last executing test programs:

44.468041564s ago: executing program 0 (id=8474):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x18, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff0000000000020000000000000000000000ffff008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x9532d0028af45c8e}, "242ad3ec8eeaf856", "a0fbdd0ff5cae5b98070c668b56329addcaa2516519fd2cd98aabef27f06efa7", "0dd018ac", "617b6d306fa9cf89"}, 0x38)
r1 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)

44.171983892s ago: executing program 0 (id=8476):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x29, 0x9, 0x0, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0)

43.969207548s ago: executing program 0 (id=8477):
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(ecb(arc4)-generic)\x00'}, 0xffffffffffffffef)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, r1, 0xc1cd8000)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x9) (async)
listen(r2, 0x9)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xa)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))

43.032754484s ago: executing program 0 (id=8482):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x2, 0x66e03de5, 0x50, @dev={0xfe, 0x80, '\x00', 0x42}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x8, 0x2, 0x77f87503}})
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0xfe}]}}}]}, 0x3c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2b, 0x80801, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r7, 0x0, 0x4850)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000070605000000000000000000010000020b00000007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x2b8, 0x1, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFQA_PAYLOAD={0xca, 0xa, "90918dbeaad7b0365825017042f69dc761887a447dc40cd88d6399fbc930053623d894f950099bf88e30803b52404eb10656186721758651a5bb41063eecdfdfce3fe6175aab16a2820ea6ff836e90cfc2f25f9404b51086e3e58ecfcc35361de557d1671ba5d4f6dae83ab50acd150590fed363e64de6ac8bb5e0042ba319cdc076e825d1405e3dd7d9d0f0a8b7d934245967d5bb04508579b657e54ca3ed7a216a590f1561326fbf758be556db2debc4132ee54ca3eae3b6986b47232d98393b85aff394e3"}, @NFQA_EXP={0x88, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_NAT={0x3c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}]}, @NFQA_PAYLOAD={0xf4, 0xa, "a8a60253b88bbc3df4b676d02d99b7fc40e23c709d17032635e76494acad4e8ef9bf3fd7186c06b3252b95f6a6e9288759ad692dde5e61ed93eb1bbd67b0dd874957ff1c8750c800d9f63cd1d92aba6f52dfaed02feec30ffbee60594442e14d287110842d2b19f4601aa74d61c228fb2bf753bd3475b89922722bbd8077d51649c007f06f7fc573e8e9f7a0399d9914588bb2e64fb43bf38bfad1b9bcf31de1fd67b44a0534441c61f36ce589063a0767a33feef770344259df514fb4a8320664c5760ffb8802d0482769fa7c42a286bb2d470437758b5027d86081c757408bed5fc417f5b8a00549b2d7d401053793"}, @NFQA_CT={0x5c, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x800}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x6, 0x7]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x801}, 0x20000801)
close(0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x900)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r8, 0x3, 0x1, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)}, 0x40)

42.569687371s ago: executing program 0 (id=8484):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28)

42.458297672s ago: executing program 0 (id=8485):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$netlink(r2, 0x0, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000000000000611138000000000054000000000000009500000000000000bf4ab41f57177a09badf2d609444dce0a96da39d4a798136691a3acad1a53ca6ce540a262ed4d483bc474439e647a1fe8030f2b3decef1295ff730339c3b5ca0adc5f22a7b86087fcde36b3b7cb28db72bad9afec5d35b5e41055d58aa2e7cc3a7b823d0e6b013fb8d78d2bb25a3487045b6cc75954d55d645146a97a9b3467e370ad955419fe2164b973301d9ddc38b6281c82a230dc1f9e00e95f5874e6964663a4b40c9c46b665868aa5b296c1e5f80a8059d"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
r7 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18)
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}, 0xfd}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@private0, 0x3a})
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r10, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r11 = socket(0x26, 0x4, 0x1)
setsockopt(r11, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r13=>0x0})
sendmsg(r11, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r13, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}], 0x1}, 0x40011)
r14 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r14, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r1, &(0x7f0000000200)='FROZEN\x00', 0x7)

27.437935218s ago: executing program 32 (id=8485):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$netlink(r2, 0x0, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000000000000611138000000000054000000000000009500000000000000bf4ab41f57177a09badf2d609444dce0a96da39d4a798136691a3acad1a53ca6ce540a262ed4d483bc474439e647a1fe8030f2b3decef1295ff730339c3b5ca0adc5f22a7b86087fcde36b3b7cb28db72bad9afec5d35b5e41055d58aa2e7cc3a7b823d0e6b013fb8d78d2bb25a3487045b6cc75954d55d645146a97a9b3467e370ad955419fe2164b973301d9ddc38b6281c82a230dc1f9e00e95f5874e6964663a4b40c9c46b665868aa5b296c1e5f80a8059d"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
r7 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18)
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}, 0xfd}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@private0, 0x3a})
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r10, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r11 = socket(0x26, 0x4, 0x1)
setsockopt(r11, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r13=>0x0})
sendmsg(r11, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r13, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}], 0x1}, 0x40011)
r14 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r14, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r1, &(0x7f0000000200)='FROZEN\x00', 0x7)

8.294222652s ago: executing program 2 (id=8776):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tww'], 0xa)
socket$kcm(0x2d, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xf8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r0)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

7.62509s ago: executing program 2 (id=8781):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001940)={&(0x7f0000000c80)={0xc90, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd67, 0x4f}}}}, [@NL80211_ATTR_FRAME={0x132, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @device_a, @initial, {0x2, 0xeaf}}, 0x20, 0x10, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x4}, {0x24}, {0xd}, {0x36, 0x1}, {0x9, 0x1}, {0x24}, {0xb}, {0x3}]}, @val={0x2d, 0x1a, {0x400, 0x0, 0x6, 0x0, {0x7fffffff, 0x7f, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x400, 0xd0, 0xe0}}, [{0xdd, 0xdc, "acf6378405052eccb43fa7601382448035a9db48cf9e1b0d9df3a2c9f445be8bdacb2633c3f9ba9e0e242607eb70ed545039ee18dcae05a23f82484202bf5705c69d067339974bd78cccba5e52701ba9b7ec3f21ea0c72f3bf27f02acd3a9a6243c7cd5ddedefbca0af1d83a6603dbd108de25f819fc36ba9f72da007a418844f8ab5bb30006205715597a3606848d0e375cc692db8d582b4f7cdd846ce40b8bc4c45c563fe5b90e7d7e4b2f5e255c940ef907dbc7030396a4f5928562d4a1aea15cd46a5a4bc5bfaa1cd6cc085bf69184c4576dea2bf9f6e91525b7"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x7a9, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_a, @from_mac, @broadcast, {0x9, 0x8}}, @random="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"}}, @NL80211_ATTR_FRAME={0x114, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_b, @initial, @random="791978625cba", {0x8, 0x6}, "", @void, @value=@ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_a, 0x5d, "14cdf2603597c51baddf7d7fb37f28ca2b13383a25af8440b17b5382175b32d5b089a20c7bbc2e53c7d83da8a856ea7d0cf46ac7d76764251fcaf5b686d78c38b9b9ea5e1187533e35e285f8f27fd5ab0144e1a2b811d63943d7293489"}, {@device_a, @broadcast, 0x79, "a5a42f54588d4cb1f225eb6dc3a95c41a724525726be46084f69377f6dd3813bf505aceb1eb64c25dd1308a7eed472cd894dd5124122b0e3afecb67004e8b0e85ba37e52777fcf1f06b698d1abb2aac08f076d43ac7c64b30bac9f174fc08cd0adb52cfa3a7ae6e6624a5518b326fb22601b2257082806eb00"}]}}, @NL80211_ATTR_FRAME={0x25b, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_a, @from_mac, {0x5, 0x6}, @value=@ver_80211n={0x0, 0xf, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x6, @default, 0x208, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x95}, @val={0x4, 0x6, {0xf, 0x3, 0x7, 0xbc6}}, @val={0x6, 0x2, 0x2}, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x65, 0xde, 0x40}}, [{0xdd, 0xd7, "42cdce1922a94069ef5e75cc516570f3f28227c70916f2a4bd097b5600fafc6d34e471d203d645e4928fcdddec3acbb4d7fb83f391e37ed087cc7e2ade7f1f8b149df3737e2b1c3fec72e2fad8cd35cbe5cb3fc9f3ee2c608b29dfdad9b455986086d5f1ffa7ffd5e7b832a4cf9a6644eae895855ec4bf0f21931e4eec33608a5e71ec3dfc0e4f4b140654da13ac25afe7fd862169aa56b485fc9611878631e36766da2a4f4de83a43e1f5ab61778b36c71022be6582e27cfb5107522b87f9358e90b38111b56a3df8dbb3b3a18e45cbf895f9cfa364c4"}, {0xdd, 0xc5, "b4e74a8a19beea1ae7eb80cf92b69844909b9aa45c31cec25617ae7c7d9cfc66f6c0d2109eeb7fba8bafce87439dcb5fd6cab354d89436a932f338ed9ef6efc6ebad860a4fcf047ad666fdec9bea963cde275844dc9e2645bbaa15da00796ee0f33c3f65e070e42b54114042d6a4bcf4902786202743dd6cc3b1ba867a86766cdfb57b13c23a78d0eaf51518cb40693218b44da63ea36d73c8f8a2e356eb8c58bc1b55b8f50ac23d5f15547dcb76a8f23ed0f8acc267f8a11e68a2af19fceb2c551466e35a"}, {0xdd, 0x6b, "3701074f0ca10a9db0bc0daae74c05be6f03313a4de2edd5a545f92de0f9b2fa07ffa0e534079f8563f5cf32761fa7e9c7499e31545feb83d2dc972bd6e75a4a9568541506f59598b7c5c7942dd76e73dbe277e69d57cae6f1e0992fc1f6e1b68263929f23ba3f57d27259"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x6, @random="0fd688a483f8"}}]}, 0xc90}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x94}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x5a}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)

7.456738314s ago: executing program 2 (id=8785):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000007d18e44177ce32cfa4c7cf873a5f2052d185bf12207cbc2a581c8c2d56", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8040040}, 0x20044004)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4)
r4 = socket(0x1, 0x803, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$TUNSETIFF(r5, 0x5452, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x100})
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xe2801, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$kcm(0x2, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x11, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x30840}, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="27f515ac371f0ff66029224d0aa2b927d5746f542a6daf356cbc93a95eefe37eb80a54fcfc0bc1c55efc5fa679133e2fabb61baa35273ea01835c139b370148cc5726dd8c39340fa16ce71", @ANYRESHEX=r4, @ANYRES16=r7, @ANYRESDEC=0x0, @ANYRES64=r5, @ANYRESDEC=r6, @ANYRES16=r5, @ANYBLOB="f1", @ANYBLOB="ffb2f9c3d3d19031e0d6c894309eee752eca9393c90a639336a3c98a4a0cb6aa185deb51f0ff639520efb2e7def332626e39331d9093b12bf16ce7d7d11724bb01070c4069b980a73c48fb79c4925b3cd06d5d6ea63aba99f86574f3d46a301eaa6063c4b37669"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d6f}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)

4.61600244s ago: executing program 1 (id=8794):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x8004, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x3}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}]}, 0x24}}, 0xc000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x70, 0x0, 0x7, 0x201, 0x0, 0x0, {0xcf8411a625cdb737, 0x0, 0x4}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2c2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x400}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x69}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_BYTES={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x4c084)
r4 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r4, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x24040000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)

4.610915102s ago: executing program 2 (id=8795):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48)

4.321462785s ago: executing program 4 (id=8798):
syz_emit_ethernet(0x10a, &(0x7f0000000240)={@broadcast, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@mpls_mc={0x8848, {[{0x2ca7, 0x0, 0x1}, {0x5}], @ipv6=@udp={0x2, 0x6, "c44f29", 0xc8, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@srh={0x16, 0x2, 0x4, 0x1, 0x5, 0xb0, 0x6, [@private0]}, @fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x19, 0x64}, @srh={0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4}], {0x4e24, 0x4e23, 0xa0, 0x0, @opaque="7a22a6dc9ea7142b1cde1e182ea1665c8119b662e290c1af5b82e8d6fe78e6661d1f29f42d237a3bd14319a7fba647c3e8d3b43f77e55731feb013df19760627da8fae576f04b79562ee715ddf0210ad0c820a24cbe9cc8fa4e49c2598e754bc78b3f06c1d17395e3311891a4f208a6f3bd7621196b8779235662e5dbe015763bdfa7bb73f84b2efcaf87ce80e57f63cb833f368fa3eed97"}}}}}}}, &(0x7f0000000580)={0x1, 0x1, [0xb48, 0x2db, 0x3b5, 0xa0c]})
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x5, 0x6)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x4c054)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2}}, 0x26)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2)
ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800)

4.084702286s ago: executing program 5 (id=8799):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_netfilter(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00b3bbbf"], 0x14}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@int=0x4, 0x4)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000000000000000000000400040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50)
close(r4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)
socket(0x10, 0x803, 0x0) (async)
socket(0x10, 0x803, 0x2) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_netfilter(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00b3bbbf"], 0x14}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@int=0x4, 0x4) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000000000000000000000400040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50) (async)
close(r4) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async)

3.87743604s ago: executing program 1 (id=8801):
socket$tipc(0x1e, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r0=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r0, 0x2, {0x2, 0xff, 0x2}}, 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002a80)=[{0x0}, {&(0x7f0000000440)='Mt', 0x2}], 0x2}}], 0x1, 0x4040040)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}, {0x85, 0x0, 0x0, 0x7c}}]}, &(0x7f0000000000)='GPL\x00', 0xd}, 0x94)
sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000098", 0x24)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080034803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81})
write$bt_hci(r7, &(0x7f0000000080)=ANY=[], 0x6)

3.755705518s ago: executing program 5 (id=8802):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0xc004}, 0x2000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0xc004}, 0x2000) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) (async)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async)

3.668378155s ago: executing program 4 (id=8803):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$bt_BT_POWER(r3, 0x11b, 0x9, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000600)={0x0, 'netdevsim0\x00', {}, 0x3})

3.615925662s ago: executing program 3 (id=8804):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8004}], 0x1, 0x7)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0)

3.515655474s ago: executing program 2 (id=8805):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a01040000000000000000010000000900010073797a310000000008000b40000000030c000640000000000000000314000480100001800b0001007470726f787900000900010073797a30"], 0x7904}, 0x1, 0x500, 0x0, 0x4040}, 0x0)

3.486967838s ago: executing program 4 (id=8806):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)="b4f7672071979d161b44fbc55fe6513b163c9d9d34fb13bb1581f5ebbb90857d987d6de32304f03d449dc2d5024e38eb5ea1ad87aeb03d1c083b5c2dfa43549c8d951279", 0x44}], 0x1}}], 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
unshare(0x20000400)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x20000000})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@migrate={0xec, 0x21, 0x100, 0x0, 0x3, {{@in6=@mcast1, @in6=@private2, 0x0, 0x3, 0x10, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32, 0x4, 0x0, 0x3504, 0x2, 0x2}, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x5, 0x0}}, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x3, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="647f000083509d01540928671341e35d389040baaa8829389c9d71d03e18510f65d8522a3f84bf685c4c3749d79a683398a6df5d119288f3a9d20a633b3a206cdfa69ae887072084806caa17e6fbc4d7806fea096c3fbca1fe0824240b5b4b309929093ca79a5d393680e469e8307198fc89c4976ac4b81156c2a121fb1109a68065ff93b9ae717d2306c0fb888ce20ca9f91a7a069cb421328a219f62496e92f7cf1660e7a928cdb98c52d871009a74143896f1d9f0d9655bc39c45fc3dd782dfc12ac0fdd3c405b9cffa55d4044ed805", @ANYRES16=r0, @ANYBLOB="1709000000000000e5ff000000000500070000000000080009000000000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb0500220000000000"], 0x64}}, 0x0)

3.485566655s ago: executing program 3 (id=8807):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000a0000060be0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94)

3.482504239s ago: executing program 5 (id=8808):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket(0x1e, 0x4, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000003e00)={@mcast2, @mcast1, @mcast2, 0x8, 0x5, 0x0, 0x400, 0x7, 0x4480082})
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r4, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="710509"], 0x11)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r6, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001540)={'syztnl1\x00', &(0x7f0000001440)={'gretap0\x00', <r8=>0x0, 0x8, 0x740, 0x1, 0x1, {{0x2d, 0x4, 0x1, 0x4, 0xb4, 0x68, 0x0, 0x6c, 0x4, 0x0, @initdev={0xac, 0x1e, 0x6, 0x0}, @remote, {[@timestamp_addr={0x44, 0x54, 0xc1, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1e1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@broadcast, 0x1}, {@loopback, 0x4c}, {@empty, 0x2}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x7}, {@loopback, 0x80}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9}, {@private=0xa010102, 0x9}]}, @ssrr={0x89, 0x13, 0xc, [@multicast1, @empty, @rand_addr=0x64010101, @empty]}, @end, @timestamp_addr={0x44, 0x14, 0x60, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@remote, 0xab1f}]}, @rr={0x7, 0xf, 0xc6, [@multicast2, @multicast2, @empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x10, "a1c6ecf3a8acbd897202cc49fa7f"}]}}}}})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000080)=0x7fffffff, 0x4)
getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000001580)={@dev, @rand_addr, <r9=>0x0}, &(0x7f00000015c0)=0xc)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010001}, 0xc, &(0x7f0000001740)={&(0x7f00000017c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r6, @ANYBLOB="100027bd7000ffdbdf25090000002000018014000200766c616e3000000000000000000000000800030001000000800001801400020070696d726567310000000000000000001400020076657468305f746f5f62617461647600140002006d6163767461703000000000000000000800030001000000140002006261746164763000000000000000000008000300030000000800030002000000140002007866726d3000000000000000000000005400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766972745f776966690008000100", @ANYRES32=r8, @ANYBLOB="140002006d6163766c616e310000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="4fde81e16d1f31c0cff7b5cf9a6ef72b616b3419e1716a98ac49bad008888bcfe0985f2bcd5c5e568ee41678d7378a4b7be1bce3f18bb39877073b9d2dab1d3784093e2fd46c29a59f6787be815c14764884b4e4436e21c069a6a7e8f28415a052e120f418e4f618430eee86919fa7a244ca701ad77efd7e33d3d46a44b743a58e490700fc4f82cbcda9f94b05db28b321b2a6d6ec43d878247abdfa194712d10981b7a8c38fb5929d6443542a0cedb3e806824f65b85fdebcff076ca72d3bc082bd0ed34e6f395e377f2e33ebd6ff1e478416d4c7fa134bd2ee644f9f4b0b42c6774132a908a65b82a869758de1b472e1bac527"], 0x108}, 0x1, 0x0, 0x0, 0x40080}, 0x8)

3.48202423s ago: executing program 1 (id=8809):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff030}, {0x6, 0x4, 0x64, 0x5}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x1, 0x0, 0x0, {0x29, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0x2], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x20004010)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, [{}, {0x0, 0x100000000000000}]}, 0x60)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000100)=0x8000, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtaction={0x4c, 0x30, 0xffff, 0x3, 0x25dfdbff, {}, [{0x38, 0x1, [@m_ife={0x34, 0x3ffe, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

3.383720152s ago: executing program 3 (id=8810):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpeername(r2, 0x0, &(0x7f00000000c0))
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1)
setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000080), 0x4)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', <r4=>0x0})
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000044c00000400000009"], 0x48)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000002c0)=0xf, 0x4)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r6}, 0x38)
setsockopt$packet_int(r5, 0x107, 0x10, &(0x7f0000000280)=0x2, 0x4)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x632, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xe, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8000000b}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40005}, 0x804)

3.358048992s ago: executing program 4 (id=8811):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a3000000000050001000700000008000940000000011400088010"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
pwrite64(r0, &(0x7f0000000000)="d257c34be680c941c19d2d6dab7d15d1bcde3078d87c1b7e24137c018d0370120de868bdba01e5996842ae94804050c8b8535b0096aa61c5bbb0", 0x3a, 0x200)

3.318248147s ago: executing program 1 (id=8812):
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a40)={&(0x7f00000010c0)={0x964, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [{{0x254, 0x1, {{0x3, 0x6}, 0xc4, 0x0, 0x7, 0x7, 0x27, 'syz1\x00', "ea4b6c3f312d51b12b3eb8ff772bc506421a5c01d4d540da2853005d71dee17d", "1aa502670c46603e1b930d075523b69a2d4ebc4ce96f50066bac2c70be9afcf0", [{0x2, 0x6, {0x3, 0x21}}, {0x5, 0x2, {0x3, 0x4}}, {0x40, 0x5b35, {0x4, 0x4}}, {0x6, 0x0, {0x2, 0x9}}, {0xd, 0x1, {0x1, 0x3}}, {0xe6c, 0x6, {0x1, 0xe876}}, {0x0, 0xfffb, {0x2, 0x7}}, {0x8b, 0x6, {0x3, 0x4}}, {0x4, 0x3, {0x0, 0x9}}, {0x2, 0xfaa0, {0x3, 0x7fffffff}}, {0x7, 0x6, {0x2, 0x3}}, {0xe, 0x7, {0x0, 0x400}}, {0xe88, 0x1, {0x0, 0x8}}, {0x61, 0x7}, {0x0, 0xd2, {0x3, 0x9}}, {0x2, 0x40, {0x1, 0x6}}, {0x0, 0x9, {0x3, 0xbf31}}, {0x3, 0x8c1d, {0x1, 0x11f46e9c}}, {0x4, 0x2, {0x0, 0xb94}}, {0x6, 0x2, {0x3, 0xa5b}}, {0x7, 0x7f, {0x1, 0x82}}, {0x8, 0x95, {0x0, 0xd}}, {0xd, 0x1, {0x2, 0x5}}, {0xfffb, 0x3ff, {0x0, 0x5}}, {0x0, 0x679e, {0x1, 0x4}}, {0x0, 0xf, {0x3, 0x5}}, {0x3, 0x2, {0x0, 0x4}}, {0x0, 0x20b1, {0x2, 0x9}}, {0x2, 0x4, {0x1, 0x7e3f}}, {0x1, 0x9, {0x1, 0xdef}}, {0x4, 0xda3e, {0x2, 0x100}}, {0x0, 0x8, {0x2, 0x7}}, {0x3, 0x8, {0x0, 0x401}}, {0x44e, 0x0, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0xed}}, {0x7, 0x9, {0x2, 0x4}}, {0x2, 0x1, {0x0, 0xf}}, {0xe40, 0x2, {0x3, 0x399e}}, {0x4, 0x7fff, {0x3, 0x6}}, {0x0, 0x0, {0x0, 0x100}}]}}}, {{0x254, 0x1, {{0x2, 0x6ec8}, 0xa0, 0x2e, 0x80, 0x1, 0x12, 'syz1\x00', "0cf1563444e5016665e1cc105242cd46f736235445a5de1b32d5e994cfddb02e", "5edd6eccca9261833ddd054a421a623491d8e6472ac5570dc4dd3bd58fbec774", [{0x1, 0x5, {0x1, 0x6a3}}, {0x12, 0x0, {0x1, 0xb}}, {0x6, 0x3, {0x3, 0x9}}, {0x9, 0x3, {0x0, 0x1000}}, {0x9, 0x0, {0x1}}, {0x9, 0x10, {0x2, 0x5}}, {0xf, 0x4, {0x0, 0x2}}, {0x4, 0xe61b, {0x1, 0x9}}, {0x7f, 0x8a, {0x2, 0x80}}, {0xfffc, 0xbe07, {0x0, 0x6}}, {0x4, 0xd, {0x3, 0xcd}}, {0x5, 0x7, {0x0, 0x8}}, {0x7, 0x92f, {0x0, 0xfffffff8}}, {0x9, 0x6, {0x3}}, {0x1, 0x100, {0x1, 0x100}}, {0xc000, 0x81, {0x0, 0x7ff}}, {0x68, 0x8, {0x1, 0x1}}, {0x8, 0x0, {0x0, 0x6}}, {0xffff, 0x4, {0x0, 0x4}}, {0x4, 0x6, {0x0, 0x138e}}, {0xf000, 0xff06, {0x2, 0x6}}, {0x6c3f, 0x3, {0x53056d4152113621, 0x492}}, {0x3, 0x4, {0x3, 0xa48}}, {0xb, 0x81, {0x3, 0x7ebc}}, {0x6, 0x5, {0x0, 0x8}}, {0x2, 0x2, {0x0, 0x4}}, {0xd, 0x0, {0x2, 0x9}}, {0x8, 0x7fff}, {0x1ff, 0x1, {0x1, 0x9c}}, {0x8, 0x7, {0x1, 0x6}}, {0x0, 0x200, {0x2, 0x9}}, {0x1, 0x5, {0x1, 0x8}}, {0x3, 0xf, {0x2, 0x4c7}}, {0x7, 0x7, {0x2}}, {0xe, 0xb, {0x2, 0x9}}, {0x71, 0x6, {0x0, 0x800}}, {0x3, 0x101, {0x2, 0x8}}, {0x0, 0x9, {0x1, 0x1}}, {0xe3, 0x4, {0x2, 0x9}}, {0x1, 0xc, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x7fff}, 0x4, 0xc, 0x8, 0x7, 0x23, 'syz1\x00', "78f2c615b1cfa6cbfe5284d68f44da7b71693845074421acee3a75affd0bf0b6", "6f582501672b5e43661229d7270eae1be055c16733c4a624607a3b8ff49fc0c7", [{0x0, 0xad2, {0x2}}, {0xff, 0x80, {0x2, 0x2}}, {0xc2a, 0xfff, {0x3, 0x3}}, {0x1, 0x8, {0x1, 0xf}}, {0x7, 0x6, {0x0, 0x101}}, {0x3, 0x81, {0x2}}, {0x800, 0xf4d, {0x1, 0x10001}}, {0x6, 0xfb87, {0x0, 0xfff}}, {0x4ba9, 0x9, {0x3, 0x8}}, {0x101, 0x8, {0x0, 0x9}}, {0x7, 0x3, {0x0, 0x80000001}}, {0xb, 0x8, {0x0, 0x200}}, {0x5, 0x813, {0x2, 0x80000000}}, {0x7f, 0x400, {0x0, 0xffffffff}}, {0x3646, 0x6f53, {0x1, 0xc}}, {0x6, 0x1, {0x1, 0x3}}, {0x7, 0x5, {0x1, 0x35e}}, {0x4, 0x6, {0x0, 0xd}}, {0x3, 0xffff, {0x3, 0xffff}}, {0x49, 0x5, {0x2, 0x3}}, {0x0, 0x4, {0x0, 0xf1}}, {0x7fff, 0x6, {0x2, 0x4}}, {0x1, 0x0, {0x0, 0x8001}}, {0x8, 0x7, {0x2}}, {0x7, 0x0, {0x0, 0x8}}, {0xfff, 0x0, {0x3, 0x9}}, {0x8, 0x7, {0x2, 0x7ff0}}, {0x1, 0x5, {0x1, 0x1}}, {0xa, 0x66f2, {0x0, 0x7}}, {0x8000, 0xedb4, {0x0, 0x200}}, {0x4af1, 0x3b2, {0x1, 0x6}}, {0x7, 0x2, {0x3, 0x9}}, {0xffff, 0x7fff, {0x2, 0x49}}, {0x9, 0x65cb, {0x2, 0xf}}, {0x9, 0x9, {0x0, 0xfffff452}}, {0x101, 0x59c, {0x3, 0xd}}, {0x5, 0x9, {0x0, 0x7}}, {0x800, 0x8, {0xac0e722af8d16498, 0x9c}}, {0x5, 0x1000, {0x1, 0xfe0}}, {0x2f7, 0x81, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x8c9}, 0x7f, 0x8, 0xe0d6, 0x8, 0x0, 'syz1\x00', "9d2e556ef23cc9af34d1c111b923ef41adc1a801e6c333cb1a55172b70742bbc", "86e053ce90f47cf93e6167abc8ece0cd253c311907b2c2d9518c249d43e9b4b6", [{0x8000, 0xe, {0x3, 0x4}}, {0x8, 0xff, {0x3, 0x2}}, {0x9e6, 0x2, {0x0, 0x9}}, {0x4, 0x1, {0x2, 0x3}}, {0x7fff, 0x0, {0x3, 0xfffffff1}}, {0xf, 0x0, {0x3, 0xf8}}, {0xccb, 0x2, {0x3, 0x7}}, {0x6, 0x101, {0x2, 0x9}}, {0xff, 0x4, {0x1, 0x66}}, {0xfff, 0x4, {0x0, 0x1}}, {0x4, 0x354, {0x2, 0xfffffffb}}, {0x7, 0x8, {0x0, 0x3}}, {0x2, 0x3f, {0x2, 0x6}}, {0x8, 0x8, {0x7, 0x400}}, {0x1, 0x1000, {0x1, 0x1}}, {0x0, 0x5d, {0x0, 0x9}}, {0x1, 0xa, {0x3, 0x7}}, {0x1, 0x7, {0x6039f480bcfbc157, 0x8001}}, {0x5, 0x342, {0x2, 0x800}}, {0x0, 0x6}, {0x41e5, 0x1c, {0x0, 0x81}}, {0x800, 0x6, {0x1, 0x20000000}}, {0x80, 0x7f, {0x0, 0x2}}, {0x2, 0x2, {0x0, 0x5}}, {0x40, 0x4, {0x0, 0xffffffff}}, {0x4f, 0xd03, {0x3, 0x8}}, {0x6e65, 0x6, {0x1, 0xd8}}, {0x40, 0x0, {0x0, 0x919f}}, {0x7ff, 0x6, {0x2, 0x4}}, {0x8, 0x0, {0x0, 0x1}}, {0x13a2, 0xf, {0x0, 0xb}}, {0x2, 0x4, {0x3, 0x44}}, {0x6, 0x4, {0x2, 0x6}}, {0x68, 0x6, {0x2, 0x8}}, {0x9, 0xf, {0x3, 0x8}}, {0x6, 0x5, {0x3, 0x1}}, {0x475d, 0x919, {0x2}}, {0x100, 0x963}, {0x8, 0xbc, {0x1}}, {0xd, 0x80, {0x2, 0x8}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000100)="c1188e99001d4d296204c0a586dd", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
unshare(0x24020400)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x44011)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x1ff, 0xa4, 0xffb, 0x7, 0xb69, 0x5228, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0xff20, 0x40, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x13, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed8, 0x8, 0x8000100, 0x3, 0x3, 0x11000, 0x10001, 0x5, 0x79b, 0x2, 0xbd, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xa9a3, 0x5, 0x5, 0x6, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x7f, 0x331, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xffffffff, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x404, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000001c0)='xfrm0\x00')
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x1e00, 0xc}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x25, 0x80005, 0x70}, 0x2c)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x25, 0x0, 0x0, @void, @value=0x0}, 0x20)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0)

3.20388219s ago: executing program 4 (id=8813):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="33000300"/18, @ANYRES32=r3, @ANYBLOB="0c009900000000006700000214000400636169663000000000000000000000000800050001000000"], 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2411000020040000280012800b00010067656e6576b9bd6500001800028005000c0001000000050009400000000004000600"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x20000081)

3.203177784s ago: executing program 3 (id=8814):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000002800000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)

3.190230018s ago: executing program 2 (id=8815):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x2c, 0x2c, 0xd35, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0xc000)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33)
close(r2)
r6 = socket$kcm(0x29, 0x5, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060000000085000000070000009500"/40], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "8181"}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendfile(r6, r7, 0x0, 0xffffffff000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r10, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)

898.270462ms ago: executing program 3 (id=8816):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="04010700", @ANYRES16=r1, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x8080}, 0x50)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r2, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="e0", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000000000008400000001"], 0x10}}], 0x2, 0xc8844)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4)

664.105721ms ago: executing program 1 (id=8817):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x28, 0x3e, 0x29, 0x70bd2d, 0xbffffff9, {0x81}, [@typed={0x14, 0x15e, 0x0, 0x0, @ipv6=@remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054)

369.631501ms ago: executing program 4 (id=8818):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(r3, &(0x7f0000005b40)={0x0, 0x0, 0x0}, 0x40000100)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4)

307.538356ms ago: executing program 1 (id=8819):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000850000002a00000095"], &(0x7f0000000680)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="5bdbc48e6f5f03d238ff67ecbc0e", 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000004c00000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)

264.017632ms ago: executing program 3 (id=8820):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x20084880}, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000730133000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)

261.765099ms ago: executing program 5 (id=8821):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000010385100000050000008500000046000000be0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94)

139.603638ms ago: executing program 5 (id=8822):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000faff0000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000800008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000001d00)={0x8, &(0x7f0000001c00)=[{0x6, 0x8e, &(0x7f0000000680)="365e93a9e24a87ff730c03fc9c3f783e09c739821d89d3f7a8dbfbbe5a7976a41a0607bbc0b18a92ade758e02b953c1b23b565f96a529aeb64a5cddcc308305768300873b1bf9ac84bebd8c999db95c56f89ea96b130844f06a90fe3190ef92cc61309ffeac588d2ee4de8fe947213540f40e96f1e24341ce76d4481aba33c12831e153217369a77cddf3c64a64b", 0x0, 0x1}, {0xb1, 0x56, &(0x7f0000000740)="3f3c60ed0bd79a63504e18c6601f276c5e43fb838d9575ae0753c1414ca373ce991ea757cf9f0905e1df6960588a41e5e7c39cc76b7dc38cd80109b3e6d0f834e8e9a9afc6f0555888592d9731731e64851877d72897"}, {0x800, 0xb1, &(0x7f00000007c0)="da064d7b67f6471a8ae3142a6a975ff8eb3793f843537ec66ea78b8279c9871f91268584f1a736a347e65bdd4d2b450b3e96a76b52b5834ca9f056cec02b6686ee966fc8c6f09dc77aab2118b3cf5fcae2ee941822c51eea51ab3bf4b76c6725364451e6b0ec2aeef773f7a49e6e6562a2d32de676f642a3aef390c236f4fbaad5f6681740838e2b0a134e5c0e583180709f44d2adbaa4cd603d10482ecf0fdf03493cd538688d89c3adc8ab7bc4f17f84"}, {0xad8, 0x1000, &(0x7f0000000880)="50fdce33e57b39b8bf8906b0eca35525a37dbdf671daa6c4d6ab13f0a042accb0b02ac3e55eb87f1b1a90c3850e01c4fefa8b926f27e4c728c3f4c8ea1d5888f23bd4a49c241a9c899f6d30cec04505f1f0d802f4bd66f0c14a9fab91597f2b2d88136d5ec142440d2d21b25bbc2ac9560f41a1347b1f31643608e09aeac3d6e113d944e2e88a719ef5bb1cf8275bac9de75ac3fd856b00ab4c19619e6c955fb9815bf0497295b737476d5f63a1dde204ca40b66a093127aff5f5e20f0f450bb85c7a18b7ebfd1a9f5bca0479695399b35f4038cbf82734356cfbf18cc48bc8b1d9c46963992d0c6fbdfe000942e09f34bb9517787b58ac1d1ab668a795172d01f750cf71fe736740cf781788739b6778ed2a8726ff7fe57cdf2a03c4a64703462072409d8ca2c691dba863dce5c3814f44075f3949528e8debd81a69ba02f35164fc8e19250c248f51ad4c13ca8294ad17061bd185b6051206896dd12cde4b9c07897c215339a0cd37f26be46ed98fc65bf512f0ad4fdcdf099c3707e431cd92c91673978ccca6aed6bf77472de727b425a1543785ba47170ff4062aa89c23531d5bdc6cabb6adb744c208f041e5d4e3eeb9485733eb4ddec3efdf48760a26312f4dbafad86eff0c82ba56a5e869bbb0d3b4bed356e159f69212227352c0502612592cb076aa48bf7252e89fabaddd5ade2bb31e7e5cec47e68460636d980f0a338e3406efbad2e5f4010c82c4d7f594715b8b0a51277f8aa01f32c4d7da1ceb81260d47c83465a65262321adeaa943e21cacf16a15db7497edca654018980d4c5dcdfeb7425dd364a2ae002b1fd7a6ad9b5c5b08c6734aab496df19047f279479fa3473952131fda2618828068f388377d6e089cbbf770b7e76fc600f3b9a3fe12fda71a91c6af76fcd113519b930b82e6b859b7c43e57a939fa984afa6e96398ca4d78421233e68440c2d67fbe8e242b105089d39c87f856f063626f7d035d074c1809a977e87b00864b8b734f603572c082260a19d3250573453169bf5acf9a2897976dc8804fb1af1a59cf0f5e3780d656a22b775584d8d3f155350b576eb6ce7525a4258433a535e812315facd95af9e83d38076ac8ebe6001bd7c080520e9a1366f76bc6db44b4889c28719d6c2bb9e1f56efc79c2a253eef696a76c6e028b3e6833adcd65477ed5f94490be4c69ed454b441032f7eca2c28529deff61cb9937b423e3a80422dc1f52a47bf804bf011133e38a9e1117b6363e6f19c56905b8746d3c824152b3e243e233807aee47405923c437aa46cf8a36db481d1aa5b4bc74baa7a0d34717efb374173453f069b4abc32e57244a6fe211ffa4cb5a85ada731a3b38459cfeab2d4d24bef336f422a4cb5598646e207479e3fbd30e2295bf6680ef2b0c8b9e47cba732881737070ee501d41b4ef9043b7d9b2e5e2526b935d42f268d93e9a56d1d4433b09ef3617ff25b910f2044813848e6e1c6780cc1705e4c0ac2703ed73328be87583816406cd7d6a58516258ed7727eb5c7897afc5487a58afa7abec259af38aa474023a99b599acb52ff5a3e9a7d24381439af1da9de424f6170636f8f935975d2f7370cd46a388eba37e58135590e73cc157792acc48d9784930f07359c104e8f357f723c4df25cae3dbc02f6a36456bc46540bb173bdd59a16de471bf8ce8c8b287e45b7a6cf111ec5b87edf6f8c7e33ec8cdfaae2830f46044d6abf81a287eed4ed26c9e310d633a8fd836e722d40dd62f248f2c9bf5d1b48db6bf288ca7e8fde90094d191e452e82b6c598df15a2a01e51c4abe66a23f859b73d1168e497174068d8bf3d7268ef0c1859aba4433c03e66f6822008cf30f96d14de6f0ff1ad7cad039c992bfeda7f5c0950c873e5a7d0531b9cae54db32d891140807d0f6eabab018861bfaa5dff53c74c026e03885fbd2b9091eeb4dd23953aad9d1ba13932e1ce5ebb2db2c2c60dff22cf9150d67ed71820ae0bd9af4b28ec30cabf1b958ca3d73331cc1a7d5e21bd354624067bc45615a72622d12d38859133f05538ad62a10cf2e00627ffd9ca95a874444b6c7c824538d933e90e4c9f07e63fd499d33eb4387cf0bd21bbb92716c9ce23689424446448ae10b6d9fb48d43ba8ad9666488b46674e850602d7bfb5d30f5f3c4c4f393adbd198c4985262f434c0cf2188e7e025ec0e681850963c00b55f3063304cbf9b434bda79aaae8b0ac486f9c802303adb910cee5525587eb645c6c9ecd228fa5f909f4982ebfa33930761b3b9c772b40c409fccba6901268e4dbd1cab6d94d264375d91e537f0e9f9356946a2b427531eab83ed7fc3fd681672f583fd67b23fa33ebd0838743304e5334a8e18a90f941784f784b05ec670b6c4a34874e31f079f2cbad65715f81de417e57ece4dbbe800b001c0ed232c93c32cb1148d4de711beb6d02256886f3c39253ccdba1d64b38f19a212c2a34632203d404e4865e9b547e5407e54a54ec82f4b65df71f8c9a3b7a196a06c6516b74acadf0d0453ac9c97f8da0b5aa119b507d0ccdeecc874ce7ff282a1aae25d0ae0d3a34d4e557573bfcfcf91775f54e4a7bf3701b8510539e664265bb0ac53ab0f7936b439a5652282cd5bcc4b706d34eaa9ce91487bb0b904adaabe8eb06db0f82be776555ae6c378b82609f0b3c3b8649fb5a1b3c3aefdaa2374d0f9d4430942a5d9ad83a59b96bc41ab10e08f59cfb5fd63f49dd53182786cd17df5e069f39af2ba89e896af414ee26a4538dee8d7b03741b2b71f8e218f01eb64335669bf6ae685e8072e0ae779929eb69e11b866406047534dc02fb5707ae382e51c966e5e09b68da438f57cd33d257cc20dcb3262ebfc5ce4d409c0e878b25bfcb3c70cfe75706c5a364fde4bddc367cda5eaa8eb3b1f17ba66f4b98e77ff020b336baf5e7b14184a694ab90758256baff78265f120a83d218c09aef0b08cf04d30876bad75e29f96dc966a829474dd34acf427e6b726cd1a8131ac89d15361ce22302208f9080add98b5eb95d5456e56e01362e4b9fb09ff3c3a0baf87203f5a86efc36ec3d018d2ff824a40f6feee7ba8604ecdc99ea1b0b3e07628c92f0035390d10157bc64fc6c6cf911318b65368f013fdfbfca573515a4abb81edae25ae3a0577246d53ed204bf2f258ed92d09c244062f5d42d279d2f812992fc7f1e799c79cfd936e345baffffd2f42e821bf719217ca1a997cf36b3cd0c01cbc2d5db887d82f60533703f03dba8eca34e0970f4d0ab23e3f43fb9151e4f8f4d9eb18afa38aed49d4fad64a278b36f5f99568b7b70a5d49a49ce36af1cd9d3aa6ae80ff529a2a2316ff0a20a415094302fe1969cf9b6b6135454975f804d0b1834e1424b643ff1c5c42b20c71ec8a564ddae02e7d837f3d4d7f5d3526634dd1776f051b4ebf33587064a5e75b0fada7f18979fae6b9683a5c5886ad83968af6751ae9ace536fc7047dd74715d5624483957b71a26df8b9e30d0fcb777fd43ebdd64504d6a00b28e372fbce371ec373a8f79fd872f36a16da0f06b0cf489c16cdbd8ca5df2d8307cf81b0cd38c63e6b3d0c60add36b2fcc3c2b811aec82783fc6ab78fc610cbc6e5c328066e5f51bef6b10fab4c3602eba37b8eb90cd256baad8088260dab43a91a9ccfc6dc4fc97e22e033cc34360790e1cf09d6d9357e82d53e27f7321e9cfae8b27ed072b2bf017f8262cf5db288b8e9f8e53c4accb2ac8468c2b945da9f72b277fae8ae73ecb2bcf8002862cf44f7a11dd7f911580ac3fa466e8e16e9636b207ed225e1d0c6e8c038326e7d31add14dec428d66724a0aa676f66c7261a180c66455c650143bbfd2444865b8ff63a27eed1985978c15f3497e4639da1c475f1c2edeba7816215a9842c2d26173984c424ec72370843ce4a93e85126c736612de6f3e206331a899214bb3834052dfa4ca6713163adafee079b3e4199bbe480aa938cf247ea7d9691f51a14680f5f08b814d084dbb0a177089e90bf34b93a859c0d25d83682c07d583ca8a4a6a03ca90ebed16a2befee8f94614c7cd83c1239b0f261ab9c6d664c17af6fda98949e8b78465b5ea1d4382cbbd9ce02b5735e1e91c210cd57a054b8cd174ffd1f6508ccdb206638c4a936cd18c9810bfcbfdac8edcabe422209c8f00bd8faf16352136bd1fcd623d17bf7df19f7eb931c1076bd0f83ce673218b8b8d1da490502c1dcd02b60baddbbe54e4ed4320586d2bfcfe800ec19f260774067c41145e74b76d8b74ac9b8c03d0eb5402d20747ee2120b6e0ccb6e4ae8e8021e4d632b8700915eba07f36f5dbb3f9bc9f0e4c356078875f5ffca7db8473910f3719c16afe407b39e63b8a35769c7bebc53673b1eeb081a88eb2b0f9ebbf974151fff3d68312723515fac13d5a87f1fd64a15c84e83d4234479906f9ea3f12e5acda1c2fa50436bdf76db747c981fe6a512c3276b3ca5510de8abc7c14497f02798ccd482c515a218564aada09a7c0bfe90d599afd7d3a09a76a81cd4fdc14119fc1c05444e5d39e9e5de672cd679f2f543ee586e134d21c1f7f9eadd4efd6c0fd84024e06f449c045c9dd79313fd4381fe5d05de62acb908f8aa0f44c4f9b07a1e54348cb2c60f4af9de6cab07e1247f0b2af92755e1ac8bbf37eb16de497d4243b0475b51fcef1f4cd1f345b10c89ad85bcc9f3ad1aa96b204d4fd45efefa99ed346b1fe5fec29de4d063d7310998448b5600b450a87ca56051a34ad8ccdc684080956135258ddfacd89e47a7fec7bfa90751633068895138528f1908c209b2eb054efc54b1cf70eaeac2d24c52e035f50be25bb634c3167302cdbc6616b5779b2dd8907a9bad0a21b82fa372e60ef9c5288b083c009a3e257c23e4235af9643b39794050147daf58471247c4eb51d57a4898dd816197e9dc468904993cc609a5b3c8f002b2d9990853578bb2872928e8a642d954cd632dc66c6a2e3368b610984e5b25436b7994285ee3d4eefbc7c943a05f314b8d8ffd14b8208eb5cfd13058061c5c79694d7d88965bbd92d629963a2f44636cc8b9ffa31b39265e6ac45a88cfc2ccb489ead5ccda2a0bb9ad4dcfcbf3ba3ddeb5e6c38afec3c34f72705d55d13e4b2a2960c76e1812e1598e0d0988b4fe7774409499ab1b228630aa1c1522d48f51f48f229145a7b04a58a48bf997af5b5685caa6ce3a68a30a0b5d4651d10cbbc66269d227ce165a378324d209dfd64bc398952399363157eb9ce7fb2df90291bd305f51faea3951cb634331447a0487fd147458f640c8e6b639f2461e763d43e821ec400dc550c2222380e2d9cccd1e049654bfc144cf149c22a3aec1f4bc2907eff6e6ba78740d05ab3f6746e632fe32f9e405ef3d4433e0962f14c3e549e4ae8e847774db7be4f608a7c4151eb07430aa9a2a44777274aabafee601d65e10b3a808cd159c7aae4c24a1ebc3b88dad25796e91e27fdb1fef056a286b23007f6d04eeffe0a1f7a9caa573f17c884ff8942dd7b520fe5a2ff12ad6d150bacf105073635fe16b9f60d493b957a2d2ecc83c6b9efa42de957b0f48533e792e02ce415447688b9f9e3fd513a4a1d1a8d2c00b6fdf0f337872613304608d1289743880e82675cf71d479fee964a6a5354a66c125bab18a4d79535a8d6cf61d4ac901dcaee3e443e1029a320819273b2a5998f91de503b40f920c2938d9f77d06a45d999f435ee17a74728782319c74ea7fc5650889340b369b583160a5a4a37f5f724f4676935e37508bf8cce7048f0c7e27660f266d53ba657f7d33cfb06ac9", 0x0, 0x1}, {0x6, 0xce, &(0x7f0000001880)="a8183864800c36948207a9e2b5dab1841213b3f190f203b94163b00deacd346c0c8332cafb93eb1398c1865e9976a34a83a4ac72fd7a553db65a17c1c8546c0b7ffe337c182d6203fca4c5bf3e5814df7295b97dc65673c61d08a135bd9522096ce940adf63b0af28a62618f478401f7a3e61deb35d0a67d4c8b53bac1116a15c788ecacc17dc020eb935ba9a8067ac97ac59b5a51484bf731fdc4acff19668dcda61f86a655b21fab840ca68f4e6bf947e520fb63ef0cd2cb69ca904d0be3d6545168f62ec3dd9413d15f0f6e7e", 0x1}, {0xfb, 0xe9, &(0x7f0000001980)="1ea7065c87c39f6dd3261d06c5ea12057bcc4f674853503333a47d87a3fd15a87d37e7eb37cca1447903ac6b20cae0a51a8bd120275a66c6ae088f0c55221d2097b61146acd596e140fd7543463cff901ab5f131c14f7207c68f7cb88f065e8cc2fbf8d4560d28bfccaf2b04d2c0ae56436990b1dc84e643ff7eaaf1ea60291ccc6d1fba32eb5739f3a23cf7a6a0e501460aeb57449bf61cacea342c0602380089469c7a4ac2eaf1a5d87b7c7e91926225e5d7d86010215e2bbf4b68ee6200a94cb6420106f84c8a298cad0d0cff3d92948f9ce773cd0ee051beeb59204a312013cc08f190db722285", 0xad09252c663df7eb}, {0x0, 0xa3, &(0x7f0000001a80)="924e698ccf4974152394dfdd3d62b076e4d19998e3f4296baf34e7a8e20a6ba8e34ed6c1500fdf124e2fd46549842e560442c6b1a6c07df593ae2295808b7b2a82beed7634ee526654909a513628b08f72fd4960c06cfac6c09ff729608d2368f41891896d102d418e9c99dd5740e7bdc6c22b0ffaec5eb7c956a99d6fb6d9415b569bad5235b6e67cff5ba2f432e8ba7ac506278da7c412ae2ee021114b24ee117b56", 0x1, 0x1}, {0x3, 0xb4, &(0x7f0000001b40)="6e7092c67da683842ef20e77c51827a8ffef3d44d3fd9ee2231953f18d72245acf850aa64676e01be16fc0c75c6c13a7322de3caa22247ff7dcf49deafd8016ab41f7ba0a54c28c3fae9f4266181f06e1098e75ee15bf0e5f5373993ceddc47de2c435784fefde9d597a388faafb6e15cf5d44e20d8ff87cda072e89601dc88fd3e367e05e4a0c9615f560ac743a28cfac9041f4cb60cce7008a8baf4e58bf95904d86a26db0fbcb0bd747fc8335afb886af1c35", 0x1, 0x1}]})
close(r1)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000300)=0x4)
pipe(&(0x7f00000004c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xffffffef, 0x7044, 0x3, 0x40802, r0, 0xfffffff8, '\x00', r3, r1, 0x203, 0x1, 0x2, 0xa}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 5 (id=8823):
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYBLOB="d4000600080211040101"], 0xa) (async)
syz_80211_inject_frame(0x0, 0x0, 0xfffffffffffffe57) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x25dfdbff, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0xe, 0x9}}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9, {0x3}}}}]}]}, 0x68}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r2 = socket(0x2, 0x80805, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0) (async)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x5, 0x5}, 0x10)
pipe(&(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x80000000) (async)
vmsplice(r6, &(0x7f00000000c0), 0x0, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

270
[ 1018.404868][ T2700]  ? __pfx_ksys_write+0x10/0x10
[ 1018.404901][ T2700]  __x64_sys_bpf+0xba/0xd0
[ 1018.404924][ T2700]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1018.404945][ T2700]  do_syscall_64+0x174/0x580
[ 1018.404971][ T2700]  ? trace_irq_disable+0x3b/0x140
[ 1018.404995][ T2700]  ? clear_bhb_loop+0x40/0x90
[ 1018.405018][ T2700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1018.405037][ T2700] RIP: 0033:0x7f4318b9de59
[ 1018.405063][ T2700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1018.405080][ T2700] RSP: 002b:00007f4319a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1018.405101][ T2700] RAX: ffffffffffffffda RBX: 00007f4318e25fa0 RCX: 00007f4318b9de59
[ 1018.405115][ T2700] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1018.405128][ T2700] RBP: 00007f4319a47090 R08: 0000000000000000 R09: 0000000000000000
[ 1018.405141][ T2700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1018.405153][ T2700] R13: 00007f4318e26038 R14: 00007f4318e25fa0 R15: 00007ffe22e1d438
[ 1018.405185][ T2700]  </TASK>
[ 1018.607460][ T1123] bond7: (slave bridge2): failed to get link speed/duplex
[ 1019.079748][ T2743] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1019.090745][ T2743] FAULT_INJECTION: forcing a failure.
[ 1019.090745][ T2743] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1019.109886][ T2743] CPU: 0 UID: 0 PID: 2743 Comm: syz.0.8113 Not tainted syzkaller #0 PREEMPT(full) 
[ 1019.109913][ T2743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1019.109925][ T2743] Call Trace:
[ 1019.109933][ T2743]  <TASK>
[ 1019.109942][ T2743]  dump_stack_lvl+0xe8/0x150
[ 1019.109976][ T2743]  should_fail_ex+0x40c/0x560
[ 1019.110003][ T2743]  _copy_to_user+0x31/0xb0
[ 1019.110033][ T2743]  simple_read_from_buffer+0xe1/0x170
[ 1019.110064][ T2743]  proc_fail_nth_read+0x1bb/0x230
[ 1019.110092][ T2743]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1019.110122][ T2743]  ? rw_verify_area+0x24a/0x4c0
[ 1019.110151][ T2743]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1019.110176][ T2743]  vfs_read+0x213/0xa80
[ 1019.110208][ T2743]  ? __pfx___mutex_lock+0x10/0x10
[ 1019.110237][ T2743]  ? __pfx_vfs_read+0x10/0x10
[ 1019.110267][ T2743]  ? __fget_files+0x2a/0x420
[ 1019.110295][ T2743]  ? __fget_files+0x3a2/0x420
[ 1019.110319][ T2743]  ? __fget_files+0x2a/0x420
[ 1019.110352][ T2743]  ksys_read+0x150/0x270
[ 1019.110383][ T2743]  ? __pfx_ksys_read+0x10/0x10
[ 1019.110418][ T2743]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1019.110440][ T2743]  do_syscall_64+0x174/0x580
[ 1019.110465][ T2743]  ? trace_irq_disable+0x3b/0x140
[ 1019.110489][ T2743]  ? clear_bhb_loop+0x40/0x90
[ 1019.110511][ T2743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1019.110531][ T2743] RIP: 0033:0x7f14ca35e68e
[ 1019.110550][ T2743] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1019.110568][ T2743] RSP: 002b:00007f14cb199fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1019.110589][ T2743] RAX: ffffffffffffffda RBX: 00007f14cb19a6c0 RCX: 00007f14ca35e68e
[ 1019.110604][ T2743] RDX: 000000000000000f RSI: 00007f14cb19a0a0 RDI: 0000000000000008
[ 1019.110616][ T2743] RBP: 00007f14cb19a090 R08: 0000000000000000 R09: 0000000000000000
[ 1019.110628][ T2743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1019.110640][ T2743] R13: 00007f14ca626038 R14: 00007f14ca625fa0 R15: 00007ffc2169b948
[ 1019.110672][ T2743]  </TASK>
[ 1019.482297][ T5284] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1019.533276][ T2746] netlink: 348 bytes leftover after parsing attributes in process `syz.1.8114'.
[ 1019.586552][ T2746] netlink: 348 bytes leftover after parsing attributes in process `syz.1.8114'.
[ 1019.723649][ T2766] xt_hashlimit: size too large, truncated to 1048576
[ 1019.923674][ T2781] FAULT_INJECTION: forcing a failure.
[ 1019.923674][ T2781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1019.943664][ T2781] CPU: 0 UID: 0 PID: 2781 Comm: syz.1.8120 Not tainted syzkaller #0 PREEMPT(full) 
[ 1019.943690][ T2781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1019.943700][ T2781] Call Trace:
[ 1019.943707][ T2781]  <TASK>
[ 1019.943714][ T2781]  dump_stack_lvl+0xe8/0x150
[ 1019.943747][ T2781]  should_fail_ex+0x40c/0x560
[ 1019.943774][ T2781]  _copy_from_user+0x2d/0xb0
[ 1019.943803][ T2781]  generic_map_update_batch+0x651/0x9a0
[ 1019.943832][ T2781]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1019.943853][ T2781]  ? __fget_files+0x2a/0x420
[ 1019.943892][ T2781]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1019.943912][ T2781]  bpf_map_do_batch+0x391/0x630
[ 1019.943941][ T2781]  __sys_bpf+0xbe5/0xd90
[ 1019.943972][ T2781]  ? __pfx___sys_bpf+0x10/0x10
[ 1019.944006][ T2781]  ? __fget_files+0x2a/0x420
[ 1019.944044][ T2781]  ? ksys_write+0x242/0x270
[ 1019.944073][ T2781]  ? __pfx_ksys_write+0x10/0x10
[ 1019.944105][ T2781]  __x64_sys_bpf+0xba/0xd0
[ 1019.944126][ T2781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1019.944147][ T2781]  do_syscall_64+0x174/0x580
[ 1019.944173][ T2781]  ? trace_irq_disable+0x3b/0x140
[ 1019.944196][ T2781]  ? clear_bhb_loop+0x40/0x90
[ 1019.944220][ T2781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1019.944238][ T2781] RIP: 0033:0x7f4318b9de59
[ 1019.944256][ T2781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1019.944273][ T2781] RSP: 002b:00007f4319a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1019.944293][ T2781] RAX: ffffffffffffffda RBX: 00007f4318e25fa0 RCX: 00007f4318b9de59
[ 1019.944307][ T2781] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1019.944319][ T2781] RBP: 00007f4319a47090 R08: 0000000000000000 R09: 0000000000000000
[ 1019.944331][ T2781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1019.944343][ T2781] R13: 00007f4318e26038 R14: 00007f4318e25fa0 R15: 00007ffe22e1d438
[ 1019.944373][ T2781]  </TASK>
[ 1020.507755][ T2800] netlink: 'syz.0.8123': attribute type 1 has an invalid length.
[ 1020.622070][ T7976] net_ratelimit: 10 callbacks suppressed
[ 1020.622091][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1020.649778][ T2808] netlink: 'syz.4.8125': attribute type 1 has an invalid length.
[ 1020.674863][ T2808] bond7: entered promiscuous mode
[ 1020.680262][ T2808] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1020.852951][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1020.876931][ T2810] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1020.891973][ T2810] bond7: (slave ip6gre3): The slave device specified does not support setting the MAC address
[ 1020.902889][ T2810] bond7: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode
[ 1020.929120][ T2810] bond7: (slave ip6gre3): making interface the new active one
[ 1020.938278][ T2810] ip6gre3: entered promiscuous mode
[ 1020.946131][ T2810] bond7: (slave ip6gre3): Enslaving as an active interface with an up link
[ 1020.964159][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1021.082364][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1021.191642][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1021.253846][ T2834] FAULT_INJECTION: forcing a failure.
[ 1021.253846][ T2834] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1021.268546][ T2834] CPU: 0 UID: 0 PID: 2834 Comm: syz.3.8132 Not tainted syzkaller #0 PREEMPT(full) 
[ 1021.268561][ T2834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1021.268568][ T2834] Call Trace:
[ 1021.268573][ T2834]  <TASK>
[ 1021.268578][ T2834]  dump_stack_lvl+0xe8/0x150
[ 1021.268600][ T2834]  should_fail_ex+0x40c/0x560
[ 1021.268615][ T2834]  _copy_from_user+0x2d/0xb0
[ 1021.268633][ T2834]  generic_map_update_batch+0x6a3/0x9a0
[ 1021.268649][ T2834]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1021.268660][ T2834]  ? __fget_files+0x2a/0x420
[ 1021.268678][ T2834]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1021.268689][ T2834]  bpf_map_do_batch+0x391/0x630
[ 1021.268707][ T2834]  __sys_bpf+0xbe5/0xd90
[ 1021.268724][ T2834]  ? __pfx___sys_bpf+0x10/0x10
[ 1021.268743][ T2834]  ? __fget_files+0x2a/0x420
[ 1021.268765][ T2834]  ? ksys_write+0x242/0x270
[ 1021.268792][ T2834]  ? __pfx_ksys_write+0x10/0x10
[ 1021.268828][ T2834]  __x64_sys_bpf+0xba/0xd0
[ 1021.268850][ T2834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1021.268871][ T2834]  do_syscall_64+0x174/0x580
[ 1021.268897][ T2834]  ? trace_irq_disable+0x3b/0x140
[ 1021.268920][ T2834]  ? clear_bhb_loop+0x40/0x90
[ 1021.268934][ T2834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1021.268944][ T2834] RIP: 0033:0x7efd1af9de59
[ 1021.268955][ T2834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1021.268964][ T2834] RSP: 002b:00007efd1bf35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1021.268976][ T2834] RAX: ffffffffffffffda RBX: 00007efd1b225fa0 RCX: 00007efd1af9de59
[ 1021.268984][ T2834] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1021.268991][ T2834] RBP: 00007efd1bf35090 R08: 0000000000000000 R09: 0000000000000000
[ 1021.268997][ T2834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1021.269004][ T2834] R13: 00007efd1b226038 R14: 00007efd1b225fa0 R15: 00007ffcb2915b28
[ 1021.269020][ T2834]  </TASK>
[ 1021.469222][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1021.611182][ T2843] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8133'.
[ 1021.625334][ T2842] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1021.645107][ T2842] 8021q: adding VLAN 0 to HW filter on device team0
[ 1021.726788][ T2842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1021.737804][ T2842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1021.758911][ T2842] veth1_macvtap: left promiscuous mode
[ 1021.767312][ T2842] veth1_macvtap: entered promiscuous mode
[ 1021.780380][ T2842] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1021.789780][ T2842] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1021.802476][ T2842] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1021.813283][ T2842] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1021.824883][ T2842] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1021.870507][ T7976] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1021.894486][ T7976] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1021.917244][  T871] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1021.930886][  T871] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1021.961715][ T1123] bond7: (slave bridge2): failed to get link speed/duplex
[ 1022.082153][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1022.191790][ T1123] bond7: (slave bridge2): failed to get link speed/duplex
[ 1022.390893][ T2851] wlan0 speed is unknown, defaulting to 1000
[ 1022.398777][ T2851] lo speed is unknown, defaulting to 1000
[ 1023.088852][ T2896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8141'.
[ 1023.200185][ T2790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1023.313375][ T2903] netlink: 'syz.4.8143': attribute type 4 has an invalid length.
[ 1023.335581][ T2903] netlink: 'syz.4.8143': attribute type 4 has an invalid length.
[ 1023.367550][ T8774] lo speed is unknown, defaulting to 1000
[ 1023.382697][ T8774] syz2: Port: 1 Link ACTIVE
[ 1023.498867][ T2911] netlink: 'syz.1.8146': attribute type 1 has an invalid length.
[ 1023.615347][ T2911] bond14: entered promiscuous mode
[ 1023.652223][ T2911] bond14: entered allmulticast mode
[ 1023.665973][ T2911] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1024.140486][ T2955] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[ 1024.197698][ T2951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8154'.
[ 1024.896815][ T2987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8165'.
[ 1025.110487][ T3001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8168'.
[ 1025.682383][ T3022] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8173'.
[ 1025.738545][ T7976] net_ratelimit: 22 callbacks suppressed
[ 1025.738565][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1025.824017][ T3026] netlink: 'syz.4.8174': attribute type 1 has an invalid length.
[ 1025.883118][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1026.002291][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1026.033208][ T3038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8178'.
[ 1026.063617][ T3042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8181'.
[ 1026.111095][ T3046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8182'.
[ 1026.120972][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1026.129970][ T3046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8182'.
[ 1026.232037][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1026.410520][ T3059] syzkaller0: entered promiscuous mode
[ 1026.419416][ T3059] syzkaller0: entered allmulticast mode
[ 1028.997897][ T3068] gtp6: entered promiscuous mode
[ 1029.003894][ T3068] gtp6: entered allmulticast mode
[ 1029.010711][ T3068] team0: Device gtp6 is of different type
[ 1029.053389][ T3066] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1029.063383][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1029.085746][ T3066] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1029.098109][ T3066] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1029.193020][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1029.287251][ T3093] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[ 1029.362932][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1029.474247][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1029.510874][ T3103] SET target dimension over the limit!
[ 1029.602687][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1029.802829][ T3117] __nla_validate_parse: 1 callbacks suppressed
[ 1029.802849][ T3117] netlink: 199784 bytes leftover after parsing attributes in process `syz.0.8199'.
[ 1029.832988][ T3117] netlink: 'syz.0.8199': attribute type 1 has an invalid length.
[ 1030.164291][ T3132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8203'.
[ 1030.320148][ T3141] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8207'.
[ 1030.429054][ T3144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1030.439511][ T3137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1030.547529][ T3156] pimreg9: entered allmulticast mode
[ 1030.644025][ T3163] FAULT_INJECTION: forcing a failure.
[ 1030.644025][ T3163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1030.670576][ T3163] CPU: 1 UID: 0 PID: 3163 Comm: syz.4.8213 Not tainted syzkaller #0 PREEMPT(full) 
[ 1030.670621][ T3163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1030.670637][ T3163] Call Trace:
[ 1030.670646][ T3163]  <TASK>
[ 1030.670655][ T3163]  dump_stack_lvl+0xe8/0x150
[ 1030.670688][ T3163]  should_fail_ex+0x40c/0x560
[ 1030.670716][ T3163]  _copy_from_user+0x2d/0xb0
[ 1030.670742][ T3163]  generic_map_update_batch+0x651/0x9a0
[ 1030.670774][ T3163]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1030.670794][ T3163]  ? __fget_files+0x2a/0x420
[ 1030.670824][ T3163]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1030.670844][ T3163]  bpf_map_do_batch+0x391/0x630
[ 1030.670875][ T3163]  __sys_bpf+0xbe5/0xd90
[ 1030.670905][ T3163]  ? __pfx___sys_bpf+0x10/0x10
[ 1030.670937][ T3163]  ? __fget_files+0x2a/0x420
[ 1030.670976][ T3163]  ? ksys_write+0x242/0x270
[ 1030.671006][ T3163]  ? __pfx_ksys_write+0x10/0x10
[ 1030.671038][ T3163]  __x64_sys_bpf+0xba/0xd0
[ 1030.671061][ T3163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1030.671082][ T3163]  do_syscall_64+0x174/0x580
[ 1030.671109][ T3163]  ? trace_irq_disable+0x3b/0x140
[ 1030.671133][ T3163]  ? clear_bhb_loop+0x40/0x90
[ 1030.671157][ T3163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1030.671176][ T3163] RIP: 0033:0x7fb9c939de59
[ 1030.671195][ T3163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1030.671213][ T3163] RSP: 002b:00007fb9ca1f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1030.671233][ T3163] RAX: ffffffffffffffda RBX: 00007fb9c9625fa0 RCX: 00007fb9c939de59
[ 1030.671246][ T3163] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1030.671267][ T3163] RBP: 00007fb9ca1f2090 R08: 0000000000000000 R09: 0000000000000000
[ 1030.671280][ T3163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1030.671291][ T3163] R13: 00007fb9c9626038 R14: 00007fb9c9625fa0 R15: 00007ffe82d3d498
[ 1030.671323][ T3163]  </TASK>
[ 1030.904369][  T873] net_ratelimit: 7 callbacks suppressed
[ 1030.904387][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1031.022456][  T871] bond7: (slave bridge2): failed to get link speed/duplex
[ 1031.125036][ T3181] macsec0: entered promiscuous mode
[ 1031.132176][  T871] bond7: (slave bridge2): failed to get link speed/duplex
[ 1031.242354][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1031.249716][ T3172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8218'.
[ 1031.286974][ T3172] macsec0 (unregistering): left promiscuous mode
[ 1031.382065][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1031.492636][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1031.506617][ T3204] netlink: 'syz.0.8225': attribute type 1 has an invalid length.
[ 1031.506642][ T3206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8226'.
[ 1031.537975][ T3204] bond8: option mode: invalid value (7)
[ 1031.546204][ T3204] bond8 (unregistering): Released all slaves
[ 1031.580820][ T3210] 
: renamed from dummy0
[ 1031.587176][ T3206] netlink: 'syz.4.8226': attribute type 1 has an invalid length.
[ 1031.600741][ T3210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8225'.
[ 1031.612459][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1031.658104][ T3206] bond9: entered promiscuous mode
[ 1031.664133][ T3206] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1031.715035][ T3206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8226'.
[ 1031.740091][ T3206] bond9: entered allmulticast mode
[ 1031.746878][ T3224] FAULT_INJECTION: forcing a failure.
[ 1031.746878][ T3224] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1031.782814][ T3224] CPU: 0 UID: 0 PID: 3224 Comm: syz.0.8228 Not tainted syzkaller #0 PREEMPT(full) 
[ 1031.782847][ T3224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1031.782859][ T3224] Call Trace:
[ 1031.782867][ T3224]  <TASK>
[ 1031.782876][ T3224]  dump_stack_lvl+0xe8/0x150
[ 1031.782937][ T3224]  should_fail_ex+0x40c/0x560
[ 1031.782968][ T3224]  _copy_from_user+0x2d/0xb0
[ 1031.782998][ T3224]  generic_map_update_batch+0x6a3/0x9a0
[ 1031.783030][ T3224]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1031.783050][ T3224]  ? __fget_files+0x2a/0x420
[ 1031.783083][ T3224]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1031.783103][ T3224]  bpf_map_do_batch+0x391/0x630
[ 1031.783135][ T3224]  __sys_bpf+0xbe5/0xd90
[ 1031.783167][ T3224]  ? __pfx___sys_bpf+0x10/0x10
[ 1031.783203][ T3224]  ? __fget_files+0x2a/0x420
[ 1031.783244][ T3224]  ? ksys_write+0x242/0x270
[ 1031.783275][ T3224]  ? __pfx_ksys_write+0x10/0x10
[ 1031.783309][ T3224]  __x64_sys_bpf+0xba/0xd0
[ 1031.783330][ T3224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.783352][ T3224]  do_syscall_64+0x174/0x580
[ 1031.783381][ T3224]  ? trace_irq_disable+0x3b/0x140
[ 1031.783406][ T3224]  ? clear_bhb_loop+0x40/0x90
[ 1031.783429][ T3224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.783449][ T3224] RIP: 0033:0x7f14ca39de59
[ 1031.783468][ T3224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1031.783485][ T3224] RSP: 002b:00007f14cb19a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1031.783505][ T3224] RAX: ffffffffffffffda RBX: 00007f14ca625fa0 RCX: 00007f14ca39de59
[ 1031.783520][ T3224] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1031.783532][ T3224] RBP: 00007f14cb19a090 R08: 0000000000000000 R09: 0000000000000000
[ 1031.783543][ T3224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1031.783554][ T3224] R13: 00007f14ca626038 R14: 00007f14ca625fa0 R15: 00007ffc2169b948
[ 1031.783584][ T3224]  </TASK>
[ 1031.999370][ T3206] bond9: (slave bridge2): making interface the new active one
[ 1032.008123][ T3206] bridge2: entered promiscuous mode
[ 1032.034963][ T3206] bridge2: entered allmulticast mode
[ 1032.076923][ T3206] bond9: (slave bridge2): Enslaving as an active interface with an up link
[ 1032.099319][ T3235] netlink: 'syz.0.8230': attribute type 11 has an invalid length.
[ 1032.156997][ T3235] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1032.198738][ T3235] netlink: 'syz.0.8230': attribute type 21 has an invalid length.
[ 1032.208430][  T871] bond7: (slave bridge2): failed to get link speed/duplex
[ 1032.274109][ T3235] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8230'.
[ 1032.321233][ T3246] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1032.365755][ T3235] netlink: 'syz.0.8230': attribute type 4 has an invalid length.
[ 1032.377880][ T3235] netlink: 'syz.0.8230': attribute type 3 has an invalid length.
[ 1032.386451][ T3235] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8230'.
[ 1032.400643][ T3247] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1032.602821][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1033.547131][ T3276] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1035.828463][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1035.842684][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1035.856216][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1035.865910][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1035.879778][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1035.963709][  T113] net_ratelimit: 5 callbacks suppressed
[ 1035.963729][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1036.112174][  T866] bond7: (slave bridge2): failed to get link speed/duplex
[ 1036.252665][  T866] bond7: (slave bridge2): failed to get link speed/duplex
[ 1036.525704][  T866] bond7: (slave bridge2): failed to get link speed/duplex
[ 1036.577933][ T3354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1036.589068][ T3354] syzkaller0: entered promiscuous mode
[ 1036.595804][ T3354] syzkaller0: entered allmulticast mode
[ 1036.617547][ T3354] tipc: Resetting bearer <eth:syzkaller0>
[ 1036.649156][ T3352] tipc: Resetting bearer <eth:syzkaller0>
[ 1036.709731][ T3352] tipc: Disabling bearer <eth:syzkaller0>
[ 1036.817199][ T3317] wlan0 speed is unknown, defaulting to 1000
[ 1036.824719][  T871] bond7: (slave bridge2): failed to get link speed/duplex
[ 1036.832853][ T3359] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8259'.
[ 1036.854387][ T3317] lo speed is unknown, defaulting to 1000
[ 1037.062467][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1037.092158][ T3369] FAULT_INJECTION: forcing a failure.
[ 1037.092158][ T3369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1037.160579][ T3369] CPU: 1 UID: 0 PID: 3369 Comm: syz.3.8261 Not tainted syzkaller #0 PREEMPT(full) 
[ 1037.160605][ T3369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1037.160617][ T3369] Call Trace:
[ 1037.160625][ T3369]  <TASK>
[ 1037.160634][ T3369]  dump_stack_lvl+0xe8/0x150
[ 1037.160667][ T3369]  should_fail_ex+0x40c/0x560
[ 1037.160694][ T3369]  _copy_from_user+0x2d/0xb0
[ 1037.160723][ T3369]  generic_map_update_batch+0x6a3/0x9a0
[ 1037.160754][ T3369]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1037.160776][ T3369]  ? __fget_files+0x2a/0x420
[ 1037.160816][ T3369]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1037.160837][ T3369]  bpf_map_do_batch+0x391/0x630
[ 1037.160869][ T3369]  __sys_bpf+0xbe5/0xd90
[ 1037.160902][ T3369]  ? __pfx___sys_bpf+0x10/0x10
[ 1037.160938][ T3369]  ? __fget_files+0x2a/0x420
[ 1037.160979][ T3369]  ? ksys_write+0x242/0x270
[ 1037.161010][ T3369]  ? __pfx_ksys_write+0x10/0x10
[ 1037.161044][ T3369]  __x64_sys_bpf+0xba/0xd0
[ 1037.161067][ T3369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1037.161089][ T3369]  do_syscall_64+0x174/0x580
[ 1037.161116][ T3369]  ? trace_irq_disable+0x3b/0x140
[ 1037.161140][ T3369]  ? clear_bhb_loop+0x40/0x90
[ 1037.161164][ T3369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1037.161184][ T3369] RIP: 0033:0x7efd1af9de59
[ 1037.161201][ T3369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1037.161219][ T3369] RSP: 002b:00007efd1bf35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1037.161239][ T3369] RAX: ffffffffffffffda RBX: 00007efd1b225fa0 RCX: 00007efd1af9de59
[ 1037.161254][ T3369] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1037.161268][ T3369] RBP: 00007efd1bf35090 R08: 0000000000000000 R09: 0000000000000000
[ 1037.161280][ T3369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1037.161292][ T3369] R13: 00007efd1b226038 R14: 00007efd1b225fa0 R15: 00007ffcb2915b28
[ 1037.161323][ T3369]  </TASK>
[ 1037.361354][  T866] bond7: (slave bridge2): failed to get link speed/duplex
[ 1037.522102][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1037.529267][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1037.537053][ T3317] bridge_slave_0: entered allmulticast mode
[ 1037.545301][ T3317] bridge_slave_0: entered promiscuous mode
[ 1037.554416][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1037.562153][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1037.569362][ T3317] bridge_slave_1: entered allmulticast mode
[ 1037.577871][ T3317] bridge_slave_1: entered promiscuous mode
[ 1037.692387][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1037.717168][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1037.834805][ T3317] team0: Port device team_slave_0 added
[ 1037.857723][ T3317] team0: Port device team_slave_1 added
[ 1037.952057][ T5640] Bluetooth: hci0: command tx timeout
[ 1037.954304][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1037.982021][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1038.016064][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1038.039149][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1038.046454][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1038.073522][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1038.124971][ T3407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8271'.
[ 1038.138875][ T3407] netlink: 'syz.1.8271': attribute type 83 has an invalid length.
[ 1038.165688][ T3317] hsr_slave_0: entered promiscuous mode
[ 1038.173313][ T3317] hsr_slave_1: entered promiscuous mode
[ 1038.179794][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[ 1038.186252][ T3317] Cannot create hsr debugfs directory
[ 1038.250442][ T3409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1038.412421][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1038.562534][  T871] bond7: (slave bridge2): failed to get link speed/duplex
[ 1038.637648][ T3426] FAULT_INJECTION: forcing a failure.
[ 1038.637648][ T3426] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1038.651327][ T3426] CPU: 1 UID: 0 PID: 3426 Comm: syz.0.8275 Not tainted syzkaller #0 PREEMPT(full) 
[ 1038.651353][ T3426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1038.651368][ T3426] Call Trace:
[ 1038.651375][ T3426]  <TASK>
[ 1038.651383][ T3426]  dump_stack_lvl+0xe8/0x150
[ 1038.651416][ T3426]  should_fail_ex+0x40c/0x560
[ 1038.651443][ T3426]  _copy_from_user+0x2d/0xb0
[ 1038.651473][ T3426]  generic_map_update_batch+0x651/0x9a0
[ 1038.651504][ T3426]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1038.651526][ T3426]  ? __fget_files+0x2a/0x420
[ 1038.651559][ T3426]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1038.651580][ T3426]  bpf_map_do_batch+0x391/0x630
[ 1038.651612][ T3426]  __sys_bpf+0xbe5/0xd90
[ 1038.651645][ T3426]  ? __pfx___sys_bpf+0x10/0x10
[ 1038.651688][ T3426]  ? __fget_files+0x2a/0x420
[ 1038.651731][ T3426]  ? ksys_write+0x242/0x270
[ 1038.651762][ T3426]  ? __pfx_ksys_write+0x10/0x10
[ 1038.651796][ T3426]  __x64_sys_bpf+0xba/0xd0
[ 1038.651819][ T3426]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.651842][ T3426]  do_syscall_64+0x174/0x580
[ 1038.651869][ T3426]  ? trace_irq_disable+0x3b/0x140
[ 1038.651893][ T3426]  ? clear_bhb_loop+0x40/0x90
[ 1038.651918][ T3426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.651937][ T3426] RIP: 0033:0x7f14ca39de59
[ 1038.651955][ T3426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1038.651971][ T3426] RSP: 002b:00007f14cb19a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1038.651990][ T3426] RAX: ffffffffffffffda RBX: 00007f14ca625fa0 RCX: 00007f14ca39de59
[ 1038.652004][ T3426] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1038.652016][ T3426] RBP: 00007f14cb19a090 R08: 0000000000000000 R09: 0000000000000000
[ 1038.652027][ T3426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1038.652037][ T3426] R13: 00007f14ca626038 R14: 00007f14ca625fa0 R15: 00007ffc2169b948
[ 1038.652065][ T3426]  </TASK>
[ 1039.059942][ T3439] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8279'.
[ 1039.077239][ T3439] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8279'.
[ 1039.089824][ T3439] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8279'.
[ 1039.099881][ T3439] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8279'.
[ 1039.109902][ T3439] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8279'.
[ 1039.281133][ T3451] SET target dimension over the limit!
[ 1039.393569][ T3459] FAULT_INJECTION: forcing a failure.
[ 1039.393569][ T3459] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1039.394576][ T3461] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[ 1039.414325][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1039.426970][ T3459] CPU: 0 UID: 0 PID: 3459 Comm: syz.0.8287 Not tainted syzkaller #0 PREEMPT(full) 
[ 1039.426992][ T3459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1039.427003][ T3459] Call Trace:
[ 1039.427011][ T3459]  <TASK>
[ 1039.427019][ T3459]  dump_stack_lvl+0xe8/0x150
[ 1039.427050][ T3459]  should_fail_ex+0x40c/0x560
[ 1039.427077][ T3459]  _copy_from_user+0x2d/0xb0
[ 1039.427112][ T3459]  generic_map_update_batch+0x6a3/0x9a0
[ 1039.427142][ T3459]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1039.427162][ T3459]  ? __fget_files+0x2a/0x420
[ 1039.427194][ T3459]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1039.427212][ T3459]  bpf_map_do_batch+0x391/0x630
[ 1039.427242][ T3459]  __sys_bpf+0xbe5/0xd90
[ 1039.427273][ T3459]  ? __pfx___sys_bpf+0x10/0x10
[ 1039.427305][ T3459]  ? __fget_files+0x2a/0x420
[ 1039.427345][ T3459]  ? ksys_write+0x242/0x270
[ 1039.427376][ T3459]  ? __pfx_ksys_write+0x10/0x10
[ 1039.427408][ T3459]  __x64_sys_bpf+0xba/0xd0
[ 1039.427429][ T3459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1039.427451][ T3459]  do_syscall_64+0x174/0x580
[ 1039.427476][ T3459]  ? trace_irq_disable+0x3b/0x140
[ 1039.427499][ T3459]  ? clear_bhb_loop+0x40/0x90
[ 1039.427521][ T3459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1039.427541][ T3459] RIP: 0033:0x7f14ca39de59
[ 1039.427559][ T3459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1039.427575][ T3459] RSP: 002b:00007f14cb19a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1039.427595][ T3459] RAX: ffffffffffffffda RBX: 00007f14ca625fa0 RCX: 00007f14ca39de59
[ 1039.427608][ T3459] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1039.427618][ T3459] RBP: 00007f14cb19a090 R08: 0000000000000000 R09: 0000000000000000
[ 1039.427629][ T3459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1039.427638][ T3459] R13: 00007f14ca626038 R14: 00007f14ca625fa0 R15: 00007ffc2169b948
[ 1039.427663][ T3459]  </TASK>
[ 1039.636726][ T3317] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1039.645231][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1039.673167][ T3317] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1039.681040][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1039.689045][ T3464] netlink: 'syz.3.8285': attribute type 4 has an invalid length.
[ 1039.699516][ T3317] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1039.745239][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1039.758898][ T3317] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1039.980824][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1040.016590][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[ 1040.033456][ T5640] Bluetooth: hci0: command tx timeout
[ 1040.057055][  T871] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1040.064305][  T871] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1040.156058][  T113] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1040.163321][  T113] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1040.304432][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8297'.
[ 1040.329790][ T3503] FAULT_INJECTION: forcing a failure.
[ 1040.329790][ T3503] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1040.369021][ T3503] CPU: 1 UID: 0 PID: 3503 Comm: syz.3.8298 Not tainted syzkaller #0 PREEMPT(full) 
[ 1040.369047][ T3503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1040.369060][ T3503] Call Trace:
[ 1040.369067][ T3503]  <TASK>
[ 1040.369076][ T3503]  dump_stack_lvl+0xe8/0x150
[ 1040.369117][ T3503]  should_fail_ex+0x40c/0x560
[ 1040.369144][ T3503]  _copy_from_user+0x2d/0xb0
[ 1040.369172][ T3503]  generic_map_update_batch+0x651/0x9a0
[ 1040.369203][ T3503]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1040.369224][ T3503]  ? __fget_files+0x2a/0x420
[ 1040.369257][ T3503]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1040.369277][ T3503]  bpf_map_do_batch+0x391/0x630
[ 1040.369309][ T3503]  __sys_bpf+0xbe5/0xd90
[ 1040.369342][ T3503]  ? __pfx___sys_bpf+0x10/0x10
[ 1040.369378][ T3503]  ? __fget_files+0x2a/0x420
[ 1040.369420][ T3503]  ? ksys_write+0x242/0x270
[ 1040.369450][ T3503]  ? __pfx_ksys_write+0x10/0x10
[ 1040.369483][ T3503]  __x64_sys_bpf+0xba/0xd0
[ 1040.369506][ T3503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.369527][ T3503]  do_syscall_64+0x174/0x580
[ 1040.369555][ T3503]  ? trace_irq_disable+0x3b/0x140
[ 1040.369579][ T3503]  ? clear_bhb_loop+0x40/0x90
[ 1040.369602][ T3503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.369621][ T3503] RIP: 0033:0x7efd1af9de59
[ 1040.369640][ T3503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1040.369657][ T3503] RSP: 002b:00007efd1bf35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1040.369677][ T3503] RAX: ffffffffffffffda RBX: 00007efd1b225fa0 RCX: 00007efd1af9de59
[ 1040.369691][ T3503] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1040.369703][ T3503] RBP: 00007efd1bf35090 R08: 0000000000000000 R09: 0000000000000000
[ 1040.369715][ T3503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1040.369729][ T3503] R13: 00007efd1b226038 R14: 00007efd1b225fa0 R15: 00007ffcb2915b28
[ 1040.369761][ T3503]  </TASK>
[ 1040.706966][ T3507] netlink: 'syz.3.8300': attribute type 13 has an invalid length.
[ 1040.727756][ T3507] netlink: 'syz.3.8300': attribute type 17 has an invalid length.
[ 1040.740598][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8301'.
[ 1040.761256][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8301'.
[ 1040.956622][ T3526] netlink: 'syz.0.8303': attribute type 13 has an invalid length.
[ 1040.972149][  T873] net_ratelimit: 18 callbacks suppressed
[ 1040.972168][  T873] bond7: (slave bridge2): link status up again after 0 ms
[ 1040.982584][ T3526] netlink: 'syz.0.8303': attribute type 17 has an invalid length.
[ 1041.006238][  T873] bond7: (slave bridge2): link status up again after 0 ms
[ 1041.023627][  T873] bond7: (slave bridge2): link status up again after 0 ms
[ 1041.045437][ T7976] bond7: (slave bridge2): link status up again after 0 ms
[ 1041.063044][ T7976] bond7: (slave bridge2): link status up again after 0 ms
[ 1041.091111][ T3529] xt_connbytes: Forcing CT accounting to be enabled
[ 1041.110702][ T7976] bond7: (slave bridge2): link status up again after 0 ms
[ 1041.142811][ T7976] bond7: (slave bridge2): link status up again after 0 ms
[ 1041.161791][ T3507] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1041.177546][ T7976] bond7: (slave bridge2): link status up again after 0 ms
[ 1041.191900][   T12] bond7: (slave bridge2): link status up again after 0 ms
[ 1041.495352][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1041.917649][ T3555] syzkaller0: entered promiscuous mode
[ 1041.924452][ T3555] syzkaller0: entered allmulticast mode
[ 1041.984038][ T3317] veth0_vlan: entered promiscuous mode
[ 1042.023170][ T3317] veth1_vlan: entered promiscuous mode
[ 1042.084706][ T3317] veth0_macvtap: entered promiscuous mode
[ 1042.116539][ T3317] veth1_macvtap: entered promiscuous mode
[ 1042.123418][ T5640] Bluetooth: hci0: command tx timeout
[ 1042.159666][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1042.176788][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1042.203353][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.213212][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.340700][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.350681][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.406151][ T3568] __nla_validate_parse: 108 callbacks suppressed
[ 1042.406168][ T3568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8312'.
[ 1042.526822][ T3570] netlink: 'syz.2.8312': attribute type 3 has an invalid length.
[ 1043.034073][  T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1043.049380][  T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1043.104097][  T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1043.124515][  T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1043.753317][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1043.764901][ T3617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8324'.
[ 1043.777967][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1043.787543][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1043.805507][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1043.883236][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1043.996995][T25092] syz_tun (unregistering): left allmulticast mode
[ 1044.064349][ T3624] netlink: 248 bytes leftover after parsing attributes in process `syz.4.8327'.
[ 1044.209672][ T5640] Bluetooth: hci0: command tx timeout
[ 1044.216921][ T3632] syzkaller0: entered promiscuous mode
[ 1044.223710][ T3632] syzkaller0: entered allmulticast mode
[ 1044.419414][ T3614] wlan0 speed is unknown, defaulting to 1000
[ 1044.433058][ T3614] lo speed is unknown, defaulting to 1000
[ 1044.564774][ T3647] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8332'.
[ 1044.582779][ T3647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8332'.
[ 1044.825244][ T3661] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8333'.
[ 1044.854633][ T3661] 0ªX¹¦À: renamed from batadv0 (while UP)
[ 1044.876207][ T3661] 0ªX¹¦À: entered allmulticast mode
[ 1044.930420][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1044.947310][ T3614] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1044.956136][ T3614] bridge_slave_0: entered allmulticast mode
[ 1044.965445][ T3614] bridge_slave_0: entered promiscuous mode
[ 1044.983704][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1044.993138][ T3668] sctp: [Deprecated]: syz.3.8334 (pid 3668) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1044.993138][ T3668] Use struct sctp_sack_info instead
[ 1045.009993][ T3614] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1045.022646][ T3614] bridge_slave_1: entered allmulticast mode
[ 1045.044576][ T3614] bridge_slave_1: entered promiscuous mode
[ 1045.193334][ T3614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1045.244083][ T3614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1045.309079][ T3614] team0: Port device team_slave_0 added
[ 1045.374432][ T3614] team0: Port device team_slave_1 added
[ 1045.488767][ T3614] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1045.505819][ T3614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1045.572886][ T3614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1045.620405][ T3700] bond13: option min_links: invalid value (18446744073709551612)
[ 1045.663256][ T3700] bond13: option min_links: allowed values 0 - 2147483647
[ 1045.679034][ T3700] bond13 (unregistering): Released all slaves
[ 1045.756896][ T3614] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1045.766302][ T3614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1045.787194][ T3702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8344'.
[ 1045.852067][ T3614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1045.954860][T26506] Bluetooth: hci4: command tx timeout
[ 1045.983629][ T3614] hsr_slave_0: entered promiscuous mode
[ 1045.990185][ T3614] hsr_slave_1: entered promiscuous mode
[ 1046.000525][ T3614] debugfs: 'hsr0' already exists in 'hsr'
[ 1046.010017][ T3614] Cannot create hsr debugfs directory
[ 1046.031075][ T5638] block nbd1: Receive control failed (result -32)
[ 1046.039247][ T5640] block nbd1: Receive control failed (result -32)
[ 1046.160386][ T3729] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.8347'.
[ 1046.242077][  T873] net_ratelimit: 25 callbacks suppressed
[ 1046.242096][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1046.366523][ T3614] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.406181][ T3743] netlink: 'syz.0.8352': attribute type 8 has an invalid length.
[ 1046.540568][ T3735] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1046.572784][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1046.692734][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1046.763803][ T3614] bond0: (slave netdevsim1): Releasing backup interface
[ 1046.852368][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1047.013358][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1047.223102][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1047.352258][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1047.462047][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1047.572388][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1047.682766][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1047.869402][ T3783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8358'.
[ 1048.035396][ T5640] Bluetooth: hci4: command tx timeout
[ 1049.393357][ T3748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1049.412313][ T3614] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1049.450476][ T3614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1049.493559][ T3614] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1049.630774][ T3614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1049.654398][ T3614] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1049.676766][ T3614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1049.739576][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1049.747333][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1049.791073][ T3802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8363'.
[ 1049.836980][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1049.854007][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1049.926461][ T3803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1049.962652][ T3614] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1049.982948][ T3614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1050.084710][  T871] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1050.103243][  T871] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1050.113720][ T5640] Bluetooth: hci4: command tx timeout
[ 1050.149818][  T871] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1050.185957][  T871] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1050.220123][ T3818] erspan0: entered promiscuous mode
[ 1050.243900][ T3818] erspan0: entered allmulticast mode
[ 1050.416918][ T3614] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1050.454343][ T3614] 8021q: adding VLAN 0 to HW filter on device team0
[ 1050.470672][  T113] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1050.477804][  T113] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1050.518244][  T113] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1050.525454][  T113] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1050.659271][ T3841] netlink: 'syz.4.8371': attribute type 2 has an invalid length.
[ 1050.695165][ T3841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8371'.
[ 1050.794839][ T3845] netlink: 'syz.3.8372': attribute type 13 has an invalid length.
[ 1050.814187][ T3845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8372'.
[ 1050.830700][ T3848] xt_hashlimit: size too large, truncated to 1048576
[ 1051.252629][  T113] net_ratelimit: 23 callbacks suppressed
[ 1051.252650][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1051.348208][ T3848] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1051.377440][ T3614] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1051.392240][ T5640] Bluetooth: hci5: command 0x0406 tx timeout
[ 1051.398372][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1051.468760][ T3614] veth0_vlan: entered promiscuous mode
[ 1051.499068][ T3614] veth1_vlan: entered promiscuous mode
[ 1051.597546][ T3873] wlan0 speed is unknown, defaulting to 1000
[ 1051.622241][ T3873] lo speed is unknown, defaulting to 1000
[ 1051.624537][ T3614] veth0_macvtap: entered promiscuous mode
[ 1051.756688][ T3614] veth1_macvtap: entered promiscuous mode
[ 1051.862577][ T3879] syzkaller0: entered promiscuous mode
[ 1051.869202][ T3879] syzkaller0: entered allmulticast mode
[ 1051.879988][ T3614] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1051.895317][ T3879] xt_TCPMSS: Only works on TCP SYN packets
[ 1051.952294][ T3614] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1051.982347][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1052.021126][  T873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1052.042616][  T873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1052.126811][  T873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1052.143301][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1052.192478][ T5638] Bluetooth: hci4: command tx timeout
[ 1052.349567][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1052.407181][ T3890] syzkaller1: entered promiscuous mode
[ 1052.467182][ T3890] syzkaller1: entered allmulticast mode
[ 1052.519191][  T866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1052.547324][  T866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1052.592954][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1052.605766][  T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1052.615384][  T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1052.705655][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1052.764022][ T3917] bond1: option tlb_dynamic_lb: invalid value (128)
[ 1052.772671][ T3917] bond1 (unregistering): Released all slaves
[ 1052.790969][ T3915] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1052.800860][ T3915] syzkaller0: entered promiscuous mode
[ 1052.808071][ T3915] syzkaller0: entered allmulticast mode
[ 1052.817077][ T3915] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1052.866969][ T3915] tipc: Resetting bearer <eth:syzkaller0>
[ 1052.996444][ T3925] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[ 1053.067954][ T3915] tipc: Resetting bearer <eth:syzkaller0>
[ 1053.081009][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8388'.
[ 1053.093477][  T113] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.120767][  T113] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.156711][ T1123] bond7: (slave bridge2): failed to get link speed/duplex
[ 1053.168441][  T113] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.178467][  T113] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.189742][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8391'.
[ 1053.229333][ T3933] bond1: option resend_igmp: invalid value (2878)
[ 1053.236808][ T3933] bond1: option resend_igmp: allowed values 0 - 255
[ 1053.246769][ T3933] bond1 (unregistering): Released all slaves
[ 1053.410680][ T3941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8392'.
[ 1053.426036][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1053.506476][ T3948] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8393'.
[ 1053.554451][  T871] bond7: (slave bridge2): failed to get link speed/duplex
[ 1053.623017][ T3915] tipc: Disabling bearer <eth:syzkaller0>
[ 1053.664838][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8389'.
[ 1054.029897][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1054.051172][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1054.060196][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1054.072906][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1054.082026][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1054.324897][ T3958] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1054.332628][ T3958] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1054.539582][ T3958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1054.555422][ T3958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1054.788336][ T3990] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8406'.
[ 1054.869319][T26009] bond11: (slave syz_tun): Releasing active interface
[ 1054.905320][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1054.917735][ T1123] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.928631][ T1123] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.990460][ T3990] vlan0: entered allmulticast mode
[ 1055.005074][ T1123] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1055.032132][ T1123] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1055.140628][ T4005] netlink: 'syz.0.8409': attribute type 15 has an invalid length.
[ 1055.142943][ T4000] tipc: Started in network mode
[ 1055.154153][ T4000] tipc: Node identity ac14140f, cluster identity 4711
[ 1055.161202][ T4000] tipc: New replicast peer: 255.255.255.255
[ 1055.189744][ T4000] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1055.224556][ T4010] netlink: 'syz.1.8408': attribute type 1 has an invalid length.
[ 1055.259438][ T4013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8410'.
[ 1055.261754][ T4003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8408'.
[ 1055.291002][ T4013] netlink: 348 bytes leftover after parsing attributes in process `syz.0.8410'.
[ 1055.317263][ T4013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8410'.
[ 1055.437761][ T3965] wlan0 speed is unknown, defaulting to 1000
[ 1055.475820][ T3965] lo speed is unknown, defaulting to 1000
[ 1055.763786][ T4027] tipc: Resetting bearer <eth:syzkaller0>
[ 1055.972621][ T1123] tipc: Resetting bearer <eth:syzkaller0>
[ 1056.050131][ T3965] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1056.058273][ T3965] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1056.066131][ T3965] bridge_slave_0: entered allmulticast mode
[ 1056.074966][ T3965] bridge_slave_0: entered promiscuous mode
[ 1056.085079][ T3965] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1056.093749][ T3965] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1056.101331][ T3965] bridge_slave_1: entered allmulticast mode
[ 1056.127749][ T3965] bridge_slave_1: entered promiscuous mode
[ 1056.191861][ T5638] Bluetooth: hci3: command tx timeout
[ 1056.209433][ T3965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1056.223374][ T3965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1056.303802][T31051] tipc: Node number set to 2886997007
[ 1056.352752][  T871] net_ratelimit: 6 callbacks suppressed
[ 1056.352770][  T871] bond7: (slave bridge2): failed to get link speed/duplex
[ 1056.384503][ T3965] team0: Port device team_slave_0 added
[ 1056.397767][ T3965] team0: Port device team_slave_1 added
[ 1056.437696][ T3965] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1056.448623][ T3965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1056.505867][ T3965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1056.523473][ T3965] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1056.531192][ T3965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1056.559243][ T3965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1056.593712][  T871] bond7: (slave bridge2): failed to get link speed/duplex
[ 1056.670987][ T3965] hsr_slave_0: entered promiscuous mode
[ 1056.682750][ T3965] hsr_slave_1: entered promiscuous mode
[ 1056.699304][ T3965] debugfs: 'hsr0' already exists in 'hsr'
[ 1056.705642][ T3965] Cannot create hsr debugfs directory
[ 1056.912657][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1057.043549][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1057.166712][ T4081] netlink: 'syz.1.8429': attribute type 28 has an invalid length.
[ 1057.187698][ T4081] vlan2: entered allmulticast mode
[ 1057.193487][ T4081] bond0: entered allmulticast mode
[ 1057.198621][ T4081] bond_slave_0: entered allmulticast mode
[ 1057.206164][ T4081] bond_slave_1: entered allmulticast mode
[ 1057.224574][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1057.256303][ T1123] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1057.266847][ T1123] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1057.278118][ T1123] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1057.288209][ T1123] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1057.467935][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1057.516477][ T4096] FAULT_INJECTION: forcing a failure.
[ 1057.516477][ T4096] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1057.533277][ T4096] CPU: 0 UID: 0 PID: 4096 Comm: syz.4.8433 Not tainted syzkaller #0 PREEMPT(full) 
[ 1057.533299][ T4096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1057.533308][ T4096] Call Trace:
[ 1057.533314][ T4096]  <TASK>
[ 1057.533321][ T4096]  dump_stack_lvl+0xe8/0x150
[ 1057.533348][ T4096]  should_fail_ex+0x40c/0x560
[ 1057.533369][ T4096]  _copy_from_user+0x2d/0xb0
[ 1057.533390][ T4096]  generic_map_update_batch+0x651/0x9a0
[ 1057.533413][ T4096]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1057.533428][ T4096]  ? __fget_files+0x2a/0x420
[ 1057.533464][ T4096]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1057.533479][ T4096]  bpf_map_do_batch+0x391/0x630
[ 1057.533501][ T4096]  __sys_bpf+0xbe5/0xd90
[ 1057.533526][ T4096]  ? __pfx___sys_bpf+0x10/0x10
[ 1057.533551][ T4096]  ? __fget_files+0x2a/0x420
[ 1057.533582][ T4096]  ? ksys_write+0x242/0x270
[ 1057.533604][ T4096]  ? __pfx_ksys_write+0x10/0x10
[ 1057.533628][ T4096]  __x64_sys_bpf+0xba/0xd0
[ 1057.533645][ T4096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1057.533662][ T4096]  do_syscall_64+0x174/0x580
[ 1057.533681][ T4096]  ? trace_irq_disable+0x3b/0x140
[ 1057.533699][ T4096]  ? clear_bhb_loop+0x40/0x90
[ 1057.533716][ T4096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1057.533730][ T4096] RIP: 0033:0x7f6622d9de59
[ 1057.533744][ T4096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1057.533756][ T4096] RSP: 002b:00007f6623bd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1057.533772][ T4096] RAX: ffffffffffffffda RBX: 00007f6623025fa0 RCX: 00007f6622d9de59
[ 1057.533782][ T4096] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1057.533791][ T4096] RBP: 00007f6623bd0090 R08: 0000000000000000 R09: 0000000000000000
[ 1057.533799][ T4096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1057.533808][ T4096] R13: 00007f6623026038 R14: 00007f6623025fa0 R15: 00007ffe0c980108
[ 1057.533831][ T4096]  </TASK>
[ 1057.759081][ T4098] syz.1.8434: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1057.784733][ T4098] CPU: 0 UID: 0 PID: 4098 Comm: syz.1.8434 Not tainted syzkaller #0 PREEMPT(full) 
[ 1057.784761][ T4098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1057.784774][ T4098] Call Trace:
[ 1057.784782][ T4098]  <TASK>
[ 1057.784791][ T4098]  dump_stack_lvl+0xe8/0x150
[ 1057.784826][ T4098]  warn_alloc+0x24c/0x270
[ 1057.784855][ T4098]  ? stack_depot_save_flags+0x33/0x800
[ 1057.784882][ T4098]  ? __pfx_warn_alloc+0x10/0x10
[ 1057.784908][ T4098]  ? kasan_save_track+0x3e/0x80
[ 1057.784932][ T4098]  ? __kasan_kmalloc+0x93/0xb0
[ 1057.784958][ T4098]  ? xsk_setsockopt+0x52a/0x960
[ 1057.785101][ T4098]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1057.785137][ T4098]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1057.785164][ T4098]  ? do_syscall_64+0x174/0x580
[ 1057.785192][ T4098]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1057.785223][ T4098]  __vmalloc_node_range_noprof+0x12c/0x1730
[ 1057.785278][ T4098]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1057.785307][ T4098]  ? __kasan_kmalloc+0x93/0xb0
[ 1057.785336][ T4098]  ? __kmalloc_cache_noprof+0x32d/0x660
[ 1057.785361][ T4098]  ? __kmalloc_cache_noprof+0x150/0x660
[ 1057.785390][ T4098]  vmalloc_user_noprof+0xad/0xe0
[ 1057.785423][ T4098]  ? xskq_create+0xbf/0x170
[ 1057.785454][ T4098]  xskq_create+0xbf/0x170
[ 1057.785484][ T4098]  xsk_init_queue+0x8a/0xe0
[ 1057.785515][ T4098]  xsk_setsockopt+0x52a/0x960
[ 1057.785539][ T4098]  ? __fget_files+0x2a/0x420
[ 1057.785567][ T4098]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1057.785593][ T4098]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1057.785629][ T4098]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1057.785653][ T4098]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1057.785674][ T4098]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1057.785702][ T4098]  do_sock_setsockopt+0x17c/0x1b0
[ 1057.785737][ T4098]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1057.785769][ T4098]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1057.785792][ T4098]  do_syscall_64+0x174/0x580
[ 1057.785819][ T4098]  ? trace_irq_disable+0x3b/0x140
[ 1057.785844][ T4098]  ? clear_bhb_loop+0x40/0x90
[ 1057.785870][ T4098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1057.785891][ T4098] RIP: 0033:0x7faa4af9de59
[ 1057.785912][ T4098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1057.785931][ T4098] RSP: 002b:00007faa4bd82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1057.785953][ T4098] RAX: ffffffffffffffda RBX: 00007faa4b225fa0 RCX: 00007faa4af9de59
[ 1057.785969][ T4098] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[ 1057.785982][ T4098] RBP: 00007faa4b033e6f R08: 0000000000000004 R09: 0000000000000000
[ 1057.785995][ T4098] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1057.786008][ T4098] R13: 00007faa4b226038 R14: 00007faa4b225fa0 R15: 00007ffde8c6a5d8
[ 1057.786042][ T4098]  </TASK>
[ 1057.786160][ T4098] Mem-Info:
[ 1058.081198][ T4098] active_anon:13813 inactive_anon:0 isolated_anon:0
[ 1058.081198][ T4098]  active_file:17 inactive_file:44113 isolated_file:0
[ 1058.081198][ T4098]  unevictable:768 dirty:343 writeback:0
[ 1058.081198][ T4098]  slab_reclaimable:12836 slab_unreclaimable:221865
[ 1058.081198][ T4098]  mapped:30323 shmem:1327 pagetables:1698
[ 1058.081198][ T4098]  sec_pagetables:0 bounce:0
[ 1058.081198][ T4098]  kernel_misc_reclaimable:0
[ 1058.081198][ T4098]  free:1154060 free_pcp:12928 free_cma:0
[ 1058.134478][ T4098] Node 0 active_anon:55204kB inactive_anon:0kB active_file:68kB inactive_file:176244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121240kB dirty:1380kB writeback:0kB shmem:3680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18064kB pagetables:6484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1058.170686][ T4098] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1058.226807][ T4098] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1058.257834][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1058.272786][ T5638] Bluetooth: hci3: command tx timeout
[ 1058.290703][ T4098] lowmem_reserve[]: 0 2489 2489 2489 2489
[ 1058.299833][ T4098] Node 0 DMA32 free:671308kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55104kB inactive_anon:0kB active_file:68kB inactive_file:176244kB unevictable:1536kB writepending:1380kB zspages:0kB present:3129332kB managed:2548764kB mlocked:0kB bounce:0kB free_pcp:49788kB local_pcp:26332kB free_cma:0kB
[ 1058.334056][ T4098] lowmem_reserve[]: 0 0 0 0 0
[ 1058.340756][ T3965] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[ 1058.343036][ T4098] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1058.382330][ T4098] lowmem_reserve[]: 0 0 0 0 0
[ 1058.388856][  T871] bond7: (slave bridge2): failed to get link speed/duplex
[ 1058.399157][ T4098] Node 1 
[ 1058.404904][ T4105] sctp: [Deprecated]: syz.0.8437 (pid 4105) Use of int in max_burst socket option.
[ 1058.404904][ T4105] Use struct sctp_assoc_value instead
[ 1058.432608][ T4098] Normal free:3944156kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1058.504121][  T871] bond7: (slave bridge2): failed to get link speed/duplex
[ 1058.522292][ T4098] lowmem_reserve[]: 0 0 0 0 0
[ 1058.527097][ T4098] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1058.561019][ T4098] Node 0 DMA32: 1737*4kB (UME) 1293*8kB (UME) 463*16kB (UME) 149*32kB (UME) 217*64kB (UME) 76*128kB (UME) 435*256kB (UM) 284*512kB (U) 127*1024kB (U) 9*2048kB (UM) 52*4096kB (UM) = 671324kB
[ 1058.600668][ T4098] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1058.627126][ T4098] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 7*16kB (UM) 4*32kB (UM) 9*64kB (UM) 5*128kB (UM) 3*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3944156kB
[ 1058.664854][ T4098] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1058.688778][ T4098] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1058.711314][ T4098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1058.735649][ T4098] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1058.764539][ T4098] 47330 total pagecache pages
[ 1058.775223][ T4098] 0 pages in swap cache
[ 1058.784826][ T4098] Free swap  = 124996kB
[ 1058.793995][ T4098] Total swap = 124996kB
[ 1058.802645][ T1123] bond7: (slave bridge2): failed to get link speed/duplex
[ 1058.802685][ T4098] 2097051 pages RAM
[ 1058.835866][ T4098] 0 pages HighMem/MovableOnly
[ 1058.837870][ T3965] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1058.842262][ T4098] 428178 pages reserved
[ 1058.859868][ T4098] 0 pages cma reserved
[ 1058.863087][ T3965] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1058.875452][ T3965] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1058.905458][ T3965] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1058.915407][ T3965] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1058.956005][ T3965] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1058.982328][ T3965] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1058.996759][ T3965] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1059.003199][ T4114] __nla_validate_parse: 5 callbacks suppressed
[ 1059.003214][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8440'.
[ 1059.023386][ T4111] netlink: 732 bytes leftover after parsing attributes in process `syz.4.8438'.
[ 1059.035471][ T4111] netlink: 732 bytes leftover after parsing attributes in process `syz.4.8438'.
[ 1059.037020][ T4116] netlink: 'syz.1.8439': attribute type 3 has an invalid length.
[ 1059.255733][ T3965] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1059.266188][ T4128] netlink: 'syz.0.8442': attribute type 83 has an invalid length.
[ 1059.289282][ T3965] 8021q: adding VLAN 0 to HW filter on device team0
[ 1059.303816][  T113] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1059.310982][  T113] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1059.344360][  T871] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1059.351586][  T871] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1059.419685][ T3965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1059.445450][ T4133] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8445'.
[ 1059.466335][ T4133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8445'.
[ 1059.935197][ T3965] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1060.029891][ T3965] veth0_vlan: entered promiscuous mode
[ 1060.045470][ T3965] veth1_vlan: entered promiscuous mode
[ 1060.102885][ T3965] veth0_macvtap: entered promiscuous mode
[ 1060.130258][ T3965] veth1_macvtap: entered promiscuous mode
[ 1060.149895][ T3965] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1060.176041][ T3965] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1060.199414][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1060.211044][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1060.224968][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1060.236163][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1060.263979][ T4172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8454'.
[ 1060.306492][ T4174] netlink: 'syz.2.8455': attribute type 1 has an invalid length.
[ 1060.354603][ T5638] Bluetooth: hci3: command tx timeout
[ 1060.590214][ T4174] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8455'.
[ 1061.164754][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1061.184574][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1061.218432][ T4183] FAULT_INJECTION: forcing a failure.
[ 1061.218432][ T4183] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1061.255316][ T4183] CPU: 1 UID: 0 PID: 4183 Comm: syz.0.8457 Not tainted syzkaller #0 PREEMPT(full) 
[ 1061.255343][ T4183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1061.255355][ T4183] Call Trace:
[ 1061.255363][ T4183]  <TASK>
[ 1061.255372][ T4183]  dump_stack_lvl+0xe8/0x150
[ 1061.255404][ T4183]  should_fail_ex+0x40c/0x560
[ 1061.255431][ T4183]  _copy_from_user+0x2d/0xb0
[ 1061.255460][ T4183]  generic_map_update_batch+0x651/0x9a0
[ 1061.255490][ T4183]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1061.255512][ T4183]  ? __fget_files+0x2a/0x420
[ 1061.255543][ T4183]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1061.255562][ T4183]  bpf_map_do_batch+0x391/0x630
[ 1061.255592][ T4183]  __sys_bpf+0xbe5/0xd90
[ 1061.255631][ T4183]  ? __pfx___sys_bpf+0x10/0x10
[ 1061.255666][ T4183]  ? __fget_files+0x2a/0x420
[ 1061.255704][ T4183]  ? ksys_write+0x242/0x270
[ 1061.255735][ T4183]  ? __pfx_ksys_write+0x10/0x10
[ 1061.255771][ T4183]  __x64_sys_bpf+0xba/0xd0
[ 1061.255794][ T4183]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1061.255816][ T4183]  do_syscall_64+0x174/0x580
[ 1061.255844][ T4183]  ? trace_irq_disable+0x3b/0x140
[ 1061.255867][ T4183]  ? clear_bhb_loop+0x40/0x90
[ 1061.255891][ T4183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1061.255911][ T4183] RIP: 0033:0x7f14ca39de59
[ 1061.255929][ T4183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1061.255945][ T4183] RSP: 002b:00007f14cb19a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1061.255965][ T4183] RAX: ffffffffffffffda RBX: 00007f14ca625fa0 RCX: 00007f14ca39de59
[ 1061.255979][ T4183] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1061.255991][ T4183] RBP: 00007f14cb19a090 R08: 0000000000000000 R09: 0000000000000000
[ 1061.256004][ T4183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1061.256015][ T4183] R13: 00007f14ca626038 R14: 00007f14ca625fa0 R15: 00007ffc2169b948
[ 1061.256047][ T4183]  </TASK>
[ 1061.482114][  T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1061.482914][ T1123] net_ratelimit: 14 callbacks suppressed
[ 1061.482932][ T1123] bond7: (slave bridge2): failed to get link speed/duplex
[ 1061.489993][  T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1061.602354][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1061.670649][ T4185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8399'.
[ 1061.712871][ T1123] bond7: (slave bridge2): failed to get link speed/duplex
[ 1061.824490][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1061.837775][ T4193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8399'.
[ 1061.868986][ T4193] gre0: entered promiscuous mode
[ 1061.890172][ T4193] gre0: entered allmulticast mode
[ 1061.982580][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1062.102281][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1062.120418][ T4200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8462'.
[ 1062.211740][ T1123] bond7: (slave bridge2): failed to get link speed/duplex
[ 1062.333326][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1062.432456][ T5638] Bluetooth: hci3: command tx timeout
[ 1062.575161][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1062.712323][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1063.431266][ T4246] wlan0 speed is unknown, defaulting to 1000
[ 1063.487799][ T4245] wlan0 speed is unknown, defaulting to 1000
[ 1063.497019][ T4246] lo speed is unknown, defaulting to 1000
[ 1063.506061][ T4245] lo speed is unknown, defaulting to 1000
[ 1063.935782][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1063.946968][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1063.959608][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1063.966361][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1063.974529][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1063.982609][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1063.993193][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1063.999064][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.010393][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.025899][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.038445][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.045694][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.052641][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.058479][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.065214][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.072683][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.078526][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.085860][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.092431][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.098271][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.105148][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.110957][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.125438][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.131267][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.142364][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.148118][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.155999][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.162818][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.168731][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.176612][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.183271][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.341657][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.347528][ T4261] 8021q: VLANs not supported on ipvlan1
[ 1064.741245][   T29] audit: type=1800 audit(1783942535.373:14): pid=4287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8481" name=BC dev="tmpfs" ino=192 res=0 errno=0
[ 1064.780669][ T4288] __nla_validate_parse: 76 callbacks suppressed
[ 1064.780689][ T4288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8482'.
[ 1064.817212][ T4284] bond8: option mode: invalid value (254)
[ 1064.829719][ T4284] bond8 (unregistering): Released all slaves
[ 1065.237393][ T4293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8483'.
[ 1065.422633][ T4299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8485'.
[ 1065.574962][   T29] audit: type=1804 audit(1783942536.193:15): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8486" name="/newroot/35/cgroup.controllers" dev="tmpfs" ino=198 res=1 errno=0
[ 1065.635870][   T29] audit: type=1800 audit(1783942536.203:16): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8486" name="cgroup.controllers" dev="tmpfs" ino=198 res=0 errno=0
[ 1065.924451][ T4318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8489'.
[ 1066.022327][ T4319] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10
[ 1066.377205][ T4328] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1066.508719][   T12] net_ratelimit: 27 callbacks suppressed
[ 1066.508739][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1066.639474][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1066.743768][ T4343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8495'.
[ 1066.782111][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1066.816278][ T4343] xt_time: unknown flags 0xf4
[ 1066.892035][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1066.916091][ T4350] ip6erspan0: entered allmulticast mode
[ 1067.022014][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1067.132119][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1067.204899][ T4356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1067.251742][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1067.343611][ T4364] veth1_to_bond: entered promiscuous mode
[ 1067.360946][ T4364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8500'.
[ 1067.382491][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1067.392791][ T4364] veth1_to_bond (unregistering): left promiscuous mode
[ 1067.418732][ T4364] bond0: (slave bond_slave_1): Releasing backup interface
[ 1067.467180][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8503'.
[ 1067.530259][ T4368] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1067.540924][ T4368] 8021q: adding VLAN 0 to HW filter on device team0
[ 1067.558488][ T4368] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1067.603019][ T4374] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8502'.
[ 1067.617019][ T4368] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1067.634034][ T4368] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1067.647503][ T4368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1067.659237][ T4368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1067.677668][ T4368] veth1_vlan: left promiscuous mode
[ 1067.689356][ T4376] FAULT_INJECTION: forcing a failure.
[ 1067.689356][ T4376] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1067.703296][ T4368] veth0_vlan: left promiscuous mode
[ 1067.705142][ T4368] veth0_vlan: entered promiscuous mode
[ 1067.708834][ T4376] CPU: 1 UID: 0 PID: 4376 Comm: syz.3.8505 Not tainted syzkaller #0 PREEMPT(full) 
[ 1067.708858][ T4376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1067.708869][ T4376] Call Trace:
[ 1067.708877][ T4376]  <TASK>
[ 1067.708886][ T4376]  dump_stack_lvl+0xe8/0x150
[ 1067.708919][ T4376]  should_fail_ex+0x40c/0x560
[ 1067.708945][ T4376]  _copy_from_user+0x2d/0xb0
[ 1067.708974][ T4376]  generic_map_update_batch+0x6a3/0x9a0
[ 1067.709013][ T4376]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1067.709034][ T4376]  ? __fget_files+0x2a/0x420
[ 1067.709065][ T4376]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1067.709085][ T4376]  bpf_map_do_batch+0x391/0x630
[ 1067.709116][ T4376]  __sys_bpf+0xbe5/0xd90
[ 1067.709147][ T4376]  ? __pfx___sys_bpf+0x10/0x10
[ 1067.709182][ T4376]  ? __fget_files+0x2a/0x420
[ 1067.709222][ T4376]  ? ksys_write+0x242/0x270
[ 1067.709251][ T4376]  ? __pfx_ksys_write+0x10/0x10
[ 1067.709283][ T4376]  __x64_sys_bpf+0xba/0xd0
[ 1067.709305][ T4376]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1067.709326][ T4376]  do_syscall_64+0x174/0x580
[ 1067.709351][ T4376]  ? trace_irq_disable+0x3b/0x140
[ 1067.709374][ T4376]  ? clear_bhb_loop+0x40/0x90
[ 1067.709397][ T4376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1067.709416][ T4376] RIP: 0033:0x7fbabdf9de59
[ 1067.709433][ T4376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1067.709450][ T4376] RSP: 002b:00007fbabedb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1067.709469][ T4376] RAX: ffffffffffffffda RBX: 00007fbabe225fa0 RCX: 00007fbabdf9de59
[ 1067.709482][ T4376] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1067.709495][ T4376] RBP: 00007fbabedb3090 R08: 0000000000000000 R09: 0000000000000000
[ 1067.709506][ T4376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1067.709518][ T4376] R13: 00007fbabe226038 R14: 00007fbabe225fa0 R15: 00007ffc1a40c868
[ 1067.709548][ T4376]  </TASK>
[ 1067.955126][ T4368] veth1_vlan: entered promiscuous mode
[ 1067.970467][ T4368] veth1_macvtap: left promiscuous mode
[ 1067.988223][ T4368] veth0_macvtap: left promiscuous mode
[ 1067.995941][ T4368] veth0_macvtap: entered promiscuous mode
[ 1068.004482][ T4368] veth1_macvtap: entered promiscuous mode
[ 1068.017289][ T4368] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1068.025473][ T4368] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1068.034107][ T4368] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1068.063146][ T4368] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1068.179784][  T757] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1068.187022][  T757] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1068.225459][  T757] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1068.232673][  T757] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1068.351197][ T4395] netlink: 'syz.4.8509': attribute type 1 has an invalid length.
[ 1068.359770][ T4395] netlink: 'syz.4.8509': attribute type 2 has an invalid length.
[ 1068.380092][ T7976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.399893][ T7976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.403452][ T4399] netlink: 'syz.4.8509': attribute type 1 has an invalid length.
[ 1068.443222][ T4399] netlink: 'syz.4.8509': attribute type 2 has an invalid length.
[ 1068.786419][ T4414] netlink: 'syz.4.8512': attribute type 1 has an invalid length.
[ 1069.801714][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1071.508483][ T7976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.523026][ T4414] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1071.529751][ T7976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.563600][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1071.672178][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1071.698374][ T4436] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11
[ 1071.758534][ T4441] bond0: entered promiscuous mode
[ 1071.764560][ T4441] bond_slave_0: entered promiscuous mode
[ 1071.774819][ T4441] bond_slave_1: entered promiscuous mode
[ 1071.826650][ T4441] bond0: left promiscuous mode
[ 1071.834810][ T4441] bond_slave_0: left promiscuous mode
[ 1071.840601][ T4441] bond_slave_1: left promiscuous mode
[ 1071.877258][ T4445] bond0: entered promiscuous mode
[ 1071.901420][ T4445] bond_slave_0: entered promiscuous mode
[ 1071.906783][ T4449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1071.917938][ T4445] bond_slave_1: entered promiscuous mode
[ 1071.943747][ T4445] bond0: left promiscuous mode
[ 1071.952560][ T4445] bond_slave_0: left promiscuous mode
[ 1071.964681][ T4445] bond_slave_1: left promiscuous mode
[ 1072.222079][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1072.327677][ T4457] bond1: entered allmulticast mode
[ 1072.333966][ T4457] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1072.347041][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1073.295163][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1073.526360][ T4474] netlink: 'syz.4.8526': attribute type 4 has an invalid length.
[ 1073.631052][ T4461] bridge_slave_1: left allmulticast mode
[ 1073.639210][ T4461] bridge_slave_1: left promiscuous mode
[ 1073.646235][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1073.684593][ T4461] bond0: (slave bond_slave_0): Releasing backup interface
[ 1073.695164][ T4461] bond_slave_0: left allmulticast mode
[ 1073.708532][ T4461] bond0: (slave bond_slave_1): Releasing backup interface
[ 1073.725121][ T4461] bond_slave_1: left allmulticast mode
[ 1073.738904][ T4461] team0: Port device team_slave_0 removed
[ 1073.750030][ T4461] team0: Port device team_slave_1 removed
[ 1073.757669][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1073.767857][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1073.777641][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1073.787002][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1073.798840][ T4461] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1073.907894][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1074.033773][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1074.127946][ T4497] syzkaller0: entered promiscuous mode
[ 1074.137102][ T4497] syzkaller0: entered allmulticast mode
[ 1074.164714][ T4501] vlan2: entered promiscuous mode
[ 1074.169899][ T4501] hsr0: entered promiscuous mode
[ 1074.176362][ T4501] vlan2: entered allmulticast mode
[ 1074.182545][ T4501] hsr0: entered allmulticast mode
[ 1074.187763][ T4501] hsr_slave_0: entered allmulticast mode
[ 1074.195125][ T4501] hsr_slave_1: entered allmulticast mode
[ 1074.252393][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1074.329430][ T4510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8534'.
[ 1074.362196][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1074.829351][ T4489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1075.168699][ T4537] ipvlan2: entered promiscuous mode
[ 1075.217722][ T4537] bridge0: port 3(ipvlan2) entered blocking state
[ 1075.226882][ T4537] bridge0: port 3(ipvlan2) entered disabled state
[ 1075.238222][ T4537] ipvlan2: entered allmulticast mode
[ 1075.244883][ T4537] bridge0: entered allmulticast mode
[ 1075.256429][ T4542] netlink: 'syz.3.8543': attribute type 1 has an invalid length.
[ 1075.265099][ T4537] ipvlan2: left allmulticast mode
[ 1075.270172][ T4537] bridge0: left allmulticast mode
[ 1075.338935][ T4541] vlan3: entered promiscuous mode
[ 1075.344997][ T4541] hsr0: entered promiscuous mode
[ 1075.350771][ T4541] vlan3: entered allmulticast mode
[ 1075.358886][ T4541] hsr0: entered allmulticast mode
[ 1075.365269][ T4541] hsr_slave_0: entered allmulticast mode
[ 1075.371029][ T4541] hsr_slave_1: entered allmulticast mode
[ 1075.437665][ T4539] veth3: entered allmulticast mode
[ 1075.499035][ T4546] netlink: 'syz.1.8546': attribute type 7 has an invalid length.
[ 1075.507794][ T4546] netlink: 'syz.1.8546': attribute type 8 has an invalid length.
[ 1075.533719][ T4548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8547'.
[ 1075.709341][ T4561] FAULT_INJECTION: forcing a failure.
[ 1075.709341][ T4561] name failslab, interval 1, probability 0, space 0, times 0
[ 1075.739457][ T4561] CPU: 1 UID: 0 PID: 4561 Comm: syz.1.8549 Not tainted syzkaller #0 PREEMPT(full) 
[ 1075.739483][ T4561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1075.739494][ T4561] Call Trace:
[ 1075.739502][ T4561]  <TASK>
[ 1075.739511][ T4561]  dump_stack_lvl+0xe8/0x150
[ 1075.739545][ T4561]  should_fail_ex+0x40c/0x560
[ 1075.739573][ T4561]  should_failslab+0xa8/0x100
[ 1075.739602][ T4561]  __kmalloc_cache_noprof+0xa8/0x660
[ 1075.739629][ T4561]  ? dev_ethtool+0x13f/0x29c0
[ 1075.739651][ T4561]  ? dev_ethtool+0x13f/0x29c0
[ 1075.739682][ T4561]  dev_ethtool+0x13f/0x29c0
[ 1075.739702][ T4561]  ? __lock_acquire+0x683/0x2cf0
[ 1075.739746][ T4561]  ? __pfx_dev_ethtool+0x10/0x10
[ 1075.739767][ T4561]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1075.739792][ T4561]  ? dev_load+0x21/0x1f0
[ 1075.739921][ T4561]  ? dev_load+0x21/0x1f0
[ 1075.739946][ T4561]  ? dev_load+0x21/0x1f0
[ 1075.739988][ T4561]  dev_ioctl+0x392/0x1150
[ 1075.740013][ T4561]  sock_do_ioctl+0x23e/0x320
[ 1075.740036][ T4561]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1075.740053][ T4561]  ? hook_file_ioctl+0x1f0/0x5f0
[ 1075.740095][ T4561]  sock_ioctl+0x57a/0x7e0
[ 1075.740118][ T4561]  ? __pfx_sock_ioctl+0x10/0x10
[ 1075.740138][ T4561]  ? __fget_files+0x2a/0x420
[ 1075.740160][ T4561]  ? __fget_files+0x3a2/0x420
[ 1075.740180][ T4561]  ? __fget_files+0x2a/0x420
[ 1075.740205][ T4561]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1075.740226][ T4561]  ? __pfx_sock_ioctl+0x10/0x10
[ 1075.740244][ T4561]  __se_sys_ioctl+0xfc/0x170
[ 1075.740262][ T4561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1075.740282][ T4561]  do_syscall_64+0x174/0x580
[ 1075.740317][ T4561]  ? trace_irq_disable+0x3b/0x140
[ 1075.740340][ T4561]  ? clear_bhb_loop+0x40/0x90
[ 1075.740363][ T4561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1075.740382][ T4561] RIP: 0033:0x7faa4af9de59
[ 1075.740399][ T4561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1075.740416][ T4561] RSP: 002b:00007faa4bd82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1075.740434][ T4561] RAX: ffffffffffffffda RBX: 00007faa4b225fa0 RCX: 00007faa4af9de59
[ 1075.740448][ T4561] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003
[ 1075.740459][ T4561] RBP: 00007faa4bd82090 R08: 0000000000000000 R09: 0000000000000000
[ 1075.740471][ T4561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1075.740481][ T4561] R13: 00007faa4b226038 R14: 00007faa4b225fa0 R15: 00007ffde8c6a5d8
[ 1075.740511][ T4561]  </TASK>
[ 1076.303537][ T4590] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1076.348938][ T4591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8558'.
[ 1076.507195][ T4602] FAULT_INJECTION: forcing a failure.
[ 1076.507195][ T4602] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1076.534531][ T4602] CPU: 1 UID: 0 PID: 4602 Comm: syz.4.8563 Not tainted syzkaller #0 PREEMPT(full) 
[ 1076.534558][ T4602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1076.534570][ T4602] Call Trace:
[ 1076.534579][ T4602]  <TASK>
[ 1076.534588][ T4602]  dump_stack_lvl+0xe8/0x150
[ 1076.534622][ T4602]  should_fail_ex+0x40c/0x560
[ 1076.534650][ T4602]  _copy_to_user+0x31/0xb0
[ 1076.534681][ T4602]  ethtool_get_settings+0x43e/0x590
[ 1076.534709][ T4602]  ? __pfx_ethtool_get_settings+0x10/0x10
[ 1076.534765][ T4602]  dev_ethtool+0x164b/0x29c0
[ 1076.534786][ T4602]  ? __lock_acquire+0x683/0x2cf0
[ 1076.534826][ T4602]  ? __pfx_dev_ethtool+0x10/0x10
[ 1076.534851][ T4602]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1076.534880][ T4602]  ? dev_load+0x21/0x1f0
[ 1076.534917][ T4602]  ? dev_load+0x21/0x1f0
[ 1076.534945][ T4602]  ? dev_load+0x21/0x1f0
[ 1076.534972][ T4602]  dev_ioctl+0x392/0x1150
[ 1076.535002][ T4602]  sock_do_ioctl+0x23e/0x320
[ 1076.535028][ T4602]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1076.535048][ T4602]  ? hook_file_ioctl+0x1f0/0x5f0
[ 1076.535095][ T4602]  sock_ioctl+0x57a/0x7e0
[ 1076.535119][ T4602]  ? __pfx_sock_ioctl+0x10/0x10
[ 1076.535142][ T4602]  ? __fget_files+0x2a/0x420
[ 1076.535166][ T4602]  ? __fget_files+0x3a2/0x420
[ 1076.535196][ T4602]  ? __fget_files+0x2a/0x420
[ 1076.535225][ T4602]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1076.535248][ T4602]  ? __pfx_sock_ioctl+0x10/0x10
[ 1076.535269][ T4602]  __se_sys_ioctl+0xfc/0x170
[ 1076.535290][ T4602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1076.535312][ T4602]  do_syscall_64+0x174/0x580
[ 1076.535340][ T4602]  ? trace_irq_disable+0x3b/0x140
[ 1076.535364][ T4602]  ? clear_bhb_loop+0x40/0x90
[ 1076.535392][ T4602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1076.535412][ T4602] RIP: 0033:0x7f6622d9de59
[ 1076.535431][ T4602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1076.535448][ T4602] RSP: 002b:00007f6623bd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1076.535469][ T4602] RAX: ffffffffffffffda RBX: 00007f6623025fa0 RCX: 00007f6622d9de59
[ 1076.535484][ T4602] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003
[ 1076.535497][ T4602] RBP: 00007f6623bd0090 R08: 0000000000000000 R09: 0000000000000000
[ 1076.535509][ T4602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1076.535521][ T4602] R13: 00007f6623026038 R14: 00007f6623025fa0 R15: 00007ffe0c980108
[ 1076.535554][ T4602]  </TASK>
[ 1076.787099][  T873] net_ratelimit: 24 callbacks suppressed
[ 1076.787119][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1076.818306][ T4609] pimreg: entered allmulticast mode
[ 1076.825872][ T4609] pimreg: left allmulticast mode
[ 1076.858635][ T4610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1076.913076][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1077.020921][ T4619] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1077.083280][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1077.192072][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1077.198112][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8574'.
[ 1077.233268][ T4632] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40
[ 1077.294718][ T4637] netlink: 'syz.1.8575': attribute type 6 has an invalid length.
[ 1077.305087][ T4637] netlink: 'syz.1.8575': attribute type 3 has an invalid length.
[ 1077.323549][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1077.402778][ T4628] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8573'.
[ 1077.428586][ T4643] FAULT_INJECTION: forcing a failure.
[ 1077.428586][ T4643] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1077.431264][ T4628] syzkaller1: entered promiscuous mode
[ 1077.447809][ T4628] syzkaller1: entered allmulticast mode
[ 1077.450077][ T4643] CPU: 0 UID: 0 PID: 4643 Comm: syz.3.8577 Not tainted syzkaller #0 PREEMPT(full) 
[ 1077.450101][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1077.450113][ T4643] Call Trace:
[ 1077.450120][ T4643]  <TASK>
[ 1077.450129][ T4643]  dump_stack_lvl+0xe8/0x150
[ 1077.450161][ T4643]  should_fail_ex+0x40c/0x560
[ 1077.450188][ T4643]  _copy_to_user+0x31/0xb0
[ 1077.450218][ T4643]  put_user_ifreq+0x6a/0xc0
[ 1077.450239][ T4643]  sock_do_ioctl+0x26d/0x320
[ 1077.450263][ T4643]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1077.450282][ T4643]  ? hook_file_ioctl+0x1f0/0x5f0
[ 1077.450332][ T4643]  sock_ioctl+0x57a/0x7e0
[ 1077.450355][ T4643]  ? __pfx_sock_ioctl+0x10/0x10
[ 1077.450375][ T4643]  ? __fget_files+0x2a/0x420
[ 1077.450399][ T4643]  ? __fget_files+0x3a2/0x420
[ 1077.450422][ T4643]  ? __fget_files+0x2a/0x420
[ 1077.450448][ T4643]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1077.450470][ T4643]  ? __pfx_sock_ioctl+0x10/0x10
[ 1077.450491][ T4643]  __se_sys_ioctl+0xfc/0x170
[ 1077.450509][ T4643]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1077.450531][ T4643]  do_syscall_64+0x174/0x580
[ 1077.450557][ T4643]  ? trace_irq_disable+0x3b/0x140
[ 1077.450580][ T4643]  ? clear_bhb_loop+0x40/0x90
[ 1077.450606][ T4643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1077.450625][ T4643] RIP: 0033:0x7fbabdf9de59
[ 1077.450643][ T4643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1077.450659][ T4643] RSP: 002b:00007fbabedb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1077.450685][ T4643] RAX: ffffffffffffffda RBX: 00007fbabe225fa0 RCX: 00007fbabdf9de59
[ 1077.450699][ T4643] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003
[ 1077.450711][ T4643] RBP: 00007fbabedb3090 R08: 0000000000000000 R09: 0000000000000000
[ 1077.450723][ T4643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1077.450735][ T4643] R13: 00007fbabe226038 R14: 00007fbabe225fa0 R15: 00007ffc1a40c868
[ 1077.450765][ T4643]  </TASK>
[ 1077.692076][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1077.842112][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1077.876431][ T4661] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1077.895293][ T4658] syzkaller0: entered promiscuous mode
[ 1077.908527][ T4658] syzkaller0: entered allmulticast mode
[ 1077.952621][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1078.009044][ T4667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8586'.
[ 1078.062068][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1078.169123][ T4679] FAULT_INJECTION: forcing a failure.
[ 1078.169123][ T4679] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1078.224779][ T4679] CPU: 1 UID: 0 PID: 4679 Comm: syz.4.8590 Not tainted syzkaller #0 PREEMPT(full) 
[ 1078.224803][ T4679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1078.224812][ T4679] Call Trace:
[ 1078.224818][ T4679]  <TASK>
[ 1078.224824][ T4679]  dump_stack_lvl+0xe8/0x150
[ 1078.224853][ T4679]  should_fail_ex+0x40c/0x560
[ 1078.224876][ T4679]  _copy_to_user+0x31/0xb0
[ 1078.224900][ T4679]  simple_read_from_buffer+0xe1/0x170
[ 1078.224926][ T4679]  proc_fail_nth_read+0x1bb/0x230
[ 1078.224950][ T4679]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1078.224973][ T4679]  ? rw_verify_area+0x24a/0x4c0
[ 1078.224996][ T4679]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1078.225014][ T4679]  vfs_read+0x213/0xa80
[ 1078.225048][ T4679]  ? __pfx___mutex_lock+0x10/0x10
[ 1078.225072][ T4679]  ? __pfx_vfs_read+0x10/0x10
[ 1078.225094][ T4679]  ? __fget_files+0x2a/0x420
[ 1078.225116][ T4679]  ? __fget_files+0x3a2/0x420
[ 1078.225136][ T4679]  ? __fget_files+0x2a/0x420
[ 1078.225170][ T4679]  ksys_read+0x150/0x270
[ 1078.225200][ T4679]  ? __pfx_ksys_read+0x10/0x10
[ 1078.225227][ T4679]  ? __pfx_sock_ioctl+0x10/0x10
[ 1078.225256][ T4679]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1078.225280][ T4679]  do_syscall_64+0x174/0x580
[ 1078.225307][ T4679]  ? trace_irq_disable+0x3b/0x140
[ 1078.225331][ T4679]  ? clear_bhb_loop+0x40/0x90
[ 1078.225355][ T4679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1078.225374][ T4679] RIP: 0033:0x7f6622d5e68e
[ 1078.225393][ T4679] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1078.225410][ T4679] RSP: 002b:00007f6623bcffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1078.225430][ T4679] RAX: ffffffffffffffda RBX: 00007f6623bd06c0 RCX: 00007f6622d5e68e
[ 1078.225444][ T4679] RDX: 000000000000000f RSI: 00007f6623bd00a0 RDI: 0000000000000004
[ 1078.225457][ T4679] RBP: 00007f6623bd0090 R08: 0000000000000000 R09: 0000000000000000
[ 1078.225469][ T4679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1078.225481][ T4679] R13: 00007f6623026038 R14: 00007f6623025fa0 R15: 00007ffe0c980108
[ 1078.225514][ T4679]  </TASK>
[ 1078.560121][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8592'.
[ 1078.852431][ T4695] syzkaller1: entered promiscuous mode
[ 1078.868744][ T4695] syzkaller1: entered allmulticast mode
[ 1079.022599][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8597'.
[ 1080.377976][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1080.410324][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1080.420394][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1080.451271][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1080.462985][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1080.925133][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8608'.
[ 1081.096367][ T4720] wlan0 speed is unknown, defaulting to 1000
[ 1081.107902][ T4720] lo speed is unknown, defaulting to 1000
[ 1081.127718][ T4755] wlan0 speed is unknown, defaulting to 1000
[ 1081.144793][ T4755] lo speed is unknown, defaulting to 1000
[ 1081.640373][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1081.648179][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1081.655968][ T4720] bridge_slave_0: entered allmulticast mode
[ 1081.664360][ T4720] bridge_slave_0: entered promiscuous mode
[ 1081.676530][ T4751] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8611'.
[ 1081.693468][ T4751] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8611'.
[ 1081.704843][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1081.713120][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1081.720515][ T4720] bridge_slave_1: entered allmulticast mode
[ 1081.729022][ T4720] bridge_slave_1: entered promiscuous mode
[ 1081.856173][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1081.870480][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1082.029531][ T4720] team0: Port device team_slave_0 added
[ 1082.035616][ T4789] x_tables: duplicate underflow at hook 1
[ 1082.082460][ T4791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8617'.
[ 1082.093553][ T4791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8617'.
[ 1082.119118][ T4720] team0: Port device team_slave_1 added
[ 1082.220440][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1082.249206][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1082.302676][ T4805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8619'.
[ 1082.310960][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1082.328851][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8619'.
[ 1082.331066][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1082.350602][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1082.355302][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8619'.
[ 1082.402353][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8619'.
[ 1082.409078][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1082.478706][ T4798] syzkaller0: entered promiscuous mode
[ 1082.486313][ T4798] syzkaller0: entered allmulticast mode
[ 1082.506032][  T757] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0
[ 1082.515628][ T5640] Bluetooth: hci2: command tx timeout
[ 1082.527297][  T757] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0
[ 1082.550865][  T757] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0
[ 1082.560885][  T757] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0
[ 1082.612341][  T757] net_ratelimit: 13 callbacks suppressed
[ 1082.612360][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1082.655368][ T4720] hsr_slave_0: entered promiscuous mode
[ 1082.663224][ T4720] hsr_slave_1: entered promiscuous mode
[ 1082.669641][ T4720] debugfs: 'hsr0' already exists in 'hsr'
[ 1082.676248][ T4720] Cannot create hsr debugfs directory
[ 1082.752396][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1084.598237][ T5640] Bluetooth: hci2: command tx timeout
[ 1085.833703][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1085.919890][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8634'.
[ 1085.953934][ T4850] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8634'.
[ 1085.977793][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8634'.
[ 1085.987831][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1085.999279][ T4720] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1086.016264][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1086.031017][ T4720] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1086.048633][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1086.057741][ T4720] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1086.077426][ T4857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8636'.
[ 1086.077957][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1086.096368][ T4720] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1086.110976][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1086.150064][ T4857] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1086.182430][ T4857] netlink: 'syz.4.8636': attribute type 46 has an invalid length.
[ 1086.271673][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1086.283299][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1086.309794][ T4720] 8021q: adding VLAN 0 to HW filter on device team0
[ 1086.324631][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1086.331824][ T7976] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1086.592491][ T4720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1086.607179][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1086.642590][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1086.685200][ T5640] Bluetooth: hci2: command tx timeout
[ 1086.752334][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1087.081004][  T866] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1087.088221][  T866] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1087.158122][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1087.254156][ T4903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8646'.
[ 1087.264018][ T4903] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1087.374332][ T4908] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1087.412688][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1087.526081][ T4912] dvmrp1: tun_chr_ioctl cmd 1074025677
[ 1087.540633][ T4912] dvmrp1: linktype set to 776
[ 1087.683579][   T12] net_ratelimit: 1 callbacks suppressed
[ 1087.683597][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1087.765000][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1087.812374][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1087.865802][ T4938] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8653'.
[ 1087.931938][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1087.943613][ T4938] netlink: 'syz.4.8653': attribute type 1 has an invalid length.
[ 1088.094333][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1088.102497][ T4941] netlink: 'syz.4.8653': attribute type 3 has an invalid length.
[ 1088.123259][ T4720] veth0_vlan: entered promiscuous mode
[ 1088.126479][ T4941] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8653'.
[ 1088.146198][ T4720] veth1_vlan: entered promiscuous mode
[ 1088.199876][ T4720] veth0_macvtap: entered promiscuous mode
[ 1088.227058][ T4720] veth1_macvtap: entered promiscuous mode
[ 1088.230455][ T4954] netlink: 'syz.2.8655': attribute type 1 has an invalid length.
[ 1088.294361][ T4954] bond9: entered promiscuous mode
[ 1088.302945][ T4954] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1088.316507][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1088.338376][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1088.358779][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1088.378622][  T873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.398339][  T873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.421022][  T873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.454689][ T4962] netlink: 'syz.1.8659': attribute type 2 has an invalid length.
[ 1088.463704][  T873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.536509][ T4962] : entered promiscuous mode
[ 1088.680008][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1088.715587][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1088.755808][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1088.757032][ T5640] Bluetooth: hci2: command tx timeout
[ 1088.832084][  T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1088.844664][  T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1088.882930][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1088.897635][ T4973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8662'.
[ 1088.934968][ T4973] netlink: set zone limit has 4 unknown bytes
[ 1089.022850][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1089.028505][ T4986] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.8663'.
[ 1089.073759][ T4986] netlink: 'syz.4.8663': attribute type 1 has an invalid length.
[ 1089.142075][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1089.339743][ T4995] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1089.743700][ T5006] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1091.223935][ T5055] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.8684'.
[ 1091.250089][ T5055] netlink: 'syz.3.8684': attribute type 1 has an invalid length.
[ 1091.638311][ T5073] geneve1: entered promiscuous mode
[ 1091.644949][ T5073] geneve1: entered allmulticast mode
[ 1091.659229][ T5073] netlink: 'syz.5.8690': attribute type 3 has an invalid length.
[ 1091.668165][ T5073] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8690'.
[ 1092.092355][ T5092] netlink: 'syz.1.8698': attribute type 1 has an invalid length.
[ 1092.544476][ T5126] netlink: 'syz.4.8709': attribute type 21 has an invalid length.
[ 1092.568076][ T5126] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8709'.
[ 1092.568207][ T5127] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.8704'.
[ 1092.604956][ T5127] netlink: 'syz.3.8704': attribute type 1 has an invalid length.
[ 1092.623913][ T5126] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8709'.
[ 1092.743023][  T873] net_ratelimit: 29 callbacks suppressed
[ 1092.743043][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1092.771055][ T5134] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8711'.
[ 1092.861599][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1092.972632][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1093.066232][ T5155] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8718'.
[ 1093.076620][ T5155] netlink: 'syz.4.8718': attribute type 4 has an invalid length.
[ 1093.085392][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1093.088458][ T5157] veth0: entered promiscuous mode
[ 1093.192061][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1093.293422][ T5165] netlink: 'syz.1.8722': attribute type 1 has an invalid length.
[ 1093.302221][ T5167] xt_connbytes: Forcing CT accounting to be enabled
[ 1093.363906][ T5157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8719'.
[ 1093.714342][ T5165] bond2: (slave gretap1): making interface the new active one
[ 1093.739991][ T5165] bond2: (slave gretap1): Enslaving as an active interface with an up link
[ 1093.777310][ T5170] bridge_slave_0: left allmulticast mode
[ 1093.787924][ T5170] bridge_slave_0: left promiscuous mode
[ 1093.800946][ T5170] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1093.821146][ T5170] bridge_slave_1: left allmulticast mode
[ 1093.842117][ T5170] bridge_slave_1: left promiscuous mode
[ 1093.852266][ T5170] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1093.882441][ T5170] bond0: (slave bond_slave_0): Releasing backup interface
[ 1093.898631][ T5170] bond0: (slave bond_slave_1): Releasing backup interface
[ 1093.920572][ T5170] team0: Port device team_slave_0 removed
[ 1093.932036][ T5170] team0: Port device team_slave_1 removed
[ 1093.938631][ T5170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1093.946800][ T5170] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1093.958094][ T5170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1093.966582][ T5170] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1093.976455][ T5170] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1094.003654][ T5173] macvlan2: entered promiscuous mode
[ 1094.008964][ T5173] macvlan2: entered allmulticast mode
[ 1094.032763][ T5173] bond2: entered promiscuous mode
[ 1094.037880][ T5173] gretap1: entered promiscuous mode
[ 1094.045010][ T5173] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1094.062161][ T5173] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1094.080579][ T5173] bond2: left promiscuous mode
[ 1094.086985][ T5173] gretap1: left promiscuous mode
[ 1094.179123][ T5156] veth0: left promiscuous mode
[ 1094.202619][ T5189] syzkaller1: entered allmulticast mode
[ 1094.242801][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1094.300209][ T5195] netlink: 'syz.5.8727': attribute type 1 has an invalid length.
[ 1094.382435][  T757] bond7: (slave bridge2): failed to get link speed/duplex
[ 1094.492222][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1094.625094][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1094.708809][   T12] tipc: Subscription rejected, illegal request
[ 1094.748449][ T5218] tipc: Started in network mode
[ 1094.755651][ T5218] tipc: Node identity 8edd9cb0c386, cluster identity 4711
[ 1094.776908][ T5218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1094.791138][ T5218] syzkaller0: entered promiscuous mode
[ 1094.797383][ T5218] syzkaller0: entered allmulticast mode
[ 1094.808782][ T5218] sctp: [Deprecated]: syz.3.8735 (pid 5218) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1094.808782][ T5218] Use struct sctp_sack_info instead
[ 1094.826249][ T5218] sctp: [Deprecated]: syz.3.8735 (pid 5218) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1094.826249][ T5218] Use struct sctp_sack_info instead
[ 1094.856236][ T5218] tipc: Resetting bearer <eth:syzkaller0>
[ 1095.122390][ T5215] tipc: Resetting bearer <eth:syzkaller0>
[ 1095.146769][ T5215] tipc: Disabling bearer <eth:syzkaller0>
[ 1095.438342][ T5238] netlink: 204 bytes leftover after parsing attributes in process `syz.3.8738'.
[ 1095.464312][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8738'.
[ 1095.773658][T31027] IPVS: starting estimator thread 0...
[ 1095.882717][ T5259] IPVS: using max 30 ests per chain, 72000 per kthread
[ 1096.565116][ T5299] __nla_validate_parse: 4 callbacks suppressed
[ 1096.565135][ T5299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8747'.
[ 1096.596299][ T5299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8747'.
[ 1096.724059][ T5295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8747'.
[ 1096.773938][ T5295] ipvlan1: entered promiscuous mode
[ 1096.788642][ T5295] ipvlan1: left promiscuous mode
[ 1096.920000][ T5314] netlink: 'syz.5.8752': attribute type 1 has an invalid length.
[ 1097.114274][ T5325] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1097.280470][ T5331] IPVS: set_ctl: invalid protocol: 43 172.30.1.6:20001
[ 1097.752399][   T12] net_ratelimit: 22 callbacks suppressed
[ 1097.752419][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1097.882138][   T57] bond7: (slave bridge2): failed to get link speed/duplex
[ 1097.992174][   T12] bond7: (slave bridge2): failed to get link speed/duplex
[ 1098.112499][  T866] bond7: (slave bridge2): failed to get link speed/duplex
[ 1098.242452][  T113] bond7: (slave bridge2): failed to get link speed/duplex
[ 1098.347982][ T5370] gre0: left promiscuous mode
[ 1098.400409][ T5374] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8769'.
[ 1098.845890][  T880] bond7: (slave bridge2): failed to get link speed/duplex
[ 1099.242317][  T878] bond7: (slave bridge2): failed to get link speed/duplex
[ 1099.362389][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1099.465213][T31031] IPVS: starting estimator thread 0...
[ 1099.483416][ T5421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8777'.
[ 1099.529852][ T5421] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1099.542356][  T878] bond7: (slave bridge2): failed to get link speed/duplex
[ 1099.572071][ T5427] IPVS: using max 31 ests per chain, 74400 per kthread
[ 1099.652200][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1099.709477][ T5437] FAULT_INJECTION: forcing a failure.
[ 1099.709477][ T5437] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1099.727360][ T5437] CPU: 0 UID: 0 PID: 5437 Comm: syz.1.8780 Not tainted syzkaller #0 PREEMPT(full) 
[ 1099.727387][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1099.727398][ T5437] Call Trace:
[ 1099.727407][ T5437]  <TASK>
[ 1099.727416][ T5437]  dump_stack_lvl+0xe8/0x150
[ 1099.727451][ T5437]  should_fail_ex+0x40c/0x560
[ 1099.727479][ T5437]  _copy_from_iter+0x1d3/0x1660
[ 1099.727501][ T5437]  ? kmem_cache_alloc_node_noprof+0x1a1/0x610
[ 1099.727528][ T5437]  ? rcu_is_watching+0x15/0xb0
[ 1099.727558][ T5437]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1099.727584][ T5437]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[ 1099.727607][ T5437]  ? __pfx__copy_from_iter+0x10/0x10
[ 1099.727631][ T5437]  ? __alloc_skb+0x276/0x7a0
[ 1099.727656][ T5437]  ? __alloc_skb+0x276/0x7a0
[ 1099.727688][ T5437]  ? netlink_sendmsg+0x650/0xb40
[ 1099.727707][ T5437]  ? skb_put+0x112/0x210
[ 1099.727737][ T5437]  netlink_sendmsg+0x6c0/0xb40
[ 1099.727765][ T5437]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1099.727789][ T5437]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1099.727813][ T5437]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1099.727832][ T5437]  sock_sendmsg_nosec+0x13a/0x180
[ 1099.727859][ T5437]  ____sys_sendmsg+0x54e/0x850
[ 1099.727892][ T5437]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1099.727931][ T5437]  ? import_iovec+0x73/0xa0
[ 1099.727961][ T5437]  ___sys_sendmsg+0x2a5/0x360
[ 1099.727988][ T5437]  ? __lock_acquire+0x683/0x2cf0
[ 1099.728026][ T5437]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1099.728091][ T5437]  ? __fget_files+0x2a/0x420
[ 1099.728115][ T5437]  ? __fget_files+0x3a2/0x420
[ 1099.728150][ T5437]  __x64_sys_sendmsg+0x1b1/0x290
[ 1099.728181][ T5437]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1099.728227][ T5437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1099.728249][ T5437]  do_syscall_64+0x174/0x580
[ 1099.728276][ T5437]  ? trace_irq_disable+0x3b/0x140
[ 1099.728300][ T5437]  ? clear_bhb_loop+0x40/0x90
[ 1099.728328][ T5437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1099.728347][ T5437] RIP: 0033:0x7faa4af9de59
[ 1099.728367][ T5437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1099.728384][ T5437] RSP: 002b:00007faa4bd82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1099.728405][ T5437] RAX: ffffffffffffffda RBX: 00007faa4b225fa0 RCX: 00007faa4af9de59
[ 1099.728419][ T5437] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000003
[ 1099.728432][ T5437] RBP: 00007faa4bd82090 R08: 0000000000000000 R09: 0000000000000000
[ 1099.728445][ T5437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1099.728457][ T5437] R13: 00007faa4b226038 R14: 00007faa4b225fa0 R15: 00007ffde8c6a5d8
[ 1099.728488][ T5437]  </TASK>
[ 1100.360481][ T5454] netlink: 199784 bytes leftover after parsing attributes in process `syz.5.8784'.
[ 1100.388263][ T5454] netlink: 'syz.5.8784': attribute type 1 has an invalid length.
[ 1100.405217][ T5456] pim6reg: entered allmulticast mode
[ 1100.414647][ T5456] pim6reg: left allmulticast mode
[ 1102.586681][ T5461] wlan0 speed is unknown, defaulting to 1000
[ 1102.605916][ T5461] lo speed is unknown, defaulting to 1000
[ 1102.772012][  T873] net_ratelimit: 6 callbacks suppressed
[ 1102.772031][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1103.002037][ T1123] bond7: (slave bridge2): failed to get link speed/duplex
[ 1103.293112][ T1123] bond7: (slave bridge2): failed to get link speed/duplex
[ 1103.318795][ T5485] syzkaller1: entered promiscuous mode
[ 1103.343221][ T5485] syzkaller1: entered allmulticast mode
[ 1103.414531][  T878] bond7: (slave bridge2): failed to get link speed/duplex
[ 1103.428009][ T5500] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[ 1103.537943][  T866] bond7: (slave bridge2): failed to get link speed/duplex
[ 1103.646049][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8799'.
[ 1103.663397][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1103.700045][ T5503] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8799'.
[ 1103.748487][ T5503] gretap0: entered promiscuous mode
[ 1103.802544][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1103.912248][  T866] bond7: (slave bridge2): failed to get link speed/duplex
[ 1103.928817][ T5511] Bluetooth: MGMT ver 1.23
[ 1104.050189][ T5519] netlink: 'syz.5.8802': attribute type 10 has an invalid length.
[ 1104.063378][ T5519] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8802'.
[ 1104.094101][ T5519] dummy0: entered promiscuous mode
[ 1104.122741][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1104.255745][  T878] bond7: (slave bridge2): failed to get link speed/duplex
[ 1104.607075][ T5553] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.8815'.
[ 1107.227715][ T5526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1107.756133][ T5568] nbd8: detected capacity change from 0 to 63
[ 1107.782626][ T5640] block nbd8: Receive control failed (result -32)
[ 1107.784387][ T4950] 
[ 1107.791568][ T4950] ======================================================
[ 1107.798584][ T4950] WARNING: possible circular locking dependency detected
[ 1107.805608][ T4950] syzkaller #0 Not tainted
[ 1107.810017][ T4950] ------------------------------------------------------
[ 1107.817027][ T4950] kworker/0:1H/4950 is trying to acquire lock:
[ 1107.823173][ T4950] ffff88803684d868 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0x1150
[ 1107.832365][ T4950] 
[ 1107.832365][ T4950] but task is already holding lock:
[ 1107.839730][ T4950] ffff8880281651f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150
[ 1107.848266][ T4950] 
[ 1107.848266][ T4950] which lock already depends on the new lock.
[ 1107.848266][ T4950] 
[ 1107.858661][ T4950] 
[ 1107.858661][ T4950] the existing dependency chain (in reverse order) is:
[ 1107.867663][ T4950] 
[ 1107.867663][ T4950] -> #6 (&cmd->lock){+.+.}-{4:4}:
[ 1107.874867][ T4950]        __mutex_lock+0x19d/0x1550
[ 1107.879987][ T4950]        nbd_queue_rq+0xc1/0x1150
[ 1107.885018][ T4950]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1107.891178][ T4950]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1107.898056][ T4950]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1107.904554][ T4950]        blk_mq_run_work_fn+0x16c/0x300
[ 1107.910089][ T4950]        process_scheduled_works+0xa8e/0x14e0
[ 1107.916147][ T4950]        worker_thread+0xa47/0xfb0
[ 1107.921248][ T4950]        kthread+0x388/0x470
[ 1107.925829][ T4950]        ret_from_fork+0x514/0xb70
[ 1107.930931][ T4950]        ret_from_fork_asm+0x1a/0x30
[ 1107.936203][ T4950] 
[ 1107.936203][ T4950] -> #5 (set->srcu){.+.+}-{0:0}:
[ 1107.943324][ T4950]        __synchronize_srcu+0xc9/0x2f0
[ 1107.948776][ T4950]        elevator_switch+0x1e8/0x7b0
[ 1107.954109][ T4950]        elevator_change+0x2fa/0x480
[ 1107.959382][ T4950]        elevator_set_default+0x375/0x440
[ 1107.965087][ T4950]        blk_register_queue+0x3f3/0x4e0
[ 1107.970668][ T4950]        __add_disk+0x6cb/0xe30
[ 1107.975527][ T4950]        add_disk_fwnode+0xfb/0x4b0
[ 1107.980707][ T4950]        nbd_dev_add+0x733/0xb60
[ 1107.985632][ T4950]        nbd_init+0x15f/0x1e0
[ 1107.990351][ T4950]        do_one_initcall+0x250/0x870
[ 1107.995627][ T4950]        do_initcall_level+0x10a/0x1a0
[ 1108.001074][ T4950]        do_initcalls+0x59/0xa0
[ 1108.005912][ T4950]        kernel_init_freeable+0x29d/0x3e0
[ 1108.011622][ T4950]        kernel_init+0x1d/0x1d0
[ 1108.016458][ T4950]        ret_from_fork+0x514/0xb70
[ 1108.021556][ T4950]        ret_from_fork_asm+0x1a/0x30
[ 1108.026824][ T4950] 
[ 1108.026824][ T4950] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[ 1108.034628][ T4950]        __mutex_lock+0x19d/0x1550
[ 1108.039733][ T4950]        elevator_change+0x1af/0x480
[ 1108.045008][ T4950]        elevator_set_none+0xb5/0x140
[ 1108.050365][ T4950]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[ 1108.056684][ T4950]        nbd_start_device+0x189/0xb30
[ 1108.062048][ T4950]        nbd_genl_connect+0x1597/0x1c10
[ 1108.067581][ T4950]        genl_family_rcv_msg_doit+0x233/0x340
[ 1108.073643][ T4950]        genl_rcv_msg+0x614/0x7a0
[ 1108.078650][ T4950]        netlink_rcv_skb+0x226/0x4a0
[ 1108.083923][ T4950]        genl_rcv+0x28/0x40
[ 1108.088415][ T4950]        netlink_unicast+0x7bb/0x940
[ 1108.093685][ T4950]        netlink_sendmsg+0x813/0xb40
[ 1108.098952][ T4950]        sock_sendmsg_nosec+0x13a/0x180
[ 1108.104482][ T4950]        ____sys_sendmsg+0x54e/0x850
[ 1108.109761][ T4950]        ___sys_sendmsg+0x2a5/0x360
[ 1108.114946][ T4950]        __x64_sys_sendmsg+0x1b1/0x290
[ 1108.120394][ T4950]        do_syscall_64+0x174/0x580
[ 1108.125496][ T4950]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1108.131901][ T4950] 
[ 1108.131901][ T4950] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[ 1108.140658][ T4950]        blk_alloc_queue+0x544/0x690
[ 1108.146460][ T4950]        __blk_mq_alloc_disk+0x194/0x390
[ 1108.152100][ T4950]        nbd_dev_add+0x494/0xb60
[ 1108.157032][ T4950]        nbd_init+0x15f/0x1e0
[ 1108.161698][ T4950]        do_one_initcall+0x250/0x870
[ 1108.166981][ T4950]        do_initcall_level+0x10a/0x1a0
[ 1108.172437][ T4950]        do_initcalls+0x59/0xa0
[ 1108.177282][ T4950]        kernel_init_freeable+0x29d/0x3e0
[ 1108.182994][ T4950]        kernel_init+0x1d/0x1d0
[ 1108.187832][ T4950]        ret_from_fork+0x514/0xb70
[ 1108.192935][ T4950]        ret_from_fork_asm+0x1a/0x30
[ 1108.198204][ T4950] 
[ 1108.198204][ T4950] -> #2 (fs_reclaim){+.+.}-{0:0}:
[ 1108.205401][ T4950]        fs_reclaim_acquire+0x71/0x100
[ 1108.210858][ T4950]        __kmalloc_node_track_caller_noprof+0xbc/0x730
[ 1108.217696][ T4950]        xfrm_user_policy+0x1c2/0x960
[ 1108.223224][ T4950]        do_ipv6_setsockopt+0x16b3/0x3180
[ 1108.228981][ T4950]        ipv6_setsockopt+0x59/0x170
[ 1108.234364][ T4950]        do_sock_setsockopt+0x17c/0x1b0
[ 1108.240001][ T4950]        __x64_sys_setsockopt+0x13d/0x1b0
[ 1108.245713][ T4950]        do_syscall_64+0x174/0x580
[ 1108.250819][ T4950]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1108.257219][ T4950] 
[ 1108.257219][ T4950] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}:
[ 1108.265398][ T4950]        lock_sock_nested+0x41/0x100
[ 1108.270678][ T4950]        inet_shutdown+0x6a/0x390
[ 1108.275693][ T4950]        nbd_mark_nsock_dead+0x2cb/0x550
[ 1108.281322][ T4950]        recv_work+0x1cee/0x1e10
[ 1108.286252][ T4950]        process_scheduled_works+0xa8e/0x14e0
[ 1108.292311][ T4950]        worker_thread+0xa47/0xfb0
[ 1108.297505][ T4950]        kthread+0x388/0x470
[ 1108.302092][ T4950]        ret_from_fork+0x514/0xb70
[ 1108.307202][ T4950]        ret_from_fork_asm+0x1a/0x30
[ 1108.312480][ T4950] 
[ 1108.312480][ T4950] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1108.320120][ T4950]        __lock_acquire+0x1520/0x2cf0
[ 1108.325493][ T4950]        lock_acquire+0x106/0x350
[ 1108.330511][ T4950]        __mutex_lock+0x19d/0x1550
[ 1108.335616][ T4950]        nbd_queue_rq+0x373/0x1150
[ 1108.340725][ T4950]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1108.346783][ T4950]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1108.353625][ T4950]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1108.360117][ T4950]        blk_mq_run_work_fn+0x16c/0x300
[ 1108.365649][ T4950]        process_scheduled_works+0xa8e/0x14e0
[ 1108.371704][ T4950]        worker_thread+0xa47/0xfb0
[ 1108.376835][ T4950]        kthread+0x388/0x470
[ 1108.381420][ T4950]        ret_from_fork+0x514/0xb70
[ 1108.386538][ T4950]        ret_from_fork_asm+0x1a/0x30
[ 1108.391818][ T4950] 
[ 1108.391818][ T4950] other info that might help us debug this:
[ 1108.391818][ T4950] 
[ 1108.402031][ T4950] Chain exists of:
[ 1108.402031][ T4950]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[ 1108.402031][ T4950] 
[ 1108.414101][ T4950]  Possible unsafe locking scenario:
[ 1108.414101][ T4950] 
[ 1108.421535][ T4950]        CPU0                    CPU1
[ 1108.426886][ T4950]        ----                    ----
[ 1108.432239][ T4950]   lock(&cmd->lock);
[ 1108.436219][ T4950]                                lock(set->srcu);
[ 1108.442619][ T4950]                                lock(&cmd->lock);
[ 1108.449109][ T4950]   lock(&nsock->tx_lock);
[ 1108.453511][ T4950] 
[ 1108.453511][ T4950]  *** DEADLOCK ***
[ 1108.453511][ T4950] 
[ 1108.461635][ T4950] 4 locks held by kworker/0:1H/4950:
[ 1108.466902][ T4950]  #0: ffff88801e6e4940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1108.477944][ T4950]  #1: ffffc900104c7c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1108.490810][ T4950]  #2: ffff888027d73818 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300
[ 1108.500228][ T4950]  #3: ffff8880281651f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150
[ 1108.509194][ T4950] 
[ 1108.509194][ T4950] stack backtrace:
[ 1108.515333][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) 
[ 1108.515352][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1108.515363][ T4950] Workqueue: kblockd blk_mq_run_work_fn
[ 1108.515382][ T4950] Call Trace:
[ 1108.515388][ T4950]  <TASK>
[ 1108.515395][ T4950]  dump_stack_lvl+0xe8/0x150
[ 1108.515418][ T4950]  print_circular_bug+0x2e1/0x300
[ 1108.515435][ T4950]  check_noncircular+0x12e/0x150
[ 1108.515460][ T4950]  __lock_acquire+0x1520/0x2cf0
[ 1108.515483][ T4950]  ? irqentry_exit+0x218/0x8f0
[ 1108.515504][ T4950]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1108.515524][ T4950]  ? irqentry_exit+0x218/0x8f0
[ 1108.515543][ T4950]  ? trace_irq_disable+0x3b/0x140
[ 1108.515564][ T4950]  ? nbd_queue_rq+0x373/0x1150
[ 1108.515585][ T4950]  lock_acquire+0x106/0x350
[ 1108.515603][ T4950]  ? nbd_queue_rq+0x373/0x1150
[ 1108.515629][ T4950]  __mutex_lock+0x19d/0x1550
[ 1108.515649][ T4950]  ? nbd_queue_rq+0x373/0x1150
[ 1108.515670][ T4950]  ? ret_from_fork_asm+0x1a/0x30
[ 1108.515684][ T4950]  ? unwind_next_frame+0x8f/0x2550
[ 1108.515701][ T4950]  ? nbd_queue_rq+0x373/0x1150
[ 1108.515722][ T4950]  ? __pfx___mutex_lock+0x10/0x10
[ 1108.515743][ T4950]  ? ret_from_fork_asm+0x1a/0x30
[ 1108.515758][ T4950]  ? stack_trace_save+0xa9/0x100
[ 1108.515775][ T4950]  ? __pfx_stack_trace_save+0x10/0x10
[ 1108.515796][ T4950]  nbd_queue_rq+0x373/0x1150
[ 1108.515819][ T4950]  ? __lock_acquire+0x13e8/0x2cf0
[ 1108.515839][ T4950]  ? __pfx_nbd_queue_rq+0x10/0x10
[ 1108.515866][ T4950]  blk_mq_dispatch_rq_list+0x499/0x1990
[ 1108.515891][ T4950]  ? sbitmap_get+0x229/0x390
[ 1108.515912][ T4950]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[ 1108.515932][ T4950]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[ 1108.515953][ T4950]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1108.515982][ T4950]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[ 1108.516006][ T4950]  ? blk_mq_run_work_fn+0x144/0x300
[ 1108.516021][ T4950]  ? blk_mq_run_work_fn+0x144/0x300
[ 1108.516039][ T4950]  blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1108.516060][ T4950]  ? blk_mq_run_work_fn+0x144/0x300
[ 1108.516075][ T4950]  blk_mq_run_work_fn+0x16c/0x300
[ 1108.516090][ T4950]  ? process_scheduled_works+0xa20/0x14e0
[ 1108.516106][ T4950]  process_scheduled_works+0xa8e/0x14e0
[ 1108.516132][ T4950]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1108.516151][ T4950]  ? assign_work+0x3cf/0x5d0
[ 1108.516168][ T4950]  worker_thread+0xa47/0xfb0
[ 1108.516190][ T4950]  ? __kthread_parkme+0x71/0x1f0
[ 1108.516211][ T4950]  kthread+0x388/0x470
[ 1108.516230][ T4950]  ? __pfx_worker_thread+0x10/0x10
[ 1108.516246][ T4950]  ? __pfx_kthread+0x10/0x10
[ 1108.516265][ T4950]  ret_from_fork+0x514/0xb70
[ 1108.516293][ T4950]  ? __pfx_ret_from_fork+0x10/0x10
[ 1108.516312][ T4950]  ? __switch_to+0xc89/0x1420
[ 1108.516331][ T4950]  ? __pfx_kthread+0x10/0x10
[ 1108.516350][ T4950]  ret_from_fork_asm+0x1a/0x30
[ 1108.516370][ T4950]  </TASK>
[ 1108.802597][ T4950] block nbd8: Dead connection, failed to find a fallback
[ 1108.807765][ T1183] net_ratelimit: 11 callbacks suppressed
[ 1108.807782][ T1183] bond7: (slave bridge2): failed to get link speed/duplex
[ 1108.809698][ T4950] block nbd8: shutting down sockets
[ 1108.828113][ T4950] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1108.853184][ T4950] Buffer I/O error on dev nbd8, logical block 0, async page read
[ 1108.861021][ T4950] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[ 1108.870656][ T4950] Buffer I/O error on dev nbd8, logical block 1, async page read
[ 1108.878932][ T4950] Buffer I/O error on dev nbd8, logical block 2, async page read
[ 1108.887346][ T4950] Buffer I/O error on dev nbd8, logical block 3, async page read
[ 1108.896780][   T25] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[ 1108.906211][   T25] Buffer I/O error on dev nbd8, logical block 0, async page read
[ 1108.914356][   T25] Buffer I/O error on dev nbd8, logical block 1, async page read
[ 1108.923129][  T878] bond7: (slave bridge2): failed to get link speed/duplex
[ 1108.923731][   T25] Buffer I/O error on dev nbd8, logical block 2, async page read
[ 1108.939374][   T25] Buffer I/O error on dev nbd8, logical block 3, async page read
[ 1108.947401][   T25] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[ 1108.956739][   T25] Buffer I/O error on dev nbd8, logical block 0, async page read
[ 1108.965037][   T25] Buffer I/O error on dev nbd8, logical block 1, async page read
[ 1108.973713][   T25] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[ 1108.983604][   T25] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[ 1108.993579][   T25] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[ 1109.003713][   T25] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[ 1109.024237][   T25] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[ 1109.031792][  T878] bond7: (slave bridge2): failed to get link speed/duplex
[ 1109.035879][ T4855] ldm_validate_partition_table(): Disk read failed.
[ 1109.048825][   T25] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1109.061154][ T4855] Dev nbd8: unable to read RDB block 0
[ 1109.069515][ T4855]  nbd8: unable to read partition table
[ 1109.100949][ T4855] ldm_validate_partition_table(): Disk read failed.
[ 1109.113708][ T4855] Dev nbd8: unable to read RDB block 0
[ 1109.120919][ T4855]  nbd8: unable to read partition table
[ 1109.142382][  T866] bond7: (slave bridge2): failed to get link speed/duplex
[ 1109.263977][ T1183] bond7: (slave bridge2): failed to get link speed/duplex
[ 1109.372685][ T1183] bond7: (slave bridge2): failed to get link speed/duplex
[ 1109.483474][ T1123] bond7: (slave bridge2): failed to get link speed/duplex
[ 1109.592527][  T878] bond7: (slave bridge2): failed to get link speed/duplex
[ 1109.702701][  T878] bond7: (slave bridge2): failed to get link speed/duplex
[ 1109.812627][  T878] bond7: (slave bridge2): failed to get link speed/duplex
[ 1113.812571][ T1183] net_ratelimit: 35 callbacks suppressed
[ 1113.812594][ T1183] bond7: (slave bridge2): failed to get link speed/duplex
[ 1113.932111][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1114.042024][  T866] bond7: (slave bridge2): failed to get link speed/duplex
[ 1114.152915][ T1183] bond7: (slave bridge2): failed to get link speed/duplex
[ 1114.262458][  T873] bond7: (slave bridge2): failed to get link speed/duplex
[ 1114.372329][ T1183] bond7: (slave bridge2): failed to get link speed/duplex
[ 1114.482622][  T866] bond7: (slave bridge2): failed to get link speed/duplex
[ 1114.593198][  T866] bond7: (slave bridge2): failed to get link speed/duplex
[ 1114.702242][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1114.812632][ T7976] bond7: (slave bridge2): failed to get link speed/duplex
[ 1115.871893][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!