  778.616240][T30355] netlink: 'syz.7.9348': attribute type 21 has an invalid length.
[  778.616264][T30355] __nla_validate_parse: 16 callbacks suppressed
[  778.616346][T30355] netlink: 156 bytes leftover after parsing attributes in process `syz.7.9348'.
[  778.679950][T30361] net_ratelimit: 5 callbacks suppressed
[  778.679967][T30361] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  778.769271][T26451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.832234][T30367] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  778.861553][T30371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9353'.
[  779.169184][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.428813][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.468250][T30390] netlink: 'syz.7.9360': attribute type 10 has an invalid length.
[  779.564571][T30393] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9363'.
[  779.565204][T30393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9363'.
[  779.635108][T30395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  779.809175][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.855395][T30407] netlink: 56 bytes leftover after parsing attributes in process `syz.7.9367'.
[  780.545355][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.851435][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.647961][   T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.890444][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.493363][T30450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9383'.
[  783.523931][T30453] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9382'.
[  783.630604][T30455] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9384'.
[  783.655795][T30455] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9384'.
[  783.665064][T30455] netlink: 'syz.4.9384': attribute type 32 has an invalid length.
[  783.665128][T30455] netlink: 500 bytes leftover after parsing attributes in process `syz.4.9384'.
[  783.971902][T25950] net_ratelimit: 3 callbacks suppressed
[  783.971925][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.984471][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  784.449801][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  784.521521][T30497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9400'.
[  785.007473][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.100184][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.163113][T30522] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9409'.
[  785.166299][T30522] netlink: 'syz.6.9409': attribute type 1 has an invalid length.
[  785.246703][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.280699][T30522] 8021q: adding VLAN 0 to HW filter on device bond6
[  785.311422][T30522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9409'.
[  785.395735][T30534] bond23: option packets_per_slave: invalid value (18446744073709551615)
[  785.395757][T30534] bond23: option packets_per_slave: allowed values 0 - 65535
[  785.420993][T30534] bond23 (unregistering): Released all slaves
[  785.489098][T30522] macvlan2: entered promiscuous mode
[  785.489125][T30522] macvlan2: entered allmulticast mode
[  785.726943][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.915102][T30543] syzkaller0: entered promiscuous mode
[  785.915130][T30543] syzkaller0: entered allmulticast mode
[  786.048282][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.228917][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.389721][T30591] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9428'.
[  787.019373][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.290459][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  789.167249][T26452] net_ratelimit: 6 callbacks suppressed
[  789.167273][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.588617][ T1051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.737828][T30642] openvswitch: netlink: Message has 8 unknown bytes.
[  789.920113][T30654] syzkaller1: entered promiscuous mode
[  789.920139][T30654] syzkaller1: entered allmulticast mode
[  789.983341][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88807eccd000: rx timeout, send abort
[  790.210277][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.361332][T30672] hsr0: entered allmulticast mode
[  790.361357][T30672] hsr_slave_0: entered allmulticast mode
[  790.361378][T30672] hsr_slave_1: entered allmulticast mode
[  790.395535][T30672] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9453'.
[  790.407653][T30672] hsr_slave_0: left promiscuous mode
[  790.422196][T30672] hsr_slave_1: left promiscuous mode
[  790.455399][T30672] hsr0 (unregistering): left allmulticast mode
[  790.483403][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88807eccd000: abort rx timeout. Force session deactivation
[  790.483571][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88807d04a800: rx timeout, send abort
[  790.690965][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.718506][  T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.845835][T30699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.846729][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.983611][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88807d04a800: abort rx timeout. Force session deactivation
[  791.112495][T30711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9470'.
[  791.251663][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.370729][T30725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9473'.
[  791.390984][T30724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  791.937863][T30743] netlink: 'syz.0.9480': attribute type 3 has an invalid length.
[  792.113797][T30753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9485'.
[  792.150068][T30758] IPv6: NLM_F_CREATE should be specified when creating new route
[  792.167752][T30756] netlink: 'syz.0.9484': attribute type 4 has an invalid length.
[  792.167779][T30756] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9484'.
[  792.597447][T30776] netlink: 'syz.0.9495': attribute type 10 has an invalid length.
[  792.694407][T30783] netlink: 'syz.4.9499': attribute type 4 has an invalid length.
[  792.694433][T30783] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9499'.
[  792.916337][T30794] netlink: 'syz.0.9503': attribute type 21 has an invalid length.
[  792.916364][T30794] IPv6: NLM_F_CREATE should be specified when creating new route
[  793.145526][T30807] netlink: 'syz.5.9508': attribute type 10 has an invalid length.
[  793.241891][T30813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9510'.
[  793.241920][T30813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9510'.
[  793.244941][T30812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9511'.
[  793.309092][T30814] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9511'.
[  793.584036][T30830] xt_hashlimit: size too large, truncated to 1048576
[  793.645312][T30834] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  793.668560][T30834] 0ªX¹¦Dö»: entered allmulticast mode
[  793.927954][T30853] netlink: 'syz.5.9520': attribute type 7 has an invalid length.
[  793.990342][T30856] netlink: 'syz.6.9521': attribute type 10 has an invalid length.
[  794.014998][T30857] xt_IDLETIMER: label is empty or not nul-terminated
[  795.196815][ T1051] net_ratelimit: 11 callbacks suppressed
[  795.196836][ T1051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.297866][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.417642][T30821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  796.619060][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.710659][T30897] FAULT_INJECTION: forcing a failure.
[  796.710659][T30897] name failslab, interval 1, probability 0, space 0, times 0
[  796.710694][T30897] CPU: 1 UID: 0 PID: 30897 Comm: syz.0.9531 Not tainted syzkaller #0 PREEMPT(full) 
[  796.710720][T30897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  796.710735][T30897] Call Trace:
[  796.710745][T30897]  <TASK>
[  796.710755][T30897]  dump_stack_lvl+0xe8/0x150
[  796.710798][T30897]  should_fail_ex+0x410/0x560
[  796.710833][T30897]  ? __alloc_skb+0x1db/0x7a0
[  796.710867][T30897]  should_failslab+0xa8/0x100
[  796.710899][T30897]  ? __alloc_skb+0x1db/0x7a0
[  796.710928][T30897]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  796.710953][T30897]  ? __alloc_skb+0x18d/0x7a0
[  796.710984][T30897]  ? __alloc_skb+0x1db/0x7a0
[  796.711021][T30897]  __alloc_skb+0x1db/0x7a0
[  796.711056][T30897]  netlink_sendmsg+0x5d4/0xb40
[  796.711093][T30897]  ? __pfx_netlink_sendmsg+0x10/0x10
[  796.711128][T30897]  ? apparmor_socket_sendmsg+0x98/0x360
[  796.711162][T30897]  ? __pfx_netlink_sendmsg+0x10/0x10
[  796.711191][T30897]  sock_sendmsg_nosec+0x13a/0x180
[  796.711221][T30897]  ____sys_sendmsg+0x54e/0x850
[  796.711261][T30897]  ? __pfx_____sys_sendmsg+0x10/0x10
[  796.711304][T30897]  ? import_iovec+0x73/0xa0
[  796.711341][T30897]  ___sys_sendmsg+0x2a5/0x360
[  796.711373][T30897]  ? __lock_acquire+0x747/0x2de0
[  796.711405][T30897]  ? __pfx____sys_sendmsg+0x10/0x10
[  796.711478][T30897]  ? __fget_files+0x2a/0x420
[  796.711512][T30897]  ? __fget_files+0x3a2/0x420
[  796.711557][T30897]  __x64_sys_sendmsg+0x1b1/0x290
[  796.711604][T30897]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  796.711662][T30897]  do_syscall_64+0x166/0x520
[  796.711695][T30897]  ? trace_irq_disable+0x3b/0x140
[  796.711721][T30897]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.711745][T30897]  ? clear_bhb_loop+0x70/0xc0
[  796.711773][T30897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.711796][T30897] RIP: 0033:0x7fcd3d19e199
[  796.711817][T30897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  796.711837][T30897] RSP: 002b:00007fcd3e008028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  796.711861][T30897] RAX: ffffffffffffffda RBX: 00007fcd3d425fa0 RCX: 00007fcd3d19e199
[  796.711879][T30897] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  796.711894][T30897] RBP: 00007fcd3e008090 R08: 0000000000000000 R09: 0000000000000000
[  796.711908][T30897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  796.711922][T30897] R13: 00007fcd3d426038 R14: 00007fcd3d425fa0 R15: 00007fffc58a70a8
[  796.711958][T30897]  </TASK>
[  796.720349][T30895] __nla_validate_parse: 7 callbacks suppressed
[  796.720395][T30895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9530'.
[  796.783123][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.813499][T30896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9532'.
[  796.813583][T30896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9532'.
[  797.104313][T30904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9535'.
[  797.104341][T30904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9535'.
[  797.106010][T30904] 8021q: adding VLAN 0 to HW filter on device bond0
[  797.155270][T30904] bond6: (slave bond0): Enslaving as an active interface with a down link
[  797.248457][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.272851][T30910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9537'.
[  797.272891][T30910] netlink: 'syz.7.9537': attribute type 30 has an invalid length.
[  797.317233][   T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  797.318264][   T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  797.318306][   T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  797.318343][   T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  797.318439][T30910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9537'.
[  797.318474][T30910] netlink: 'syz.7.9537': attribute type 30 has an invalid length.
[  797.438660][   T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.888917][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.018537][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9554'.
[  798.018588][T30955] netlink: 'syz.5.9554': attribute type 30 has an invalid length.
[  798.063283][T30956] lo speed is unknown, defaulting to 1000
[  798.082013][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9554'.
[  798.082061][T30955] netlink: 'syz.5.9554': attribute type 30 has an invalid length.
[  798.105704][T30959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9555'.
[  798.121570][T30956] lo speed is unknown, defaulting to 1000
[  798.125338][T30956] lo speed is unknown, defaulting to 1000
[  798.127036][T14070] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  798.127094][T14070] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  798.127163][T14070] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  798.127202][T14070] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  798.433508][T30956] infiniband syz0: set active
[  798.433616][T26452] lo speed is unknown, defaulting to 1000
[  798.433685][T30956] infiniband syz0: added lo
[  798.502594][T30956] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  798.502639][T30956] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  798.502682][T30956] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  798.588619][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.748726][T30956] RDS/IB: syz0: added
[  798.748789][T30956] smc: adding ib device syz0 with port count 1
[  798.748811][T30956] smc:    ib device syz0 port 1 has no pnetid
[  798.748890][ T5349] lo speed is unknown, defaulting to 1000
[  798.771434][T30956] lo speed is unknown, defaulting to 1000
[  799.009478][T30988] syzkaller0: entered promiscuous mode
[  799.009504][T30988] syzkaller0: entered allmulticast mode
[  799.396536][T30956] lo speed is unknown, defaulting to 1000
[  799.465016][T31004] ip_tables: iptables: counters copy to user failed while replacing table
[  799.483214][T31004] batman_adv: batadv0: Adding interface: veth0
[  799.483233][T31004] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  799.483347][T31004] batman_adv: batadv0: Interface activated: veth0
[  799.534018][T31004] batman_adv: batadv0: Interface deactivated: veth0
[  799.534045][T31004] batman_adv: batadv0: Removing interface: veth0
[  799.682222][T31006] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  799.682431][T31010] tipc: Started in network mode
[  799.682461][T31010] tipc: Node identity 3e267fd2e4bc, cluster identity 4711
[  799.682616][T31010] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  799.843143][T30956] lo speed is unknown, defaulting to 1000
[  800.119270][T31020] syzkaller0: entered promiscuous mode
[  800.119296][T31020] syzkaller0: entered allmulticast mode
[  800.273109][T30956] lo speed is unknown, defaulting to 1000
[  800.531047][T31034] netlink: 'syz.5.9590': attribute type 30 has an invalid length.
[  800.585799][T31035] netlink: 'syz.5.9590': attribute type 30 has an invalid length.
[  800.795408][T31039] veth19: entered allmulticast mode
[  800.806543][ T5620] tipc: Node number set to 3667558354
[  800.847509][T25950] net_ratelimit: 2 callbacks suppressed
[  800.847532][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.859098][T24394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.931568][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.958583][T31048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  800.990150][T30956] lo speed is unknown, defaulting to 1000
[  801.694581][T30956] lo speed is unknown, defaulting to 1000
[  801.785582][T31080] __nla_validate_parse: 6 callbacks suppressed
[  801.785605][T31080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9608'.
[  801.878164][T31085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9608'.
[  801.887783][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.898888][T31086] netlink: 'syz.6.9610': attribute type 6 has an invalid length.
[  801.917826][T31085] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9608'.
[  801.957565][T24394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.139859][T30956] lo speed is unknown, defaulting to 1000
[  802.231186][T31094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9614'.
[  802.231214][T31094] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9614'.
[  802.479292][T31105] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9618'.
[  802.531710][T30956] lo speed is unknown, defaulting to 1000
[  802.629694][T31105] tipc: New replicast peer: 172.20.20.187
[  802.633609][T31105] tipc: Enabled bearer <udp:syz0>, priority 10
[  802.927068][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.099431][T24394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.235231][T31134] netlink: 'syz.0.9628': attribute type 4 has an invalid length.
[  803.235259][T31134] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9628'.
[  803.298323][T31132] 8021q: VLANs not supported on ip_vti0
[  803.360066][T31132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9627'.
[  803.384071][T31144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9631'.
[  803.384111][T31144] netlink: 'syz.6.9631': attribute type 30 has an invalid length.
[  803.437559][T31149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9631'.
[  803.437597][T31149] netlink: 'syz.6.9631': attribute type 30 has an invalid length.
[  803.477838][T31139] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  803.478211][T14070] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  803.537182][   T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  803.538399][   T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  803.538504][   T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  803.673545][T31155] bridge18: entered allmulticast mode
[  803.774218][T31163] netlink: 'syz.6.9640': attribute type 1 has an invalid length.
[  803.900967][T31163] bond7: entered promiscuous mode
[  803.901307][T31163] 8021q: adding VLAN 0 to HW filter on device bond7
[  803.951256][T31163] macvtap1: entered allmulticast mode
[  803.968122][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.968406][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.975338][T31163] bond7: (slave bridge7): making interface the new active one
[  803.975363][T31163] bridge7: entered promiscuous mode
[  804.009454][T31163] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  804.034334][T31177] netlink: 'syz.5.9642': attribute type 4 has an invalid length.
[  804.094309][T31169] wlan1 speed is unknown, defaulting to 1000
[  804.340184][T31190] netlink: 'syz.0.9647': attribute type 10 has an invalid length.
[  804.750439][T31169] lo speed is unknown, defaulting to 1000
[  804.976248][T31219] FAULT_INJECTION: forcing a failure.
[  804.976248][T31219] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  804.976286][T31219] CPU: 1 UID: 0 PID: 31219 Comm: syz.6.9656 Not tainted syzkaller #0 PREEMPT(full) 
[  804.976312][T31219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  804.976327][T31219] Call Trace:
[  804.976336][T31219]  <TASK>
[  804.976346][T31219]  dump_stack_lvl+0xe8/0x150
[  804.976386][T31219]  should_fail_ex+0x410/0x560
[  804.976423][T31219]  _copy_to_user+0x31/0xb0
[  804.976483][T31219]  simple_read_from_buffer+0xe1/0x170
[  804.976524][T31219]  proc_fail_nth_read+0x1bb/0x230
[  804.976547][T31219]  ? common_file_perm+0x20e/0x2b0
[  804.976581][T31219]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  804.976609][T31219]  ? rw_verify_area+0x24a/0x4c0
[  804.976643][T31219]  ? tun_chr_write_iter+0x18a/0x200
[  804.976671][T31219]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  804.976694][T31219]  vfs_read+0x213/0xa80
[  804.976735][T31219]  ? __pfx___mutex_lock+0x10/0x10
[  804.976769][T31219]  ? __pfx_vfs_read+0x10/0x10
[  804.976805][T31219]  ? __fget_files+0x2a/0x420
[  804.976843][T31219]  ? __fget_files+0x3a2/0x420
[  804.976874][T31219]  ? __fget_files+0x2a/0x420
[  804.976916][T31219]  ksys_read+0x150/0x270
[  804.976940][T31219]  ? __pfx_ksys_read+0x10/0x10
[  804.976976][T31219]  do_syscall_64+0x166/0x520
[  804.977006][T31219]  ? trace_irq_disable+0x3b/0x140
[  804.977030][T31219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.977061][T31219]  ? clear_bhb_loop+0x70/0xc0
[  804.977089][T31219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.977112][T31219] RIP: 0033:0x7f4a8b75e9ce
[  804.977132][T31219] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  804.977152][T31219] RSP: 002b:00007f4a8c5fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  804.977177][T31219] RAX: ffffffffffffffda RBX: 00007f4a8c5ff6c0 RCX: 00007f4a8b75e9ce
[  804.977194][T31219] RDX: 000000000000000f RSI: 00007f4a8c5ff0a0 RDI: 0000000000000005
[  804.977208][T31219] RBP: 00007f4a8c5ff090 R08: 0000000000000000 R09: 0000000000000000
[  804.977223][T31219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  804.977237][T31219] R13: 00007f4a8ba26038 R14: 00007f4a8ba25fa0 R15: 00007ffe007b9488
[  804.977274][T31219]  </TASK>
[  806.059112][T26452] net_ratelimit: 3 callbacks suppressed
[  806.059136][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.175657][T31261] atomic_op ffff8880562411e0 conn xmit_atomic 0000000000000000
[  806.451829][T15871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.684771][T31278] netlink: 'syz.0.9678': attribute type 1 has an invalid length.
[  806.846682][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  806.848728][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.855181][T31287] ip_tables: iptables: counters copy to user failed while replacing table
[  806.883686][T31290] __nla_validate_parse: 11 callbacks suppressed
[  806.883709][T31290] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9681'.
[  806.884311][T31290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9681'.
[  807.022851][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.088193][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.213331][T31302] openvswitch: netlink: IPv4 tunnel dst address is zero
[  807.213372][T31302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  807.420101][T31315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9690'.
[  807.426240][T31316] netlink: 'syz.6.9693': attribute type 2 has an invalid length.
[  807.516846][T31316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.517074][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.551485][T31316] netlink: 'syz.6.9693': attribute type 2 has an invalid length.
[  807.551509][T31316] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.9693'.
[  807.600734][T31320] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9697'.
[  807.680101][T31326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9698'.
[  807.826023][T31326] 8021q: adding VLAN 0 to HW filter on device bond23
[  807.868597][T31326] bond0: (slave bond23): Enslaving as an active interface with an up link
[  807.922456][T31326] syz.4.9698: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  807.922584][T31326] CPU: 1 UID: 0 PID: 31326 Comm: syz.4.9698 Not tainted syzkaller #0 PREEMPT(full) 
[  807.922610][T31326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  807.922625][T31326] Call Trace:
[  807.922635][T31326]  <TASK>
[  807.922646][T31326]  dump_stack_lvl+0xe8/0x150
[  807.922684][T31326]  warn_alloc+0x24d/0x270
[  807.922710][T31326]  ? kasan_save_track+0x4f/0x80
[  807.922736][T31326]  ? kasan_save_track+0x3e/0x80
[  807.922765][T31326]  ? __pfx_warn_alloc+0x10/0x10
[  807.922785][T31326]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  807.922819][T31326]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.922968][T31326]  __vmalloc_node_range_noprof+0x127/0x1540
[  807.923041][T31326]  ? rcu_is_watching+0x16/0xb0
[  807.923078][T31326]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  807.923115][T31326]  ? __kmalloc_cache_noprof+0x321/0x600
[  807.923143][T31326]  ? __kmalloc_cache_noprof+0x14d/0x600
[  807.923167][T31326]  ? xskq_create+0x56/0x220
[  807.923315][T31326]  xskq_create+0x148/0x220
[  807.923347][T31326]  ? xsk_init_queue+0x8a/0xe0
[  807.923378][T31326]  xsk_init_queue+0x8a/0xe0
[  807.923411][T31326]  xsk_setsockopt+0x52a/0x960
[  807.923444][T31326]  ? __pfx_xsk_setsockopt+0x10/0x10
[  807.923478][T31326]  ? __pfx_aa_sk_perm+0x10/0x10
[  807.923520][T31326]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  807.923553][T31326]  ? __pfx_xsk_setsockopt+0x10/0x10
[  807.923584][T31326]  do_sock_setsockopt+0x17c/0x1b0
[  807.923625][T31326]  __x64_sys_setsockopt+0x13d/0x1b0
[  807.923665][T31326]  do_syscall_64+0x166/0x520
[  807.923698][T31326]  ? trace_irq_disable+0x3b/0x140
[  807.923724][T31326]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.923749][T31326]  ? clear_bhb_loop+0x70/0xc0
[  807.923778][T31326]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.923815][T31326] RIP: 0033:0x7f8c6e79e199
[  807.923838][T31326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  807.923860][T31326] RSP: 002b:00007f8c6c9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  807.923885][T31326] RAX: ffffffffffffffda RBX: 00007f8c6ea25fa0 RCX: 00007f8c6e79e199
[  807.923903][T31326] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[  807.923918][T31326] RBP: 00007f8c6e8358e0 R08: 0000000000000004 R09: 0000000000000000
[  807.923934][T31326] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  807.923950][T31326] R13: 00007f8c6ea26038 R14: 00007f8c6ea25fa0 R15: 00007ffc2e5c89f8
[  807.923989][T31326]  </TASK>
[  807.927961][T31326] Mem-Info:
[  807.928004][T31326] active_anon:6478 inactive_anon:0 isolated_anon:0
[  807.928004][T31326]  active_file:0 inactive_file:43909 isolated_file:0
[  807.928004][T31326]  unevictable:0 dirty:148 writeback:0
[  807.928004][T31326]  slab_reclaimable:12452 slab_unreclaimable:132031
[  807.928004][T31326]  mapped:44919 shmem:530 pagetables:1319
[  807.928004][T31326]  sec_pagetables:0 bounce:0
[  807.928004][T31326]  kernel_misc_reclaimable:0
[  807.928004][T31326]  free:1251705 free_pcp:10755 free_cma:0
[  807.928168][T31326] Node 0 active_anon:25912kB inactive_anon:0kB active_file:0kB inactive_file:175432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179676kB dirty:592kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16864kB pagetables:5152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  807.928342][T31326] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  807.928498][T31326] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  807.928674][T31326] lowmem_reserve[]: 0 2487 2487 2487 2487
[  807.928798][T31326] Node 0 DMA32 free:1053680kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25912kB inactive_anon:0kB active_file:0kB inactive_file:175432kB unevictable:0kB writepending:592kB zspages:0kB present:3129332kB managed:2546864kB mlocked:0kB bounce:0kB free_pcp:38496kB local_pcp:21336kB free_cma:0kB
[  807.928976][T31326] lowmem_reserve[]: 0 0 0 0 0
[  807.974159][T31340] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9701'.
[  807.974260][T31340] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9701'.
[  808.219550][T31345] netlink: 'syz.5.9702': attribute type 4 has an invalid length.
[  808.219690][T31345] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9702'.
[  808.236844][T31326] 
[  808.236887][T31326] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  808.237084][T31326] lowmem_reserve[]: 0 0 0 0 0
[  808.237195][T31326] Node 1 Normal free:3938032kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4272kB local_pcp:3272kB free_cma:0kB
[  808.237369][T31326] lowmem_reserve[]: 0 0 0 0 0
[  808.257494][T31326] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  808.257906][T31326] Node 0 DMA32: 440*4kB (UME) 752*8kB (UME) 288*16kB (UME) 267*32kB (UME) 52*64kB (UM) 62*128kB (UME) 19*256kB (UME) 7*512kB (UME) 4*1024kB (UME) 3*2048kB (M) 245*4096kB (UM) = 1054400kB
[  808.258422][T31326] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  808.258756][T31326] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 3*16kB (UM) 3*32kB (UM) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (UM) = 3938084kB
[  808.275266][T31326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  808.275326][T31326] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  808.275385][T31326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  808.275440][T31326] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  808.275498][T31326] 44435 total pagecache pages
[  808.275524][T31326] 0 pages in swap cache
[  808.275557][T31326] Free swap  = 124996kB
[  808.275582][T31326] Total swap = 124996kB
[  808.275616][T31326] 2097051 pages RAM
[  808.275641][T31326] 0 pages HighMem/MovableOnly
[  808.285082][T31326] 428719 pages reserved
[  808.285129][T31326] 0 pages cma reserved
[  808.769251][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  808.859756][T31354] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9705'.
[  808.904553][T31362] batman_adv: batadv0: Adding interface: dummy0
[  808.904590][T31362] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  808.904628][T31362] batman_adv: batadv0: Interface activated: dummy0
[  809.580451][T31385] syzkaller1: entered promiscuous mode
[  809.580478][T31385] syzkaller1: entered allmulticast mode
[  810.727801][T31449] syzkaller0: entered promiscuous mode
[  810.727825][T31449] syzkaller0: entered allmulticast mode
[  810.971426][T31466] xt_NETMAP: bad MAP_IPS.
[  810.975085][T31462] x_tables: duplicate underflow at hook 1
[  811.241517][T31479] netlink: 'syz.6.9750': attribute type 10 has an invalid length.
[  811.379847][T31484] net_ratelimit: 30 callbacks suppressed
[  811.379871][T31484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  811.412416][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.763223][T31505] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  811.857408][T31507] syzkaller0: entered promiscuous mode
[  811.857426][T31507] syzkaller0: entered allmulticast mode
[  812.109127][T31522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  812.129050][ T1051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.227171][T31525] __nla_validate_parse: 74 callbacks suppressed
[  812.227197][T31525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9766'.
[  812.280238][T31525] syzkaller0: entered promiscuous mode
[  812.280265][T31525] syzkaller0: entered allmulticast mode
[  812.305244][T31525] netlink: 'syz.5.9766': attribute type 1 has an invalid length.
[  812.448703][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.749804][   T85] IPVS: starting estimator thread 0...
[  812.763002][T31555] syzkaller0: entered promiscuous mode
[  812.763029][T31555] syzkaller0: entered allmulticast mode
[  812.901352][T31557] IPVS: Scheduler module ip_vs_mh  not found
[  812.901420][T31559] IPVS: using max 28 ests per chain, 67200 per kthread
[  812.906384][T31565] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  812.931377][T31565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9781'.
[  812.931723][T31565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9781'.
[  813.086818][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.260298][ T1051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.290428][T31580] xt_TPROXY: Can be used only with -p tcp or -p udp
[  813.487621][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.002216][T31605] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9793'.
[  814.109797][T31607] syzkaller0: entered promiscuous mode
[  814.109823][T31607] syzkaller0: entered allmulticast mode
[  814.188891][T31609] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9796'.
[  814.301052][T31617] netlink: 'syz.5.9799': attribute type 4 has an invalid length.
[  814.301077][T31617] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9799'.
[  814.390221][T15871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.439960][T31621] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.9802'.
[  814.574175][T31628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9804'.
[  814.765806][T31636] netlink: 13 bytes leftover after parsing attributes in process `syz.5.9806'.
[  814.919196][T31638] vlan0: left promiscuous mode
[  814.977902][T31638] bond1: left promiscuous mode
[  814.977922][T31638] bridge1: left promiscuous mode
[  814.980644][T31638] bond2: left promiscuous mode
[  814.980670][T31638] bridge2: left promiscuous mode
[  814.983497][T31638] bond3: left promiscuous mode
[  814.983513][T31638] bridge4: left promiscuous mode
[  814.988897][T31638] bond5: left promiscuous mode
[  814.990696][T31638] bridge5: left promiscuous mode
[  815.000821][T31638] macvlan2: left promiscuous mode
[  815.013069][T31638] bond7: left promiscuous mode
[  815.013125][T31638] bridge7: left promiscuous mode
[  815.023905][   T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  815.062638][T31640] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9810'.
[  815.062674][T31640] netlink: 'syz.7.9810': attribute type 5 has an invalid length.
[  815.361729][T31658] netlink: 'syz.7.9813': attribute type 4 has an invalid length.
[  815.436681][ T5620] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  815.786050][T31672] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20004
[  816.116788][T31685] netlink: 'syz.7.9827': attribute type 4 has an invalid length.
[  816.449136][ T5620] net_ratelimit: 10 callbacks suppressed
[  816.449160][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.608873][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.630736][ T1051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.651009][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.741875][ T1051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.560574][T31776] __nla_validate_parse: 10 callbacks suppressed
[  818.560603][T31776] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9859'.
[  818.688843][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.705831][T31801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9872'.
[  818.718652][T31801] syzkaller0: entered promiscuous mode
[  818.718676][T31801] syzkaller0: entered allmulticast mode
[  818.847948][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.074218][T31812] syzkaller0: entered promiscuous mode
[  819.074245][T31812] syzkaller0: entered allmulticast mode
[  819.170691][ T5624] Bluetooth: hci7: command 0x0405 tx timeout
[  819.231616][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.327708][T31824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9876'.
[  819.419576][T31827] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9878'.
[  819.422618][T31827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9878'.
[  819.422643][T31827] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9878'.
[  819.422880][T31827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9878'.
[  819.422900][T31827] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9878'.
[  819.739326][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.838823][T31842] netlink: 'syz.4.9884': attribute type 10 has an invalid length.
[  819.969146][T24394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.255174][ T5624] Bluetooth: hci7: command 0x0405 tx timeout
[  821.809113][T25950] net_ratelimit: 2 callbacks suppressed
[  821.809131][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.177527][T15871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.209957][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.291033][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.851683][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.905368][T31853] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9887'.
[  822.905394][T31853] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9887'.
[  822.905422][T31853] netlink: 'syz.7.9887': attribute type 15 has an invalid length.
[  822.915132][T31855] FAULT_INJECTION: forcing a failure.
[  822.915132][T31855] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  822.915235][T31855] CPU: 1 UID: 0 PID: 31855 Comm: syz.4.9885 Not tainted syzkaller #0 PREEMPT(full) 
[  822.915299][T31855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  822.915333][T31855] Call Trace:
[  822.915348][T31855]  <TASK>
[  822.915371][T31855]  dump_stack_lvl+0xe8/0x150
[  822.915463][T31855]  should_fail_ex+0x410/0x560
[  822.915563][T31855]  _copy_from_iter+0x1d3/0x1660
[  822.915592][T31855]  ? __alloc_skb+0x27a/0x7a0
[  822.915625][T31855]  ? __alloc_skb+0x27a/0x7a0
[  822.915655][T31855]  ? __alloc_skb+0x27a/0x7a0
[  822.915683][T31855]  ? __pfx__copy_from_iter+0x10/0x10
[  822.915709][T31855]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  822.915740][T31855]  ? __alloc_skb+0x27a/0x7a0
[  822.915825][T31855]  ? __alloc_skb+0x27a/0x7a0
[  822.915946][T31855]  ? netlink_sendmsg+0x650/0xb40
[  822.916003][T31855]  ? skb_put+0x112/0x210
[  822.916089][T31855]  netlink_sendmsg+0x6c0/0xb40
[  822.916175][T31855]  ? __pfx_netlink_sendmsg+0x10/0x10
[  822.916260][T31855]  ? apparmor_socket_sendmsg+0x18b/0x360
[  822.916343][T31855]  ? __pfx_netlink_sendmsg+0x10/0x10
[  822.916386][T31855]  sock_sendmsg_nosec+0x13a/0x180
[  822.916461][T31855]  ____sys_sendmsg+0x54e/0x850
[  822.916559][T31855]  ? __pfx_____sys_sendmsg+0x10/0x10
[  822.916685][T31855]  ? import_iovec+0x73/0xa0
[  822.916779][T31855]  ___sys_sendmsg+0x2a5/0x360
[  822.916870][T31855]  ? __lock_acquire+0x747/0x2de0
[  822.916946][T31855]  ? __pfx____sys_sendmsg+0x10/0x10
[  822.917135][T31855]  ? __fget_files+0x2a/0x420
[  822.917211][T31855]  ? __fget_files+0x3a2/0x420
[  822.917340][T31855]  __x64_sys_sendmsg+0x1b1/0x290
[  822.917464][T31855]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  822.917611][T31855]  do_syscall_64+0x166/0x520
[  822.917695][T31855]  ? trace_irq_disable+0x3b/0x140
[  822.917757][T31855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.917814][T31855]  ? clear_bhb_loop+0x70/0xc0
[  822.917900][T31855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.917963][T31855] RIP: 0033:0x7f8c6e79e199
[  822.918010][T31855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  822.918063][T31855] RSP: 002b:00007f8c6c9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  822.918129][T31855] RAX: ffffffffffffffda RBX: 00007f8c6ea25fa0 RCX: 00007f8c6e79e199
[  822.918172][T31855] RDX: 0000000024000884 RSI: 00002000000003c0 RDI: 0000000000000004
[  822.918214][T31855] RBP: 00007f8c6c9f6090 R08: 0000000000000000 R09: 0000000000000000
[  822.918249][T31855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  822.918282][T31855] R13: 00007f8c6ea26038 R14: 00007f8c6ea25fa0 R15: 00007ffc2e5c89f8
[  822.918371][T31855]  </TASK>
[  823.045746][T31854] netlink: 'syz.0.9886': attribute type 7 has an invalid length.
[  823.278062][   T12] netdevsim netdevsim7 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0
[  823.278538][   T12] netdevsim netdevsim7 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0
[  823.278598][   T12] netdevsim netdevsim7 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0
[  823.278635][   T12] netdevsim netdevsim7 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0
[  823.332572][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.598753][T31867] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  823.605747][T31867] SET target dimension over the limit!
[  823.661592][T31874] netlink: 'syz.7.9896': attribute type 30 has an invalid length.
[  823.707067][T31882] netlink: 'syz.6.9897': attribute type 10 has an invalid length.
[  823.887694][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.055325][T31899] __nla_validate_parse: 6 callbacks suppressed
[  824.055352][T31899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9904'.
[  824.081011][T31899] netlink: 'syz.4.9904': attribute type 7 has an invalid length.
[  824.081039][T31899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9904'.
[  824.081076][T31899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9904'.
[  824.113149][T31899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9904'.
[  824.242790][T31903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9906'.
[  824.242818][T31903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9906'.
[  824.460597][T15871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.551701][T31912] netlink: 'syz.6.9910': attribute type 10 has an invalid length.
[  824.677196][T31921] FAULT_INJECTION: forcing a failure.
[  824.677196][T31921] name failslab, interval 1, probability 0, space 0, times 0
[  824.677233][T31921] CPU: 0 UID: 0 PID: 31921 Comm: syz.4.9914 Not tainted syzkaller #0 PREEMPT(full) 
[  824.677258][T31921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  824.677272][T31921] Call Trace:
[  824.677282][T31921]  <TASK>
[  824.677293][T31921]  dump_stack_lvl+0xe8/0x150
[  824.677332][T31921]  should_fail_ex+0x410/0x560
[  824.677367][T31921]  should_failslab+0xa8/0x100
[  824.677400][T31921]  __kmalloc_noprof+0xfe/0x720
[  824.677427][T31921]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  824.677459][T31921]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  824.677500][T31921]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  824.677541][T31921]  genl_family_rcv_msg_doit+0xda/0x340
[  824.677580][T31921]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  824.677621][T31921]  ? apparmor_capable+0x126/0x170
[  824.677648][T31921]  ? bpf_lsm_capable+0x9/0x20
[  824.677670][T31921]  ? security_capable+0x7e/0x2c0
[  824.677714][T31921]  genl_rcv_msg+0x614/0x7a0
[  824.677753][T31921]  ? __pfx_genl_rcv_msg+0x10/0x10
[  824.677781][T31921]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  824.677888][T31921]  ? __pfx_nl802154_new_interface+0x10/0x10
[  824.677940][T31921]  ? __pfx_nl802154_post_doit+0x10/0x10
[  824.677979][T31921]  netlink_rcv_skb+0x226/0x4a0
[  824.678000][T31921]  ? __pfx_genl_rcv_msg+0x10/0x10
[  824.678025][T31921]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  824.678058][T31921]  ? down_read+0x2be/0x330
[  824.678089][T31921]  genl_rcv+0x28/0x40
[  824.678111][T31921]  netlink_unicast+0x7bd/0x940
[  824.678152][T31921]  netlink_sendmsg+0x813/0xb40
[  824.678180][T31921]  ? __pfx_netlink_sendmsg+0x10/0x10
[  824.678209][T31921]  ? apparmor_socket_sendmsg+0x18b/0x360
[  824.678234][T31921]  ? __pfx_netlink_sendmsg+0x10/0x10
[  824.678252][T31921]  sock_sendmsg_nosec+0x13a/0x180
[  824.678276][T31921]  ____sys_sendmsg+0x54e/0x850
[  824.678308][T31921]  ? __pfx_____sys_sendmsg+0x10/0x10
[  824.678343][T31921]  ? import_iovec+0x73/0xa0
[  824.678371][T31921]  ___sys_sendmsg+0x2a5/0x360
[  824.678397][T31921]  ? __lock_acquire+0x747/0x2de0
[  824.678421][T31921]  ? __pfx____sys_sendmsg+0x10/0x10
[  824.678480][T31921]  ? __fget_files+0x2a/0x420
[  824.678507][T31921]  ? __fget_files+0x3a2/0x420
[  824.678542][T31921]  __x64_sys_sendmsg+0x1b1/0x290
[  824.678572][T31921]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  824.678619][T31921]  do_syscall_64+0x166/0x520
[  824.678644][T31921]  ? trace_irq_disable+0x3b/0x140
[  824.678663][T31921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.678682][T31921]  ? clear_bhb_loop+0x70/0xc0
[  824.678710][T31921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.678729][T31921] RIP: 0033:0x7f8c6e79e199
[  824.678747][T31921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  824.678763][T31921] RSP: 002b:00007f8c6c9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  824.678783][T31921] RAX: ffffffffffffffda RBX: 00007f8c6ea25fa0 RCX: 00007f8c6e79e199
[  824.678797][T31921] RDX: 0000000024000884 RSI: 00002000000003c0 RDI: 0000000000000004
[  824.678809][T31921] RBP: 00007f8c6c9f6090 R08: 0000000000000000 R09: 0000000000000000
[  824.678821][T31921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  824.678832][T31921] R13: 00007f8c6ea26038 R14: 00007f8c6ea25fa0 R15: 00007ffc2e5c89f8
[  824.678861][T31921]  </TASK>
[  825.058034][T26451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.453625][T31945] netlink: 'syz.5.9925': attribute type 10 has an invalid length.
[  825.680575][T31957] x_tables: duplicate underflow at hook 1
[  825.700222][T31956] FAULT_INJECTION: forcing a failure.
[  825.700222][T31956] name failslab, interval 1, probability 0, space 0, times 0
[  825.700259][T31956] CPU: 1 UID: 0 PID: 31956 Comm: syz.7.9930 Not tainted syzkaller #0 PREEMPT(full) 
[  825.700285][T31956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  825.700300][T31956] Call Trace:
[  825.700309][T31956]  <TASK>
[  825.700319][T31956]  dump_stack_lvl+0xe8/0x150
[  825.700359][T31956]  should_fail_ex+0x410/0x560
[  825.700393][T31956]  should_failslab+0xa8/0x100
[  825.700426][T31956]  __kmalloc_noprof+0xfe/0x720
[  825.700451][T31956]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  825.700482][T31956]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  825.700521][T31956]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  825.700561][T31956]  genl_family_rcv_msg_doit+0xda/0x340
[  825.700600][T31956]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  825.700640][T31956]  ? apparmor_capable+0x126/0x170
[  825.700666][T31956]  ? bpf_lsm_capable+0x9/0x20
[  825.700689][T31956]  ? security_capable+0x7e/0x2c0
[  825.700727][T31956]  genl_rcv_msg+0x614/0x7a0
[  825.700765][T31956]  ? __pfx_genl_rcv_msg+0x10/0x10
[  825.700794][T31956]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  825.700821][T31956]  ? __pfx_nl802154_new_interface+0x10/0x10
[  825.700849][T31956]  ? __pfx_nl802154_post_doit+0x10/0x10
[  825.700892][T31956]  netlink_rcv_skb+0x226/0x4a0
[  825.700919][T31956]  ? __pfx_genl_rcv_msg+0x10/0x10
[  825.700950][T31956]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  825.700996][T31956]  ? down_read+0x2be/0x330
[  825.701036][T31956]  genl_rcv+0x28/0x40
[  825.701063][T31956]  netlink_unicast+0x7bd/0x940
[  825.701111][T31956]  netlink_sendmsg+0x813/0xb40
[  825.701148][T31956]  ? __pfx_netlink_sendmsg+0x10/0x10
[  825.701184][T31956]  ? apparmor_socket_sendmsg+0x18b/0x360
[  825.701225][T31956]  ? __pfx_netlink_sendmsg+0x10/0x10
[  825.701249][T31956]  sock_sendmsg_nosec+0x13a/0x180
[  825.701279][T31956]  ____sys_sendmsg+0x54e/0x850
[  825.701321][T31956]  ? __pfx_____sys_sendmsg+0x10/0x10
[  825.701366][T31956]  ? import_iovec+0x73/0xa0
[  825.701402][T31956]  ___sys_sendmsg+0x2a5/0x360
[  825.701434][T31956]  ? __lock_acquire+0x747/0x2de0
[  825.701464][T31956]  ? __pfx____sys_sendmsg+0x10/0x10
[  825.701536][T31956]  ? __fget_files+0x2a/0x420
[  825.701569][T31956]  ? __fget_files+0x3a2/0x420
[  825.701619][T31956]  __x64_sys_sendmsg+0x1b1/0x290
[  825.701656][T31956]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  825.701713][T31956]  do_syscall_64+0x166/0x520
[  825.701745][T31956]  ? trace_irq_disable+0x3b/0x140
[  825.701770][T31956]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  825.701794][T31956]  ? clear_bhb_loop+0x70/0xc0
[  825.701823][T31956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  825.701847][T31956] RIP: 0033:0x7f2bceb9e199
[  825.701869][T31956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  825.701889][T31956] RSP: 002b:00007f2bcfa48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  825.701914][T31956] RAX: ffffffffffffffda RBX: 00007f2bcee25fa0 RCX: 00007f2bceb9e199
[  825.701932][T31956] RDX: 0000000024000884 RSI: 00002000000003c0 RDI: 0000000000000004
[  825.701948][T31956] RBP: 00007f2bcfa48090 R08: 0000000000000000 R09: 0000000000000000
[  825.701963][T31956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  825.701978][T31956] R13: 00007f2bcee26038 R14: 00007f2bcee25fa0 R15: 00007ffe5eb7e6f8
[  825.702018][T31956]  </TASK>
[  825.735893][T31957] syzkaller0: entered promiscuous mode
[  825.735916][T31957] syzkaller0: entered allmulticast mode
[  826.196196][T31961] netlink: 'syz.5.9933': attribute type 1 has an invalid length.
[  826.196225][T31961] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9933'.
[  826.196245][T31961] netlink: 'syz.5.9933': attribute type 2 has an invalid length.
[  826.196260][T31961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9933'.
[  826.347712][T31967] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  826.347738][T31967] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  826.347750][T31967] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  826.741314][T31988] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9943'.
[  826.881274][T31995] FAULT_INJECTION: forcing a failure.
[  826.881274][T31995] name failslab, interval 1, probability 0, space 0, times 0
[  826.881314][T31995] CPU: 1 UID: 0 PID: 31995 Comm: syz.5.9946 Not tainted syzkaller #0 PREEMPT(full) 
[  826.881340][T31995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  826.881355][T31995] Call Trace:
[  826.881364][T31995]  <TASK>
[  826.881375][T31995]  dump_stack_lvl+0xe8/0x150
[  826.881415][T31995]  should_fail_ex+0x410/0x560
[  826.881448][T31995]  ? __alloc_skb+0x1db/0x7a0
[  826.881480][T31995]  should_failslab+0xa8/0x100
[  826.881512][T31995]  ? __alloc_skb+0x1db/0x7a0
[  826.881539][T31995]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  826.881564][T31995]  ? __alloc_skb+0x18d/0x7a0
[  826.881595][T31995]  ? __alloc_skb+0x1db/0x7a0
[  826.881636][T31995]  __alloc_skb+0x1db/0x7a0
[  826.881672][T31995]  netlink_ack+0x136/0xb30
[  826.881693][T31995]  ? __pfx_genl_rcv_msg+0x10/0x10
[  826.881724][T31995]  ? __pfx_nl802154_post_doit+0x10/0x10
[  826.881778][T31995]  netlink_rcv_skb+0x2a4/0x4a0
[  826.881803][T31995]  ? __pfx_genl_rcv_msg+0x10/0x10
[  826.881836][T31995]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  826.881879][T31995]  ? down_read+0x2be/0x330
[  826.881919][T31995]  genl_rcv+0x28/0x40
[  826.881946][T31995]  netlink_unicast+0x7bd/0x940
[  826.881993][T31995]  netlink_sendmsg+0x813/0xb40
[  826.882029][T31995]  ? __pfx_netlink_sendmsg+0x10/0x10
[  826.882063][T31995]  ? apparmor_socket_sendmsg+0x18b/0x360
[  826.882094][T31995]  ? __pfx_netlink_sendmsg+0x10/0x10
[  826.882117][T31995]  sock_sendmsg_nosec+0x13a/0x180
[  826.882146][T31995]  ____sys_sendmsg+0x54e/0x850
[  826.882184][T31995]  ? __pfx_____sys_sendmsg+0x10/0x10
[  826.882228][T31995]  ? import_iovec+0x73/0xa0
[  826.882263][T31995]  ___sys_sendmsg+0x2a5/0x360
[  826.882295][T31995]  ? __lock_acquire+0x747/0x2de0
[  826.882326][T31995]  ? __pfx____sys_sendmsg+0x10/0x10
[  826.882403][T31995]  ? __fget_files+0x2a/0x420
[  826.882435][T31995]  ? __fget_files+0x3a2/0x420
[  826.882480][T31995]  __x64_sys_sendmsg+0x1b1/0x290
[  826.882517][T31995]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  826.882576][T31995]  do_syscall_64+0x166/0x520
[  826.882609][T31995]  ? trace_irq_disable+0x3b/0x140
[  826.882634][T31995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.882658][T31995]  ? clear_bhb_loop+0x70/0xc0
[  826.882687][T31995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.882711][T31995] RIP: 0033:0x7f09c6f9e199
[  826.882733][T31995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  826.882754][T31995] RSP: 002b:00007f09c7e48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  826.882787][T31995] RAX: ffffffffffffffda RBX: 00007f09c7225fa0 RCX: 00007f09c6f9e199
[  826.882805][T31995] RDX: 0000000024000884 RSI: 00002000000003c0 RDI: 0000000000000004
[  826.882821][T31995] RBP: 00007f09c7e48090 R08: 0000000000000000 R09: 0000000000000000
[  826.882836][T31995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  826.882850][T31995] R13: 00007f09c7226038 R14: 00007f09c7225fa0 R15: 00007ffc3c847ef8
[  826.882889][T31995]  </TASK>
[  827.247438][T26452] net_ratelimit: 8 callbacks suppressed
[  827.247460][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.290186][T32002] netlink: 'syz.5.9949': attribute type 10 has an invalid length.
[  827.390566][T31992] syzkaller0: entered promiscuous mode
[  827.393862][T31992] syzkaller0: entered allmulticast mode
[  827.878701][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.922773][T32016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9954'.
[  828.291203][T26451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.378150][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.987134][T15871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.278017][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.339856][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.148101][  T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.368325][T26451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.270580][T15871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.363998][T32031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9958'.
[  831.364037][T32031] netlink: 'syz.4.9958': attribute type 30 has an invalid length.
[  831.419596][T32039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9958'.
[  831.419635][T32039] netlink: 'syz.4.9958': attribute type 30 has an invalid length.
[  831.665611][T32049] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  831.685636][T32049] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  832.073065][T32072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9968'.
[  832.209319][T32071] syzkaller0: entered promiscuous mode
[  832.209349][T32071] syzkaller0: entered allmulticast mode
[  832.372769][  T162] net_ratelimit: 7 callbacks suppressed
[  832.372791][  T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.449304][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.551103][T32083] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  832.551369][T26452] hid-generic 0005:046D:0A0E.0006: unknown main item tag 0x0
[  832.576254][T26452] hid-generic 0005:046D:0A0E.0006: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  832.698792][T32092] netlink: 'syz.4.9976': attribute type 4 has an invalid length.
[  832.698820][T32092] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9976'.
[  833.492678][ T1051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.493396][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.467054][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.532757][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.592232][ T1051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.569296][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.699009][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.364876][T32125] syzkaller0: entered promiscuous mode
[  836.364903][T32125] syzkaller0: entered allmulticast mode
[  836.373945][T32129] netlink: 'syz.6.9991': attribute type 4 has an invalid length.
[  836.373967][T32129] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9991'.
[  836.967601][T32152] netlink: 19 bytes leftover after parsing attributes in process `syz.6.10002'.
[  837.015052][T32158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10003'.
[  837.015095][T32158] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10003'.
[  837.139934][T32164] netlink: 'syz.6.10007': attribute type 10 has an invalid length.
[  837.140312][T32164] veth1_macvtap: left promiscuous mode
[  837.175544][T32164] veth1_macvtap: entered promiscuous mode
[  837.184780][T32164] .`: (slave macsec0): Enslaving as an active interface with an up link
[  837.487462][ T5349] net_ratelimit: 3 callbacks suppressed
[  837.487487][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.651801][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.750272][T32195] netlink: 'syz.5.10017': attribute type 8 has an invalid length.
[  837.750296][T32195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10017'.
[  837.776627][T32195] veth1_to_team: entered promiscuous mode
[  837.778213][T32195] gretap0: entered promiscuous mode
[  837.779704][T32195] bond_slave_1: entered promiscuous mode
[  837.779860][T32195] bond_slave_1: left promiscuous mode
[  837.784409][T32195] veth1_to_team: left promiscuous mode
[  837.814297][T32195] gretap0: left promiscuous mode
[  837.947414][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  838.013570][T32205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10021'.
[  838.135113][T14070] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  838.135138][T14070] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  838.331801][T32217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10027'.
[  838.332014][T32217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10027'.
[  838.332209][T32217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10027'.
[  838.332405][T32217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10027'.
[  838.429659][T32221] netlink: 'syz.7.10029': attribute type 7 has an invalid length.
[  838.688668][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  838.755535][T32236] 8021q: adding VLAN 0 to HW filter on device bond0
[  838.848872][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.066912][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.776809][T25950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.178457][   T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.234200][T32273] xt_CT: No such helper "snmp_trap"
[  840.527285][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.847758][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.063862][T32311] syzkaller0: left promiscuous mode
[  841.063909][T32311] syzkaller0: left allmulticast mode
[  841.110018][T32318] FAULT_INJECTION: forcing a failure.
[  841.110018][T32318] name failslab, interval 1, probability 0, space 0, times 0
[  841.110056][T32318] CPU: 1 UID: 0 PID: 32318 Comm: syz.5.10062 Not tainted syzkaller #0 PREEMPT(full) 
[  841.110081][T32318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  841.110095][T32318] Call Trace:
[  841.110104][T32318]  <TASK>
[  841.110115][T32318]  dump_stack_lvl+0xe8/0x150
[  841.110153][T32318]  should_fail_ex+0x410/0x560
[  841.110184][T32318]  ? __alloc_skb+0x1db/0x7a0
[  841.110214][T32318]  should_failslab+0xa8/0x100
[  841.110255][T32318]  ? __alloc_skb+0x1db/0x7a0
[  841.110281][T32318]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  841.110304][T32318]  ? __alloc_skb+0x18d/0x7a0
[  841.110335][T32318]  ? __alloc_skb+0x1db/0x7a0
[  841.110371][T32318]  __alloc_skb+0x1db/0x7a0
[  841.110406][T32318]  netlink_sendmsg+0x5d4/0xb40
[  841.110442][T32318]  ? __pfx_netlink_sendmsg+0x10/0x10
[  841.110477][T32318]  ? apparmor_socket_sendmsg+0x98/0x360
[  841.110507][T32318]  ? __pfx_netlink_sendmsg+0x10/0x10
[  841.110531][T32318]  sock_sendmsg_nosec+0x13a/0x180
[  841.110561][T32318]  ____sys_sendmsg+0x54e/0x850
[  841.110600][T32318]  ? __pfx_____sys_sendmsg+0x10/0x10
[  841.110644][T32318]  ? import_iovec+0x73/0xa0
[  841.110679][T32318]  ___sys_sendmsg+0x2a5/0x360
[  841.110711][T32318]  ? __lock_acquire+0x747/0x2de0
[  841.110741][T32318]  ? __pfx____sys_sendmsg+0x10/0x10
[  841.110810][T32318]  ? __fget_files+0x2a/0x420
[  841.110843][T32318]  ? __fget_files+0x3a2/0x420
[  841.110902][T32318]  __x64_sys_sendmsg+0x1b1/0x290
[  841.110940][T32318]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  841.110997][T32318]  do_syscall_64+0x166/0x520
[  841.111030][T32318]  ? trace_irq_disable+0x3b/0x140
[  841.111054][T32318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.111078][T32318]  ? clear_bhb_loop+0x70/0xc0
[  841.111107][T32318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.111130][T32318] RIP: 0033:0x7f09c6f9e199
[  841.111152][T32318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  841.111173][T32318] RSP: 002b:00007f09c7e48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  841.111198][T32318] RAX: ffffffffffffffda RBX: 00007f09c7225fa0 RCX: 00007f09c6f9e199
[  841.111216][T32318] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000003
[  841.111239][T32318] RBP: 00007f09c7e48090 R08: 0000000000000000 R09: 0000000000000000
[  841.111254][T32318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  841.111268][T32318] R13: 00007f09c7226038 R14: 00007f09c7225fa0 R15: 00007ffc3c847ef8
[  841.111305][T32318]  </TASK>
[  841.609075][T32328] __nla_validate_parse: 45 callbacks suppressed
[  841.609104][T32328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10063'.
[  842.151429][T32346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10071'.
[  842.151459][T32346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10071'.
[  842.364188][T32351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10074'.
[  842.364217][T32351] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10074'.
[  842.364806][T32351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10074'.
[  842.364826][T32351] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10074'.
[  842.483373][T32354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10076'.
[  842.526248][T32352] netlink: 'syz.0.10075': attribute type 4 has an invalid length.
[  842.880681][T32368] FAULT_INJECTION: forcing a failure.
[  842.880681][T32368] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  842.880729][T32368] CPU: 1 UID: 0 PID: 32368 Comm: syz.5.10081 Not tainted syzkaller #0 PREEMPT(full) 
[  842.880756][T32368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  842.880771][T32368] Call Trace:
[  842.880781][T32368]  <TASK>
[  842.880792][T32368]  dump_stack_lvl+0xe8/0x150
[  842.880830][T32368]  should_fail_ex+0x410/0x560
[  842.880865][T32368]  _copy_from_iter+0x1d3/0x1660
[  842.880895][T32368]  ? __alloc_skb+0x27a/0x7a0
[  842.880928][T32368]  ? __alloc_skb+0x27a/0x7a0
[  842.880959][T32368]  ? __alloc_skb+0x27a/0x7a0
[  842.880989][T32368]  ? __pfx__copy_from_iter+0x10/0x10
[  842.881015][T32368]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  842.881047][T32368]  ? __alloc_skb+0x27a/0x7a0
[  842.881078][T32368]  ? __alloc_skb+0x27a/0x7a0
[  842.881114][T32368]  ? netlink_sendmsg+0x650/0xb40
[  842.881139][T32368]  ? skb_put+0x112/0x210
[  842.881173][T32368]  netlink_sendmsg+0x6c0/0xb40
[  842.881209][T32368]  ? __pfx_netlink_sendmsg+0x10/0x10
[  842.881243][T32368]  ? apparmor_socket_sendmsg+0x98/0x360
[  842.881274][T32368]  ? __pfx_netlink_sendmsg+0x10/0x10
[  842.881298][T32368]  sock_sendmsg_nosec+0x13a/0x180
[  842.881328][T32368]  ____sys_sendmsg+0x54e/0x850
[  842.881368][T32368]  ? __pfx_____sys_sendmsg+0x10/0x10
[  842.881413][T32368]  ? import_iovec+0x73/0xa0
[  842.881449][T32368]  ___sys_sendmsg+0x2a5/0x360
[  842.881481][T32368]  ? __lock_acquire+0x747/0x2de0
[  842.881512][T32368]  ? __pfx____sys_sendmsg+0x10/0x10
[  842.881587][T32368]  ? __fget_files+0x2a/0x420
[  842.881620][T32368]  ? __fget_files+0x3a2/0x420
[  842.881664][T32368]  __x64_sys_sendmsg+0x1b1/0x290
[  842.881700][T32368]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  842.881758][T32368]  do_syscall_64+0x166/0x520
[  842.881791][T32368]  ? trace_irq_disable+0x3b/0x140
[  842.881815][T32368]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  842.881840][T32368]  ? clear_bhb_loop+0x70/0xc0
[  842.881868][T32368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  842.881891][T32368] RIP: 0033:0x7f09c6f9e199
[  842.881912][T32368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  842.881931][T32368] RSP: 002b:00007f09c7e48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  842.881956][T32368] RAX: ffffffffffffffda RBX: 00007f09c7225fa0 RCX: 00007f09c6f9e199
[  842.881973][T32368] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000003
[  842.881989][T32368] RBP: 00007f09c7e48090 R08: 0000000000000000 R09: 0000000000000000
[  842.882004][T32368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  842.882018][T32368] R13: 00007f09c7226038 R14: 00007f09c7225fa0 R15: 00007ffc3c847ef8
[  842.882064][T32368]  </TASK>
[  842.927749][T26452] net_ratelimit: 3 callbacks suppressed
[  842.927801][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.345991][T32357] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10077'.
[  843.549373][T32381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10087'.
[  843.550239][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.574799][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.713509][T32386] netlink: 'syz.5.10090': attribute type 10 has an invalid length.
[  843.713829][T32386] veth1_macvtap: left promiscuous mode
[  843.736848][T32386] veth1_macvtap: entered promiscuous mode
[  843.739492][T32386] .`: (slave macsec0): Enslaving as an active interface with an up link
[  843.952696][T32396] FAULT_INJECTION: forcing a failure.
[  843.952696][T32396] name failslab, interval 1, probability 0, space 0, times 0
[  843.952733][T32396] CPU: 1 UID: 0 PID: 32396 Comm: syz.5.10094 Not tainted syzkaller #0 PREEMPT(full) 
[  843.952760][T32396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  843.952775][T32396] Call Trace:
[  843.952785][T32396]  <TASK>
[  843.952795][T32396]  dump_stack_lvl+0xe8/0x150
[  843.952832][T32396]  should_fail_ex+0x410/0x560
[  843.952865][T32396]  ? __alloc_skb+0x1db/0x7a0
[  843.952895][T32396]  should_failslab+0xa8/0x100
[  843.952926][T32396]  ? __alloc_skb+0x1db/0x7a0
[  843.952953][T32396]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  843.952977][T32396]  ? __alloc_skb+0x18d/0x7a0
[  843.953007][T32396]  ? __alloc_skb+0x1db/0x7a0
[  843.953044][T32396]  __alloc_skb+0x1db/0x7a0
[  843.953079][T32396]  netlink_ack+0x136/0xb30
[  843.953117][T32396]  ? __pfx___up_read+0x10/0x10
[  843.953161][T32396]  rdma_nl_rcv+0x40a/0xa40
[  843.953322][T32396]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  843.953382][T32396]  ? netlink_deliver_tap+0x2e/0x1b0
[  843.953405][T32396]  ? netlink_deliver_tap+0x2e/0x1b0
[  843.953436][T32396]  netlink_unicast+0x7bd/0x940
[  843.953484][T32396]  netlink_sendmsg+0x813/0xb40
[  843.953519][T32396]  ? __pfx_netlink_sendmsg+0x10/0x10
[  843.953554][T32396]  ? apparmor_socket_sendmsg+0x98/0x360
[  843.953585][T32396]  ? __pfx_netlink_sendmsg+0x10/0x10
[  843.953609][T32396]  sock_sendmsg_nosec+0x13a/0x180
[  843.953639][T32396]  ____sys_sendmsg+0x54e/0x850
[  843.953679][T32396]  ? __pfx_____sys_sendmsg+0x10/0x10
[  843.953722][T32396]  ? import_iovec+0x73/0xa0
[  843.953758][T32396]  ___sys_sendmsg+0x2a5/0x360
[  843.953791][T32396]  ? __lock_acquire+0x747/0x2de0
[  843.953821][T32396]  ? __pfx____sys_sendmsg+0x10/0x10
[  843.953893][T32396]  ? __fget_files+0x2a/0x420
[  843.953925][T32396]  ? __fget_files+0x3a2/0x420
[  843.953970][T32396]  __x64_sys_sendmsg+0x1b1/0x290
[  843.954007][T32396]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  843.954065][T32396]  do_syscall_64+0x166/0x520
[  843.954103][T32396]  ? trace_irq_disable+0x3b/0x140
[  843.954128][T32396]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.954153][T32396]  ? clear_bhb_loop+0x70/0xc0
[  843.954181][T32396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.954204][T32396] RIP: 0033:0x7f09c6f9e199
[  843.954227][T32396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  843.954247][T32396] RSP: 002b:00007f09c7e48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  843.954272][T32396] RAX: ffffffffffffffda RBX: 00007f09c7225fa0 RCX: 00007f09c6f9e199
[  843.954289][T32396] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000003
[  843.954305][T32396] RBP: 00007f09c7e48090 R08: 0000000000000000 R09: 0000000000000000
[  843.954320][T32396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  843.954334][T32396] R13: 00007f09c7226038 R14: 00007f09c7225fa0 R15: 00007ffc3c847ef8
[  843.954371][T32396]  </TASK>
[  843.970104][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.659297][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.007191][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.757493][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.047058][T26451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.610262][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.857385][T15871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.957333][T14070] net_ratelimit: 1 callbacks suppressed
[  847.957357][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.127954][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.448339][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.077132][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.167404][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.647404][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.727227][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.729920][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  850.177060][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.208363][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.249443][T26451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.329627][T26452] net_ratelimit: 4 callbacks suppressed
[  853.329650][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.497110][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.367430][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.597220][   T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.856172][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.406885][T26451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.717206][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.447794][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.816994][   T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.488531][T26451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.528096][T26452] net_ratelimit: 3 callbacks suppressed
[  858.528127][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.016880][  T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.568040][T26451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.972616][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.116899][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.606877][T26452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.927252][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.218063][   T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.246910][   T31] INFO: task syz.1.8490:27641 blocked for more than 143 seconds.
[  861.246941][   T31]       Not tainted syzkaller #0
[  861.246954][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  861.246966][   T31] task:syz.1.8490      state:D stack:27496 pid:27641 tgid:27640 ppid:5615   task_flags:0x400140 flags:0x00080002
[  861.247038][   T31] Call Trace:
[  861.247047][   T31]  <TASK>
[  861.247063][   T31]  __schedule+0x17db/0x58f0
[  861.247132][   T31]  ? __pfx___schedule+0x10/0x10
[  861.247174][   T31]  ? schedule+0x90/0x2b0
[  861.247206][   T31]  schedule+0x164/0x2b0
[  861.247245][   T31]  schedule_preempt_disabled+0x13/0x30
[  861.247278][   T31]  __mutex_lock+0x7c1/0x1550
[  861.247316][   T31]  ? __mutex_lock+0x5d4/0x1550
[  861.247367][   T31]  ? nfsd_nl_threads_get_doit+0x1c0/0x790
[  861.247508][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  861.247548][   T31]  ? __nlmsg_put+0xef/0x1b0
[  861.247574][   T31]  ? genlmsg_put+0x137/0x2e0
[  861.247608][   T31]  nfsd_nl_threads_get_doit+0x1c0/0x790
[  861.247650][   T31]  ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10
[  861.247680][   T31]  ? __nla_parse+0x40/0x60
[  861.247718][   T31]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  861.247749][   T31]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  861.247789][   T31]  genl_family_rcv_msg_doit+0x233/0x340
[  861.247828][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  861.247872][   T31]  ? __lock_acquire+0x747/0x2de0
[  861.247909][   T31]  genl_rcv_msg+0x614/0x7a0
[  861.247948][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  861.247977][   T31]  ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10
[  861.248024][   T31]  netlink_rcv_skb+0x226/0x4a0
[  861.248050][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  861.248081][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  861.248124][   T31]  ? down_read+0x2be/0x330
[  861.248200][   T31]  genl_rcv+0x28/0x40
[  861.248228][   T31]  netlink_unicast+0x7bd/0x940
[  861.248275][   T31]  netlink_sendmsg+0x813/0xb40
[  861.248311][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  861.248345][   T31]  ? apparmor_socket_sendmsg+0x98/0x360
[  861.248382][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  861.248405][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  861.248435][   T31]  ____sys_sendmsg+0x54e/0x850
[  861.248475][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  861.248518][   T31]  ? import_iovec+0x73/0xa0
[  861.248553][   T31]  ___sys_sendmsg+0x2a5/0x360
[  861.248585][   T31]  ? __lock_acquire+0x747/0x2de0
[  861.248614][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  861.248652][   T31]  ? futex_wait+0x2a2/0x390
[  861.248709][   T31]  ? __fget_files+0x2a/0x420
[  861.248742][   T31]  ? __fget_files+0x3a2/0x420
[  861.248786][   T31]  __x64_sys_sendmsg+0x1b1/0x290
[  861.248823][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  861.248902][   T31]  do_syscall_64+0x166/0x520
[  861.248934][   T31]  ? trace_irq_disable+0x3b/0x140
[  861.248959][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  861.248984][   T31]  ? clear_bhb_loop+0x70/0xc0
[  861.249013][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  861.249037][   T31] RIP: 0033:0x7f6b23f9e199
[  861.249058][   T31] RSP: 002b:00007f6b24f03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  861.249082][   T31] RAX: ffffffffffffffda RBX: 00007f6b24225fa0 RCX: 00007f6b23f9e199
[  861.249100][   T31] RDX: 000000000000c000 RSI: 0000200000000100 RDI: 0000000000000004
[  861.249116][   T31] RBP: 00007f6b240358e0 R08: 0000000000000000 R09: 0000000000000000
[  861.249132][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  861.249146][   T31] R13: 00007f6b24226038 R14: 00007f6b24225fa0 R15: 00007ffcdfa19fc8
[  861.249185][   T31]  </TASK>
[  861.249227][   T31] 
[  861.249227][   T31] Showing all locks held in the system:
[  861.249271][   T31] locks held by khungtaskd/31: 1, last CPU#1:
[  861.249374][   T31]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  861.249531][   T31] locks held by getty/5375: 2, on CPU#1:
[  861.249571][   T31]  #0: ffff8880329650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  861.249678][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  861.249779][   T31] locks held by syz.3.7678/25146: 2, on CPU#1:
[  861.249796][   T31]  #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  861.249854][   T31]  #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0
[  861.250010][   T31] locks held by syz.1.8490/27641: 2, on CPU#1:
[  861.250029][   T31]  #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  861.250088][   T31]  #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790
[  861.250150][   T31] locks held by syz.2.8863/28879: 2, on CPU#0:
[  861.250167][   T31]  #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  861.250225][   T31]  #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480
[  861.250344][   T31] 
[  861.250352][   T31] =============================================
[  861.250352][   T31] 
[  861.250369][   T31] NMI backtrace for cpu 1
[  861.250385][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  861.250409][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  861.250423][   T31] Call Trace:
[  861.250432][   T31]  <TASK>
[  861.250443][   T31]  dump_stack_lvl+0xe8/0x150
[  861.250478][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  861.250505][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  861.250545][   T31]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  861.250575][   T31]  sys_info+0x135/0x170
[  861.250598][   T31]  watchdog+0xfd7/0x1030
[  861.250632][   T31]  ? watchdog+0x1c7/0x1030
[  861.250663][   T31]  kthread+0x38b/0x480
[  861.250693][   T31]  ? __pfx_watchdog+0x10/0x10
[  861.250715][   T31]  ? __pfx_kthread+0x10/0x10
[  861.250740][   T31]  ret_from_fork+0x514/0xb70
[  861.250766][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  861.250789][   T31]  ? __switch_to+0xc89/0x1420
[  861.250824][   T31]  ? __pfx_kthread+0x10/0x10
[  861.250848][   T31]  ret_from_fork_asm+0x1a/0x30
[  861.250936][   T31]  </TASK>
[  861.250947][   T31] Sending NMI from CPU 1 to CPUs 0:
[  861.250985][    C0] NMI backtrace for cpu 0
[  861.251001][    C0] CPU: 0 UID: 0 PID: 5623 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  861.251024][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  861.251037][    C0] Workqueue:  0x0 (krxrpcd)
[  861.251063][    C0] RIP: 0010:kthread_data+0x7f/0xc0
[  861.251092][    C0] Code: 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 44 bc a6 00 48 8b 1b 48 83 c3 20 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 27 bc a6 00 48 8b 03 5b 41 5e 41 5f 5d c3 cc cc
[  861.251110][    C0] RSP: 0018:ffffc9000442fc98 EFLAGS: 00000246
[  861.251127][    C0] RAX: 1ffff11006b00984 RBX: ffff888035804c20 RCX: ffff88807e3cddc0
[  861.251144][    C0] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
[  861.251156][    C0] RBP: 0000000000200000 R08: ffffffff907a647f R09: 1ffffffff20f4c8f
[  861.251171][    C0] R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: dffffc0000000000
[  861.251187][    C0] R13: ffff88801c707060 R14: ffff88807e3cddec R15: dffffc0000000000
[  861.251202][    C0] FS:  0000000000000000(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000
[  861.251218][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  861.251237][    C0] CR2: 0000563d810b1660 CR3: 000000007fee2000 CR4: 00000000003526f0
[  861.251256][    C0] Call Trace:
[  861.251264][    C0]  <TASK>
[  861.251273][    C0]  wq_worker_running+0x28/0x210
[  861.251304][    C0]  worker_thread+0xc12/0xfb0
[  861.251348][    C0]  kthread+0x38b/0x480
[  861.251377][    C0]  ? __pfx_worker_thread+0x10/0x10
[  861.251403][    C0]  ? __pfx_kthread+0x10/0x10
[  861.251423][    C0]  ret_from_fork+0x514/0xb70
[  861.251444][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  861.251462][    C0]  ? __switch_to+0xc89/0x1420
[  861.251490][    C0]  ? __pfx_kthread+0x10/0x10
[  861.251510][    C0]  ret_from_fork_asm+0x1a/0x30
[  861.251549][    C0]  </TASK>
[  861.251997][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  862.025016][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  862.034153][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  862.044252][   T31] Call Trace:
[  862.047565][   T31]  <TASK>
[  862.050517][   T31]  vpanic+0x56d/0xa60
[  862.054534][   T31]  ? __pfx___schedule+0x10/0x10
[  862.059421][   T31]  ? __pfx_vpanic+0x10/0x10
[  862.063976][   T31]  panic+0xc5/0xd0
[  862.067740][   T31]  ? __pfx_panic+0x10/0x10
[  862.072191][   T31]  ? preempt_schedule_common+0x7f/0xd0
[  862.077676][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  862.083071][   T31]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  862.089256][   T31]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  862.095448][   T31]  watchdog+0x1030/0x1030
[  862.099816][   T31]  ? watchdog+0x1c7/0x1030
[  862.104354][   T31]  kthread+0x38b/0x480
[  862.108450][   T31]  ? __pfx_watchdog+0x10/0x10
[  862.113146][   T31]  ? __pfx_kthread+0x10/0x10
[  862.117779][   T31]  ret_from_fork+0x514/0xb70
[  862.122495][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  862.127632][   T31]  ? __switch_to+0xc89/0x1420
[  862.132351][   T31]  ? __pfx_kthread+0x10/0x10
[  862.136964][   T31]  ret_from_fork_asm+0x1a/0x30
[  862.141775][   T31]  </TASK>
[  862.144992][   T31] Kernel Offset: disabled
[  862.149439][   T31] Rebooting in 86400 seconds..