last executing test programs:

10m32.358733956s ago: executing program 1 (id=4987):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300021000000000000000040000000200080008000000540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000ff8020000200010000000000000005fd80ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x0)

10m32.19552416s ago: executing program 1 (id=4991):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="04080000", @ANYRES16=r1, @ANYBLOB="020027bd7000fbdbdf258900000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x804}, 0x1, 0x0, 0x0, 0x4000800}, 0x48015)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040)
recvmmsg$unix(r6, &(0x7f0000002b40)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000340)=""/86, 0x56}], 0x1, &(0x7f00000002c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/183, 0xb7}, {&(0x7f0000000580)=""/196, 0xc4}, {&(0x7f0000000f40)=""/242, 0xf2}], 0x3, &(0x7f0000001040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001140)=""/98, 0x62}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/207, 0xcf}, {&(0x7f0000000680)=""/27, 0x1b}], 0x4, &(0x7f0000002300)}}, {{&(0x7f0000002340)=@abs, 0x6e, &(0x7f00000024c0)=[{&(0x7f00000023c0)=""/77, 0x4d}, {&(0x7f0000002440)=""/124, 0x7c}], 0x2, &(0x7f0000002500)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f00000025c0), 0x6e, &(0x7f0000002740)=[{&(0x7f0000002640)=""/217, 0xd9}], 0x1, &(0x7f0000002780)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002840)=""/15, 0xf}, {&(0x7f0000002880)=""/248, 0xf8}], 0x2, &(0x7f00000029c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}], 0x6, 0x40, &(0x7f0000002cc0)={0x77359400})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a80)={0x84, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
recvmsg$can_raw(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000180)=""/27, 0x1b}], 0x2}, 0x20)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4c880}, 0x4008000)

10m32.179661432s ago: executing program 1 (id=4992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000"], 0x64}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0)

10m32.053262554s ago: executing program 1 (id=4995):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x4, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb82}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r1, &(0x7f00000052c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_dest={0x10, 0x114, 0xc}], 0x18}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6e}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth0_virt_wifi\x00', <r6=>0x0})
sendto$packet(r4, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f0000000480)={0x11, 0x0, r6, 0x1, 0x62, 0x6, @broadcast}, 0x14)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x9, &(0x7f00000003c0)=0x245, 0x4)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010400000000f6dbdf2400000000cdaba113d7ec12f6aa78e5a4ee07427d944fb8c83b21b7d04b6018462729a513ca6cfd58d4c296d7c2da1adfe440f566a162036c6846be4dcdb76f594595754219dee2c8c992d71f9d28213e450b7010f055dbd43319c1ceda94ae03248d0c0e676f26c2f5a3f302031dbf83091e05f5f8d8c2dbafb29ebad01d8d2367051064560a01c10ec8b8004bd8a36645fde82934d66b5b6013ac4ebb661eeda8628599946b803315cfbd7aeda36cdba91b1e198a53b818d7", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB], 0x40}}, 0x20000000)

10m31.582631104s ago: executing program 1 (id=4996):
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x0, 0x80000000, 0x1, 0x2, 0xabc, 0x3ff, 0x3, 0x1, 0x1, 0x1, 0x0, 0xfffffff9, 0x80000001, 0x8, 0x56, 0xa9, 0x6, 0x1, 0x3, 0x6, 0x5, 0x800}})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRES64=r0, @ANYRES8=r0, @ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c052)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x100, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @local, 0xb}, 0x1c)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xe07d53f5402ddee7}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x24}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x40094)
listen(r3, 0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r5, 0x8b2c, &(0x7f0000000040))
r6 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

10m31.41763745s ago: executing program 1 (id=5000):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={<r3=>0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x83, &(0x7f0000000000)={r3, 0x6}, 0x8)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000300)={{0x5c, @local, 0x4e21, 0x0, 'sh\x00', 0x0, 0x5, 0x7e}, {@multicast2, 0x4e23, 0x10000, 0xf, 0xfffffff7, 0x6}}, 0x44)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r7=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000000c0), 0x12)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0)
r11 = openat$cgroup_procs(r10, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=<r12=>0x0)
write$cgroup_pid(r11, &(0x7f0000000080)=r12, 0x12)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0)
r13 = openat$cgroup_procs(r10, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
pread64(r13, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x3, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641", 0x3}], 0x1}, 0x4048081)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_generic(r14, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r9], 0x24}}, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x18, 0x1, 0x4f, 0x3}}], 0x18}, 0x0)

10m16.297906853s ago: executing program 32 (id=5000):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={<r3=>0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x83, &(0x7f0000000000)={r3, 0x6}, 0x8)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000300)={{0x5c, @local, 0x4e21, 0x0, 'sh\x00', 0x0, 0x5, 0x7e}, {@multicast2, 0x4e23, 0x10000, 0xf, 0xfffffff7, 0x6}}, 0x44)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r7=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000000c0), 0x12)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0)
r11 = openat$cgroup_procs(r10, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=<r12=>0x0)
write$cgroup_pid(r11, &(0x7f0000000080)=r12, 0x12)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0)
r13 = openat$cgroup_procs(r10, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
pread64(r13, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x3, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641", 0x3}], 0x1}, 0x4048081)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000061100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a5cfe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e4b2b9275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf138f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87acbeb48949b63b045313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65039cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_generic(r14, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r9], 0x24}}, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x18, 0x1, 0x4f, 0x3}}], 0x18}, 0x0)

1.945984188s ago: executing program 3 (id=10987):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0xf, 0x6}, {0x9, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async)
syz_init_net_socket$x25(0xb, 0x5, 0x27)

1.943778703s ago: executing program 3 (id=10990):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1d2ec76d6e29fb9839270beaa600118b79fd57697b3601000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x20000400)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
r5 = accept$packet(r4, 0x0, &(0x7f0000000180))
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r10, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)={0x16c, r10, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x765661b3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b01}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc1b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd872}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4004004}, 0x24000000)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x9, 0x3a, 0x1000, 0x70, 0x9, 0xc3, 0x2}, 0x1c)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000040605446de33f80b87b5b950553e4000700000a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

1.928090454s ago: executing program 2 (id=10995):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r1, 0x1, 0xfffffffd, 0x25dfdbfc, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0)

1.880625899s ago: executing program 3 (id=10997):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="288a0efd6dc4f915260f30", 0xb) (async)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5bdbd57a0e656889", 0x8}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x485c) (async)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000001940)={0x1010, 0x3ed, 0x100, 0x70bd2a, 0x25dfdbfe, "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", ["", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x240088c5}, 0x11) (async)
recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000540)=""/100, 0x64}], 0x1}, 0x400}], 0x1, 0x2103, 0x0)

1.78200026s ago: executing program 2 (id=11000):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r4=>0x0, 0x7, 0x8000, 0x7ff, 0x200, {{0x6, 0x4, 0x2, 0x38, 0x18, 0x64, 0x0, 0xf, 0x2f, 0x0, @private=0xa010102, @remote, {[@noop]}}}}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
sendfile(r6, r7, 0x0, 0xffffffff000)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff}, [@map_val={0x18, 0x8, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x4f, &(0x7f0000000300)=""/79, 0x40f00, 0x20, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x9, 0x3ff, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r7, 0x1, r8]}, 0x94)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x840)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x9f4}, 0x1, 0x0, 0x0, 0x44000}, 0x40)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0)

1.576429413s ago: executing program 0 (id=11003):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000040), 0x2, 0x0)
openat$cgroup_freezer_state(r1, &(0x7f0000000280), 0x2, 0x0)
close(r2)
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)
ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f00000001c0))
sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="c628098027a0651a4f4ea30a2b9df1f5115d8904cb6fa4a6c094", @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc001)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.206765869s ago: executing program 5 (id=11009):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000b00)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "2c33df", 0x0, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, {[@routing={0x2f, 0x0, 0x0, 0x4, 0x0, [@local, @empty, @rand_addr=' \x01\x00', @private2]}, @fragment={0x2f, 0x0, 0xc, 0x0, 0x0, 0x5, 0x65}, @hopopts={0x5c, 0x0, '\x00', [@hao={0xc9, 0x0, @mcast1}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x8, 0x5], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "4ecb89004caadeb1d60336ba6ec7c467419696e9f86dc53989b5d359357431c88a97020b589caddfc65dfe03b21fcdce40bb9cdc6f"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xfffc, 0x1], "00e4c5da2d6cc3f5e341e04c775ddf928dcc64a917db1de7fab325"}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x8, 0x3, 0x0, 0x2, 0x7, 0x4}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0x3, 0x2, 0xc8, 0x2, 0x0, 0x2, 0x5, 0x5}, 0x2, {0xaa0, 0xd36, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "70926a4ea437ce285e1267355d2eb4581014807f19168f6e35cbb2e0e74aeb1802443095c4bea22806c0942163903e969d00408775ea983647514ed74a127e6bd0461e07af06ec330b589a3efbf40958e67ac2b025"}}}}}}}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = socket(0x2, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r4, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r3}, 0x20)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000500)=ANY=[@ANYRES32=r5])
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r4, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r3}, 0x20)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e)
openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/151, 0x97, 0x1, &(0x7f00000004c0)=""/153, 0x99}, &(0x7f00000003c0)=0x40)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000d00)="27050200590214000602402fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f67ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b10c2897204a66afab94dd8de001923467692f8765380ffdac2ecd596160bec5c8869a08ecc5bf1561bb7ebf3468a2a212c7107d3c0c5bb30f50f7964b53418321ff77586b723dbfb3f03212aaf9150914bb989ef324957cea1707943a287afd6aa759a30e50f215292e54ebadd88ee", 0xbf}, {&(0x7f0000001240)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79", 0x168}], 0x2}, 0x9cdc2384056b48b8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x2})
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28)

1.155107404s ago: executing program 0 (id=11010):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000b0000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000100)=@l2={0x1f, 0xf29c, @any, 0x4, 0x2}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="307b5aa0c61083480f22b85c9d9b9ccc57ccd4f868881c576bd5167bc2690c5c2176cde2c6b60c5f5274f0bf924d45fd99325f990fe370d9d7d8cd82522f134df1c274cd5bfee379b64a808fce3cbeb98ec21d0c67fe5b1d859e15d0ba55f0d3", 0x60}], 0x1, &(0x7f0000000280)=[{0xc8, 0x10f, 0x9, "3a8d16a26e44d46ec60306a9bd32e685487a743259f2889169a4e40a87db553c020811fe516c199a622962779060f2a7fe688160011bd055df6dfb0f76613908adf6907184ecbd2691afe8630c1885188d9eb87a2460590abde47852bd13501c95247e9f497ba7d2d6d00489561e6df5e6905c4a9c2c5840d31a29c0609fc9f01351a3c28ce1a6ad56c4ee59fc69012b725555365a4740bd8f9a4c9387cfad3bed9b00da28eaac6dd56984be12a712ce6a6dbf06132bd7"}, {0xa8, 0x88, 0x3095, "e033dbdf8c49ff95250645563407eaa758d49c6e7a748677cab21e8b0625ccdfb8088dcc25cea834341b5b9d6696f75fdd09772bb8264a91219e6bbf4f75f92a416730f14e6252d774ca9e04b063bcb68c001301d0c00eae6952f886f2c4dfe380e773af9685959ceea7bb41ad8f9a96170fa8f39837c25a4b5e085fdca524aa3094229f8ebb6bc2c89ca0089efd394ac027eec29c"}, {0x90, 0x0, 0x5, "6bd98bda071f14283dbfe022cc80adf2c8ec055a517f7e0a94a26dd86d8b6ec770aa5ce4a940b23d554bf2344de6cc00145f362987fc4d3f69be689c674a24ec411d81f32809a1cfbad65c4001a835229b97e7a60a2c1b350564515c96b7ae30faeef2762047ece030271991634de8662c0d72399ff7f76c20c254"}, {0xe8, 0x115, 0x8, "045134f072a1766fec36a127807f19111535f06191d2b6f86abd63cb584591938223fb600de308771c70ecc60c081d3d50a0d643970718e3024a951c509be384daa899db30bc810bd3e48753b0dbe656294dcf162bbce379fa3c52b8a27e0d03111ed6d82a06b4f932e07cbf3b2b2065841074cae980d72d1e416b7e1e2eedf2c945b80806886ed4d91d106ef46bf57eec299b0493fbe22bde7efe5fe1876884b4f70f6b874a6c41eeeb6fe340003b51a54f299e8e539f2bde5850edd286c8d96f605a57efd6f53b20c5484d9a283ed7a15c5fe30af3f264"}, {0xc8, 0x119, 0x9, "7253735a37edf2024b5c532fc6914a074c80fa172de2060f7448d3bbc9fd8d50f4d621eec67012aef33465ec85052597d9039dad8f126fc75e8bd3ee548395d3479873603d24b770d18fa3fd8ef09924d8c2eb879b318dfa05cdf9e8e7aa865036fc49dd5d4debecf2edf0ed0a5df8611f638d4f4887319fc43f5b3ea80b24d1820432875a4a10f29b2fc119a9c62a5bb0f77795c5036f2b0abd276b1c6fc7d6e8e99587848890dbf8f87f322fbeb2d7f3225afe0e61"}], 0x3b0}, 0x400c090)

1.009073366s ago: executing program 4 (id=11011):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="40002100e418a29e371499722f7960d1fbf4c4e7b6e455810c251600246a315868e540c40fa051f43ecd71d5eba311e68819d6b62b5e07274f080d61d666cd08d82ff4e5fa59d490902a695b523091ae9964502882ab853155faf98fa6004938654213a7ec335a92e97427850e52e902", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20)
r1 = socket$netlink(0x10, 0x3, 0x15)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000096040a000280aaaaaaaaaa0c00000600050000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c)
getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r6)
sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r7, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0xdfd)

1.005658066s ago: executing program 5 (id=11012):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0xec}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r4=>0x0, @remote, @loopback}, &(0x7f0000000080)=0xc)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x42, 0x0, 0x40, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x5}, @restrict={0x7, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x0, 0x61, 0x5f, 0x41, 0x0, 0x2e]}}, &(0x7f0000000140)=""/56, 0x49, 0x38, 0x1, 0xf399, 0x6f8d71214fd2b72d}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', r4, r5, 0x1, 0x0, 0x4}, 0x50)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000001c0))

924.384861ms ago: executing program 0 (id=11013):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000001c0), 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000001c0), 0x4) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) (async)

923.591945ms ago: executing program 3 (id=11014):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', <r3=>0x0})
r4 = gettid()
r5 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x1d, r8}, 0x10, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="03000000000100003bb30000010000004dab88216d6bf49674c5d50da25084abd40d6ac91c592dd600ce0e1ad158f77b6af27d61b5b027", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="03000080010000000300006000010000d8c881b2cab5a7c8"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
read(r0, &(0x7f0000000200)=""/7, 0x7)

871.97484ms ago: executing program 5 (id=11015):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00')
r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xfffffffffffffead, 0x1402, 0x800, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x0, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x800002}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc031}, 0x8000)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
splice(r4, 0x0, r2, 0x0, 0x7ffff040, 0x1200000000000000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f0000000140)}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in=@rand_addr=0x64010100, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket(0x2b, 0x80801, 0x1)
shutdown(r6, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r8, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20)

816.087273ms ago: executing program 2 (id=11016):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r1=>0x0, @private, @broadcast}, &(0x7f00000000c0)=0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002800800074000000000050002000000000008000340000000000800064000000001"], 0x9c}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000150001000000000000000000ac14141b00000000000000e0ea0cb600ac1414aa00"/64, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="ba6b6e000200000008001f0002000000"], 0x58}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0xbb8, 0x0, 0x5, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{0x1}, 0x8, 0x8a, 0x1, 0x2, 0x17, 'syz1\x00', "6bbffcb53f7b4febe5592b787aba4dd3fc2f69f08273dbef9fda26df641b8c3c", "117550568414d84f4c4568635a64337071aed0164197d631dc6e266ad85d1818", [{0x401, 0x81, {0x2, 0x101}}, {0x4, 0xce, {0x1, 0x8}}, {0xbaad, 0x3ff, {0x3, 0xffffffff}}, {0x7, 0xee, {0x1, 0x2}}, {0x7ff, 0x7, {0x3, 0x42}}, {0x80, 0x36, {0x1, 0x47e}}, {0x3, 0xab3, {0x0, 0x8}}, {0xf35, 0xafc1, {0x0, 0x470c}}, {0x400, 0x6, {0x2, 0x1}}, {0x5, 0x8, {0x1}}, {0x7, 0x4}, {0x5, 0x4, {0x1, 0x1bd9}}, {0xc4, 0x2, {0x2}}, {0x3, 0xb830, {0x2, 0x68}}, {0x4, 0xfff8, {0x1, 0x1}}, {0x3, 0xd0, {0x0, 0xf}}, {0xfffd, 0x9, {0x1, 0x872}}, {0x4, 0x7, {0x3, 0x2}}, {0x3ff, 0x7fff, {0x1, 0x8000}}, {0x5, 0x8, {0x2, 0x6}}, {0x8, 0x8, {0x2, 0xb}}, {0x80, 0x3, {0x1, 0xd}}, {0x800, 0x8, {0x0, 0x1}}, {0x4, 0x2, {0x2, 0x5a0}}, {0x8, 0xec, {0x0, 0x23}}, {0xfff9, 0x2, {0x0, 0x74}}, {0x29d, 0x0, {0x6d35939503dbd7b3, 0x3}}, {0x9, 0x5, {0x0, 0xd}}, {0xa, 0x7, {0x0, 0xffffffc0}}, {0xff23, 0x410, {0x2, 0x7fffffff}}, {0x1bea, 0x9, {0x1, 0xe}}, {0x5bdd, 0x7, {0x1, 0x5}}, {0x7, 0x8c2f, {0x3, 0x4}}, {0x7, 0x9, {0x2, 0x4}}, {0x0, 0x2, {0x1, 0x4}}, {0x9, 0x1722, {0x2, 0x93}}, {0x7, 0xa48, {0x3, 0x1c000000}}, {0x3, 0x8, {0x3, 0xf51}}, {0x2, 0x4, {0x1, 0x7}}, {0x2, 0x6, {0x2, 0xe20}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x3, 0x10, 0x1, 0xf458, 0x1a, 'syz1\x00', "b4ee8ae55921755ae942e1981c7bb49c341721442d55a4bb032a4d10e467436b", "388fad2a3cfc8344337479c901a43aa8e35d77a3e9788e2f4b6d89ce81e09546", [{0x1, 0xffff, {0x3, 0xfffffff7}}, {0xac, 0x5d, {0x0, 0x5}}, {0x200, 0x2, {0x0, 0x80}}, {0x1, 0x81, {0x0, 0xf}}, {0x1, 0xfff8, {0x1, 0x5}}, {0x5, 0x4, {0x3, 0xfffffffa}}, {0x8, 0x7, {0x3, 0x2}}, {0xff8e, 0x3, {0x3, 0x2}}, {0x7, 0xbd, {0x1, 0x7}}, {0xb6, 0x10, {0x3, 0x9}}, {0x8, 0x5, {0x3, 0xfb}}, {0x7f, 0x5ef6, {0x3, 0x3}}, {0x9, 0x7, {0x3, 0x718}}, {0x1, 0x9, {0x0, 0x2}}, {0x1, 0x2, {0x3, 0x8}}, {0x0, 0x1, {0x0, 0x4}}, {0x4, 0x1, {0x0, 0x5}}, {0x1, 0x7, {0x0, 0x7}}, {0x6, 0x19, {0x2, 0x8}}, {0x400, 0x2, {0x3}}, {0x0, 0x2, {0x8ed1b3a5e15a3d47, 0x7fffffff}}, {0x10, 0x8, {0x0, 0xff}}, {0x2, 0x9, {0x3, 0x4}}, {0x800, 0xb, {0x2, 0x10}}, {0x7, 0x2, {0x0, 0x3ff}}, {0x2, 0x4, {0x2, 0x9}}, {0x1, 0xc5, {0x1, 0x2}}, {0x98, 0xffff, {0x1, 0x7}}, {0x7, 0xf, {0x0, 0x9}}, {0x101, 0x0, {0x2, 0x40}}, {0x9fda, 0x58, {0x3, 0x80000000}}, {0x7, 0x6, {0x3, 0x401}}, {0x7f, 0x7, {0x0, 0x1}}, {0xb5f, 0x40, {0x1, 0x9}}, {0xfffd, 0x400, {0x2, 0x80000000}}, {0x2, 0x2, {0x3, 0x5}}, {0x5, 0x401, {0x0, 0x81}}, {0xfffc, 0x81, {0x3, 0x4}}, {0x9, 0x7ff, {0xa324fb445aeb8b4d, 0x6}}, {0x81, 0x8, {0x3, 0x10}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x9, 0x7, 0x80, 0x8, 0x0, 'syz0\x00', "baff03b7edca45fa175420e29f01f4f7e2063d12801d6299263a00c84c5e4af4", "c86efe1cff1fd9422bcd937be3a61fe5be2fc134ef098b461bdf4bd24f86b397", [{0x7ff, 0x5, {0x2, 0x10001}}, {0xd36e, 0x6, {0x2}}, {0xffe5, 0x9, {0x0, 0x8}}, {0xffff, 0x0, {0x2, 0xfffffffc}}, {0x2, 0x80, {0x3, 0x3}}, {0x4, 0x11b, {0x2, 0x3}}, {0x5, 0x1, {0x2, 0x5}}, {0x8, 0x7315, {0x3, 0x5}}, {0xb, 0x0, {0x3, 0x5}}, {0x7, 0x8, {0x3}}, {0x8, 0x10, {0x1, 0x1}}, {0xfb89, 0xd1e7, {0x1, 0xa}}, {0x3, 0x7, {0x1, 0x5}}, {0x3, 0x6, {0x0, 0x9}}, {0x1, 0x1, {0x3, 0x40}}, {0x3, 0x7, {0x0, 0x1}}, {0x9, 0x1, {0x2, 0x7}}, {0x9, 0x4, {0x2, 0xaa}}, {0x5, 0x6, {0x3, 0x4}}, {0x9, 0x3, {0x0, 0x7}}, {0x9, 0x8364, {0x2, 0xded}}, {0x3, 0x2, {0x0, 0xc}}, {0xa8df, 0xffdf, {0x2}}, {0x1, 0xd8f, {0x3, 0x12}}, {0x4, 0x7, {0x2, 0x3}}, {0x4, 0x7, {0x0, 0xc}}, {0x2, 0x2, {0x3, 0x2}}, {0x2f27, 0x135, {0x3, 0x6}}, {0x7, 0x8, {0x3, 0x4}}, {0x7fff, 0x81, {0x1, 0xa4}}, {0x5, 0x5, {0x3}}, {0x7ff, 0x9, {0x3, 0x14a}}, {0x6, 0x6, {0x1, 0x1}}, {0x6, 0x400, {0x1, 0x1}}, {0xf, 0x4, {0x3, 0x3}}, {0x9, 0xf, {0x1, 0x3}}, {0x2, 0xfff6, {0x3, 0x3}}, {0x0, 0x100, {0x3, 0xffffffff}}, {0x6d, 0x3, {0x1, 0x746}}, {0x40e, 0x6, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0xd3, 0xd, 0x0, 0x8, 0x22, 'syz1\x00', "23399daa1587ff3e02929f7672fc57b560f4133d6edf1c4b39da4a9169b4cdb8", "1404225fa32cb1d80ee0fec98c241451b00f29ca68e9c436095e25bc10baf6e4", [{0x3, 0xc, {0x0, 0x6521}}, {0x7fff, 0x5, {0x3, 0x3}}, {0x10, 0x9, {0x1, 0xf6f8}}, {0x9c, 0x4ede, {0x0, 0xd75}}, {0xbd0, 0x80, {0x3, 0x3}}, {0x6, 0x3119, {0x3, 0x81}}, {0x8000, 0x1, {0x0, 0x2}}, {0x3, 0x3ff, {0x1, 0x80000001}}, {0x4, 0x1, {0x1, 0x10001}}, {0x6, 0x8, {0x0, 0x9}}, {0xcd, 0xff, {0x0, 0x31}}, {0x2, 0x7, {0x1, 0x800}}, {0x0, 0x8c65}, {0x1, 0x37f, {0x2, 0xcf}}, {0x4, 0x6, {0x2, 0x4}}, {0x2, 0x3, {0x1, 0x1000}}, {0x100, 0x81, {0x0, 0x8}}, {0x7479, 0x3ff, {0x2}}, {0xfbff, 0x9, {0x3}}, {0x40, 0x8, {0x3, 0x1}}, {0x6, 0xd43, {0x1, 0x9}}, {0x4, 0x7736, {0x3, 0xcb4}}, {0xff, 0x66, {0x2, 0xdc8}}, {0x2, 0xffff, {0x1, 0x6}}, {0x5, 0x1, {0x1, 0x2}}, {0x28, 0xcf0, {0x0, 0x4}}, {0xe, 0x80, {0x1, 0x5}}, {0x2, 0x8000, {0x2, 0x7}}, {0x1ff, 0x7, {0x3, 0xff}}, {0x2, 0x8001, {0x3, 0x7fff}}, {0x2, 0x8, {0x0, 0x40}}, {0x2, 0x62, {0x3, 0x401}}, {0x200, 0xfff9, {0x0, 0xa5d6cf4}}, {0x5, 0x8b0, {0x0, 0x7ff}}, {0x9, 0xf53e, {0x2, 0x2}}, {0x1, 0x6, {0x1}}, {0x8, 0x9, {0x1, 0x4}}, {0x7, 0xe, {0x0, 0x9}}, {0xc6, 0xf, {0x3, 0x2}}, {0x9a, 0x9, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0xe, 0xb3, 0x7d2, 0x8, 0x13, 'syz0\x00', "3b0e90c66913dbc1dca536297036e51b69e4c856fc1911d61c78930ac210cb9e", "1c89f30b00d7e9434c8c27ebecd13414ef0299def69534fd737278059acf0783", [{0x9, 0x8, {0x0, 0x5c7}}, {0x10, 0x4, {0x0, 0x7}}, {0x7c, 0x1, {0x0, 0x2}}, {0x1, 0x100, {0x3, 0x9c2f}}, {0x8, 0x7, {0x3, 0xfff}}, {0x4, 0x7256, {0x0, 0xc}}, {0x6, 0x40, {0x0, 0x80}}, {0x2, 0xf, {0x0, 0x100}}, {0x7, 0x0, {0x2, 0x38df}}, {0x101, 0x2b21, {0x0, 0x80}}, {0x0, 0x7, {0x0, 0x2}}, {0x5, 0x7, {0x6122003673fc36c1, 0x7}}, {0x8c4, 0xfff8, {0x3, 0xff}}, {0x1, 0x4, {0x2, 0x80c8}}, {0x100, 0xcf, {0x1, 0x5dd}}, {0xfffa, 0x1, {0x1, 0x3}}, {0x6, 0x2, {0x1, 0x6}}, {0xffff, 0xb, {0x2, 0x80}}, {0x39, 0x4, {0x0, 0x5}}, {0x6, 0x6, {0x2, 0x7ff}}, {0x1, 0x4, {0x0, 0x8}}, {0x503, 0xfffa, {0x1, 0x9}}, {0x8, 0x8, {0x0, 0x3}}, {0x7198, 0xe02, {0x1, 0x9}}, {0x6, 0xe, {0x0, 0xad}}, {0x9, 0x1, {0x1, 0x3}}, {0x8, 0x9, {0x0, 0x1}}, {0x5, 0x2, {0x3, 0x200}}, {0x1, 0xfff, {0x1, 0x3}}, {0xfd2f, 0x4, {0x0, 0xff}}, {0x81, 0x53, {0x2, 0xac}}, {0x80, 0x1, {0x0, 0x48}}, {0x6, 0x400, {0x1, 0x5}}, {0x9000, 0x2, {0x3, 0x6}}, {0x1ff, 0x5, {0x3, 0x800000}}, {0x8, 0x5, {0x2}}, {0xffff, 0x3}, {0x4, 0x6, {0x3, 0x5}}, {0xf, 0x5, {0x2, 0x2}}, {0x5, 0x39a4, {0x3, 0x5}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x81)

757.435791ms ago: executing program 4 (id=11017):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000500000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d6574610000000014000280080001400000001008000240000000051400"], 0xf8}}, 0x0)

686.380017ms ago: executing program 4 (id=11018):
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000007900)={0x0, 0x0, 0x0}, 0x24008044)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000104000004000300000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000212002001c00128009000100626f6e64000000000c00028008000700000004"], 0x50}, 0x1, 0x0, 0xf3ffffffffffffff, 0x24048800}, 0x0)

683.329154ms ago: executing program 0 (id=11019):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) (async)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x10002, 0x4)
r2 = epoll_create1(0x0)
r3 = accept(r1, &(0x7f0000000080)=@can={0x1d, <r4=>0x0}, &(0x7f0000000100)=0x80)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000340)=@deltclass={0x4a8, 0x29, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xe, 0x8}, {0xa, 0xffff}, {0x8, 0xfff3}}, [@tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x9, 0x8000, 0x5a, 0xa, 0x53, 0x6, 0x163e, 0x9e3, 0xffff, 0xe, 0x3, 0x6, 0x5, 0x8, 0x7, 0x3, 0x200000, 0x6, 0x2, 0x4, 0xa2, 0x0, 0x4, 0xffffffff, 0x6, 0xd79b, 0x8, 0x4, 0xec85, 0x6, 0x4, 0x9, 0x0, 0x9e1, 0x8, 0x7, 0x30, 0x3ff, 0x2, 0x9, 0x3, 0x9, 0x9, 0xb, 0x6, 0x80000001, 0xdc7, 0x3000, 0x7ff, 0x0, 0x80000000, 0x3ff, 0x6a5b0ecb, 0x6, 0x0, 0x4, 0x7, 0xe7, 0x4, 0x3, 0xb, 0x7, 0x4, 0x6, 0x25, 0x2, 0x0, 0x5, 0x6, 0x5, 0xfff, 0x2, 0xfffffffa, 0x9, 0x5, 0xfffffffe, 0xc36, 0x3, 0x3711, 0x1, 0x0, 0x8, 0xfffffff7, 0xf502, 0x6, 0xa5b, 0x2, 0x6, 0xfffffff7, 0x8, 0x7, 0x100, 0x6, 0x0, 0x10, 0x5, 0x4, 0xfffffc00, 0xf3, 0x0, 0x2, 0x4, 0x1, 0x3e, 0xafe7, 0x2, 0x3, 0x4, 0x2, 0x9, 0x8, 0x2, 0x3ff, 0x8, 0x8a, 0xd, 0x1, 0x7ff, 0x9, 0xfffffffd, 0xb, 0x2, 0x6, 0x10000, 0xf540, 0xffff0000, 0x8, 0x200, 0x10, 0x7, 0x31, 0x4df, 0x9, 0x829d, 0x6138, 0x2, 0xffffffff, 0x2a, 0x5, 0x2, 0x7, 0x800, 0x8, 0x0, 0x80, 0x9, 0x0, 0xfffffffb, 0x4, 0x10000, 0x5aaa, 0x2800000, 0x6, 0x3, 0x80000001, 0x1ff, 0xe21, 0x7, 0x3, 0xd586, 0x5, 0xffff, 0x8e, 0x2, 0x7, 0x0, 0x0, 0x1, 0x6, 0xffffffff, 0x10000, 0x5, 0x10, 0x200, 0xfffffffe, 0x6, 0x7fff, 0x4, 0x2, 0x0, 0x1, 0x7, 0x9, 0x8000, 0x7, 0x200, 0x8001, 0x10, 0x5, 0x40, 0x3, 0x3, 0x0, 0xb, 0x100, 0x8, 0x6, 0xb, 0x4, 0x6, 0xa, 0x9, 0xd39b, 0x48, 0x6, 0x7fff, 0x7, 0x3, 0x9, 0x82, 0x5, 0xd7, 0x6, 0x5, 0x7f, 0x8d, 0xfffffbff, 0xb84, 0x7, 0x3, 0x2, 0x1, 0x10000, 0x7fff, 0x9, 0xbaca, 0xffffff81, 0x3, 0x8, 0x0, 0x0, 0x0, 0x6, 0x6, 0xa, 0x3, 0x7, 0xf4, 0xe69, 0xc2b8, 0x180000, 0x6, 0x0, 0x60aa, 0xc6b, 0x9, 0x3ff, 0x0, 0x3, 0x1, 0x5, 0x9, 0x8, 0x80000001, 0x8, 0x4]}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x54, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xc5}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xffff0}, @TCA_QFQ_LMAX={0x8, 0x2, 0x600}, @TCA_QFQ_LMAX={0x8, 0x2, 0x80}]}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x4a8}}, 0x40008c5) (async)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) (async)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r6, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x409}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xff031e72b712fd2b}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4880}, 0x20000000) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})

521.809346ms ago: executing program 4 (id=11020):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet6(0xa, 0x80002, 0x88)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xfffb}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37}, 0x28)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x6}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0x3}, {0x0, 0xfff1}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4041080)
sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x20008001)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
close(0x4)

436.226621ms ago: executing program 5 (id=11021):
r0 = socket$inet6(0xa, 0x3, 0x44d)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x36}}], 0x18}}], 0x1, 0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
close(r2) (async)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000180)=""/221, &(0x7f0000000040)=0xdd) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) (async)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4)

435.938589ms ago: executing program 3 (id=11022):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
bind$can_raw(r0, &(0x7f00000004c0), 0x10)

434.099253ms ago: executing program 0 (id=11023):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0)='4', 0x1)
tee(r4, r3, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd4cb, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r8, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x5, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
r13 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r12, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r13, 0x80487436, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
getsockopt$inet6_tcp_buf(r6, 0x6, 0xb, &(0x7f00000005c0)=""/147, &(0x7f0000000080)=0x93)
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}}, 0x4000080)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14)

356.981034ms ago: executing program 3 (id=11024):
socket(0x1000000010, 0x80802, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket(0x10, 0x803, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x2, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0xa, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@srh={0x2c, 0x0, 0x4, 0x0, 0x3, 0x0, 0x365}]}}}}}}}, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, &(0x7f0000000080))
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, r6, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xb37}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)

304.973725ms ago: executing program 2 (id=11025):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
r1 = openat$cgroup_ro(r0, &(0x7f0000000340)='cpu.stat\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x58, r2, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x4ee4, 0x8, 0x40]}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/102, 0x66}], 0x1}, 0x2041) (async)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r6=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000000)={r6}, &(0x7f00000002c0)=0x8) (async)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000280)={r6, 0x3ff}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000240)={r6, 0xfc11, 0x263f, 0x81, 0x3, 0x3}, 0x14) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000000c0)=0x400)

252.775344ms ago: executing program 4 (id=11026):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffcec}, 0x8804)

239.859502ms ago: executing program 5 (id=11027):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d94c8f9e9390"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200), 0x8)
sendto$inet(r1, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)

146.706449ms ago: executing program 4 (id=11028):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8)
getsockname(r1, &(0x7f0000000480)=@vsock, &(0x7f0000000500)=0x80)
shutdown(r1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x101, 0x0, 0x5}, "0fdf77"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="000225bd7000ffdbdf25090000005000018014000200776730000000000000000000000000001400020064766d7270300000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r4, @ANYBLOB="38000180140002007767320000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="01c9417f06713df88878d882d71b4a0913dc0364087ae0022e1ef8f347", @ANYRES32=r4, @ANYBLOB="0800030002000000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000000}, 0x90)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002800048024000180090001006d65746100000000140002800800024000000032080001"], 0x7c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@deltaction={0xe4, 0x31, 0x682, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6e}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4206}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0xe4}}, 0x0)

137.779167ms ago: executing program 2 (id=11029):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000600000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d6574610000000014000280080001400000001008000240000000051400"], 0xf8}}, 0x0)

40.36381ms ago: executing program 5 (id=11030):
r0 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) (async)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001100)={r3, 0x808000}, 0x8) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000001c0), 0x4) (async)
getsockname$packet(r5, 0x0, &(0x7f0000000040)) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x1, {}, [@IFLA_CARRIER={0x5, 0x21, 0x3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
getpeername$netrom(r1, &(0x7f0000000040)={{0x3, @netrom}, [@bcast, @default, @default, @remote, @default, @null, @netrom, @null]}, &(0x7f00000000c0)=0x48)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r1, 0x0)

30.904883ms ago: executing program 0 (id=11031):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100), &(0x7f0000000080)=@tcp=r2}, 0x20)
socket(0x11, 0x2, 0x8001)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000280), &(0x7f00000002c0)=""/60}, 0x20)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0)

0s ago: executing program 2 (id=11032):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000f8ff38442cbd7000eaff84db71245fff", @ANYRES16=r0, @ANYBLOB="83000400cb1507002c0012800800170073697400200002a114000b00fe8000000000000000000000000000bb08000300ac1414216503941e3bad50a7d6f2e3c79b2226852f504d2da8df84d58c01e9e7f79a3777b4895827f3beae9eec9f65016d88490b75ed1949176cea6c4877d8d7937e96a891"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r1 = socket(0x23, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1a00000000000001000000000000000b1d35a9990c992d4bcb28ccf1595011d7def84fb34cc2f90200e69067e9193eb967e2bd8f8a987fbf76fa225af5f2200e18a3e4a66417c6078df1bc828054f2aeff46ba0566df862e8782a075532c3e12e0076fb5a84507cc9a7f3c0b673174f7090913f31411a69d2ecfccc85ac409eb4b65269259a8e91c6a80ec953beaffb53c82f195dc6d2c3f1c74ed9d36b0340060", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x48)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000))
r2 = socket(0x2, 0x2, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf255f"], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x38, r7, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x38}}, 0x20000000)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c0018000aac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe34c32a2f2de10a78b1cd7120cb36057fa370d47eb640dc5061dc35817c8a66c29be820400e9006e6e072347b3aa778c7bd35cd57686e95ff78591e34ded0f9f740f9d6fd2e64b16b8fadd5c3d33fdb0a8f6eca2dab2c6264c2923a2ea862f32f76d"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0xffff}, {0xfff1, 0x8}, {0xa, 0xb}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8844}, 0x40)

kernel console output (not intermixed with test programs):

xsk_init_queue+0xad/0x110
[  848.719066][ T6960]  xsk_setsockopt+0x54c/0x990
[  848.719094][ T6960]  ? __pfx_xsk_setsockopt+0x10/0x10
[  848.719121][ T6960]  ? __pfx_aa_sk_perm+0x10/0x10
[  848.719148][ T6960]  ? aa_sock_opt_perm+0xff/0x1a0
[  848.719175][ T6960]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  848.719203][ T6960]  ? __pfx_xsk_setsockopt+0x10/0x10
[  848.719232][ T6960]  do_sock_setsockopt+0x17c/0x1b0
[  848.719261][ T6960]  __x64_sys_setsockopt+0x13d/0x1b0
[  848.719292][ T6960]  do_syscall_64+0xe2/0xf80
[  848.719312][ T6960]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.719331][ T6960]  ? trace_irq_disable+0x37/0x100
[  848.719350][ T6960]  ? clear_bhb_loop+0x60/0xb0
[  848.719373][ T6960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.719392][ T6960] RIP: 0033:0x7f689619aeb9
[  848.719410][ T6960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  848.719428][ T6960] RSP: 002b:00007f6896fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  848.719450][ T6960] RAX: ffffffffffffffda RBX: 00007f6896415fa0 RCX: 00007f689619aeb9
[  848.719465][ T6960] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  848.719478][ T6960] RBP: 00007f6896208c1f R08: 0000000000000004 R09: 0000000000000000
[  848.719491][ T6960] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  848.719504][ T6960] R13: 00007f6896416038 R14: 00007f6896415fa0 R15: 00007ffe3e861318
[  848.719538][ T6960]  </TASK>
[  848.719546][ T6960] Mem-Info:
[  848.855697][ T6970] openvswitch: netlink: Missing valid actions attribute.
[  848.870570][ T6960] active_anon:9034 inactive_anon:0 isolated_anon:0
[  848.870570][ T6960]  active_file:3091 inactive_file:40563 isolated_file:0
[  848.870570][ T6960]  unevictable:768 dirty:51 writeback:0
[  848.870570][ T6960]  slab_reclaimable:14116 slab_unreclaimable:174692
[  848.870570][ T6960]  mapped:34723 shmem:1375 pagetables:1351
[  848.870570][ T6960]  sec_pagetables:0 bounce:0
[  848.870570][ T6960]  kernel_misc_reclaimable:0
[  848.870570][ T6960]  free:1227890 free_pcp:10105 free_cma:0
[  848.901878][ T6970] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  848.922786][ T6960] Node 0 active_anon:36136kB inactive_anon:0kB active_file:12364kB inactive_file:162052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138892kB dirty:200kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18348kB pagetables:5176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  849.054712][   T52] Bluetooth: hci3: command tx timeout
[  849.123151][ T6960] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  849.172839][ T6764] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  849.187769][ T6764] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.206148][ T6960] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  849.254493][ T6960] lowmem_reserve[]: 0 2494 2495 2495 2495
[  849.260294][ T6960] Node 0 DMA32 free:1008108kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40336kB inactive_anon:0kB active_file:12364kB inactive_file:162052kB unevictable:1536kB writepending:200kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:27064kB local_pcp:10016kB free_cma:0kB
[  849.333707][ T6960] lowmem_reserve[]: 0 0 1 1 1
[  849.344803][ T6960] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  849.392755][ T6764] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  849.409370][ T6764] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.410604][ T6960] lowmem_reserve[]: 0 0 0 0 0
[  849.474578][ T6960] Node 1 Normal free:3886580kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10656kB local_pcp:10656kB free_cma:0kB
[  849.572961][ T6960] lowmem_reserve[]: 0 0 0 0 0
[  849.582336][ T6960] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  849.610899][ T6960] Node 0 DMA32: 11224*4kB (U) 8563*8kB (UME) 4492*16kB (UME) 754*32kB (UME) 407*64kB (UME) 215*128kB (UME) 160*256kB (UME) 313*512kB (UM) 258*1024kB (UME) 131*2048kB (UME) 1*4096kB (M) = 1000760kB
[  849.670556][ T6960] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  849.688994][ T6960] Node 1 Normal: 187*4kB (UME) 51*8kB (UME) 51*16kB (UME) 266*32kB (UME) 88*64kB (UME) 20*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 942*4096kB (M) = 3886580kB
[  849.718084][ T6960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  849.718897][ T6994] FAULT_INJECTION: forcing a failure.
[  849.718897][ T6994] name failslab, interval 1, probability 0, space 0, times 0
[  849.728503][ T6960] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  849.750988][ T6994] CPU: 0 UID: 0 PID: 6994 Comm: syz.0.9569 Not tainted syzkaller #0 PREEMPT(full) 
[  849.751010][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  849.751022][ T6994] Call Trace:
[  849.751030][ T6994]  <TASK>
[  849.751039][ T6994]  dump_stack_lvl+0xe8/0x150
[  849.751064][ T6994]  should_fail_ex+0x412/0x560
[  849.751091][ T6994]  should_failslab+0xa8/0x100
[  849.751113][ T6994]  __kmalloc_cache_noprof+0x83/0x6e0
[  849.751132][ T6994]  ? rfkill_fop_open+0x198/0x820
[  849.751151][ T6994]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  849.751181][ T6994]  rfkill_fop_open+0x198/0x820
[  849.751212][ T6994]  ? __pfx_rfkill_fop_open+0x10/0x10
[  849.751230][ T6994]  misc_open+0x2d5/0x350
[  849.751256][ T6994]  chrdev_open+0x4cd/0x5e0
[  849.751275][ T6994]  ? __pfx_chrdev_open+0x10/0x10
[  849.751289][ T6994]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  849.751315][ T6994]  ? __pfx_chrdev_open+0x10/0x10
[  849.751331][ T6994]  do_dentry_open+0x7ce/0x1420
[  849.751363][ T6994]  vfs_open+0x3b/0x340
[  849.751380][ T6994]  ? path_openat+0x346e/0x3e20
[  849.751403][ T6994]  path_openat+0x3486/0x3e20
[  849.751453][ T6994]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[  849.751474][ T6994]  ? getname_flags+0xb7/0x540
[  849.751494][ T6994]  ? __pfx_path_openat+0x10/0x10
[  849.751517][ T6994]  ? __lock_acquire+0x6b5/0x2cf0
[  849.751554][ T6994]  do_filp_open+0x22d/0x490
[  849.751579][ T6994]  ? __pfx_do_filp_open+0x10/0x10
[  849.751634][ T6994]  ? _raw_spin_unlock+0x28/0x50
[  849.751656][ T6994]  ? alloc_fd+0x64b/0x6c0
[  849.751685][ T6994]  do_sys_openat2+0x12f/0x220
[  849.751708][ T6994]  ? __pfx_do_sys_openat2+0x10/0x10
[  849.751727][ T6994]  ? ksys_write+0x242/0x270
[  849.751752][ T6994]  ? __pfx_ksys_write+0x10/0x10
[  849.751778][ T6994]  __x64_sys_openat+0x138/0x170
[  849.751809][ T6994]  do_syscall_64+0xe2/0xf80
[  849.751827][ T6994]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.751844][ T6994]  ? trace_irq_disable+0x37/0x100
[  849.751860][ T6994]  ? clear_bhb_loop+0x60/0xb0
[  849.751881][ T6994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.751898][ T6994] RIP: 0033:0x7fdda919aeb9
[  849.751915][ T6994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  849.751931][ T6994] RSP: 002b:00007fddaa130028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  849.751949][ T6994] RAX: ffffffffffffffda RBX: 00007fdda9415fa0 RCX: 00007fdda919aeb9
[  849.751963][ T6994] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  849.751975][ T6994] RBP: 00007fddaa130090 R08: 0000000000000000 R09: 0000000000000000
[  849.751986][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  849.751997][ T6994] R13: 00007fdda9416038 R14: 00007fdda9415fa0 R15: 00007ffe79a88b98
[  849.752025][ T6994]  </TASK>
[  849.752499][ T6960] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  850.073095][ T6960] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  850.082415][ T6960] 49897 total pagecache pages
[  850.091447][ T6764] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  850.113520][ T6960] 0 pages in swap cache
[  850.117707][ T6960] Free swap  = 124996kB
[  850.130399][ T6764] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  850.132109][ T6960] Total swap = 124996kB
[  850.161584][ T6960] 2097051 pages RAM
[  850.169723][ T6960] 0 pages HighMem/MovableOnly
[  850.176252][ T6960] 426622 pages reserved
[  850.180570][ T6960] 0 pages cma reserved
[  850.287282][ T7007] __nla_validate_parse: 9 callbacks suppressed
[  850.287299][ T7007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9570'.
[  850.327281][ T6764] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  850.338816][ T6764] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  850.645144][ T7028] FAULT_INJECTION: forcing a failure.
[  850.645144][ T7028] name failslab, interval 1, probability 0, space 0, times 0
[  850.659783][ T7028] CPU: 0 UID: 0 PID: 7028 Comm: syz.2.9580 Not tainted syzkaller #0 PREEMPT(full) 
[  850.659808][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  850.659819][ T7028] Call Trace:
[  850.659827][ T7028]  <TASK>
[  850.659835][ T7028]  dump_stack_lvl+0xe8/0x150
[  850.659862][ T7028]  should_fail_ex+0x412/0x560
[  850.659888][ T7028]  should_failslab+0xa8/0x100
[  850.659910][ T7028]  __kmalloc_cache_noprof+0x83/0x6e0
[  850.659929][ T7028]  ? rfkill_fop_open+0x198/0x820
[  850.659947][ T7028]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  850.659977][ T7028]  rfkill_fop_open+0x198/0x820
[  850.660006][ T7028]  ? __pfx_rfkill_fop_open+0x10/0x10
[  850.660024][ T7028]  misc_open+0x2d5/0x350
[  850.660050][ T7028]  chrdev_open+0x4cd/0x5e0
[  850.660071][ T7028]  ? __pfx_chrdev_open+0x10/0x10
[  850.660088][ T7028]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  850.660115][ T7028]  ? __pfx_chrdev_open+0x10/0x10
[  850.660131][ T7028]  do_dentry_open+0x7ce/0x1420
[  850.660166][ T7028]  vfs_open+0x3b/0x340
[  850.660182][ T7028]  ? path_openat+0x346e/0x3e20
[  850.660207][ T7028]  path_openat+0x3486/0x3e20
[  850.660260][ T7028]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[  850.660283][ T7028]  ? getname_flags+0xb7/0x540
[  850.660302][ T7028]  ? __pfx_path_openat+0x10/0x10
[  850.660326][ T7028]  ? __lock_acquire+0x6b5/0x2cf0
[  850.660364][ T7028]  do_filp_open+0x22d/0x490
[  850.660389][ T7028]  ? __pfx_do_filp_open+0x10/0x10
[  850.660434][ T7028]  ? _raw_spin_unlock+0x28/0x50
[  850.660456][ T7028]  ? alloc_fd+0x64b/0x6c0
[  850.660486][ T7028]  do_sys_openat2+0x12f/0x220
[  850.660510][ T7028]  ? __pfx_do_sys_openat2+0x10/0x10
[  850.660531][ T7028]  ? ksys_write+0x242/0x270
[  850.660556][ T7028]  ? __pfx_ksys_write+0x10/0x10
[  850.660582][ T7028]  __x64_sys_openat+0x138/0x170
[  850.660608][ T7028]  do_syscall_64+0xe2/0xf80
[  850.660626][ T7028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.660643][ T7028]  ? trace_irq_disable+0x37/0x100
[  850.660659][ T7028]  ? clear_bhb_loop+0x60/0xb0
[  850.660681][ T7028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.660698][ T7028] RIP: 0033:0x7f8fc9f9aeb9
[  850.660719][ T7028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  850.660734][ T7028] RSP: 002b:00007f8fcaed0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  850.660753][ T7028] RAX: ffffffffffffffda RBX: 00007f8fca215fa0 RCX: 00007f8fc9f9aeb9
[  850.660767][ T7028] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  850.660780][ T7028] RBP: 00007f8fcaed0090 R08: 0000000000000000 R09: 0000000000000000
[  850.660792][ T7028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  850.660803][ T7028] R13: 00007f8fca216038 R14: 00007f8fca215fa0 R15: 00007ffe0d9be688
[  850.660835][ T7028]  </TASK>
[  851.104669][   T52] Bluetooth: hci3: command tx timeout
[  851.261745][T28367] erspan0 (unregistering): left promiscuous mode
[  851.291802][T28367] gretap0 (unregistering): left promiscuous mode
[  851.427254][T28367] bond14 (unregistering): (slave geneve2): Releasing active interface
[  851.442736][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9591'.
[  851.655709][T28367] bond8 (unregistering): (slave bridge4): Releasing active interface
[  851.811571][T28367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  851.822372][T28367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  851.837853][T28367] bond0 (unregistering): Released all slaves
[  851.936616][T28367] bond1 (unregistering): Released all slaves
[  852.039021][T28367] bond2 (unregistering): Released all slaves
[  852.141027][T28367] bond3 (unregistering): Released all slaves
[  852.245451][T28367] bond4 (unregistering): Released all slaves
[  852.346146][T28367] bond5 (unregistering): Released all slaves
[  852.445068][T28367] bond6 (unregistering): Released all slaves
[  852.456978][T28367] bond7 (unregistering): Released all slaves
[  852.471069][T28367] bond8 (unregistering): Released all slaves
[  852.483008][T28367] bond9 (unregistering): Released all slaves
[  852.591142][T28367] bond10 (unregistering): Released all slaves
[  852.689718][T28367] bond11 (unregistering): Released all slaves
[  852.788030][T28367] bond12 (unregistering): Released all slaves
[  852.888777][T28367] bond13 (unregistering): Released all slaves
[  852.987071][T28367] bond14 (unregistering): Released all slaves
[  852.999567][T28367] bond15 (unregistering): Released all slaves
[  853.098221][T28367] bond16 (unregistering): Released all slaves
[  853.185754][   T52] Bluetooth: hci3: command tx timeout
[  853.203959][T28367] bond17 (unregistering): Released all slaves
[  853.310749][T28367] bond18 (unregistering): Released all slaves
[  853.416365][T28367] bond19 (unregistering): (slave veth5): Releasing active interface
[  853.425878][T28367] bond19 (unregistering): Released all slaves
[  853.458187][ T7036] pim6reg: entered allmulticast mode
[  853.474860][ T7063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9591'.
[  853.549984][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9592'.
[  853.615006][ T6764] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  853.642347][ T6764] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  853.677728][T28367] : left promiscuous mode
[  853.713547][ T6764] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  853.737644][ T6764] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  853.772302][T28367] : left promiscuous mode
[  853.856489][T28367] tipc: Disabling bearer <udp:syz2>
[  853.861945][T28367] tipc: Left network mode
[  853.946668][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9598'.
[  853.982479][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9598'.
[  853.996668][ T6764] 8021q: adding VLAN 0 to HW filter on device bond0
[  854.019983][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9597'.
[  854.045363][ T7097] openvswitch: netlink: Flow actions attr not present in new flow.
[  854.202600][ T7106] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9601'.
[  854.210950][ T6764] 8021q: adding VLAN 0 to HW filter on device team0
[  854.268087][ T3151] bridge0: port 1(bridge_slave_0) entered blocking state
[  854.271806][ T7106] netlink: 'syz.3.9601': attribute type 12 has an invalid length.
[  854.275265][ T3151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  854.289209][ T7111] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9602'.
[  854.310049][ T3151] bridge0: port 2(bridge_slave_1) entered blocking state
[  854.317210][ T3151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  854.395503][ T7106] bond8: option primary_reselect: invalid value (255)
[  854.421191][ T7106] bond8 (unregistering): Released all slaves
[  854.599992][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9604'.
[  854.632387][ T7121] vlan2: entered allmulticast mode
[  854.639665][ T7121] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode
[  854.772121][ T7134] FAULT_INJECTION: forcing a failure.
[  854.772121][ T7134] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  854.796340][ T7134] CPU: 1 UID: 0 PID: 7134 Comm: syz.2.9609 Not tainted syzkaller #0 PREEMPT(full) 
[  854.796363][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  854.796373][ T7134] Call Trace:
[  854.796380][ T7134]  <TASK>
[  854.796388][ T7134]  dump_stack_lvl+0xe8/0x150
[  854.796414][ T7134]  should_fail_ex+0x412/0x560
[  854.796439][ T7134]  _copy_from_user+0x2d/0xb0
[  854.796462][ T7134]  __copy_msghdr+0x3c5/0x5b0
[  854.796487][ T7134]  ___sys_sendmsg+0x213/0x360
[  854.796506][ T7134]  ? __lock_acquire+0x6b5/0x2cf0
[  854.796531][ T7134]  ? __pfx____sys_sendmsg+0x10/0x10
[  854.796586][ T7134]  ? __fget_files+0x2a/0x420
[  854.796602][ T7134]  ? __fget_files+0x3a0/0x420
[  854.796628][ T7134]  __x64_sys_sendmsg+0x1bd/0x2a0
[  854.796651][ T7134]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  854.796680][ T7134]  ? __pfx_ksys_write+0x10/0x10
[  854.796713][ T7134]  do_syscall_64+0xe2/0xf80
[  854.796732][ T7134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.796748][ T7134]  ? trace_irq_disable+0x37/0x100
[  854.796764][ T7134]  ? clear_bhb_loop+0x60/0xb0
[  854.796785][ T7134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.796801][ T7134] RIP: 0033:0x7f8fc9f9aeb9
[  854.796817][ T7134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  854.796832][ T7134] RSP: 002b:00007f8fcaed0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  854.796850][ T7134] RAX: ffffffffffffffda RBX: 00007f8fca215fa0 RCX: 00007f8fc9f9aeb9
[  854.796863][ T7134] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003
[  854.796874][ T7134] RBP: 00007f8fcaed0090 R08: 0000000000000000 R09: 0000000000000000
[  854.796886][ T7134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  854.796896][ T7134] R13: 00007f8fca216038 R14: 00007f8fca215fa0 R15: 00007ffe0d9be688
[  854.796926][ T7134]  </TASK>
[  855.235179][ T7144] netlink: 'syz.2.9611': attribute type 1 has an invalid length.
[  855.261611][ T7154] openvswitch: netlink: Message has 8 unknown bytes.
[  855.293213][ T7154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  855.351709][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9611'.
[  855.484437][ T7160] batman_adv: batadv0: Adding interface: dummy0
[  855.500983][ T7160] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  855.531751][ T7160] batman_adv: batadv0: Interface activated: dummy0
[  855.548903][ T7162] batadv0: mtu less than device minimum
[  855.556907][ T7162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  855.568604][ T7162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  855.580340][ T7162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  855.592042][ T7162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  855.603751][ T7162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  855.615439][ T7162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  855.752069][ T6764] 8021q: adding VLAN 0 to HW filter on device batadv0
[  855.890347][ T7187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9620'.
[  855.934044][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9620'.
[  855.967324][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9622'.
[  855.985775][ T7187] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9620'.
[  856.014762][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9622'.
[  856.040847][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9623'.
[  856.075839][ T7199] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9623'.
[  856.129050][ T7207] veth1_macvtap: left promiscuous mode
[  856.148320][ T7207] macsec0: entered promiscuous mode
[  856.164005][ T7207] macsec0: entered allmulticast mode
[  856.349517][ T7216] FAULT_INJECTION: forcing a failure.
[  856.349517][ T7216] name failslab, interval 1, probability 0, space 0, times 0
[  856.436450][ T7216] CPU: 0 UID: 0 PID: 7216 Comm: syz.5.9627 Not tainted syzkaller #0 PREEMPT(full) 
[  856.436474][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  856.436486][ T7216] Call Trace:
[  856.436493][ T7216]  <TASK>
[  856.436501][ T7216]  dump_stack_lvl+0xe8/0x150
[  856.436529][ T7216]  should_fail_ex+0x412/0x560
[  856.436555][ T7216]  should_failslab+0xa8/0x100
[  856.436578][ T7216]  __kmalloc_cache_noprof+0x83/0x6e0
[  856.436596][ T7216]  ? rfkill_fop_open+0x198/0x820
[  856.436614][ T7216]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  856.436643][ T7216]  rfkill_fop_open+0x198/0x820
[  856.436674][ T7216]  ? __pfx_rfkill_fop_open+0x10/0x10
[  856.436692][ T7216]  misc_open+0x2d5/0x350
[  856.436718][ T7216]  chrdev_open+0x4cd/0x5e0
[  856.436739][ T7216]  ? __pfx_chrdev_open+0x10/0x10
[  856.436756][ T7216]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  856.436782][ T7216]  ? __pfx_chrdev_open+0x10/0x10
[  856.436798][ T7216]  do_dentry_open+0x7ce/0x1420
[  856.436831][ T7216]  vfs_open+0x3b/0x340
[  856.436846][ T7216]  ? path_openat+0x346e/0x3e20
[  856.436869][ T7216]  path_openat+0x3486/0x3e20
[  856.436918][ T7216]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[  856.436939][ T7216]  ? getname_flags+0xb7/0x540
[  856.436956][ T7216]  ? __pfx_path_openat+0x10/0x10
[  856.436979][ T7216]  ? __lock_acquire+0x6b5/0x2cf0
[  856.437014][ T7216]  do_filp_open+0x22d/0x490
[  856.437038][ T7216]  ? __pfx_do_filp_open+0x10/0x10
[  856.437081][ T7216]  ? _raw_spin_unlock+0x28/0x50
[  856.437101][ T7216]  ? alloc_fd+0x64b/0x6c0
[  856.437128][ T7216]  do_sys_openat2+0x12f/0x220
[  856.437148][ T7216]  ? __pfx_do_sys_openat2+0x10/0x10
[  856.437167][ T7216]  ? ksys_write+0x242/0x270
[  856.437192][ T7216]  ? __pfx_ksys_write+0x10/0x10
[  856.437215][ T7216]  __x64_sys_openat+0x138/0x170
[  856.437238][ T7216]  do_syscall_64+0xe2/0xf80
[  856.437256][ T7216]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.437272][ T7216]  ? trace_irq_disable+0x37/0x100
[  856.437288][ T7216]  ? clear_bhb_loop+0x60/0xb0
[  856.437309][ T7216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.437325][ T7216] RIP: 0033:0x7f689619aeb9
[  856.437342][ T7216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  856.437357][ T7216] RSP: 002b:00007f6896fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  856.437375][ T7216] RAX: ffffffffffffffda RBX: 00007f6896415fa0 RCX: 00007f689619aeb9
[  856.437396][ T7216] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  856.437409][ T7216] RBP: 00007f6896fda090 R08: 0000000000000000 R09: 0000000000000000
[  856.437420][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  856.437430][ T7216] R13: 00007f6896416038 R14: 00007f6896415fa0 R15: 00007ffe3e861318
[  856.437457][ T7216]  </TASK>
[  856.458559][ T7220] FAULT_INJECTION: forcing a failure.
[  856.458559][ T7220] name failslab, interval 1, probability 0, space 0, times 0
[  856.782349][ T7220] CPU: 1 UID: 0 PID: 7220 Comm: syz.0.9628 Not tainted syzkaller #0 PREEMPT(full) 
[  856.782375][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  856.782387][ T7220] Call Trace:
[  856.782395][ T7220]  <TASK>
[  856.782403][ T7220]  dump_stack_lvl+0xe8/0x150
[  856.782430][ T7220]  should_fail_ex+0x412/0x560
[  856.782456][ T7220]  should_failslab+0xa8/0x100
[  856.782479][ T7220]  __kmalloc_cache_noprof+0x83/0x6e0
[  856.782499][ T7220]  ? cgroup_pidlist_start+0x901/0x1290
[  856.782527][ T7220]  cgroup_pidlist_start+0x901/0x1290
[  856.782562][ T7220]  ? __pfx_cgroup_pidlist_start+0x10/0x10
[  856.782609][ T7220]  kernfs_seq_start+0x1c9/0x420
[  856.782634][ T7220]  traverse+0x164/0x580
[  856.782656][ T7220]  ? get_pid_task+0x20/0x1f0
[  856.782687][ T7220]  seq_read_iter+0xd08/0xe10
[  856.782712][ T7220]  ? apparmor_file_permission+0x17f/0x1f0
[  856.782746][ T7220]  vfs_read+0x582/0xa70
[  856.782778][ T7220]  ? __pfx_vfs_read+0x10/0x10
[  856.782813][ T7220]  ? __fget_files+0x2a/0x420
[  856.782842][ T7220]  __x64_sys_pread64+0x199/0x230
[  856.782868][ T7220]  ? __pfx___x64_sys_pread64+0x10/0x10
[  856.782905][ T7220]  do_syscall_64+0xe2/0xf80
[  856.782923][ T7220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.782940][ T7220]  ? trace_irq_disable+0x37/0x100
[  856.782956][ T7220]  ? clear_bhb_loop+0x60/0xb0
[  856.782977][ T7220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.782994][ T7220] RIP: 0033:0x7fdda919aeb9
[  856.783011][ T7220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  856.783028][ T7220] RSP: 002b:00007fddaa130028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  856.783046][ T7220] RAX: ffffffffffffffda RBX: 00007fdda9415fa0 RCX: 00007fdda919aeb9
[  856.783059][ T7220] RDX: 0000000000001000 RSI: 0000200000001840 RDI: 0000000000000008
[  856.783070][ T7220] RBP: 00007fddaa130090 R08: 0000000000000000 R09: 0000000000000000
[  856.783082][ T7220] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  856.783098][ T7220] R13: 00007fdda9416038 R14: 00007fdda9415fa0 R15: 00007ffe79a88b98
[  856.783128][ T7220]  </TASK>
[  857.002722][T28367] hsr_slave_0: left promiscuous mode
[  857.021902][ T7231] netlink: 1900 bytes leftover after parsing attributes in process `syz.5.9633'.
[  857.032508][T28367] hsr_slave_1: left promiscuous mode
[  857.040086][ T7233] netlink: 1900 bytes leftover after parsing attributes in process `syz.5.9633'.
[  857.051549][T28367] veth1_macvtap: left promiscuous mode
[  857.057355][T28367] veth0_macvtap: left promiscuous mode
[  857.062903][T28367] veth1_vlan: left promiscuous mode
[  857.068861][T28367] veth0_vlan: left promiscuous mode
[  857.172292][T28367] pimreg (unregistering): left allmulticast mode
[  857.551050][T28367] team0 (unregistering): Port device team_slave_1 removed
[  857.589918][T28367] team0 (unregistering): Port device team_slave_0 removed
[  857.992704][ T6764] veth0_vlan: entered promiscuous mode
[  858.009272][ T7243] netlink: 'syz.3.9635': attribute type 1 has an invalid length.
[  858.057025][ T6764] veth1_vlan: entered promiscuous mode
[  858.076141][ T7243] bond8: (slave xfrm1): The slave device specified does not support setting the MAC address
[  858.094922][ T7243] bond8: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  858.114961][ T7243] bond8: (slave xfrm1): making interface the new active one
[  858.134445][ T7243] bond8: (slave xfrm1): Enslaving as an active interface with an up link
[  858.271868][ T6764] veth0_macvtap: entered promiscuous mode
[  858.302579][ T6764] veth1_macvtap: entered promiscuous mode
[  858.360997][ T7266] nbd: couldn't find device at index 3
[  858.369320][ T7265] nbd: couldn't find device at index 3
[  858.406242][ T6764] batman_adv: batadv0: Interface activated: batadv_slave_0
[  858.415044][T28367] IPVS: stop unused estimator thread 0...
[  858.457082][ T6764] batman_adv: batadv0: Interface activated: batadv_slave_1
[  858.487453][ T6629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  858.518021][ T6629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  858.542432][ T7271] x_tables: unsorted underflow at hook 2
[  858.557553][ T6629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  858.595668][ T6629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  858.765810][ T6629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  858.777370][ T6629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  858.905677][ T6629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  858.913937][ T7299] syzkaller0: entered promiscuous mode
[  858.913961][ T7299] syzkaller0: entered allmulticast mode
[  858.953537][ T6629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  859.154570][ T7308] vlan2: entered allmulticast mode
[  859.166527][ T7308] mac80211_hwsim hwsim75 wlan0: entered allmulticast mode
[  859.621421][ T7343] FAULT_INJECTION: forcing a failure.
[  859.621421][ T7343] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  859.655584][ T7343] CPU: 1 UID: 0 PID: 7343 Comm: syz.4.9665 Not tainted syzkaller #0 PREEMPT(full) 
[  859.655608][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  859.655619][ T7343] Call Trace:
[  859.655627][ T7343]  <TASK>
[  859.655635][ T7343]  dump_stack_lvl+0xe8/0x150
[  859.655661][ T7343]  should_fail_ex+0x412/0x560
[  859.655688][ T7343]  prepare_alloc_pages+0x22a/0x650
[  859.655716][ T7343]  __alloc_frozen_pages_noprof+0x12f/0x380
[  859.655740][ T7343]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  859.655764][ T7343]  ? __pfx_policy_nodemask+0x10/0x10
[  859.655784][ T7343]  ? __lock_acquire+0x6b5/0x2cf0
[  859.655815][ T7343]  alloc_pages_mpol+0x232/0x4a0
[  859.655840][ T7343]  vma_alloc_folio_noprof+0xea/0x210
[  859.655860][ T7343]  ? kernel_text_address+0xa5/0xe0
[  859.655882][ T7343]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  859.655902][ T7343]  ? ___pte_offset_map+0x29/0x240
[  859.655926][ T7343]  ? ___pte_offset_map+0x29/0x240
[  859.655952][ T7343]  do_pte_missing+0x15a4/0x37a0
[  859.655983][ T7343]  ? handle_mm_fault+0xee/0x32a0
[  859.656010][ T7343]  handle_mm_fault+0x1b8c/0x32a0
[  859.656052][ T7343]  ? handle_mm_fault+0xee/0x32a0
[  859.656081][ T7343]  ? __pfx_handle_mm_fault+0x10/0x10
[  859.656116][ T7343]  ? __lock_acquire+0x6b5/0x2cf0
[  859.656143][ T7343]  ? lock_mm_and_find_vma+0xa7/0x340
[  859.656164][ T7343]  do_user_addr_fault+0x75b/0x1360
[  859.656206][ T7343]  exc_page_fault+0x6a/0xc0
[  859.656226][ T7343]  asm_exc_page_fault+0x26/0x30
[  859.656243][ T7343] RIP: 0010:rep_movs_alternative+0x11/0x90
[  859.656265][ T7343] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f
[  859.656280][ T7343] RSP: 0018:ffffc90004eafa38 EFLAGS: 00050202
[  859.656297][ T7343] RAX: ffffffff849e430a RBX: ffff888064f46001 RCX: 0000000000000001
[  859.656310][ T7343] RDX: 0000000000000000 RSI: ffff888064f46001 RDI: 0000200000001840
[  859.656323][ T7343] RBP: ffffc90004eafbb0 R08: ffff888064f46001 R09: 1ffff1100c9e8c00
[  859.656336][ T7343] R10: dffffc0000000000 R11: ffffed100c9e8c01 R12: 1ffff920009d5faf
[  859.656349][ T7343] R13: 0000200000001840 R14: ffffc90004eafd88 R15: 0000000000000001
[  859.656370][ T7343]  ? _copy_to_iter+0x16a/0x17d0
[  859.656400][ T7343]  _copy_to_iter+0x255/0x17d0
[  859.656421][ T7343]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  859.656451][ T7343]  ? kernfs_seq_stop+0x17e/0x200
[  859.656471][ T7343]  ? __pfx__copy_to_iter+0x10/0x10
[  859.656493][ T7343]  ? traverse+0x544/0x580
[  859.656528][ T7343]  seq_read_iter+0x2e9/0xe10
[  859.656553][ T7343]  ? apparmor_file_permission+0x17f/0x1f0
[  859.656587][ T7343]  vfs_read+0x582/0xa70
[  859.656618][ T7343]  ? __pfx_vfs_read+0x10/0x10
[  859.656652][ T7343]  ? __fget_files+0x2a/0x420
[  859.656680][ T7343]  __x64_sys_pread64+0x199/0x230
[  859.656707][ T7343]  ? __pfx___x64_sys_pread64+0x10/0x10
[  859.656743][ T7343]  do_syscall_64+0xe2/0xf80
[  859.656761][ T7343]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.656778][ T7343]  ? trace_irq_disable+0x37/0x100
[  859.656794][ T7343]  ? clear_bhb_loop+0x60/0xb0
[  859.656815][ T7343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.656832][ T7343] RIP: 0033:0x7f112e79aeb9
[  859.656847][ T7343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  859.656861][ T7343] RSP: 002b:00007f112f730028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  859.656879][ T7343] RAX: ffffffffffffffda RBX: 00007f112ea15fa0 RCX: 00007f112e79aeb9
[  859.656893][ T7343] RDX: 0000000000001000 RSI: 0000200000001840 RDI: 0000000000000008
[  859.656905][ T7343] RBP: 00007f112f730090 R08: 0000000000000000 R09: 0000000000000000
[  859.656916][ T7343] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  859.656927][ T7343] R13: 00007f112ea16038 R14: 00007f112ea15fa0 R15: 00007ffe0d7a1698
[  859.656959][ T7343]  </TASK>
[  860.119862][ T7354] veth0_to_hsr: entered promiscuous mode
[  860.226490][ T7370] net_ratelimit: 13 callbacks suppressed
[  860.226509][ T7370] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  860.289909][ T7363] veth3: entered promiscuous mode
[  860.303862][ T7363] veth3: entered allmulticast mode
[  860.332168][ T7372] xt_CONNSECMARK: invalid mode: 0
[  860.449800][ T7382] syzkaller0: entered promiscuous mode
[  860.455664][ T7382] syzkaller0: entered allmulticast mode
[  860.465241][ T7382] 0: reclassify loop, rule prio 0, protocol 700
[  860.635408][ T7398] __nla_validate_parse: 10 callbacks suppressed
[  860.635428][ T7398] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9678'.
[  860.774764][ T7407] FAULT_INJECTION: forcing a failure.
[  860.774764][ T7407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  860.797342][ T7407] CPU: 0 UID: 0 PID: 7407 Comm: syz.5.9679 Not tainted syzkaller #0 PREEMPT(full) 
[  860.797368][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  860.797379][ T7407] Call Trace:
[  860.797387][ T7407]  <TASK>
[  860.797395][ T7407]  dump_stack_lvl+0xe8/0x150
[  860.797422][ T7407]  should_fail_ex+0x412/0x560
[  860.797448][ T7407]  _copy_to_iter+0x1e4/0x17d0
[  860.797469][ T7407]  ? seq_read_iter+0xb84/0xe10
[  860.797496][ T7407]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  860.797522][ T7407]  ? __pfx__copy_to_iter+0x10/0x10
[  860.797542][ T7407]  ? kernfs_seq_stop+0x17e/0x200
[  860.797566][ T7407]  ? kernfs_put_active+0xa0/0x100
[  860.797589][ T7407]  ? kernfs_seq_stop+0x17e/0x200
[  860.797611][ T7407]  seq_read_iter+0xbf5/0xe10
[  860.797652][ T7407]  vfs_read+0x582/0xa70
[  860.797696][ T7407]  ? __pfx_vfs_read+0x10/0x10
[  860.797728][ T7407]  ? __fget_files+0x2a/0x420
[  860.797756][ T7407]  __x64_sys_pread64+0x199/0x230
[  860.797781][ T7407]  ? __pfx___x64_sys_pread64+0x10/0x10
[  860.797816][ T7407]  do_syscall_64+0xe2/0xf80
[  860.797834][ T7407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.797850][ T7407]  ? trace_irq_disable+0x37/0x100
[  860.797867][ T7407]  ? clear_bhb_loop+0x60/0xb0
[  860.797888][ T7407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.797905][ T7407] RIP: 0033:0x7f689619aeb9
[  860.797922][ T7407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  860.797936][ T7407] RSP: 002b:00007f6896fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  860.797955][ T7407] RAX: ffffffffffffffda RBX: 00007f6896415fa0 RCX: 00007f689619aeb9
[  860.797968][ T7407] RDX: 0000000000001000 RSI: 0000200000001840 RDI: 0000000000000008
[  860.797980][ T7407] RBP: 00007f6896fda090 R08: 0000000000000000 R09: 0000000000000000
[  860.797991][ T7407] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  860.798001][ T7407] R13: 00007f6896416038 R14: 00007f6896415fa0 R15: 00007ffe3e861318
[  860.798031][ T7407]  </TASK>
[  861.283157][ T7432] netlink: 'syz.5.9690': attribute type 16 has an invalid length.
[  861.291920][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9690'.
[  861.384477][ T7437] x_tables: duplicate entry at hook 2
[  861.524829][ T7444] Unsupported ieee802154 address type: 0
[  861.623963][ T7458] FAULT_INJECTION: forcing a failure.
[  861.623963][ T7458] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  861.641040][ T7458] CPU: 1 UID: 0 PID: 7458 Comm: syz.2.9695 Not tainted syzkaller #0 PREEMPT(full) 
[  861.641065][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  861.641076][ T7458] Call Trace:
[  861.641084][ T7458]  <TASK>
[  861.641091][ T7458]  dump_stack_lvl+0xe8/0x150
[  861.641119][ T7458]  should_fail_ex+0x412/0x560
[  861.641144][ T7458]  _copy_to_user+0x31/0xb0
[  861.641170][ T7458]  simple_read_from_buffer+0xe1/0x170
[  861.641194][ T7458]  proc_fail_nth_read+0x1bb/0x230
[  861.641220][ T7458]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  861.641246][ T7458]  ? rw_verify_area+0x2a6/0x4d0
[  861.641267][ T7458]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  861.641291][ T7458]  vfs_read+0x20c/0xa70
[  861.641311][ T7458]  ? fdget_pos+0x246/0x320
[  861.641334][ T7458]  ? __pfx___mutex_lock+0x10/0x10
[  861.641359][ T7458]  ? __pfx_vfs_read+0x10/0x10
[  861.641382][ T7458]  ? __fget_files+0x2a/0x420
[  861.641404][ T7458]  ? __fget_files+0x3a0/0x420
[  861.641421][ T7458]  ? __fget_files+0x2a/0x420
[  861.641449][ T7458]  ksys_read+0x150/0x270
[  861.641471][ T7458]  ? __pfx_ksys_read+0x10/0x10
[  861.641503][ T7458]  do_syscall_64+0xe2/0xf80
[  861.641521][ T7458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  861.641537][ T7458]  ? trace_irq_disable+0x37/0x100
[  861.641553][ T7458]  ? clear_bhb_loop+0x60/0xb0
[  861.641574][ T7458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  861.641591][ T7458] RIP: 0033:0x7f8fc9f5b78e
[  861.641606][ T7458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  861.641620][ T7458] RSP: 002b:00007f8fcaeaefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  861.641639][ T7458] RAX: ffffffffffffffda RBX: 00007f8fcaeaf6c0 RCX: 00007f8fc9f5b78e
[  861.641653][ T7458] RDX: 000000000000000f RSI: 00007f8fcaeaf0a0 RDI: 0000000000000009
[  861.641664][ T7458] RBP: 00007f8fcaeaf090 R08: 0000000000000000 R09: 0000000000000000
[  861.641675][ T7458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  861.641686][ T7458] R13: 00007f8fca216128 R14: 00007f8fca216090 R15: 00007ffe0d9be688
[  861.641717][ T7458]  </TASK>
[  862.019965][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9696'.
[  862.044091][ T7473] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9701'.
[  862.117028][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9698'.
[  862.131736][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9698'.
[  862.143778][ T7351] Bluetooth: hci0: command 0x0c1a tx timeout
[  862.151180][ T7470] xt_l2tp: v2 tid > 0xffff: 1114244
[  862.172934][ T7481] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9702'.
[  862.246485][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9703'.
[  862.264809][ T7487] netlink: 'syz.0.9700': attribute type 1 has an invalid length.
[  862.272673][ T7487] netlink: 216 bytes leftover after parsing attributes in process `syz.0.9700'.
[  863.945123][ T7481] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  864.036275][ T7509] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9705'.
[  864.134828][ T7512] syzkaller0: entered promiscuous mode
[  864.140692][ T7512] syzkaller0: entered allmulticast mode
[  864.267667][ T7523] pimreg3: entered allmulticast mode
[  864.418730][ T7530] 8021q: adding VLAN 0 to HW filter on device bond6
[  864.429207][ T7538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  864.436471][ T7538] IPv6: NLM_F_CREATE should be set when creating new route
[  864.633943][ T7539] bond2: Unable to set down delay as MII monitoring is disabled
[  864.652065][ T7539] bond2 (unregistering): Released all slaves
[  864.860816][ T7555] syzkaller0: entered promiscuous mode
[  864.873476][ T7555] syzkaller0: entered allmulticast mode
[  865.014582][ T7585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  865.021834][ T7585] IPv6: NLM_F_CREATE should be set when creating new route
[  865.029090][ T7585] IPv6: NLM_F_CREATE should be set when creating new route
[  865.348443][ T7595] 8021q: adding VLAN 0 to HW filter on device bond1
[  866.952533][ T7618] __nla_validate_parse: 14 callbacks suppressed
[  866.952552][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9736'.
[  867.233797][ T7632] syzkaller0: entered promiscuous mode
[  867.251969][ T7632] syzkaller0: entered allmulticast mode
[  867.362258][ T7641] sctp: [Deprecated]: syz.2.9747 (pid 7641) Use of int in max_burst socket option.
[  867.362258][ T7641] Use struct sctp_assoc_value instead
[  867.379009][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9745'.
[  867.446114][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9748'.
[  867.455390][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9748'.
[  867.538685][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9750'.
[  867.575383][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9750'.
[  867.588209][ T7652] syzkaller1: entered promiscuous mode
[  867.621276][ T7652] syzkaller1: entered allmulticast mode
[  867.630425][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9750'.
[  867.641748][ T7655] netlink: 212048 bytes leftover after parsing attributes in process `syz.4.9752'.
[  867.668016][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9750'.
[  867.738487][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9756'.
[  867.868804][ T7667] bridge0: port 1(bond0) entered blocking state
[  867.894196][ T7667] bridge0: port 1(bond0) entered disabled state
[  867.904237][ T7667] bond0: entered allmulticast mode
[  867.915750][ T7667] bond0: entered promiscuous mode
[  867.961611][ T7673] bridge0: port 3(ipvlan2) entered blocking state
[  867.988481][ T7673] bridge0: port 3(ipvlan2) entered disabled state
[  867.996346][ T7673] ipvlan2: entered allmulticast mode
[  868.001992][ T7673] bridge0: entered allmulticast mode
[  868.035516][ T7673] ipvlan2: left allmulticast mode
[  868.051462][ T7673] bridge0: left allmulticast mode
[  868.107506][ T7670] netlink: 'syz.2.9760': attribute type 14 has an invalid length.
[  868.115773][ T7670] netlink: 'syz.2.9760': attribute type 13 has an invalid length.
[  868.498420][ T7714] xt_time: unknown flags 0xf4
[  868.616419][ T7723] x_tables: duplicate underflow at hook 2
[  868.757103][ T7730] syzkaller0: entered promiscuous mode
[  868.762806][ T7730] syzkaller0: entered allmulticast mode
[  868.797091][ T7730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  868.848641][ T7734] 8021q: adding VLAN 0 to HW filter on device bond2
[  869.076532][ T7753] netlink: 'syz.2.9785': attribute type 7 has an invalid length.
[  869.139223][ T7758] set match dimension is over the limit!
[  869.756981][ T7808] openvswitch: netlink: IP tunnel dst address not specified
[  869.782590][ T7810] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  869.845151][ T7806] team0: Port device team_slave_0 removed
[  869.870209][ T7818] netlink: 'syz.3.9804': attribute type 21 has an invalid length.
[  869.918488][ T7812] ip6gretap0: entered promiscuous mode
[  869.944782][ T7806] openvswitch: netlink: Invalid VLAN frame
[  869.987662][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  870.090678][ T7815] syzkaller0: entered promiscuous mode
[  870.096241][ T7815] syzkaller0: entered allmulticast mode
[  870.205184][ T7840] FAULT_INJECTION: forcing a failure.
[  870.205184][ T7840] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  870.259323][ T7840] CPU: 0 UID: 0 PID: 7840 Comm: syz.0.9810 Not tainted syzkaller #0 PREEMPT(full) 
[  870.259348][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  870.259359][ T7840] Call Trace:
[  870.259366][ T7840]  <TASK>
[  870.259374][ T7840]  dump_stack_lvl+0xe8/0x150
[  870.259400][ T7840]  should_fail_ex+0x412/0x560
[  870.259426][ T7840]  _copy_from_iter+0x1d3/0x1670
[  870.259454][ T7840]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  870.259481][ T7840]  ? __pfx__copy_from_iter+0x10/0x10
[  870.259503][ T7840]  ? __build_skb_around+0x22d/0x3c0
[  870.259526][ T7840]  ? __alloc_skb+0x193/0x390
[  870.259543][ T7840]  ? netlink_sendmsg+0x650/0xb40
[  870.259559][ T7840]  ? skb_put+0x11b/0x210
[  870.259581][ T7840]  netlink_sendmsg+0x6c0/0xb40
[  870.259608][ T7840]  ? __pfx_netlink_sendmsg+0x10/0x10
[  870.259630][ T7840]  ? aa_sock_msg_perm+0xf1/0x1b0
[  870.259653][ T7840]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  870.259682][ T7840]  ? __pfx_netlink_sendmsg+0x10/0x10
[  870.259698][ T7840]  ____sys_sendmsg+0xa68/0xad0
[  870.259719][ T7840]  ? __might_fault+0xaf/0x130
[  870.259748][ T7840]  ? __pfx_____sys_sendmsg+0x10/0x10
[  870.259778][ T7840]  ? import_iovec+0x73/0xa0
[  870.259804][ T7840]  ___sys_sendmsg+0x2a5/0x360
[  870.259824][ T7840]  ? __lock_acquire+0x6b5/0x2cf0
[  870.259850][ T7840]  ? __pfx____sys_sendmsg+0x10/0x10
[  870.259901][ T7840]  ? __fget_files+0x2a/0x420
[  870.259918][ T7840]  ? __fget_files+0x3a0/0x420
[  870.259944][ T7840]  __x64_sys_sendmsg+0x1bd/0x2a0
[  870.259968][ T7840]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  870.259997][ T7840]  ? __pfx_ksys_write+0x10/0x10
[  870.260029][ T7840]  do_syscall_64+0xe2/0xf80
[  870.260047][ T7840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.260063][ T7840]  ? trace_irq_disable+0x37/0x100
[  870.260079][ T7840]  ? clear_bhb_loop+0x60/0xb0
[  870.260099][ T7840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.260115][ T7840] RIP: 0033:0x7fdda919aeb9
[  870.260132][ T7840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  870.260146][ T7840] RSP: 002b:00007fddaa0ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  870.260165][ T7840] RAX: ffffffffffffffda RBX: 00007fdda9416180 RCX: 00007fdda919aeb9
[  870.260178][ T7840] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004
[  870.260189][ T7840] RBP: 00007fddaa0ee090 R08: 0000000000000000 R09: 0000000000000000
[  870.260201][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  870.260211][ T7840] R13: 00007fdda9416218 R14: 00007fdda9416180 R15: 00007ffe79a88b98
[  870.260241][ T7840]  </TASK>
[  872.344766][ T7843] vlan2: entered promiscuous mode
[  872.349897][ T7843] vlan2: entered allmulticast mode
[  872.355663][ T7843] hsr_slave_1: entered allmulticast mode
[  872.363248][ T7863] __nla_validate_parse: 24 callbacks suppressed
[  872.363261][ T7863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9818'.
[  872.519777][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9822'.
[  872.524160][ T7887] syzkaller0: entered promiscuous mode
[  872.538958][ T7887] syzkaller0: entered allmulticast mode
[  872.563900][ T7886] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9822'.
[  872.735298][ T7900] tipc: Started in network mode
[  872.750438][ T7900] tipc: Node identity e6c296410a51, cluster identity 4711
[  872.758727][ T7903] FAULT_INJECTION: forcing a failure.
[  872.758727][ T7903] name failslab, interval 1, probability 0, space 0, times 0
[  872.774282][ T7900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  872.809246][ T7903] CPU: 0 UID: 0 PID: 7903 Comm: syz.0.9827 Not tainted syzkaller #0 PREEMPT(full) 
[  872.809265][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  872.809272][ T7903] Call Trace:
[  872.809277][ T7903]  <TASK>
[  872.809282][ T7903]  dump_stack_lvl+0xe8/0x150
[  872.809300][ T7903]  should_fail_ex+0x412/0x560
[  872.809315][ T7903]  should_failslab+0xa8/0x100
[  872.809328][ T7903]  __kmalloc_noprof+0xde/0x7e0
[  872.809338][ T7903]  ? nla_strdup+0x9d/0x140
[  872.809351][ T7903]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  872.809362][ T7903]  nla_strdup+0x9d/0x140
[  872.809377][ T7903]  nf_tables_newchain+0x1a9a/0x2890
[  872.809399][ T7903]  ? __pfx_nf_tables_newchain+0x10/0x10
[  872.809422][ T7903]  ? nft_trans_table_add+0x230/0x430
[  872.809437][ T7903]  ? nfnl_pernet+0x23/0x240
[  872.809452][ T7903]  ? nfnl_pernet+0x23/0x240
[  872.809470][ T7903]  ? __nla_parse+0x40/0x60
[  872.809485][ T7903]  nfnetlink_rcv+0x1240/0x27b0
[  872.809517][ T7903]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  872.809539][ T7903]  ? ref_tracker_free+0x693/0x840
[  872.809565][ T7903]  ? __netlink_deliver_tap+0x807/0x850
[  872.809575][ T7903]  ? netlink_deliver_tap+0x2e/0x1b0
[  872.809593][ T7903]  netlink_unicast+0x80f/0x9b0
[  872.809613][ T7903]  ? __pfx_netlink_unicast+0x10/0x10
[  872.809626][ T7903]  ? __alloc_skb+0x193/0x390
[  872.809645][ T7903]  ? netlink_sendmsg+0x650/0xb40
[  872.809654][ T7903]  ? skb_put+0x11b/0x210
[  872.809668][ T7903]  netlink_sendmsg+0x813/0xb40
[  872.809683][ T7903]  ? __pfx_netlink_sendmsg+0x10/0x10
[  872.809695][ T7903]  ? aa_sock_msg_perm+0xf1/0x1b0
[  872.809708][ T7903]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  872.809720][ T7903]  ? __pfx_netlink_sendmsg+0x10/0x10
[  872.809729][ T7903]  ____sys_sendmsg+0xa68/0xad0
[  872.809742][ T7903]  ? __might_fault+0xaf/0x130
[  872.809761][ T7903]  ? __pfx_____sys_sendmsg+0x10/0x10
[  872.809778][ T7903]  ? import_iovec+0x73/0xa0
[  872.809795][ T7903]  ___sys_sendmsg+0x2a5/0x360
[  872.809807][ T7903]  ? __lock_acquire+0x6b5/0x2cf0
[  872.809823][ T7903]  ? __pfx____sys_sendmsg+0x10/0x10
[  872.809853][ T7903]  ? __fget_files+0x2a/0x420
[  872.809864][ T7903]  ? __fget_files+0x3a0/0x420
[  872.809879][ T7903]  __x64_sys_sendmsg+0x1bd/0x2a0
[  872.809894][ T7903]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  872.809912][ T7903]  ? __pfx_ksys_write+0x10/0x10
[  872.809933][ T7903]  do_syscall_64+0xe2/0xf80
[  872.809944][ T7903]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  872.809953][ T7903]  ? trace_irq_disable+0x37/0x100
[  872.809963][ T7903]  ? clear_bhb_loop+0x60/0xb0
[  872.809975][ T7903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  872.809984][ T7903] RIP: 0033:0x7fdda919aeb9
[  872.809994][ T7903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  872.810002][ T7903] RSP: 002b:00007fddaa130028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  872.810014][ T7903] RAX: ffffffffffffffda RBX: 00007fdda9415fa0 RCX: 00007fdda919aeb9
[  872.810022][ T7903] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  872.810028][ T7903] RBP: 00007fddaa130090 R08: 0000000000000000 R09: 0000000000000000
[  872.810034][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  872.810040][ T7903] R13: 00007fdda9416038 R14: 00007fdda9415fa0 R15: 00007ffe79a88b98
[  872.810055][ T7903]  </TASK>
[  873.191956][ T7900] syzkaller0: entered promiscuous mode
[  873.228399][ T7900] syzkaller0: entered allmulticast mode
[  873.337065][ T7925] netlink: 'syz.5.9834': attribute type 1 has an invalid length.
[  873.407961][ T7925] bond7: entered promiscuous mode
[  873.414653][ T7925] 8021q: adding VLAN 0 to HW filter on device bond7
[  873.422119][ T7899] tipc: Resetting bearer <eth:syzkaller0>
[  873.445343][ T7899] tipc: Disabling bearer <eth:syzkaller0>
[  873.456603][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9832'.
[  873.508115][ T7925] bond7: (slave bridge5): making interface the new active one
[  873.516225][ T7925] bridge5: entered promiscuous mode
[  873.524674][ T7925] bridge5: left promiscuous mode
[  873.603629][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9832'.
[  873.620128][T28367] netdevsim netdevsim3 ������: set [0, 0] type 1 family 0 port 8472 - 0
[  873.629900][T28367] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  873.640489][T28367] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  873.656260][ T7941] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  873.666689][ T7941] tipc: Enabled bearer <udp:syz0>, priority 10
[  873.674036][T28367] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  873.819565][ T7954] FAULT_INJECTION: forcing a failure.
[  873.819565][ T7954] name failslab, interval 1, probability 0, space 0, times 0
[  873.835087][ T7954] CPU: 1 UID: 0 PID: 7954 Comm: syz.4.9841 Not tainted syzkaller #0 PREEMPT(full) 
[  873.835111][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  873.835123][ T7954] Call Trace:
[  873.835131][ T7954]  <TASK>
[  873.835139][ T7954]  dump_stack_lvl+0xe8/0x150
[  873.835165][ T7954]  should_fail_ex+0x412/0x560
[  873.835191][ T7954]  should_failslab+0xa8/0x100
[  873.835213][ T7954]  __kvmalloc_node_noprof+0x166/0x8d0
[  873.835234][ T7954]  ? nf_tables_newchain+0x1c7a/0x2890
[  873.835262][ T7954]  nf_tables_newchain+0x1c7a/0x2890
[  873.835297][ T7954]  ? __pfx_nf_tables_newchain+0x10/0x10
[  873.835342][ T7954]  ? nft_trans_table_add+0x230/0x430
[  873.835366][ T7954]  ? nfnl_pernet+0x23/0x240
[  873.835390][ T7954]  ? nfnl_pernet+0x23/0x240
[  873.835422][ T7954]  ? __nla_parse+0x40/0x60
[  873.835448][ T7954]  nfnetlink_rcv+0x1240/0x27b0
[  873.835505][ T7954]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  873.835550][ T7954]  ? ref_tracker_free+0x693/0x840
[  873.835599][ T7954]  ? __netlink_deliver_tap+0x807/0x850
[  873.835617][ T7954]  ? netlink_deliver_tap+0x2e/0x1b0
[  873.835653][ T7954]  netlink_unicast+0x80f/0x9b0
[  873.835685][ T7954]  ? __pfx_netlink_unicast+0x10/0x10
[  873.835708][ T7954]  ? __alloc_skb+0x193/0x390
[  873.835728][ T7954]  ? netlink_sendmsg+0x650/0xb40
[  873.835744][ T7954]  ? skb_put+0x11b/0x210
[  873.835768][ T7954]  netlink_sendmsg+0x813/0xb40
[  873.835796][ T7954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  873.835818][ T7954]  ? aa_sock_msg_perm+0xf1/0x1b0
[  873.835841][ T7954]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  873.835861][ T7954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  873.835879][ T7954]  ____sys_sendmsg+0xa68/0xad0
[  873.835901][ T7954]  ? __might_fault+0xaf/0x130
[  873.835930][ T7954]  ? __pfx_____sys_sendmsg+0x10/0x10
[  873.835961][ T7954]  ? import_iovec+0x73/0xa0
[  873.835987][ T7954]  ___sys_sendmsg+0x2a5/0x360
[  873.836007][ T7954]  ? __lock_acquire+0x6b5/0x2cf0
[  873.836034][ T7954]  ? __pfx____sys_sendmsg+0x10/0x10
[  873.836095][ T7954]  ? __fget_files+0x2a/0x420
[  873.836112][ T7954]  ? __fget_files+0x3a0/0x420
[  873.836142][ T7954]  __x64_sys_sendmsg+0x1bd/0x2a0
[  873.836166][ T7954]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  873.836211][ T7954]  ? __pfx_ksys_write+0x10/0x10
[  873.836245][ T7954]  do_syscall_64+0xe2/0xf80
[  873.836268][ T7954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.836284][ T7954]  ? trace_irq_disable+0x37/0x100
[  873.836300][ T7954]  ? clear_bhb_loop+0x60/0xb0
[  873.836321][ T7954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.836339][ T7954] RIP: 0033:0x7f112e79aeb9
[  873.836355][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  873.836370][ T7954] RSP: 002b:00007f112f730028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  873.836389][ T7954] RAX: ffffffffffffffda RBX: 00007f112ea15fa0 RCX: 00007f112e79aeb9
[  873.836402][ T7954] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  873.836414][ T7954] RBP: 00007f112f730090 R08: 0000000000000000 R09: 0000000000000000
[  873.836426][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  873.836437][ T7954] R13: 00007f112ea16038 R14: 00007f112ea15fa0 R15: 00007ffe0d7a1698
[  873.836468][ T7954]  </TASK>
[  874.360684][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9846'.
[  874.372042][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9846'.
[  874.391886][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9846'.
[  874.419870][ T7976] netlink: 'syz.0.9850': attribute type 2 has an invalid length.
[  874.430884][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9846'.
[  874.446316][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9845'.
[  874.469477][ T7974] syzkaller0: entered promiscuous mode
[  874.477134][ T7974] syzkaller0: entered allmulticast mode
[  874.625080][ T7993] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  874.713714][T23948] tipc: Node number set to 3969095233
[  874.918711][ T8011] FAULT_INJECTION: forcing a failure.
[  874.918711][ T8011] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  874.947381][ T8011] CPU: 1 UID: 0 PID: 8011 Comm: syz.4.9856 Not tainted syzkaller #0 PREEMPT(full) 
[  874.947415][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  874.947426][ T8011] Call Trace:
[  874.947434][ T8011]  <TASK>
[  874.947443][ T8011]  dump_stack_lvl+0xe8/0x150
[  874.947469][ T8011]  should_fail_ex+0x412/0x560
[  874.947495][ T8011]  _copy_to_user+0x31/0xb0
[  874.947521][ T8011]  simple_read_from_buffer+0xe1/0x170
[  874.947544][ T8011]  proc_fail_nth_read+0x1bb/0x230
[  874.947571][ T8011]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  874.947595][ T8011]  ? rw_verify_area+0x2a6/0x4d0
[  874.947615][ T8011]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  874.947637][ T8011]  vfs_read+0x20c/0xa70
[  874.947657][ T8011]  ? fdget_pos+0x246/0x320
[  874.947679][ T8011]  ? __pfx___mutex_lock+0x10/0x10
[  874.947698][ T8011]  ? __pfx_vfs_read+0x10/0x10
[  874.947721][ T8011]  ? __fget_files+0x2a/0x420
[  874.947742][ T8011]  ? __fget_files+0x3a0/0x420
[  874.947759][ T8011]  ? __fget_files+0x2a/0x420
[  874.947785][ T8011]  ksys_read+0x150/0x270
[  874.947810][ T8011]  ? __pfx_ksys_read+0x10/0x10
[  874.947842][ T8011]  do_syscall_64+0xe2/0xf80
[  874.947860][ T8011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.947876][ T8011]  ? trace_irq_disable+0x37/0x100
[  874.947892][ T8011]  ? clear_bhb_loop+0x60/0xb0
[  874.947914][ T8011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.947930][ T8011] RIP: 0033:0x7f112e75b78e
[  874.947945][ T8011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  874.947959][ T8011] RSP: 002b:00007f112f72ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  874.947978][ T8011] RAX: ffffffffffffffda RBX: 00007f112f7306c0 RCX: 00007f112e75b78e
[  874.947991][ T8011] RDX: 000000000000000f RSI: 00007f112f7300a0 RDI: 0000000000000006
[  874.948003][ T8011] RBP: 00007f112f730090 R08: 0000000000000000 R09: 0000000000000000
[  874.948013][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  874.948023][ T8011] R13: 00007f112ea16038 R14: 00007f112ea15fa0 R15: 00007ffe0d7a1698
[  874.948053][ T8011]  </TASK>
[  875.341185][ T8024] veth3: entered promiscuous mode
[  875.363237][ T8024] veth3: entered allmulticast mode
[  875.403696][ T8031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  875.656331][ T8055] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  875.932345][ T8080] netlink: 'syz.2.9874': attribute type 11 has an invalid length.
[  875.941193][ T8080] netlink: 'syz.2.9874': attribute type 11 has an invalid length.
[  876.219440][ T8100] netlink: 'syz.3.9882': attribute type 1 has an invalid length.
[  876.263415][ T8101] netlink: 'syz.3.9882': attribute type 1 has an invalid length.
[  876.277387][ T8106] syzkaller0: entered promiscuous mode
[  876.298745][ T8106] syzkaller0: entered allmulticast mode
[  876.401864][ T8110] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  876.449751][ T8113] 8021q: adding VLAN 0 to HW filter on device bond9
[  876.474698][ T8119] syzkaller0: entered promiscuous mode
[  876.495862][ T8119] syzkaller0: entered allmulticast mode
[  876.541603][ T8114] netlink: 'syz.0.9888': attribute type 1 has an invalid length.
[  876.569751][ T8114] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  876.582561][ T8114] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  876.593710][ T8114] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  876.849610][ T8135] sctp: [Deprecated]: syz.3.9894 (pid 8135) Use of int in maxseg socket option.
[  876.849610][ T8135] Use struct sctp_assoc_value instead
[  876.933995][ T8141] block nbd0: not configured, cannot reconfigure
[  877.034381][ T8149] tipc: Started in network mode
[  877.050957][ T8149] tipc: Node identity e0000001, cluster identity 4711
[  877.061082][ T8149] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  877.133004][ T8154] 8021q: adding VLAN 0 to HW filter on device bond2
[  877.214430][ T8161] geneve3: entered promiscuous mode
[  877.457162][ T8174] erspan0: entered allmulticast mode
[  877.495201][ T8176] __nla_validate_parse: 17 callbacks suppressed
[  877.495226][ T8176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9908'.
[  877.529333][ T8178] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9909'.
[  877.550103][ T8181] netem: change failed
[  877.602750][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9908'.
[  877.621724][ T8185] netlink: 'syz.5.9909': attribute type 1 has an invalid length.
[  877.707896][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9911'.
[  877.780738][ T8185] bond8: (slave ip6gretap2): making interface the new active one
[  877.797407][ T8185] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  877.815738][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9911'.
[  877.844456][ T8185] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  877.861613][ T8185] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link
[  877.877067][ T8203] netlink: 'syz.4.9912': attribute type 33 has an invalid length.
[  877.970805][ T8203] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  877.988080][ T8203] bond2 (unregistering): Released all slaves
[  878.168297][ T8212] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9917'.
[  878.351614][ T8231] netlink: 'syz.4.9924': attribute type 39 has an invalid length.
[  913.023815][ T7351] Bluetooth: hci4: command 0x0406 tx timeout
[  923.263076][ T7351] Bluetooth: hci6: command 0x0406 tx timeout
[  931.430693][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  953.955337][ T8264] syzkaller0: entered promiscuous mode
[  953.960854][ T8264] syzkaller0: entered allmulticast mode
[  954.191054][ T8287] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  954.220406][ T8285] IPv6: sit1: Disabled Multicast RS
[  954.230419][ T8285] sit1: entered allmulticast mode
[  954.392038][ T8304] netlink: 'syz.4.9942': attribute type 1 has an invalid length.
[  954.441279][ T8306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9944'.
[  954.475080][ T8306] IPVS: Error connecting to the multicast addr
[  954.726265][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9945'.
[  954.735960][ T8314] macsec0: left promiscuous mode
[  954.746691][ T8314] macsec0: left allmulticast mode
[  954.929178][ T8320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  954.947046][ T8320] syzkaller0: entered promiscuous mode
[  954.967064][ T8320] syzkaller0: entered allmulticast mode
[  955.057693][ T8320] tipc: Resetting bearer <eth:syzkaller0>
[  955.115786][ T8319] tipc: Resetting bearer <eth:syzkaller0>
[  955.220725][ T8319] tipc: Disabling bearer <eth:syzkaller0>
[  955.286608][ T8336] bond0: Error: Cannot enslave bond to itself.
[  955.461091][ T8347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  955.539010][ T8347] syzkaller0: MTU too low for tipc bearer
[  955.557875][ T8347] tipc: Disabling bearer <eth:syzkaller0>
[  955.587626][ T8353] netlink: 'syz.3.9952': attribute type 1 has an invalid length.
[  955.939966][ T8382] syzkaller1: entered promiscuous mode
[  955.956354][ T8382] syzkaller1: entered allmulticast mode
[  956.072604][ T8392] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9959'.
[  956.094951][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9964'.
[  956.144371][ T8404] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  956.466417][ T8428] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  956.514726][ T8435] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  956.537682][ T8437] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  956.688212][ T8448] veth1_macvtap: left promiscuous mode
[  956.917764][ T8455] lo: entered promiscuous mode
[  956.928421][ T8455] tunl0: entered promiscuous mode
[  956.941136][ T8455] gre0: entered promiscuous mode
[  956.967917][ T8455] gretap0: entered promiscuous mode
[  956.977109][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9977'.
[  957.007370][ T8455] ip_vti0: entered promiscuous mode
[  957.020698][ T8458] netlink: 204 bytes leftover after parsing attributes in process `syz.2.9976'.
[  957.033728][ T8458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9976'.
[  957.069003][ T8458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9976'.
[  957.098445][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9976'.
[  957.120143][ T8468] sch_tbf: burst 1885 is lower than device lo mtu (11337746) !
[  957.197694][ T8482] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9979'.
[  957.217441][ T8469] sch_tbf: burst 1885 is lower than device lo mtu (11337746) !
[  957.831554][ T8520] netlink: 'syz.5.9988': attribute type 142 has an invalid length.
[  958.136673][ T8538] bond0: left promiscuous mode
[  958.159133][ T8538] bond0: left allmulticast mode
[  958.176546][ T8538] bridge0: port 1(bond0) entered disabled state
[  958.202634][ T8538] bond2: (slave ip6gretap1): Removing an active aggregator
[  958.215163][ T8538] bond2: (slave ip6gretap1): Releasing backup interface
[  958.229515][ T8538] bond8: (slave ip6gretap2): Releasing active interface
[  958.248567][ T5489] veth1_macvtap: entered promiscuous mode
[  958.461519][ T8552] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  958.487257][ T8549] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  958.810310][ T8580] netlink: 'syz.0.10001': attribute type 28 has an invalid length.
[  958.841943][ T8580] netlink: 'syz.0.10001': attribute type 3 has an invalid length.
[  959.014832][ T8574] ip6gretap0: left promiscuous mode
[  959.192425][ T8574] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  959.268588][ T8599] netlink: 'syz.2.10006': attribute type 10 has an invalid length.
[  959.317539][ T8599] 8021q: adding VLAN 0 to HW filter on device team0
[  959.367478][ T8599] bond0: (slave team0): Enslaving as an active interface with an up link
[  959.435227][ T8604] delete_channel: no stack
[  959.567754][ T8611] __nla_validate_parse: 4 callbacks suppressed
[  959.567772][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10009'.
[  959.765605][ T8623] x_tables: duplicate underflow at hook 1
[  959.854387][ T8611] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  959.861601][ T5883] IPVS: starting estimator thread 0...
[  959.951306][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10014'.
[  959.978693][ T8631] syzkaller0: entered promiscuous mode
[  959.985253][ T8631] syzkaller0: entered allmulticast mode
[  959.994521][ T8627] IPVS: using max 38 ests per chain, 91200 per kthread
[  960.011417][ T8639] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10015'.
[  960.018909][ T8632] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.10012'.
[  960.157183][   T30] audit: type=1107 audit(1769847491.082:10): pid=8645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='r��b��~B��O��iA�&)�t���)�6������u��2���1|�~0�?>P���\�iS��׫��c��9r-�O�/So(�Y�+1j��]�]3,��S�$:� |�/��i�Bó�-��7kI���<��s�,+Z0c�j��RNy&�(}���9��u�Oc�`{Bc��}7�a��nt�7�?��u�a���j��H{luq�3�)a+.h"}'
[  960.327812][ T8661] netlink: 'syz.4.10017': attribute type 10 has an invalid length.
[  960.356161][ T8663] FAULT_INJECTION: forcing a failure.
[  960.356161][ T8663] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  960.380678][ T8663] CPU: 0 UID: 0 PID: 8663 Comm: syz.3.10019 Not tainted syzkaller #0 PREEMPT(full) 
[  960.380701][ T8663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  960.380712][ T8663] Call Trace:
[  960.380719][ T8663]  <TASK>
[  960.380728][ T8663]  dump_stack_lvl+0xe8/0x150
[  960.380756][ T8663]  should_fail_ex+0x412/0x560
[  960.380782][ T8663]  _copy_to_user+0x31/0xb0
[  960.380809][ T8663]  simple_read_from_buffer+0xe1/0x170
[  960.380833][ T8663]  proc_fail_nth_read+0x1bb/0x230
[  960.380860][ T8663]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  960.380886][ T8663]  ? rw_verify_area+0x2a6/0x4d0
[  960.380907][ T8663]  ? tun_chr_write_iter+0xe0/0x200
[  960.380923][ T8663]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  960.380947][ T8663]  vfs_read+0x20c/0xa70
[  960.380968][ T8663]  ? fdget_pos+0x246/0x320
[  960.380991][ T8663]  ? __pfx___mutex_lock+0x10/0x10
[  960.381012][ T8663]  ? __pfx_vfs_read+0x10/0x10
[  960.381036][ T8663]  ? __fget_files+0x2a/0x420
[  960.381060][ T8663]  ? __fget_files+0x3a0/0x420
[  960.381077][ T8663]  ? __fget_files+0x2a/0x420
[  960.381104][ T8663]  ksys_read+0x150/0x270
[  960.381129][ T8663]  ? __pfx_ksys_read+0x10/0x10
[  960.381163][ T8663]  do_syscall_64+0xe2/0xf80
[  960.381182][ T8663]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.381197][ T8663]  ? trace_irq_disable+0x37/0x100
[  960.381212][ T8663]  ? clear_bhb_loop+0x60/0xb0
[  960.381234][ T8663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.381256][ T8663] RIP: 0033:0x7ff10855b78e
[  960.381273][ T8663] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  960.381289][ T8663] RSP: 002b:00007ff109459fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  960.381308][ T8663] RAX: ffffffffffffffda RBX: 00007ff10945a6c0 RCX: 00007ff10855b78e
[  960.381321][ T8663] RDX: 000000000000000f RSI: 00007ff10945a0a0 RDI: 0000000000000005
[  960.381332][ T8663] RBP: 00007ff10945a090 R08: 0000000000000000 R09: 0000000000000000
[  960.381343][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  960.381353][ T8663] R13: 00007ff108816218 R14: 00007ff108816180 R15: 00007ffd2b2beaa8
[  960.381383][ T8663]  </TASK>
[  960.630452][ T8656] syzkaller1: entered promiscuous mode
[  960.637202][ T8656] syzkaller1: entered allmulticast mode
[  960.658463][ T8661] team0: Device ipvlan1 failed to register rx_handler
[  960.671385][ T8658] syzkaller1: entered promiscuous mode
[  960.677558][ T8658] syzkaller1: entered allmulticast mode
[  961.151240][ T8666] netlink: 'syz.2.10020': attribute type 29 has an invalid length.
[  961.190548][ T8682] netlink: 'syz.2.10020': attribute type 29 has an invalid length.
[  961.339706][ T8692] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10026'.
[  961.529573][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10026'.
[  961.566935][ T8709] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10030'.
[  961.592447][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10028'.
[  961.781575][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10032'.
[  961.822667][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10032'.
[  961.981441][ T8724] syzkaller1: entered promiscuous mode
[  962.007388][ T8724] syzkaller1: entered allmulticast mode
[  962.222121][ T8741] netlink: 'syz.4.10037': attribute type 2 has an invalid length.
[  962.230659][ T8741] netlink: 'syz.4.10037': attribute type 8 has an invalid length.
[  963.078248][ T8795] netlink: 'syz.3.10054': attribute type 25 has an invalid length.
[  963.110643][ T8792] dvmrp6: entered allmulticast mode
[  963.596124][ T8834] block nbd0: not configured, cannot reconfigure
[  964.087233][ T8859] can: request_module (can-proto-0) failed.
[  964.159623][ T8874] sctp: [Deprecated]: syz.4.10075 (pid 8874) Use of int in max_burst socket option deprecated.
[  964.159623][ T8874] Use struct sctp_assoc_value instead
[  964.223664][ T7351] Bluetooth: hci2: command 0x0401 tx timeout
[  964.351976][ T8888] syzkaller1: entered promiscuous mode
[  964.357887][ T8888] syzkaller1: entered allmulticast mode
[  964.418540][ T8893] batadv1: entered allmulticast mode
[  964.458183][ T8895] netlink: 'syz.5.10081': attribute type 4 has an invalid length.
[  964.471779][ T8896] geneve2: entered promiscuous mode
[  965.092577][ T8925] x_tables: duplicate underflow at hook 3
[  965.419959][ T8944] __nla_validate_parse: 21 callbacks suppressed
[  965.419978][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10096'.
[  965.436893][ T8944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10096'.
[  967.453537][ T8895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  967.621885][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10101'.
[  967.817599][ T8975] IPv6: NLM_F_CREATE should be specified when creating new route
[  967.858493][ T8978] dummy0: left allmulticast mode
[  967.875392][ T8973] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10107'.
[  968.127397][ T8997] syzkaller0: entered promiscuous mode
[  968.132900][ T8997] syzkaller0: entered allmulticast mode
[  968.156113][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10114'.
[  968.353434][ T9009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10117'.
[  968.442084][ T9012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  968.706936][ T9026] netlink: 288 bytes leftover after parsing attributes in process `syz.5.10122'.
[  968.730402][ T9031] netlink: 288 bytes leftover after parsing attributes in process `syz.5.10122'.
[  968.788268][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10123'.
[  968.840845][ T9033] xt_hashlimit: overflow, rate too high: 0
[  969.139290][ T9061] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10131'.
[  969.159704][ T9056] syzkaller0: entered promiscuous mode
[  969.165832][ T9056] syzkaller0: entered allmulticast mode
[  969.203289][ T9065] netlink: 'syz.3.10132': attribute type 1 has an invalid length.
[  969.214607][ T9065] netlink: 'syz.3.10132': attribute type 2 has an invalid length.
[  969.346493][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  969.499759][ T9084] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  969.508210][ T9084] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  969.701464][ T9093] netlink: 'syz.3.10141': attribute type 1 has an invalid length.
[  969.822475][ T9099] x_tables: unsorted underflow at hook 4
[  969.849214][ T9101] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  970.001868][ T9106] syzkaller0: entered promiscuous mode
[  970.014142][ T9106] syzkaller0: entered allmulticast mode
[  970.540358][ T9136] block nbd0: server does not support multiple connections per device.
[  970.578786][ T9136] block nbd0: shutting down sockets
[  970.723671][ T9153] __nla_validate_parse: 10 callbacks suppressed
[  970.723690][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10153'.
[  970.859852][ T9156] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  970.894406][ T9161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10155'.
[  970.896025][ T9156] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  971.044315][ T9174] netlink: 'syz.2.10158': attribute type 3 has an invalid length.
[  971.188793][ T9163] syzkaller0: entered promiscuous mode
[  971.201549][ T9163] syzkaller0: entered allmulticast mode
[  971.290477][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10161'.
[  971.350124][ T9191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10162'.
[  971.363068][ T9191] netlink: 'syz.2.10162': attribute type 7 has an invalid length.
[  971.370898][ T9191] netlink: 'syz.2.10162': attribute type 8 has an invalid length.
[  971.430097][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10162'.
[  971.468620][ T9199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10162'.
[  971.511200][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10163'.
[  973.155843][ T9218] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10168'.
[  973.217481][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10169'.
[  973.291158][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10172'.
[  973.345543][ T9225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  973.366186][ T9225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  973.378074][ T9225] bond0 (unregistering): Released all slaves
[  973.448036][ T9236] ip6_vti0: left promiscuous mode
[  973.712353][ T9260] rdma_op ffff8880645729f0 conn xmit_rdma 0000000000000000
[  973.819082][ T9263] macsec2: entered promiscuous mode
[  973.838640][ T9263] bridge0: entered promiscuous mode
[  973.859631][ T9263] macsec2: entered allmulticast mode
[  973.875360][ T9263] bridge0: entered allmulticast mode
[  973.893760][ T9263] bridge0: port 1(macsec2) entered blocking state
[  973.911000][ T9263] bridge0: port 1(macsec2) entered disabled state
[  973.940041][ T9263] bridge0: left allmulticast mode
[  973.947636][ T9263] bridge0: left promiscuous mode
[  974.006717][ T9279] netlink: 'syz.4.10184': attribute type 12 has an invalid length.
[  974.067053][ T9279] netlink: 'syz.4.10184': attribute type 29 has an invalid length.
[  974.187896][ T9295] netlink: 'syz.2.10187': attribute type 1 has an invalid length.
[  974.242054][ T9295] bond3: entered promiscuous mode
[  974.268469][ T9295] 8021q: adding VLAN 0 to HW filter on device bond3
[  974.366197][ T9295] bond3: (slave bridge6): making interface the new active one
[  974.390217][ T9295] bridge6: entered promiscuous mode
[  974.421087][ T9295] bond3: (slave bridge6): Enslaving as an active interface with an up link
[  974.476220][ T9312] netlink: 'syz.3.10193': attribute type 1 has an invalid length.
[  974.550683][ T9312] 8021q: adding VLAN 0 to HW filter on device bond0
[  974.616790][ T9322] bond0: (slave veth1): Enslaving as an active interface with a down link
[  974.747883][ T9312] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  974.839589][ T9322] bond0: (slave veth5): Enslaving as an active interface with a down link
[  974.894307][ T9322] netlink: 'syz.3.10193': attribute type 1 has an invalid length.
[  974.921295][ T9322] netlink: 'syz.3.10193': attribute type 2 has an invalid length.
[  975.869709][ T9347] __nla_validate_parse: 12 callbacks suppressed
[  975.869728][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10203'.
[  975.990628][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10203'.
[  976.054612][ T9372] netlink: 'syz.4.10206': attribute type 14 has an invalid length.
[  976.352211][ T9406] netlink: 'syz.0.10210': attribute type 1 has an invalid length.
[  976.393415][ T9403] xt_TCPMSS: Only works on TCP SYN packets
[  976.419351][ T9409] netlink: 'syz.4.10215': attribute type 1 has an invalid length.
[  976.430362][ T9409] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10215'.
[  976.512470][ T9406] bond4: entered promiscuous mode
[  976.533702][ T9406] 8021q: adding VLAN 0 to HW filter on device bond4
[  976.913906][ T9435] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  977.019339][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10221'.
[  977.172018][ T9442] 8021q: adding VLAN 0 to HW filter on device bond3
[  977.196688][ T9455] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  977.229657][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10224'.
[  977.263777][ T9455] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10224'.
[  977.586934][ T9473] netlink: 'syz.0.10230': attribute type 13 has an invalid length.
[  977.592737][ T9479] netlink: 'syz.2.10233': attribute type 9 has an invalid length.
[  977.815623][ T9497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10238'.
[  977.832671][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10234'.
[  977.886692][ T9482] netlink: 'syz.4.10234': attribute type 3 has an invalid length.
[  977.894717][ T9482] netlink: 'syz.4.10234': attribute type 1 has an invalid length.
[  977.907664][ T9482] netlink: 212 bytes leftover after parsing attributes in process `syz.4.10234'.
[  977.927935][ T9494] syzkaller1: entered promiscuous mode
[  977.938262][ T9482] NCSI netlink: No device for ifindex 813332851
[  977.945774][ T9494] syzkaller1: entered allmulticast mode
[  977.970057][ T9499] lo speed is unknown, defaulting to 1000
[  978.001633][ T9503] syzkaller0: entered promiscuous mode
[  978.008326][ T9503] syzkaller0: entered allmulticast mode
[  978.028220][ T9503] sit1: entered promiscuous mode
[  978.033713][ T9503] sit1: entered allmulticast mode
[  978.636064][ T9499] ip6_vti0 speed is unknown, defaulting to 1000
[  978.700900][ T9509] syzkaller0: entered promiscuous mode
[  978.707114][ T9509] syzkaller0: entered allmulticast mode
[  979.112480][ T9542] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10249'.
[  980.918137][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10252'.
[  981.251065][ T9565] lo: entered promiscuous mode
[  981.259580][ T9565] tunl0: entered promiscuous mode
[  981.269169][ T9565] gre0: entered promiscuous mode
[  981.365715][ T9565] erspan0: left allmulticast mode
[  981.388362][ T9565] ip_vti0: entered promiscuous mode
[  981.555767][ T9591] Bluetooth: MGMT ver 1.23
[  981.588325][ T9592] netlink: 216 bytes leftover after parsing attributes in process `syz.0.10260'.
[  981.664475][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10261'.
[  982.116655][ T9609] syzkaller0: entered promiscuous mode
[  982.139396][ T9609] syzkaller0: entered allmulticast mode
[  982.296035][ T9616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  982.320813][ T9632] syzkaller1: entered allmulticast mode
[  982.338787][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10270'.
[  982.360106][ T9634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10270'.
[  982.590539][ T9649] bond4: option all_slaves_active: invalid value (222)
[  982.600380][ T9649] bond4 (unregistering): Released all slaves
[  982.687987][ T9660] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.10276'.
[  982.698121][ T9660] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  982.812645][ T9608] tipc: Resetting bearer <eth:syzkaller0>
[  982.836229][ T9608] tipc: Disabling bearer <eth:syzkaller0>
[  982.984828][ T9678] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10282'.
[  983.147162][ T9686] netlink: 'syz.0.10285': attribute type 6 has an invalid length.
[  983.167800][ T9686] lo: Caught tx_queue_len zero misconfig
[  983.251306][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10287'.
[  983.270289][ T9690] tc_dump_action: action bad kind
[  983.916623][ T9737] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10300'.
[  984.116017][ T9745] dvmrp0: entered allmulticast mode
[  984.147313][ T9749] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10305'.
[  984.178603][ T9752] bridge0: port 2(bridge_slave_1) entered disabled state
[  984.185846][ T9752] bridge0: port 1(bridge_slave_0) entered disabled state
[  984.379255][ T9758] xt_CT: No such helper "syz1"
[  984.446155][ T9774] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  984.498261][ T9769] syzkaller1: entered promiscuous mode
[  984.511661][ T9769] syzkaller1: entered allmulticast mode
[  984.624941][ T9784] netlink: 'syz.4.10314': attribute type 4 has an invalid length.
[  984.692028][ T9789] netlink: 'syz.4.10314': attribute type 4 has an invalid length.
[  984.987757][ T9801] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004
[  985.015065][ T9801] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004
[  985.047016][ T9801] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004
[  985.191048][ T9812] bridge0: port 3(syz_tun) entered blocking state
[  985.209402][ T9812] bridge0: port 3(syz_tun) entered disabled state
[  985.222142][ T9812] syz_tun: entered allmulticast mode
[  985.237882][ T9812] syz_tun: entered promiscuous mode
[  985.250147][ T9816] netlink: 'syz.4.10319': attribute type 11 has an invalid length.
[  985.258789][ T9812] bridge0: port 3(syz_tun) entered blocking state
[  985.265319][ T9812] bridge0: port 3(syz_tun) entered forwarding state
[  985.356797][ T9814] tipc: Started in network mode
[  985.361749][ T9814] tipc: Node identity 3654612e8f85, cluster identity 4711
[  985.369121][ T9814] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  985.377370][ T9814] syzkaller0: entered promiscuous mode
[  985.382920][ T9814] syzkaller0: entered allmulticast mode
[  985.450677][ T9813] tipc: Resetting bearer <eth:syzkaller0>
[  985.538767][ T9831] netlink: 'syz.0.10323': attribute type 1 has an invalid length.
[  985.557398][ T9831] netlink: 'syz.0.10323': attribute type 3 has an invalid length.
[  985.566578][ T9813] tipc: Disabling bearer <eth:syzkaller0>
[  985.588166][ T9831] netlink: 'syz.0.10323': attribute type 7 has an invalid length.
[  985.598697][ T9831] netlink: 'syz.0.10323': attribute type 8 has an invalid length.
[  985.639115][ T9831] NCSI netlink: No device for ifindex 131092
[  985.838328][ T9838] netlink: 'syz.0.10325': attribute type 2 has an invalid length.
[  986.054392][ T9851] __nla_validate_parse: 8 callbacks suppressed
[  986.054410][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10329'.
[  986.747557][ T9893] netlink: 'syz.3.10343': attribute type 1 has an invalid length.
[  986.761166][ T9893] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10343'.
[  986.822346][ T9899] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10345'.
[  987.181769][   T30] audit: type=1107 audit(1769847518.102:11): pid=9920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  987.241794][ T9927] bond11: option lp_interval: invalid value (0)
[  987.273433][ T9927] bond11: option lp_interval: allowed values 1 - 2147483647
[  987.287519][ T9927] bond11 (unregistering): Released all slaves
[  987.307255][ T9934] IPv6: NLM_F_CREATE should be specified when creating new route
[  987.830831][ T9959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10362'.
[  987.842774][ T9959] ipt_ECN: cannot use operation on non-tcp rule
[  988.508760][ T9975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10367'.
[  988.656399][ T9994] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  988.813959][T10004] nbd: must specify a device to reconfigure
[  988.948752][T10010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  988.956353][T10014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10380'.
[  988.972558][T10019] netlink: 'syz.5.10378': attribute type 1 has an invalid length.
[  989.052255][T10019] bond9: entered promiscuous mode
[  989.057916][T10019] 8021q: adding VLAN 0 to HW filter on device bond9
[  989.079933][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10384'.
[  989.112128][T10028] 8021q: adding VLAN 0 to HW filter on device bond9
[  989.158214][T10028] bond9: (slave gre1): The slave device specified does not support setting the MAC address
[  989.190455][T10028] bond9: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  989.203443][T10028] bond9: (slave gre1): making interface the new active one
[  989.210710][T10028] gre1: entered promiscuous mode
[  989.218216][T10028] bond9: (slave gre1): Enslaving as an active interface with an up link
[  989.405866][T10051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10388'.
[  989.424649][T10051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10388'.
[  990.004398][T10099] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  990.352280][T10119] netlink: 'syz.3.10410': attribute type 9 has an invalid length.
[  990.368897][T10127] IPVS: ip_vs_add_dest(): server weight less than zero
[  990.410130][T10132] netlink: 'syz.0.10414': attribute type 1 has an invalid length.
[  990.414142][T10127] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  990.448932][T10127] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  990.470226][T10127] gretap2: entered promiscuous mode
[  990.485519][T10127] gretap2: entered allmulticast mode
[  990.549918][T10136] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address
[  990.561256][T10136] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  990.576417][T10136] bond5: (slave xfrm1): making interface the new active one
[  990.584685][T10136] bond5: (slave xfrm1): Enslaving as an active interface with an up link
[  990.684234][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10414'.
[  990.701098][T10132] bond5 (unregistering): (slave xfrm1): Releasing backup interface
[  990.718137][T10132] bond5 (unregistering): Released all slaves
[  991.013900][T10168] syzkaller0: entered promiscuous mode
[  991.019410][T10168] syzkaller0: entered allmulticast mode
[  991.287403][T10190] team0: Device gtp0 is up. Set it down before adding it as a team port
[  991.376458][T10197] __nla_validate_parse: 1 callbacks suppressed
[  991.376475][T10197] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10431'.
[  991.420388][T10197] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10431'.
[  991.535053][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10438'.
[  991.635621][T10212] netlink: 'syz.5.10439': attribute type 21 has an invalid length.
[  991.644332][T10212] IPv6: NLM_F_CREATE should be specified when creating new route
[  991.652124][T10212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  991.659367][T10212] IPv6: NLM_F_CREATE should be set when creating new route
[  991.666619][T10212] IPv6: NLM_F_CREATE should be set when creating new route
[  991.673849][T10212] IPv6: NLM_F_CREATE should be set when creating new route
[  991.852141][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10441'.
[  991.873353][T10227] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10441'.
[  992.053839][T10241] sctp: [Deprecated]: syz.3.10446 (pid 10241) Use of struct sctp_assoc_value in delayed_ack socket option.
[  992.053839][T10241] Use struct sctp_sack_info instead
[  992.384668][T10260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10452'.
[  992.878155][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  992.886004][T10286] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10456'.
[  993.039403][T10291] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10460'.
[  993.069623][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10461'.
[  993.084565][T10298] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  993.210348][T10311] netlink: 'syz.3.10465': attribute type 18 has an invalid length.
[  993.231339][T10313] netlink: 'syz.5.10466': attribute type 1 has an invalid length.
[  993.246222][T10313] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10466'.
[  993.414607][T10327] syz_tun: entered allmulticast mode
[  993.492678][T10327] syz_tun (unregistering): left allmulticast mode
[  993.730355][T10347] netlink: 'syz.4.10476': attribute type 25 has an invalid length.
[  993.846848][T10357] FAULT_INJECTION: forcing a failure.
[  993.846848][T10357] name failslab, interval 1, probability 0, space 0, times 0
[  993.860224][T10357] CPU: 1 UID: 0 PID: 10357 Comm: syz.3.10479 Not tainted syzkaller #0 PREEMPT(full) 
[  993.860247][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  993.860257][T10357] Call Trace:
[  993.860265][T10357]  <TASK>
[  993.860273][T10357]  dump_stack_lvl+0xe8/0x150
[  993.860298][T10357]  should_fail_ex+0x412/0x560
[  993.860324][T10357]  should_failslab+0xa8/0x100
[  993.860345][T10357]  kmem_cache_alloc_noprof+0x87/0x6e0
[  993.860367][T10357]  ? __netlink_lookup+0xc6/0x8b0
[  993.860386][T10357]  ? skb_clone+0x212/0x3a0
[  993.860413][T10357]  skb_clone+0x212/0x3a0
[  993.860437][T10357]  __netlink_deliver_tap+0x404/0x850
[  993.860465][T10357]  ? netlink_deliver_tap+0x2e/0x1b0
[  993.860485][T10357]  netlink_deliver_tap+0x19c/0x1b0
[  993.860503][T10357]  netlink_unicast+0x7e3/0x9b0
[  993.860534][T10357]  ? __pfx_netlink_unicast+0x10/0x10
[  993.860556][T10357]  ? __alloc_skb+0x193/0x390
[  993.860575][T10357]  ? netlink_sendmsg+0x650/0xb40
[  993.860597][T10357]  netlink_sendmsg+0x813/0xb40
[  993.860624][T10357]  ? __pfx_netlink_sendmsg+0x10/0x10
[  993.860646][T10357]  ? aa_sock_msg_perm+0xf1/0x1b0
[  993.860668][T10357]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  993.860688][T10357]  ? __pfx_netlink_sendmsg+0x10/0x10
[  993.860713][T10357]  ____sys_sendmsg+0xa68/0xad0
[  993.860743][T10357]  ? __pfx_____sys_sendmsg+0x10/0x10
[  993.860773][T10357]  ? import_iovec+0x73/0xa0
[  993.860800][T10357]  ___sys_sendmsg+0x2a5/0x360
[  993.860819][T10357]  ? __lock_acquire+0x6b5/0x2cf0
[  993.860845][T10357]  ? __pfx____sys_sendmsg+0x10/0x10
[  993.860904][T10357]  ? __fget_files+0x2a/0x420
[  993.860922][T10357]  ? __fget_files+0x3a0/0x420
[  993.860950][T10357]  __x64_sys_sendmsg+0x1bd/0x2a0
[  993.860973][T10357]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  993.861003][T10357]  ? __pfx_ksys_write+0x10/0x10
[  993.861037][T10357]  do_syscall_64+0xe2/0xf80
[  993.861056][T10357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.861073][T10357]  ? trace_irq_disable+0x37/0x100
[  993.861089][T10357]  ? clear_bhb_loop+0x60/0xb0
[  993.861109][T10357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.861126][T10357] RIP: 0033:0x7ff10859aeb9
[  993.861142][T10357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  993.861156][T10357] RSP: 002b:00007ff10949c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  993.861175][T10357] RAX: ffffffffffffffda RBX: 00007ff108815fa0 RCX: 00007ff10859aeb9
[  993.861188][T10357] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003
[  993.861200][T10357] RBP: 00007ff10949c090 R08: 0000000000000000 R09: 0000000000000000
[  993.861211][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  993.861222][T10357] R13: 00007ff108816038 R14: 00007ff108815fa0 R15: 00007ffd2b2beaa8
[  993.861255][T10357]  </TASK>
[  994.320793][T10371] netem: invalid attributes len -24
[  994.326853][T10371] netem: change failed
[  994.390478][T10377] tipc: New replicast peer: 255.255.255.255
[  994.421952][T10377] tipc: Enabled bearer <udp:syz2>, priority 10
[  994.483907][T10382] sit0: entered promiscuous mode
[  994.500171][T10382] netlink: 'syz.2.10490': attribute type 1 has an invalid length.
[  994.513903][T10385] FAULT_INJECTION: forcing a failure.
[  994.513903][T10385] name failslab, interval 1, probability 0, space 0, times 0
[  994.536445][T10385] CPU: 1 UID: 0 PID: 10385 Comm: syz.3.10491 Not tainted syzkaller #0 PREEMPT(full) 
[  994.536469][T10385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  994.536480][T10385] Call Trace:
[  994.536488][T10385]  <TASK>
[  994.536496][T10385]  dump_stack_lvl+0xe8/0x150
[  994.536523][T10385]  should_fail_ex+0x412/0x560
[  994.536548][T10385]  should_failslab+0xa8/0x100
[  994.536569][T10385]  kmem_cache_alloc_noprof+0x87/0x6e0
[  994.536592][T10385]  ? __netlink_lookup+0xc6/0x8b0
[  994.536612][T10385]  ? skb_clone+0x212/0x3a0
[  994.536646][T10385]  skb_clone+0x212/0x3a0
[  994.536671][T10385]  __netlink_deliver_tap+0x404/0x850
[  994.536701][T10385]  ? netlink_deliver_tap+0x2e/0x1b0
[  994.536722][T10385]  netlink_deliver_tap+0x19c/0x1b0
[  994.536741][T10385]  netlink_unicast+0x7e3/0x9b0
[  994.536772][T10385]  ? __pfx_netlink_unicast+0x10/0x10
[  994.536795][T10385]  ? __alloc_skb+0x193/0x390
[  994.536814][T10385]  ? netlink_sendmsg+0x650/0xb40
[  994.536837][T10385]  netlink_sendmsg+0x813/0xb40
[  994.536865][T10385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  994.536887][T10385]  ? aa_sock_msg_perm+0xf1/0x1b0
[  994.536910][T10385]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  994.536930][T10385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  994.536947][T10385]  ____sys_sendmsg+0xa68/0xad0
[  994.536978][T10385]  ? __pfx_____sys_sendmsg+0x10/0x10
[  994.537009][T10385]  ? import_iovec+0x73/0xa0
[  994.537035][T10385]  ___sys_sendmsg+0x2a5/0x360
[  994.537056][T10385]  ? __lock_acquire+0x6b5/0x2cf0
[  994.537082][T10385]  ? __pfx____sys_sendmsg+0x10/0x10
[  994.537139][T10385]  ? __fget_files+0x2a/0x420
[  994.537157][T10385]  ? __fget_files+0x3a0/0x420
[  994.537185][T10385]  __x64_sys_sendmsg+0x1bd/0x2a0
[  994.537210][T10385]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  994.537242][T10385]  ? __pfx_ksys_write+0x10/0x10
[  994.537276][T10385]  do_syscall_64+0xe2/0xf80
[  994.537295][T10385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  994.537311][T10385]  ? trace_irq_disable+0x37/0x100
[  994.537327][T10385]  ? clear_bhb_loop+0x60/0xb0
[  994.537348][T10385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  994.537365][T10385] RIP: 0033:0x7ff10859aeb9
[  994.537381][T10385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  994.537396][T10385] RSP: 002b:00007ff10949c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  994.537415][T10385] RAX: ffffffffffffffda RBX: 00007ff108815fa0 RCX: 00007ff10859aeb9
[  994.537428][T10385] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003
[  994.537440][T10385] RBP: 00007ff10949c090 R08: 0000000000000000 R09: 0000000000000000
[  994.537451][T10385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  994.537461][T10385] R13: 00007ff108816038 R14: 00007ff108815fa0 R15: 00007ffd2b2beaa8
[  994.537492][T10385]  </TASK>
[  994.946996][T10399] x_tables: duplicate underflow at hook 1
[  995.298483][T10433] netlink: 'syz.4.10505': attribute type 10 has an invalid length.
[  995.348517][T10433] team0: Device veth1_macvtap failed to register rx_handler
[  995.531518][ T5869] tipc: Node number set to 1091059708
[  996.244090][T10480] mac80211_hwsim hwsim68 wlan0: entered promiscuous mode
[  996.281000][T10484] IPv6: NLM_F_CREATE should be specified when creating new route
[  996.488672][T10481] syzkaller0: entered promiscuous mode
[  996.525002][T10481] syzkaller0: entered allmulticast mode
[  996.557269][T10480] openvswitch: netlink: IP tunnel dst address not specified
[  996.566846][T10480] ksmbd: Unknown IPC event: 3, ignore.
[  996.584838][T10503] syzkaller1: entered promiscuous mode
[  996.592089][T10503] syzkaller1: entered allmulticast mode
[  999.302073][T10549] netlink: 'syz.2.10535': attribute type 28 has an invalid length.
[  999.331328][T10545] syzkaller1: entered promiscuous mode
[  999.343372][T10549] netlink: 'syz.2.10535': attribute type 3 has an invalid length.
[  999.351309][T10545] syzkaller1: entered allmulticast mode
[  999.358751][T10542] __nla_validate_parse: 16 callbacks suppressed
[  999.358765][T10542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10531'.
[  999.376177][T10549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10535'.
[  999.712955][T10575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10541'.
[  999.737342][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10539'.
[  999.782808][T10577] syzkaller0: entered promiscuous mode
[  999.807578][T10577] syzkaller0: entered allmulticast mode
[  999.988125][T10592] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1000.046637][T10597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10546'.
[ 1000.072352][T10600] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10547'.
[ 1000.094825][T10597] xfrm2: entered promiscuous mode
[ 1000.108368][T10597] xfrm2: entered allmulticast mode
[ 1000.131863][T10597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10546'.
[ 1000.132624][T10592] tipc: Disabling bearer <eth:syzkaller0>
[ 1000.287371][T10616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10551'.
[ 1000.388687][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10552'.
[ 1000.439083][T10620] netlink: 260 bytes leftover after parsing attributes in process `syz.0.10552'.
[ 1000.638688][T10640] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1000.647557][T10640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1000.654837][T10640] IPv6: NLM_F_CREATE should be set when creating new route
[ 1001.032923][T10662] veth7: entered allmulticast mode
[ 1001.348043][T10693] netlink: 'syz.3.10571': attribute type 1 has an invalid length.
[ 1001.537016][T10709] netlink: 'syz.4.10577': attribute type 10 has an invalid length.
[ 1001.616305][T10709] team0: Port device geneve0 added
[ 1001.772479][T10714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1001.789972][T10714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1001.878510][T10714] macvtap0: left allmulticast mode
[ 1001.899279][T10714] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[ 1001.919190][T10714] mac80211_hwsim hwsim71 wlan0: left promiscuous mode
[ 1001.940026][T10714] veth3: left promiscuous mode
[ 1001.945891][T10714] veth3: left allmulticast mode
[ 1001.954426][T10714] bond4: left promiscuous mode
[ 1001.989450][T10726] IPVS: Unknown mcast interface: vcan0
[ 1001.997361][T12865] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1002.041806][T12865] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1002.064916][T12865] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1002.086926][T10726] netlink: 'syz.4.10583': attribute type 2 has an invalid length.
[ 1002.129121][T10747] netlink: 'syz.0.10588': attribute type 3 has an invalid length.
[ 1002.149139][T12865] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1002.207377][T10755] netlink: 'syz.4.10590': attribute type 21 has an invalid length.
[ 1002.265337][T10755] netlink: 'syz.4.10590': attribute type 1 has an invalid length.
[ 1002.599355][T10782] netlink: 'syz.2.10599': attribute type 1 has an invalid length.
[ 1002.639922][T10782] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1003.259691][T10814] bond4: option all_slaves_active: invalid value (222)
[ 1003.338670][T10814] bond4 (unregistering): Released all slaves
[ 1003.608435][T10828] syzkaller0: entered promiscuous mode
[ 1003.623122][T10828] syzkaller0: entered allmulticast mode
[ 1003.859061][T10852] geneve3: entered promiscuous mode
[ 1004.421503][T10880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1004.428725][T10879] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1004.442636][T10888] __nla_validate_parse: 20 callbacks suppressed
[ 1004.442652][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10630'.
[ 1004.512934][T10889] syzkaller0: entered promiscuous mode
[ 1004.520158][T10889] syzkaller0: entered allmulticast mode
[ 1004.529166][T10889] tipc: Resetting bearer <eth:syzkaller0>
[ 1004.536207][T10884] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10632'.
[ 1004.571248][T10878] tipc: Resetting bearer <eth:syzkaller0>
[ 1006.239944][T10878] tipc: Disabling bearer <eth:syzkaller0>
[ 1006.249576][T10890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1006.262535][T10894] syzkaller0: entered promiscuous mode
[ 1006.273257][T10894] syzkaller0: entered allmulticast mode
[ 1006.294092][T10909] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[ 1006.350905][T10924] netlink: 'syz.4.10640': attribute type 1 has an invalid length.
[ 1006.350938][T10913] tipc: Resetting bearer <eth:syzkaller0>
[ 1006.372739][T10885] tipc: Resetting bearer <eth:syzkaller0>
[ 1006.401969][T10885] tipc: Disabling bearer <eth:syzkaller0>
[ 1006.466882][T10929] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1006.545986][T10924] netlink: 'syz.4.10640': attribute type 10 has an invalid length.
[ 1006.555066][T10924] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10640'.
[ 1007.320175][T10978] netlink: 'syz.0.10652': attribute type 1 has an invalid length.
[ 1007.396345][T10993] xt_hashlimit: max too large, truncated to 1048576
[ 1007.401402][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10655'.
[ 1007.589347][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10656'.
[ 1007.807690][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10662'.
[ 1007.952448][T11030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10664'.
[ 1008.183508][T11044] netlink: 'syz.5.10670': attribute type 21 has an invalid length.
[ 1008.254414][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10671'.
[ 1008.278260][T11053] syzkaller0: entered promiscuous mode
[ 1008.288338][T11053] syzkaller0: entered allmulticast mode
[ 1008.295918][ T5489] veth0_macvtap: left promiscuous mode
[ 1008.325909][T11056] netlink: 'syz.3.10674': attribute type 33 has an invalid length.
[ 1008.352015][T11056] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10674'.
[ 1008.448767][T11059] bridge7: port 1(veth7) entered blocking state
[ 1008.472561][T11059] bridge7: port 1(veth7) entered disabled state
[ 1008.481303][T11059] veth7: entered allmulticast mode
[ 1008.489236][T11059] veth7: entered promiscuous mode
[ 1008.498837][T11060] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10673'.
[ 1008.529631][T11051] bridge7: port 2(veth0_to_bond) entered blocking state
[ 1008.540532][T11051] bridge7: port 2(veth0_to_bond) entered disabled state
[ 1008.552686][T11051] veth0_to_bond: entered allmulticast mode
[ 1008.562341][T11051] veth0_to_bond: entered promiscuous mode
[ 1008.651571][T11072] lo speed is unknown, defaulting to 1000
[ 1008.719130][T11081] can: request_module (can-proto-0) failed.
[ 1008.798695][T11086] netlink: 'syz.3.10681': attribute type 1 has an invalid length.
[ 1009.096087][T11105] nbd0: detected capacity change from 0 to 127
[ 1009.120783][ T7351] block nbd0: Receive control failed (result -104)
[ 1009.339223][T11122] netlink: 'syz.0.10689': attribute type 11 has an invalid length.
[ 1009.565324][T11138] netlink: 'syz.2.10693': attribute type 10 has an invalid length.
[ 1009.588169][T11138] __nla_validate_parse: 1 callbacks suppressed
[ 1009.588187][T11138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10693'.
[ 1009.618856][T11138] dummy0: entered promiscuous mode
[ 1009.653708][T11138] bridge0: port 3(dummy0) entered blocking state
[ 1009.660175][T11138] bridge0: port 3(dummy0) entered disabled state
[ 1009.715648][T11138] dummy0: entered allmulticast mode
[ 1009.737460][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10695'.
[ 1009.773915][T11147] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.10695'.
[ 1009.837014][T11150] netlink: 'syz.5.10697': attribute type 1 has an invalid length.
[ 1009.947468][T11150] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10697'.
[ 1010.008351][T11072] ip6_vti0 speed is unknown, defaulting to 1000
[ 1010.135325][T11166] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[ 1010.145910][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10701'.
[ 1010.374306][T11177] syzkaller0: entered promiscuous mode
[ 1010.379816][T11177] syzkaller0: entered allmulticast mode
[ 1011.296016][T11234] netlink: 'syz.0.10719': attribute type 1 has an invalid length.
[ 1011.412210][T11234] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1011.628915][T11253] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10722'.
[ 1011.652554][T11253] netlink: 'syz.2.10722': attribute type 32 has an invalid length.
[ 1011.695934][T11242] vlan1: entered allmulticast mode
[ 1011.701091][T11242] bond5: entered allmulticast mode
[ 1011.792944][T11234] bond5: (slave gretap1): making interface the new active one
[ 1011.810447][T11234] gretap1: entered allmulticast mode
[ 1011.831723][T11234] bond5: (slave gretap1): Enslaving as an active interface with an up link
[ 1012.165655][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10724'.
[ 1012.180503][T11269] ieee802154 phy1 wpan1: encryption failed: -22
[ 1012.359661][T11276] syzkaller0: entered promiscuous mode
[ 1012.374941][T11276] syzkaller0: entered allmulticast mode
[ 1012.639131][T11289] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1012.728169][T11306] xt_CT: No such helper "pptp"
[ 1012.900191][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10735'.
[ 1013.108474][T11319] hsr_slave_0: left promiscuous mode
[ 1013.140623][T11319] hsr_slave_1: left promiscuous mode
[ 1013.294984][T11340] IPVS: stopping master sync thread 9774 ...
[ 1013.416440][T11352] netlink: 'syz.0.10746': attribute type 39 has an invalid length.
[ 1013.472472][T11352] bond0: (slave syz_tun): Releasing backup interface
[ 1013.609658][T11374] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10753'.
[ 1013.742506][T11379] netlink: 'syz.2.10756': attribute type 10 has an invalid length.
[ 1013.763566][T11379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10756'.
[ 1013.813579][T11379] team0: Port device geneve0 added
[ 1013.859789][T11397] syzkaller0: entered promiscuous mode
[ 1013.866937][T11397] syzkaller0: entered allmulticast mode
[ 1013.946979][T11397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1013.985760][T11396] tipc: Resetting bearer <eth:syzkaller0>
[ 1014.031664][T11396] tipc: Disabling bearer <eth:syzkaller0>
[ 1014.068641][T11412] ipvlan2: entered allmulticast mode
[ 1014.077075][T11412] batadv_slave_1: entered allmulticast mode
[ 1014.087651][T11412] batman_adv: batadv0: Adding interface: ipvlan2
[ 1014.106639][T11412] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1014.134582][T11424] x_tables: duplicate entry at hook 1
[ 1014.141958][T11412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1014.156582][T11412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1014.171398][T11412] batman_adv: batadv0: Interface activated: ipvlan2
[ 1014.209655][T11424] netlink: 'syz.5.10765': attribute type 1 has an invalid length.
[ 1014.210246][T11426] netlink: 'syz.2.10767': attribute type 1 has an invalid length.
[ 1014.228520][T11424] netlink: 'syz.5.10765': attribute type 1 has an invalid length.
[ 1014.286384][T11426] netlink: 'syz.2.10767': attribute type 4 has an invalid length.
[ 1014.457611][T11440] veth0: entered promiscuous mode
[ 1014.466965][T11448] netlink: 'syz.5.10774': attribute type 4 has an invalid length.
[ 1014.485894][T11441] veth0: left promiscuous mode
[ 1014.732284][T11463] bridge0: port 3(syz_tun) entered disabled state
[ 1014.739284][T11463] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1014.746985][T11463] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1014.917130][T11473] netlink: 'syz.3.10781': attribute type 16 has an invalid length.
[ 1014.937225][T11473] netlink: 'syz.3.10781': attribute type 17 has an invalid length.
[ 1015.009673][T11473] lo: left promiscuous mode
[ 1015.030088][T11473] tunl0: left promiscuous mode
[ 1015.079536][T11473] gre0: left promiscuous mode
[ 1015.164429][T11473] gretap0: left promiscuous mode
[ 1015.181169][T11473] ip_vti0: left promiscuous mode
[ 1015.221747][T11473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1015.507159][T11494] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1015.548162][T11506] __nla_validate_parse: 6 callbacks suppressed
[ 1015.548179][T11506] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10788'.
[ 1015.775321][T11523] xt_time: unknown flags 0xf4
[ 1015.796080][T11502] syzkaller0: entered promiscuous mode
[ 1015.801729][T11502] syzkaller0: entered allmulticast mode
[ 1015.809821][T11502] tipc: Resetting bearer <eth:syzkaller0>
[ 1015.817592][T11525] openvswitch: netlink: IP tunnel dst address not specified
[ 1015.844974][T11481] tipc: Resetting bearer <eth:syzkaller0>
[ 1017.800902][T11481] tipc: Disabling bearer <eth:syzkaller0>
[ 1018.028861][T11574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10804'.
[ 1018.054655][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10803'.
[ 1018.116162][T11581] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10806'.
[ 1018.189442][T11588] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001
[ 1018.255583][T11592] team0 (unregistering): Port device team_slave_1 removed
[ 1018.310675][T11581] lo speed is unknown, defaulting to 1000
[ 1018.579772][T11611] validate_nla: 1 callbacks suppressed
[ 1018.579791][T11611] netlink: 'syz.2.10814': attribute type 21 has an invalid length.
[ 1018.758563][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10816'.
[ 1018.830351][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10816'.
[ 1018.909109][T11581] ip6_vti0 speed is unknown, defaulting to 1000
[ 1019.631114][T11660] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[ 1019.698987][T11660] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[ 1019.699398][T11654] netlink: 'syz.2.10826': attribute type 2 has an invalid length.
[ 1019.732032][T11666] netlink: 'syz.3.10829': attribute type 18 has an invalid length.
[ 1019.879516][T11676] SET target dimension over the limit!
[ 1019.887293][T11672] bridge0: port 3(syz_tun) entered blocking state
[ 1019.893884][T11672] bridge0: port 3(syz_tun) entered forwarding state
[ 1019.900814][T11672] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1019.908129][T11672] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1019.915628][T11672] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1019.922767][T11672] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1019.946611][T11672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1020.059254][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10833'.
[ 1020.330487][T11691] netlink: 'syz.4.10837': attribute type 9 has an invalid length.
[ 1020.481566][T11698] sch_tbf: burst 0 is lower than device lo mtu (1550) !
[ 1020.694392][T11707] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1020.695977][T11702] syzkaller1: entered promiscuous mode
[ 1020.780177][T11702] syzkaller1: entered allmulticast mode
[ 1021.245921][T11748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10857'.
[ 1021.277653][T11751] netlink: 45 bytes leftover after parsing attributes in process `syz.3.10859'.
[ 1021.295749][T11748] tipc: Invalid UDP bearer configuration
[ 1021.295804][T11748] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1021.488326][T11763] ieee802154 phy1 wpan1: encryption failed: -22
[ 1021.549530][T11765] netlink: 'syz.3.10863': attribute type 18 has an invalid length.
[ 1021.558185][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10863'.
[ 1021.569085][T11765] netlink: 'syz.3.10863': attribute type 18 has an invalid length.
[ 1021.613402][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10863'.
[ 1021.672483][T11773] tipc: New replicast peer: 255.255.255.255
[ 1021.687567][T11773] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1021.785715][T11780] syzkaller0: entered promiscuous mode
[ 1021.801737][T11780] syzkaller0: entered allmulticast mode
[ 1021.821316][T11780] 0: reclassify loop, rule prio 0, protocol 800
[ 1022.021807][T11798] vlan3: entered promiscuous mode
[ 1022.038586][T11798] bridge0: entered promiscuous mode
[ 1022.176185][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10877'.
[ 1022.243525][T11819] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10879'.
[ 1022.509284][T11839] netlink: 'syz.2.10883': attribute type 21 has an invalid length.
[ 1022.524421][T11839] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10883'.
[ 1022.549919][T11839] netlink: 'syz.2.10883': attribute type 5 has an invalid length.
[ 1022.566491][T11839] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10883'.
[ 1022.804349][T11855] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1023.442508][T11889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10896'.
[ 1023.509071][T11889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10896'.
[ 1023.736652][T11900] tipc: Started in network mode
[ 1023.741614][T11900] tipc: Node identity 7257d979a931, cluster identity 4711
[ 1023.750149][T11900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1023.776599][T11868] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1023.782923][T11868] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1023.896445][T11900] syzkaller0: entered promiscuous mode
[ 1023.917800][T11900] syzkaller0: entered allmulticast mode
[ 1023.932819][T11900] tipc: Resetting bearer <eth:syzkaller0>
[ 1023.940129][T11868] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1023.948817][T11868] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1024.517894][ T3145] tipc: Resetting bearer <eth:syzkaller0>
[ 1024.532314][T11899] tipc: Resetting bearer <eth:syzkaller0>
[ 1026.059274][T11899] tipc: Disabling bearer <eth:syzkaller0>
[ 1026.120248][  T798] tipc: Node number set to 3680950649
[ 1026.121598][T11868] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1026.156855][T11868] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[ 1026.175898][T11868] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1026.178008][T11934] netlink: 'syz.3.10907': attribute type 4 has an invalid length.
[ 1026.181813][T11868] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1026.225759][T11868] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1026.237823][T11868] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1026.271721][T11937] bridge0: port 1(bond0) entered blocking state
[ 1026.278137][T11937] bridge0: port 1(bond0) entered disabled state
[ 1026.286112][T11937] bond0: entered allmulticast mode
[ 1026.296944][T11937] bond0: entered promiscuous mode
[ 1026.321527][T11939] __nla_validate_parse: 10 callbacks suppressed
[ 1026.321542][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10908'.
[ 1026.510598][T11955] syzkaller0: entered promiscuous mode
[ 1026.544004][T11955] syzkaller0: entered allmulticast mode
[ 1026.566037][T11955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10914'.
[ 1026.789473][T11975] netlink: 'syz.5.10920': attribute type 14 has an invalid length.
[ 1026.798645][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10920'.
[ 1027.218068][T12001] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10929'.
[ 1027.424064][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10931'.
[ 1027.589034][T12020] lo speed is unknown, defaulting to 1000
[ 1027.597162][T12026] syzkaller0: entered promiscuous mode
[ 1027.602640][T12026] syzkaller0: entered allmulticast mode
[ 1027.832423][T12035] netlink: 'syz.2.10937': attribute type 29 has an invalid length.
[ 1027.897531][T12037] netlink: 'syz.2.10937': attribute type 29 has an invalid length.
[ 1028.301452][T12020] ip6_vti0 speed is unknown, defaulting to 1000
[ 1028.379802][T12068] xt_hashlimit: size too large, truncated to 1048576
[ 1028.396194][T12070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10947'.
[ 1028.665371][T12032] siw: device registration error -23
[ 1028.808729][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10953'.
[ 1028.817764][T12090] openvswitch: netlink: IP tunnel dst address not specified
[ 1028.834309][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10953'.
[ 1028.911715][T12096] x_tables: duplicate underflow at hook 1
[ 1029.180776][T12110] xt_hashlimit: size too large, truncated to 1048576
[ 1029.190477][T12111] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10961'.
[ 1029.410348][T12115] syzkaller0: entered promiscuous mode
[ 1029.420905][T12119] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10962'.
[ 1029.444650][T12115] syzkaller0: entered allmulticast mode
[ 1030.030575][T12148] netlink: 'syz.2.10973': attribute type 12 has an invalid length.
[ 1030.293857][T12159] team0 (unregistering): Port device team_slave_0 removed
[ 1030.322722][T12159] team0 (unregistering): Port device team_slave_1 removed
[ 1030.366393][T12173] netlink: 'syz.2.10980': attribute type 1 has an invalid length.
[ 1030.391721][T12173] netlink: 'syz.2.10980': attribute type 10 has an invalid length.
[ 1030.427364][T12173] veth0_vlan: left promiscuous mode
[ 1030.437878][T12173] veth0_vlan: entered promiscuous mode
[ 1030.452532][T12173] team0: Device veth0_vlan failed to register rx_handler
[ 1031.237634][T12240] netlink: 'syz.4.10999': attribute type 1 has an invalid length.
[ 1031.427527][T12249] dvmrp6: left allmulticast mode
[ 1031.435121][T12253] __nla_validate_parse: 7 callbacks suppressed
[ 1031.435138][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11003'.
[ 1031.465164][T12253] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11003'.
[ 1031.493305][T12254] netlink: 'syz.0.11003': attribute type 1 has an invalid length.
[ 1031.517899][T12253] gretap2: entered promiscuous mode
[ 1031.524283][T12259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11000'.
[ 1031.533049][T12253] gretap2: entered allmulticast mode
[ 1031.600101][T12253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11003'.
[ 1031.610491][T12262] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[ 1031.639678][T12253] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1031.704480][T12264] netlink: 'syz.4.11007': attribute type 9 has an invalid length.
[ 1031.918260][T12272] netlink: 'syz.0.11010': attribute type 21 has an invalid length.
[ 1031.951426][T12272] netlink: 'syz.0.11010': attribute type 1 has an invalid length.
[ 1032.062746][T12276] netlink: 401 bytes leftover after parsing attributes in process `syz.4.11011'.
[ 1032.565510][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11016'.
[ 1032.725756][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11024'.
[ 1032.742613][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11023'.
[ 1032.782650][T12326] netlink: 'syz.3.11024': attribute type 7 has an invalid length.
[ 1032.802216][T12326] netlink: 'syz.3.11024': attribute type 8 has an invalid length.
[ 1032.830928][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11024'.
[ 1032.881845][T12326] ip6gretap0: entered promiscuous mode
[ 1032.904574][T12326] syz_tun: entered promiscuous mode
[ 1032.937352][T12326] gretap0: entered promiscuous mode
[ 1033.014970][T12339] 
[ 1033.017322][T12339] ======================================================
[ 1033.024339][T12339] WARNING: possible circular locking dependency detected
[ 1033.031363][T12339] syzkaller #0 Not tainted
[ 1033.035769][T12339] ------------------------------------------------------
[ 1033.042764][T12339] syz.3.11024/12339 is trying to acquire lock:
[ 1033.048891][T12339] ffff8881423db548 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[ 1033.058273][T12339] 
[ 1033.058273][T12339] but task is already holding lock:
[ 1033.065632][T12339] ffff8881423db008 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x198/0x450
[ 1033.075809][T12339] 
[ 1033.075809][T12339] which lock already depends on the new lock.
[ 1033.075809][T12339] 
[ 1033.086191][T12339] 
[ 1033.086191][T12339] the existing dependency chain (in reverse order) is:
[ 1033.095187][T12339] 
[ 1033.095187][T12339] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}:
[ 1033.103777][T12339]        blk_alloc_queue+0x52f/0x610
[ 1033.109049][T12339]        __blk_mq_alloc_disk+0x197/0x390
[ 1033.114669][T12339]        nbd_dev_add+0x499/0xb50
[ 1033.119595][T12339]        nbd_init+0x168/0x1f0
[ 1033.124259][T12339]        do_one_initcall+0x250/0x840
[ 1033.129534][T12339]        do_initcall_level+0x104/0x190
[ 1033.134990][T12339]        do_initcalls+0x59/0xa0
[ 1033.139828][T12339]        kernel_init_freeable+0x2a6/0x3d0
[ 1033.145533][T12339]        kernel_init+0x1d/0x1d0
[ 1033.150373][T12339]        ret_from_fork+0x51b/0xa40
[ 1033.155473][T12339]        ret_from_fork_asm+0x1a/0x30
[ 1033.160749][T12339] 
[ 1033.160749][T12339] -> #5 (fs_reclaim){+.+.}-{0:0}:
[ 1033.167950][T12339]        fs_reclaim_acquire+0x71/0x100
[ 1033.173396][T12339]        __kmalloc_cache_node_noprof+0x45/0x6d0
[ 1033.179623][T12339]        create_worker+0x113/0x7e0
[ 1033.184720][T12339]        workqueue_prepare_cpu+0xe4/0x170
[ 1033.190425][T12339]        cpuhp_invoke_callback+0x445/0x860
[ 1033.196217][T12339]        _cpu_up+0x2ce/0x5b0
[ 1033.200791][T12339]        cpu_up+0x1d2/0x220
[ 1033.205275][T12339]        cpuhp_bringup_mask+0xb2/0x1a0
[ 1033.210715][T12339]        cpuhp_bringup_cpus_parallel+0x109/0x120
[ 1033.217026][T12339]        bringup_nonboot_cpus+0x17/0x30
[ 1033.222557][T12339]        smp_init+0x32/0x110
[ 1033.227140][T12339]        kernel_init_freeable+0x288/0x3d0
[ 1033.232849][T12339]        kernel_init+0x1d/0x1d0
[ 1033.237683][T12339]        ret_from_fork+0x51b/0xa40
[ 1033.242782][T12339]        ret_from_fork_asm+0x1a/0x30
[ 1033.248055][T12339] 
[ 1033.248055][T12339] -> #4 (cpu_hotplug_lock){++++}-{0:0}:
[ 1033.255772][T12339]        cpus_read_lock+0x42/0x160
[ 1033.260873][T12339]        static_key_slow_inc+0x12/0x30
[ 1033.266321][T12339]        nbd_genl_reconfigure+0x132f/0x1ea0
[ 1033.272202][T12339]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1033.278256][T12339]        genl_rcv_msg+0x61c/0x7a0
[ 1033.283265][T12339]        netlink_rcv_skb+0x232/0x4b0
[ 1033.288532][T12339]        genl_rcv+0x28/0x40
[ 1033.293025][T12339]        netlink_unicast+0x80f/0x9b0
[ 1033.298297][T12339]        netlink_sendmsg+0x813/0xb40
[ 1033.303567][T12339]        ____sys_sendmsg+0xa68/0xad0
[ 1033.308836][T12339]        ___sys_sendmsg+0x2a5/0x360
[ 1033.314021][T12339]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1033.319468][T12339]        do_syscall_64+0xe2/0xf80
[ 1033.324474][T12339]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1033.330876][T12339] 
[ 1033.330876][T12339] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1033.338508][T12339]        __mutex_lock+0x19f/0x1300
[ 1033.343603][T12339]        nbd_queue_rq+0x37b/0x1100
[ 1033.348704][T12339]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1033.354750][T12339]        __blk_mq_sched_dispatch_requests+0xdce/0x15d0
[ 1033.361581][T12339]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1033.368064][T12339]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1033.373687][T12339]        blk_mq_dispatch_list+0xd16/0xe10
[ 1033.379390][T12339]        blk_mq_flush_plug_list+0x48d/0x570
[ 1033.385263][T12339]        __blk_flush_plug+0x3ed/0x4d0
[ 1033.390618][T12339]        __submit_bio+0x4c6/0x5d0
[ 1033.395625][T12339]        submit_bio_noacct_nocheck+0x2f4/0xa20
[ 1033.401759][T12339]        block_read_full_folio+0x599/0x830
[ 1033.407557][T12339]        filemap_read_folio+0x137/0x3b0
[ 1033.413090][T12339]        do_read_cache_folio+0x358/0x590
[ 1033.418717][T12339]        read_part_sector+0xb6/0x2b0
[ 1033.423984][T12339]        adfspart_check_ICS+0xa5/0xa40
[ 1033.429427][T12339]        bdev_disk_changed+0x765/0x14c0
[ 1033.434954][T12339]        blkdev_get_whole+0x380/0x510
[ 1033.440306][T12339]        bdev_open+0x31e/0xd30
[ 1033.445048][T12339]        blkdev_open+0x470/0x610
[ 1033.449969][T12339]        do_dentry_open+0x7ce/0x1420
[ 1033.455235][T12339]        vfs_open+0x3b/0x340
[ 1033.459805][T12339]        path_openat+0x3486/0x3e20
[ 1033.464903][T12339]        do_filp_open+0x22d/0x490
[ 1033.469917][T12339]        do_sys_openat2+0x12f/0x220
[ 1033.475098][T12339]        __x64_sys_openat+0x138/0x170
[ 1033.480455][T12339]        do_syscall_64+0xe2/0xf80
[ 1033.485460][T12339]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1033.491856][T12339] 
[ 1033.491856][T12339] -> #2 (&cmd->lock){+.+.}-{4:4}:
[ 1033.499054][T12339]        __mutex_lock+0x19f/0x1300
[ 1033.504153][T12339]        nbd_queue_rq+0xc6/0x1100
[ 1033.509163][T12339]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1033.515214][T12339]        __blk_mq_sched_dispatch_requests+0xdce/0x15d0
[ 1033.522047][T12339]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1033.528528][T12339]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1033.534150][T12339]        blk_mq_dispatch_list+0xd16/0xe10
[ 1033.539852][T12339]        blk_mq_flush_plug_list+0x48d/0x570
[ 1033.545728][T12339]        __blk_flush_plug+0x3ed/0x4d0
[ 1033.551081][T12339]        __submit_bio+0x4c6/0x5d0
[ 1033.556086][T12339]        submit_bio_noacct_nocheck+0x2f4/0xa20
[ 1033.562224][T12339]        block_read_full_folio+0x599/0x830
[ 1033.568016][T12339]        filemap_read_folio+0x137/0x3b0
[ 1033.573553][T12339]        do_read_cache_folio+0x358/0x590
[ 1033.579168][T12339]        read_part_sector+0xb6/0x2b0
[ 1033.584435][T12339]        adfspart_check_ICS+0xa5/0xa40
[ 1033.589876][T12339]        bdev_disk_changed+0x765/0x14c0
[ 1033.595404][T12339]        blkdev_get_whole+0x380/0x510
[ 1033.600758][T12339]        bdev_open+0x31e/0xd30
[ 1033.605503][T12339]        blkdev_open+0x470/0x610
[ 1033.610423][T12339]        do_dentry_open+0x7ce/0x1420
[ 1033.615694][T12339]        vfs_open+0x3b/0x340
[ 1033.620273][T12339]        path_openat+0x3486/0x3e20
[ 1033.625370][T12339]        do_filp_open+0x22d/0x490
[ 1033.630381][T12339]        do_sys_openat2+0x12f/0x220
[ 1033.635564][T12339]        __x64_sys_openat+0x138/0x170
[ 1033.640924][T12339]        do_syscall_64+0xe2/0xf80
[ 1033.645937][T12339]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1033.652336][T12339] 
[ 1033.652336][T12339] -> #1 (set->srcu){.+.+}-{0:0}:
[ 1033.659451][T12339]        __synchronize_srcu+0xca/0x3e0
[ 1033.664902][T12339]        elevator_switch+0x1e8/0x750
[ 1033.670171][T12339]        elevator_change+0x2cc/0x450
[ 1033.675438][T12339]        elevator_set_default+0x36c/0x430
[ 1033.681138][T12339]        blk_register_queue+0x34e/0x3f0
[ 1033.686666][T12339]        __add_disk+0x677/0xd50
[ 1033.691499][T12339]        add_disk_fwnode+0xfb/0x480
[ 1033.696684][T12339]        nbd_dev_add+0x72c/0xb50
[ 1033.701605][T12339]        nbd_init+0x168/0x1f0
[ 1033.706270][T12339]        do_one_initcall+0x250/0x840
[ 1033.711542][T12339]        do_initcall_level+0x104/0x190
[ 1033.716986][T12339]        do_initcalls+0x59/0xa0
[ 1033.721826][T12339]        kernel_init_freeable+0x2a6/0x3d0
[ 1033.727539][T12339]        kernel_init+0x1d/0x1d0
[ 1033.732387][T12339]        ret_from_fork+0x51b/0xa40
[ 1033.737495][T12339]        ret_from_fork_asm+0x1a/0x30
[ 1033.742772][T12339] 
[ 1033.742772][T12339] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[ 1033.750580][T12339]        __lock_acquire+0x15a5/0x2cf0
[ 1033.755944][T12339]        lock_acquire+0x106/0x330
[ 1033.760956][T12339]        __mutex_lock+0x19f/0x1300
[ 1033.766052][T12339]        elevator_change+0x1b3/0x450
[ 1033.771324][T12339]        elevator_set_none+0xb5/0x140
[ 1033.776685][T12339]        blk_mq_update_nr_hw_queues+0x5e7/0x1ae0
[ 1033.783012][T12339]        nbd_start_device+0x17f/0xb10
[ 1033.788375][T12339]        nbd_genl_connect+0x165b/0x1cf0
[ 1033.793907][T12339]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1033.799965][T12339]        genl_rcv_msg+0x61c/0x7a0
[ 1033.804974][T12339]        netlink_rcv_skb+0x232/0x4b0
[ 1033.810246][T12339]        genl_rcv+0x28/0x40
[ 1033.814737][T12339]        netlink_unicast+0x80f/0x9b0
[ 1033.820015][T12339]        netlink_sendmsg+0x813/0xb40
[ 1033.825284][T12339]        ____sys_sendmsg+0xa68/0xad0
[ 1033.830557][T12339]        ___sys_sendmsg+0x2a5/0x360
[ 1033.835746][T12339]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1033.841196][T12339]        do_syscall_64+0xe2/0xf80
[ 1033.846209][T12339]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1033.852609][T12339] 
[ 1033.852609][T12339] other info that might help us debug this:
[ 1033.852609][T12339] 
[ 1033.862819][T12339] Chain exists of:
[ 1033.862819][T12339]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#54
[ 1033.862819][T12339] 
[ 1033.876552][T12339]  Possible unsafe locking scenario:
[ 1033.876552][T12339] 
[ 1033.883991][T12339]        CPU0                    CPU1
[ 1033.889338][T12339]        ----                    ----
[ 1033.894687][T12339]   lock(&q->q_usage_counter(io)#54);
[ 1033.900054][T12339]                                lock(fs_reclaim);
[ 1033.906539][T12339]                                lock(&q->q_usage_counter(io)#54);
[ 1033.914421][T12339]   lock(&q->elevator_lock);
[ 1033.919006][T12339] 
[ 1033.919006][T12339]  *** DEADLOCK ***
[ 1033.919006][T12339] 
[ 1033.927139][T12339] 6 locks held by syz.3.11024/12339:
[ 1033.932410][T12339]  #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1033.940592][T12339]  #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1033.949547][T12339]  #2: ffff8881423f89d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0
[ 1033.960938][T12339]  #3: ffff8881423f88d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0
[ 1033.971894][T12339]  #4: ffff8881423db008 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x198/0x450
[ 1033.982507][T12339]  #5: ffff8881423db040 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[ 1033.993371][T12339] 
[ 1033.993371][T12339] stack backtrace:
[ 1033.999243][T12339] CPU: 1 UID: 0 PID: 12339 Comm: syz.3.11024 Not tainted syzkaller #0 PREEMPT(full) 
[ 1033.999261][T12339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1033.999272][T12339] Call Trace:
[ 1033.999280][T12339]  <TASK>
[ 1033.999288][T12339]  dump_stack_lvl+0xe8/0x150
[ 1033.999308][T12339]  print_circular_bug+0x2e1/0x300
[ 1033.999326][T12339]  check_noncircular+0x12e/0x150
[ 1033.999343][T12339]  __lock_acquire+0x15a5/0x2cf0
[ 1033.999372][T12339]  ? elevator_change+0x1b3/0x450
[ 1033.999386][T12339]  lock_acquire+0x106/0x330
[ 1033.999404][T12339]  ? elevator_change+0x1b3/0x450
[ 1033.999423][T12339]  __mutex_lock+0x19f/0x1300
[ 1033.999439][T12339]  ? elevator_change+0x1b3/0x450
[ 1033.999455][T12339]  ? rcu_is_watching+0x15/0xb0
[ 1033.999470][T12339]  ? elevator_change+0x1b3/0x450
[ 1033.999486][T12339]  ? __pfx___mutex_lock+0x10/0x10
[ 1033.999506][T12339]  ? enable_work+0x17f/0x230
[ 1033.999521][T12339]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1033.999539][T12339]  ? __cancel_work_sync+0xf7/0x110
[ 1033.999554][T12339]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[ 1033.999572][T12339]  elevator_change+0x1b3/0x450
[ 1033.999590][T12339]  elevator_set_none+0xb5/0x140
[ 1033.999604][T12339]  ? __pfx_elevator_set_none+0x10/0x10
[ 1033.999620][T12339]  ? xa_load+0x1db/0x210
[ 1033.999639][T12339]  blk_mq_update_nr_hw_queues+0x5e7/0x1ae0
[ 1033.999662][T12339]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1033.999677][T12339]  ? kernfs_add_one+0x46f/0x5c0
[ 1033.999699][T12339]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[ 1033.999721][T12339]  ? sysfs_add_file_mode_ns+0x259/0x300
[ 1033.999742][T12339]  nbd_start_device+0x17f/0xb10
[ 1033.999766][T12339]  ? device_create_file+0xf4/0x1b0
[ 1033.999787][T12339]  nbd_genl_connect+0x165b/0x1cf0
[ 1033.999811][T12339]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1033.999834][T12339]  ? rcu_is_watching+0x15/0xb0
[ 1033.999849][T12339]  ? __nla_parse+0x40/0x60
[ 1033.999869][T12339]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1033.999893][T12339]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1033.999914][T12339]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1033.999937][T12339]  ? __lock_acquire+0x6b5/0x2cf0
[ 1033.999959][T12339]  genl_rcv_msg+0x61c/0x7a0
[ 1033.999979][T12339]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1033.999997][T12339]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1034.000021][T12339]  netlink_rcv_skb+0x232/0x4b0
[ 1034.000036][T12339]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1034.000055][T12339]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1034.000068][T12339]  ? genl_rcv+0x19/0x40
[ 1034.000091][T12339]  ? down_read+0x272/0x2e0
[ 1034.000106][T12339]  ? genl_rcv+0xd/0x40
[ 1034.000124][T12339]  genl_rcv+0x28/0x40
[ 1034.000140][T12339]  netlink_unicast+0x80f/0x9b0
[ 1034.000164][T12339]  ? __pfx_netlink_unicast+0x10/0x10
[ 1034.000183][T12339]  ? __alloc_skb+0x193/0x390
[ 1034.000201][T12339]  ? netlink_sendmsg+0x650/0xb40
[ 1034.000215][T12339]  ? skb_put+0x11b/0x210
[ 1034.000233][T12339]  netlink_sendmsg+0x813/0xb40
[ 1034.000251][T12339]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1034.000267][T12339]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1034.000285][T12339]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1034.000302][T12339]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1034.000316][T12339]  ____sys_sendmsg+0xa68/0xad0
[ 1034.000335][T12339]  ? __might_fault+0xaf/0x130
[ 1034.000357][T12339]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1034.000379][T12339]  ? import_iovec+0x73/0xa0
[ 1034.000400][T12339]  ___sys_sendmsg+0x2a5/0x360
[ 1034.000418][T12339]  ? __lock_acquire+0x6b5/0x2cf0
[ 1034.000438][T12339]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1034.000459][T12339]  ? futex_wake+0x4ac/0x580
[ 1034.000492][T12339]  ? __fget_files+0x2a/0x420
[ 1034.000512][T12339]  ? __fget_files+0x3a0/0x420
[ 1034.000531][T12339]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1034.000550][T12339]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1034.000573][T12339]  ? rcu_is_watching+0x15/0xb0
[ 1034.000591][T12339]  do_syscall_64+0xe2/0xf80
[ 1034.000606][T12339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1034.000620][T12339]  ? trace_irq_disable+0x37/0x100
[ 1034.000636][T12339]  ? clear_bhb_loop+0x60/0xb0
[ 1034.000652][T12339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1034.000668][T12339] RIP: 0033:0x7ff10859aeb9
[ 1034.000682][T12339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1034.000697][T12339] RSP: 002b:00007ff10947b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1034.000713][T12339] RAX: ffffffffffffffda RBX: 00007ff108816090 RCX: 00007ff10859aeb9
[ 1034.000725][T12339] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 000000000000000f
[ 1034.000736][T12339] RBP: 00007ff108608c1f R08: 0000000000000000 R09: 0000000000000000
[ 1034.000746][T12339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1034.000756][T12339] R13: 00007ff108816128 R14: 00007ff108816090 R15: 00007ffd2b2beaa8
[ 1034.000774][T12339]  </TASK>
[ 1034.521601][ T7351] block nbd5: Receive control failed (result -32)
[ 1034.528602][ T7351] block nbd5: Receive control failed (result -32)
[ 1034.574451][T12339] nbd5: detected capacity change from 0 to 5
[ 1034.622697][T12362] netlink: 'syz.2.11032': attribute type 11 has an invalid length.
[ 1034.653489][T11212] block nbd5: Dead connection, failed to find a fallback
[ 1034.656264][T12362] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11032'.
[ 1034.671000][T11212] block nbd5: shutting down sockets
[ 1034.691128][T11212] blk_print_req_error: 138 callbacks suppressed
[ 1034.691143][T11212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1034.708582][T11212] buffer_io_error: 138 callbacks suppressed
[ 1034.708597][T11212] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1034.722499][T11212] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1034.734491][T11212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1034.744027][T11212] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1034.751810][T11212] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1034.760504][T11212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1034.770026][T11212] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1034.778547][T11212] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1034.787117][T11212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1034.796903][T11212] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1034.804690][T11212] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1034.812447][T11212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1034.822752][T11212] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1034.830694][T11212] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1034.838634][T11212] ldm_validate_partition_table(): Disk read failed.
[ 1034.846162][T11212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1034.855844][T11212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1034.865484][T11212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1034.875944][T11212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1034.879259][ T5489] veth0_vlan: left promiscuous mode
[ 1034.885473][T11212] Dev nbd5: unable to read RDB block 0
[ 1034.896224][T11212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1034.906528][T11212]  nbd5: unable to read partition table
[ 1034.911339][ T5489] veth0_vlan: entered promiscuous mode
[ 1034.912198][T11212] nbd5: partition table beyond EOD, truncated
[ 1034.925416][T11212] ldm_validate_partition_table(): Disk read failed.
[ 1034.932131][T11212] Dev nbd5: unable to read RDB block 0
[ 1034.938615][T11212]  nbd5: unable to read partition table
[ 1034.944409][T11212] nbd5: partition table beyond EOD, truncated
[ 1039.583700][ T2329] block nbd0: Possible stuck request ffff888024bed000: control (read@0,1024B). Runtime 30 seconds
[ 1039.595750][ T2329] block nbd0: Possible stuck request ffff888024bed200: control (read@1024,1024B). Runtime 30 seconds
[ 1039.606746][ T2329] block nbd0: Possible stuck request ffff888024bed400: control (read@2048,1024B). Runtime 30 seconds
[ 1039.618010][ T2329] block nbd0: Possible stuck request ffff888024bed600: control (read@3072,1024B). Runtime 30 seconds