last executing test programs:

4.66651438s ago: executing program 0 (id=1718):
r0 = socket(0x10, 0x803, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x800, 0x2}, 0xe) (async)
sendmsg$sock(r2, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x1, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x2, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x2, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8d, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0xf, 0x0, 0x5, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}]}}]}, 0x45c}}, 0x20004000) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000500)={0x40, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r7, 0x0, 0x7, 0x8, 0x3, {{0xb, 0x4, 0x2, 0x5, 0x2c, 0x67, 0x0, 0x81, 0x29, 0x0, @local, @remote, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x3, [0xfff, 0x1]}, @rr={0x7, 0xb, 0x44, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x11}]}]}}}}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x21}}]}}]}, 0x48}}, 0x0)

4.530767364s ago: executing program 1 (id=1720):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000120029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040)

4.359705793s ago: executing program 0 (id=1722):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r2)
recvmmsg(r2, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000940)=""/9, 0x9}, {&(0x7f0000000980)=""/71, 0x47}, {&(0x7f0000002e80)=""/4112, 0x1010}], 0x3}, 0xfffff001}], 0x1, 0x40010080, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002400)=ANY=[], 0x18}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a00010a000000000a0000001c"], 0x14}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000240)={0x24, r7, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r9}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x200048d4}, 0x40010)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
r11 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r12, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_MASK={0x4, 0x5, 0x4}]}}]}, 0x40}}, 0x20040054)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x15, 0xfffe, 0x102, 0x8d, 0xa1, 0x7f, 0x48}, 0xffffffffffffff40)
r13 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r13, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0)
ioctl$FS_IOC_SETVERSION(r10, 0x40087602, &(0x7f00000002c0)=0x1)

4.300281074s ago: executing program 1 (id=1723):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="18000000000000000000000000000000711888000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet(0x2, 0x4, 0xf2d)
r2 = socket(0x29, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}, 0xff00}], 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480), &(0x7f0000000700)=0x4)
pipe(&(0x7f0000001540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f000000c200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f000000c380)={0x0, 0x0, &(0x7f000000c340)={&(0x7f000000c240)={0x54, r9, 0x401, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008010)
listen(r7, 0x0)
splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000a00)={{<r10=>r0, &(0x7f0000000080)='\x00', 0x80040, &(0x7f00000000c0)={@align=0xbd4, {0xc, 0x7c, 0x2, 0xa78}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000200)}, 0x9, &(0x7f00000008c0)=[{0x2, 0x80000, &(0x7f0000000240)='*\x00', &(0x7f0000000280)="dbdc82ca08d93e8af129bdd44f53c3315bb5561bfc2d5dabb0a17325fe", 0x1d, 0x8}, {0x2, 0x2, &(0x7f00000002c0)='G\xf2\'c', &(0x7f0000000300)="4be2917dbdce26b468cd8e08e5a299eeb994c3576e0bb53e3a4589a0b6c7d2a79c0e5b3886f2b25699301598985705deec036eb42e3c6a74e3b4f3e696381ab08121c8dc596f5a8e206474f118d00f7ebc67ff3c98db3ccffbff54810260dc445d0ae41f14c36df75bc439aeb800de85459f", 0x72}, {0x2, 0x9, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="ab632509b432de5e43af68aa0d8c340510876b8be21d22357d55bb1bf5ac253fcc99603a2feb5e73bf78480a5980b83f1c5fcd34130b029802cbd57f60a491ae45b49c19ee0ead587d72493d555863547e3665f0e19355cd9bef833e251c2fc2d79452365baa83f8784e4681d2ecb8c159", 0x71, 0x10}, {0x2, 0x5, &(0x7f0000000440)='\x00', &(0x7f0000000480), 0x0, 0x2}, {0x1, 0x5, &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)="906a27c2aa92419baa70cff6bceb55b879b524cbeaf2a5e877e8c659320bd4aa102333", 0x23, 0x18}, {0x1, 0x524, &(0x7f0000000540)='\x00', &(0x7f0000000580)="3b10e7d23f812610aaa6dc154ab4cc059e9e04fc54cd60b02e18e99fe19c4b77a439e513c67ce5fcad01934ce51376acfb8b9e1f1d67999bbba5dfca657b61569200c2e42ea2ae43eadc263ac81a3842ee676143d67fbd494bb8f5ecfa89d498e3f53d0a92c85a6c", 0x68, 0x2}, {0x1, 0x3, &(0x7f0000000600)='\x00', &(0x7f0000000b00)="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", 0x122, 0x20}, {0x1, 0x7fffffff, &(0x7f0000000740)='.@-#\x00', &(0x7f0000000780)="ba9fd20cb8af51b133388c98c17b83aacfaa1b679cba0dc27e3a852f59326899e80ae5093fa96c71a0f496bdc03c813357a4a2bea0e5c25cbd2db7ee8013457c14fde9cff72436c17ab618c46abb", 0x4e, 0xa}, {0x1, 0x9, &(0x7f0000000800)='\\!]#\x00', &(0x7f0000000840)="4a9852d6c8e407b6d3b6cc5d56d063a8a5c51b8a03a05961aade59a0675f1eb82fade295a924b1780b382eee83f7fa60d5a4190f1e374ae981959d70c042624dac978a557acb69234e51d1981f112232d12a9a3faea080c1cba24b3eb8c5fe1bc0d4", 0x62, 0x12}]})
ioctl$SIOCX25SCAUSEDIAG(r10, 0x89ec, &(0x7f0000000a80)={0xb1, 0x7})
syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r5)

4.270471067s ago: executing program 2 (id=1724):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x54d080, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001440)={{r1}, "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"})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x35, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600)

4.076173126s ago: executing program 1 (id=1727):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000780)=""/48, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x800)
setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000000700)=0x10012b, 0x1)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xc}, 0x10}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014)
pipe(&(0x7f0000000080)={<r9=>0xffffffffffffffff})
ioctl$sock_inet_sctp_SIOCINQ(r9, 0x541b, &(0x7f0000000180))

4.026619961s ago: executing program 2 (id=1728):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc000000000000000000000000000000ac1414aa000000000000000000000000fffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c00110020090000000000000000000000000001e0000002000000000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000bb3c000000000020000a000a00fe8000000000000000000000000000aae0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b02000004"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0)

3.904435297s ago: executing program 3 (id=1729):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x1000000, 0xffffffff, 0x250, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond0\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x1f0, 0x250, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'ip6gretap0\x00', {0x6, 0x0, 0x0, 0x338, 0x0, 0x80000000, 0x3, 0x3, 0x0, 0x18}, {0x3}}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xb], 0x3, 0x6}, {0x1, [0x4, 0x6, 0x2, 0x0, 0x5, 0x2], 0xfd}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6d12, 0x3ff, 0x6, 'snmp\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xb}]}, &(0x7f0000000000)='syzkaller\x00', 0x2}, 0x94)

3.804599743s ago: executing program 2 (id=1730):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001e00)={{<r1=>r0, &(0x7f0000000200)='\x00', 0x80, &(0x7f0000000280)={@_ha_fsid={[0x400, 0x5]}, {0x2, 0x3, 0x7, 0x10}}, 0x9, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)}, 0x7, &(0x7f0000001d00)=[{0x1, 0x0, &(0x7f0000000480)='-\xcc(\x00', &(0x7f00000004c0)="68a5923a20f3172dfafd95cbb2855e7698a1c8b657754aaa357a6b874daa32a295e7fb53a6685520835d83209ce5724ce8dc5efd4d128d2275dd8763c88854e6e4b0f437fb57ae74cac4497f52476daf9cc75e5d3aa2663506e377bd847847cf11a17046eccb0fb08bd1dfa3a61408d083d83d59172f817eeaa10fe1278518c2d2a61e85cfb5ecf4fb48d44e0ceec6f89289d5e78cd6eeb81d751ae4bedc16e0906bbb6812ad8ba84bb90270d9d408f94a6c999463024ce4dbce05d51570fd096afdd11f21bb7874fc167e3377782a1d30fc561b3d10de4bc7acb599fcc75b51fd17ee5106a526", 0xe7, 0x28}, {0x1, 0x5, &(0x7f00000005c0)='[\x00', &(0x7f0000000780)="0f6d3a3e046da6739d0c9fa822168e0cbcd306f36848e920893ace7761dd87ddd4d8f5dded771379d68eb0a8cd5255c5f5dcc48cae523252baa8d90d30872d274bbc4dc9274b3d6ffa21458eb2906f82ea1099e9ec2c21fa7688f883ea278efa26814abfc16d29586a0e3d287b3edde34f4d8eec381c6314dc634929fc72bef2624575a776e93ac2564f7d88326d3f7ebd501cba1783eabaed0391cd06d1e28754f9880d95f1839d69627e6a64abcb96508b8db5a2ddbff4c094482177607d5679e2f14228c798e5ca699fad13abfb09ce0654087436739737d294765aa4c36cb5aebafe6ff7e4b125bcb2aaf58ad250e916838cebc1905dc414729a373938b64f4941401699af72d4438023ed093e6df573e79f42d208aa655d971e2b1795d434276447d2b9f6ae0bfeeb815de9a7c4abe46928b2b433ae4e2829450e7bb9bca6a63ec6df34772eb116bed55cfd05d016679c15b18ff1d0a91a155cbcac8d044e9c96f85f85cdeab1cefd432d1fa1f982742c7d61575525ac10769249ff9c6003ec32003821f9c2122975d64c715045562acec98d5a992efa52a72cfdfc3189fe0f978a69b34b491828a5f7030db45a45d971d0dca693f3e3552e8d1aef7dab39f7a0958526b5fd4dd7c3c99f61028d37a1680a05fa6eb76b991f8ca10ef3d057dbf51a0006bf497fc4a9822e781add50748bd1df00639f19376a3e534144d4c1c3eb8c86362d2af22717bf7f13073e8c64ba3f4a81978092f6fff898ea20bda16dec12bd73ce5fc5a36e766af2c34b6d31eec098d0d1e4ff12a412b87cfeff2ce14825c6531c29f1b137a166ecae408e16fccdfce42d50ac6556926f8912153e50a5a08257038edd49c237734bb949d8548ffe4048a656257f455f20b5fd76d277511af574d12bb35db944e49ec4913dc878e1536b74b46beb37a55d79989b02a4f4f515cbca934f3fe159bc6c7f1b9a98f884b68baec2d210ab8f1e9107dadb8f98333e06fffd01217ea9ccf8d3ccf8c7e3d8b2e93b92609601bf3c5e5464d3ad48def33fbdc506e92251f9e18db12073950c9eebc1ac4c1091af5310ff6ed7d98121c2629dcc0297a1cee91ed794604e788d69462aeebe3b498e20fc6980207da7e206e26661ea31a312a493f3eec3f5756048300a06315a19c91b2d5f78fa27305eb77d81f6a1b1bd999c8acde816b06e34e657b1e03d634c6fdb9ea3fd8ad0571367ab5702942d89439cadf7078826f0e8728b0269ec7568ed4e091fee713c9b62b837f6b2551101a348c879a95a3ca003cf28231f54dda2c7bf9e5b6b377b8e5815cb9a25ca29c194a3634aae029eb9a685069c74ad649c9e064a70cdb83090580984765f90d053d9afc08b894f080df98a932bac0d77b4c7a86858d6b82bc81cfaacac4dbbd56d4e318ca4ab8fa177d5398c6db717ae151f4e2a6b8bc0b7fdffc0ea35d9d5f10795bc076a444749a95ec8565681223025bcbe66ca118c00e4feb31e4378c58205e9f0228aa0218887acdd7599d1fb0abd452198644ac9b910766707798acadbdc4741350bb0ed85f90f5e1a1c9b2d0cef10dbe05f8fab013cf56a1481a4085423cb82e2dd2f61440fa194fe2ce9f89326212dbc6a99747438ad5c40eac80c5aecd2e012548c2060fc3432891cf5c4f923ba2047c8a68aa3616757eb5214d18b7e08b36edfea8234498a3c421b468a21bc301db57889ffa83f3cfd89957abe709c0fe9c0944922482fd1a1afdb9cdfd62f748ead375d01a022026e5bbedf09c6bc99666dfa969e310c1b886e611739f37bcbc7ca28a74f84968ca1031fbdf7f808d28ccd460523b93bb48b6eac07ea80812626c4e246d4e07ce765c75357a2a0d9f2b49133c2d86fd997e8eeb0a30ec741414745875d4e6a677aeb9a3aa0bb1e5bb627ae4984be5fc5af6228b4c59a5c8a305841a4e2896ea7bc72fce61f32cfdbd92fb375bfde248ea53b950240df52e343c8eb63fdac09261684fb60171b9ca6cab521ab2d8eead580dd67471c22252408ff3f8b4eb450bfb4b1b47fbda78193c045ee2fde56f9d748be09cc90781dfb59a7576b69bad947b0369445b073136558de14bd01aff091b1c700f282f0265eeb1809ae0686beaae708976130ade079783c08569199a2a4f12b917b12bcab8d7b37c1d831112d8921e622932b41fa871e2e12792b45092a1b933d77cd2294960f1cfd9bff36b411453802cd3cd73e5a31e7b14e314fe2da077b907360cf5667825a0d68ebeea08cd344953b6c787c1573ceecf017fec53fa0075952524ed03daae19239093bbc5f8599970289b7a2f14738c386ec2b33cd6f12c87d094f588b9a40fac401c0c22341c37e0ec8c2e53bd365528c858634b5048c1dcd5c21d8e1c762196b75e69f613d8857f112f7fe6d663e0aef78d4ad601ecece4fadca97926fa1a47ddbdf92ee425c40aed5e59be97e3c8486cdaeca7bdcaf637d3d449935931548ae3276e79deef2b2c8ffdddcf83ffd6d95ce6683f3dd71258d262ad19a9abf04aee135fb09fcdc7ea64c9e3bb441ea16ab5a655bb8c56402681d4cfd2ba4d4a79b79d4844527a529b8353ebea480cfb146be476685b3f5149eac1207b2e8de1e0f4fd271e4486239707d278befcdef54a3071cfabc1441a5ac755ff447dd3ef793409b9451e1a326164a4a57a2c97728985dc37770eaf4469eed0a39c9180c1a095bcca81b3237652020a9294a402b73bd9c71995a0b3074211d8f04268318edb0dbefedafa19ec6be887a7d8f0875ab9d29d4ac4ec3653c1d8c6f822fc5a7e2ed79e77b69d31ab5ed827da570c22216635bff6d3729d85f808e27c8deb26aa08233d6d5e1ffd70f7b98daea64eab4c0763c1c4c687b5539ceea2501e5f87e89bc4a1f2637a492f1e335a8be92df88efe205da0d43c806a90e1e6a9a955b9855806634ad0bef59a9b2dc31b25609b991a94a6966360d2897aba85c9ca9bd897db7cc7cf24e8e4b56454c8d8c80eff035b0a9f1776310dade4c2c28b407278fc886b534a51ba336d4d0ee6fe61376efb723d84ac5b0e51f1bf439dee166bfc61327ce11d5bda9ecc282762b646ab0ca5a4c583da6af96c3abc6ef7711aca54d945fab3dfe6d9ea06ce19a99a577f56f0904aea02f8db6fbf0180d58b827719bafb5d9e53432e85a68c6d52f61ca67882dce19acb4eb7b9b98be3dda083fb1bce618241e23affba8e6284273639b4404f62509678cd96d1da46c9c71bbb1c6041f355ddc7d89f0d3474bc6e9926723036e0191f780440672e19fadcc3a2e338405cac297c94fa008b47ef3ba5418d2e01e232e31af89bb53d7e7f77666456b5267c32032065428bff097888554dba72a1f4c1e4f6fd0bfb3d97d701e272740f49f16e5a4fa74408e812aeb68dcf6f13e3b22ec10ed6b80a59ff21deb9b8be71e8a30f75d8fed550ed75132f7826235700dd16f359688b2bd8b6e957ede4d48cfd9a91fca22ef12d03328ed7b67df9bf9f09b7ca5f912af434de1408fe082b5ec02499f43f21031dd123b6364fb819f99330c7851561e272ef955d10ef979d68292899bc1c7e722e1bbb9686625496b2579838abd782ee070c903b7479ae7b332b5d114f7172e7734dc2ce61a01c42672a1490a092b41ef2df0d3ba4818580f06f0e7e90c61535fbb60641c533dfd5049e760ca30cff327ff8942a5bb980682726352fa0312af60cace6fc1e1da51f92bc8a4df6c9a82a9618edbbc896a4d5a31e6696c45871462b1960e252fb007af2fd7a4f1f2e8c27ae99d9f9586fe388e47bea1579a1cdcc529587c24cf42a54578c7d5995d949d15edb97fadcfa13fecb328d94e628325d30903d8fc22fecd3e7d7f839b972d32caf01c6051a1838e6e6380a6d021c19c4984143b5127a257716d0fdb9365f4d72f4cd14b1945cbba48b3c1021e4e0e000be9b170813678a94330cfebc641715daacda7ab307912ca96008425c0882b17cf4c51649c5cbe8f56bc3663724484cd29684ce9859e41725fd5287b2f3e3c139c57f4c5021b1380e13cd50a949ef7ddeef87a9d3f2593efba37620c7feedfcb9b0d27ccb60957dd0b79976cb986dd80cc04366be17d92a155196125815df58b55f0ad54c44ff08d50c8327761ec8a8d87445044db605de38bb4fa993cbb4288cb2f67905aea9ed019ad6aecd30623d7309c104ff28b14adf7ad3be708a0b1bc5c0584420402aa496a0bff4729bd3243d8ac8673f624493ec2dd946528960b6ec14b1b08c92e9875ccaa866cb7be8d4242e9763227ecb38975fc9e073923524ae6069e04429ca7002b55843137b5d6c1bd965847ee5f83c1791ddaeeb6e831832dddf694269758aec4879b00cbba9bda5b1c2e92f37dde747c5906d6a76454b6aa3ba3b04e8020e10c93e2a1cc865d634296adc5d4fc95e90274c570cb5b851abeaab1e203646eff1434baecc9f71cc03b6411df1350f00b0fc04bac63d1b554b4a9311d85e241b913f7626c2fac9fe4b845c4689ddda8009341b01c84c33fea49e7a86c97185dae2d7315c5c90cae698854720d4cf3f021427cff64f0e6b684a2fe0cd130cddc0ed9bf521b53a2225b1deae041cb6f4f057a51756b8cb1d195f46fbaaba2a62bf96e99828658105986575eebb18ec76626bc8a4cdd06d39b526b9b659b026992f9013cd23864cdc06837a0864bd3e4dc93b4542fd293badaaacac06e5469ed2dc13ef9a17686e41bfb744a3e4736aa26c712442e6c228c57e45e6f587fb995d450e28c359a3b9b3b83037c86bdf5193b6994cd9501efdb86684df3062ffc4da6d91ad15f8cb23db92fe76555e25c162e05ff99597b75f50fec0d8dc9ad3cd2df47c84624bdf0e89edebd0192b6bbc754a18f3c7292ab6cc03b3cac0bc784b05d893c694b44ba7ca02ee2c484e7912b0718e58f7f94b3a9d74977af202817a4d0fb9adae9b9ebcd668389d96aed4ec36f32273ae5d479492e774ccb3ea590bcfca0ceadc9d758163e58da44b3960b008ab7ae6833be419a9924b5bfef459b2d9780d327771fe42aabcbef7cea5826171689a73c24dad8168a1d6ebce28b4e7e2d469fb39b5990c6fdb35651346478b32bf09fd25ec90c9152dc4790530775ce1ff27298b1e52aafce9aced5a2806c6d1f4a4d80936fbd8ee5218aa181c95a9c1a67bf19feccb6c59d44ffa53af58e7f0e1ff7f5c01574e3c1e60dddfa7b7ab5c4f38d9b99243610cf6a093b1fbd2b1b475ca1ce1ccb21459f491a61b1e136dca8603471dd3f1809d002d1ea72e0c3199a60fe02d917a03f965fd894a7884c002a1c4ca07c498cd06913ae888f337807afe0bce6874c8aa1221b2cbaf6efcf907c832a89a71580182de6bd1033dc8339bc90e17ec94d9a9800883f82b14aae69aeb82bc32efdcbef04217928cd3b388b4edafcd38c68059bae4ec9fc4d1b260325f049fa58787dfb72a8074ffdaefa9e83a797141f280a615bf22211fcd60ba4ac99892158b6da6518aa3b3341e1cedcf5db7dbe76b8b8c5023a353470a4e9ff6720871fb9f83c7ef61dc110ed55ad3630cebbeeeb9286906f67046ef9a4e2bc414c18986b46f990df35314b253126a07dd738bb07bcb18ef52eda61bbd953006b29e8d66857675dc9a2c6a11ea7fa72453d2ec972cc1b9e721df5d8196e2d69f3b5315d8f8b54596e7ec52d77039f7b0529b5a61cf13f9bbc76a07736cb05584f7726e0a37835297fe01dbf70b2b724320bbf9d1c538141536a93c9d7b78de0c2f9f92cc383ca3bc6e34cc46a4276b6829447ab58e1a7", 0x1000, 0x8}, {0x60c327dfaea37d4e, 0x6, &(0x7f0000001780)='\x00', &(0x7f00000017c0)="1e382733e99cde95364c2b2fced1c1ab73be7346f48e6af63e515460ec783e49ba3536d5a708d7965c5a02bddf9a50748acd692a79dd0f665cc903f5dd5be36490f2b61f8c96bb00880e5dabf9920fc69b64daa49b3cd3da7dcf8257487c588444c6b839d372570dace01f76", 0xffffffffffffff48}, {0x3, 0x2, &(0x7f0000001840)='\x00', &(0x7f0000001880)="a0326c8028c3047ce22847724ab8aa7b4526e54d7f5344476b784415d904562d962992b9e271c230cda8ee3b88eaaaf273046f15407c5cbfa9f1b9646e92c44ecb52020f06c5b2bf3562e64db4f04643acc5bdd4729a41cfa0a78e6085677d9cdd345c5143255406a99bd12741c1fcd34463c3619a9f77f34db643a0d2cf34c4f5e4b111b6e60460cdc9eb8eea44ce3c32171959884af21e23b92d5b1860d6d2444ee9ef9231cfa72377c727871fd01dae86103fd1fab8e7205672854e881e30bbab89559504f63665b1695d40589c8f5ee3f692b25aee043bb29ae0f1d208b523778d816ea3b3d752", 0xe9, 0x8}, {0x3, 0x2, &(0x7f0000001980)='GPL\x00', &(0x7f00000019c0)="3602782d3dddf0f6a75a07662177f42111ade6a259f86fbb5df77420cc27ae92d1d8637482a5dc6a4064329d18af74e395f342c01dba0220e7dfbcd4af643088a08216386d944e4b72c781f0cf92363ba64dcc0b7de0f73de0276d99886252769cc7ae9a13228677393c60769b19d49db431f068f9d3ce6f39fd6d75d604c4dd721e8b5f98bd32df5fcdeff6ec3248c9877551b634806e88575e3b2bd3213b06102472b4674099", 0xa7, 0x20}, {0x1, 0x9, &(0x7f0000001a80)='##\'%*:,[%,:&}\x00', &(0x7f0000001ac0)="3e2908955014cada8ed8a11947d02d1c01d686e5230040e2eaa866bc8c18a9d575d01abe9b98e9ad3c7fbee775735fa9f4e2127eb168be5fd2d3e57587d3be24078b4186bd8961717d840bdbcdafbdf07dd1f58349414144e4006e70f32c4465ec3bbe18a1fec8d921b22f2cbd1011a717e58d10b9007511f61a1cf0152525ab90eefe78fe09bb415c0995e0faad0b20180dd58060a2dabb80a7d9bbb0f3d9f3e2c719fab2b6403269cb1564128dae8764928fceaefeae3c1e77e0b050a0db8ed641a3b84386343a17939d1220d52c4c53d138723cb3337a75aa0b5f3b64c6e473da278218d362ae2da44230d8994b1d5490f864d9", 0xf5, 0x22}, {0x2, 0xffffd699, &(0x7f0000001bc0)='\x00', &(0x7f0000001c00)="d85fbdf8b191cf755f3003ee46256fd5b5310f890d202de4143879f324572afd6c92a2955dd5306cc3fb7edaaf8d9bd3476cb49637854ed3c82c5ab4656e381870e34f76b837a5bcbe82c6a5a1498305b8e4f41c379648c8754129086c8e9ccc1865a08f319146316447132045226b01b0a8d0195d3c93e53637d3913347f6e7b966b3b67cd5bc8e8d7ee3848c907a5dcbe23fee1dc0882f9488cc36a2e4d4fdd29e20ee3e7a7a959a2e319e9dff231dfa7076be0f4772e68c47285ae2be84af81665ba7b01c00649772f4fbeee45af9b4ec70daec462533d818f8d4dcd4fb51870c601ca37b47f5b50c6aa9b429", 0xee, 0x20}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000001e80)=0x2, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001ec0))
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r2], 0x48)
ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000680))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x521140, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

3.705600089s ago: executing program 2 (id=1731):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x10000000)

3.705259314s ago: executing program 3 (id=1732):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000080)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x40104a5)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x26300, 0x1}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040051}, 0x80)

3.602989221s ago: executing program 1 (id=1734):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000080fe0029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040)

3.508414725s ago: executing program 3 (id=1735):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007301bd000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x34}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r5=>0x0}) (rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff8}, {0xffff, 0xffff}, {0x16, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0xd, 0x81, 0x16, 0x2, 0x12, 0x5}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)

3.460679186s ago: executing program 2 (id=1736):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000780)=""/48, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x800)
setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000000700)=0x10012b, 0x1)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xc}, 0x10}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
vmsplice(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="1333", 0x2}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f00000000c0)="008e777f9d", 0x5}, {&(0x7f0000000580)="52dd19113efcf589dc5f6feb99ffcd75eb88a07e7a238ac61e65203201b5dd2f2c", 0x21}], 0x4, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180))

3.39610677s ago: executing program 1 (id=1737):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r5 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a0000000100000000000000", @ANYRES32, @ANYBLOB="0bd7c6ff7afa14a344fe8a19ce403de527808561fcf63e57b6d9b5fccd95b8d9068d86a1dc6cb99020e89166118890d4b202d63442c8cd787730b6ba00360bdf15c6d0053b277ea6b7f36ad4b72d55317fffa19d999fad1a0d701b3c4ce026d4c1727c2ba599bc849b", @ANYRES64=0x0], 0x20)
r6 = socket$rds(0x15, 0x5, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000040900010073797a300000000034000000030a01010000000000"], 0xa8}}, 0x0)
sendmmsg(r9, &(0x7f0000001c00), 0x400000000000159, 0x40840)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r11}, 0x94)
r13 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x7, &(0x7f00000009c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xad7, 0x0, 0x0, 0x40f00, 0x3a, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2c672, r12, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0)
sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004a00003c00000000000690780a010105ac1414aa4404cb01070d064d291a00000000d05c490000900000000080a451d73be84bbb90118547e5c2de9016f17f3c9c73cf2e63a25c9d2b25ff7db64e49dab70b902930f258c9c87ab7619142611c51b9cf122a8ebb27f204ec8b14d43124a2da1842ca322b9a3fccb28c4daae2bfab8359080a7b59b4159c5cf7dda2e083", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00200090780000"], 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890c, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f00000003c0)=@raw=[@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000280)='syzkaller\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x680f0936988f8ccd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90)

3.187436922s ago: executing program 0 (id=1738):
r0 = socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0xfffffffe, 0x4) (async)
setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
r2 = socket$packet(0x11, 0x3, 0x300) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000000340)={0x3, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x12f) (async)
getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000240), 0x4) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$phonet(r4, &(0x7f00000001c0)={0x23, 0x8, 0x8, 0x5}, 0x10) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x64, 0xd99d}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x0)
sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) (async)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa244}], 0x1, 0x40000000, 0x0)

3.186972994s ago: executing program 3 (id=1739):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000040)="f6b9c89b00000000f75f8aa51f0467", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803)
accept4(r4, 0x0, 0x0, 0x80000)
sendmmsg$inet(r2, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x21, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000040)="f6b9c89b00000000f75f8aa51f0467", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) (async)
accept$alg(r3, 0x0, 0x0) (async)
sendmmsg$alg(r4, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803) (async)
accept4(r4, 0x0, 0x0, 0x80000) (async)
sendmmsg$inet(r2, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x21, 0x0, 0x0) (async)

3.08382917s ago: executing program 0 (id=1740):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20004840)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b7}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x20004055)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="b702000000f30000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc3600040543a34b195c6a8fc054282cd41b264906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af41000000000000007f5ab0d534b8d63e4ca3be71f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733097f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b017d23c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b9ee4a0a0b9636bef4c23788494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74587100e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f26c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada4764320889000000000000000000000000000000a790af4fc17872b55b10db99e212d18193235659df45627da300959eafc8bfb44f70d250f8f2e86532700254c9a8b14999f59c8b9034c4bb2448eaeff5db21d4a7f3d974790d4c3cba7c402f50585b9289d86400679e5c2bcacb2841ca074d51fdb4a29e84d72b6c996cfbee06aa52cd632e82ba068e8e1572ef2eb414ba5fccfc3c03e64df6a9cc3936c604aa2c0e2ec7b777475023f29b146af003472ce146a5ff997ba53c51026c0096154f9280a34bbf21d66f57a250b5397766122fc86950ce5252e96868cd04df54764cf2082153d6cedd8aaf9700c734aa4a1cb33a2e0a13c5687be4de327511bff9816d13c3219dac1c1535f10243db6f96960ea6a621f5e1b7babbedf0a6bf0cf74123d2e78d01be2b048883a2459eec630fb0293d28d9799fd3a792caff693fd9f002f14c43fb5a1051cc686b7f114d7927eed559bdf2e8ddea3e61d5d942b63fe90230b2e1948fc563ef94d437281671d2fe5032d2a091fa842b0af2e116ba"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff30, &(0x7f0000001b40)={&(0x7f00000001c0)={0x30, r3, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @void, @void}}}, 0x30}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0xfe55, 0xfffffffffffffffc})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000a0000000800000007000000c1000000", @ANYRES32], 0x50)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4000000)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x1d, 0x0, 0x0, 0xfffff022}, {0x6}]}, 0x10)
r8 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x13, 0x0, &(0x7f0000000500)="7a7fa22c2aff88d753ef2a2d280fc0616c3475", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.968061925s ago: executing program 3 (id=1741):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)
r1 = epoll_create1(0x0)
epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
epoll_create1(0x0)
listen(0xffffffffffffffff, 0x4)
close(0x3)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xffffffff, @private2}, @in6={0xa, 0x0, 0xfffffffb, @mcast2}], 0x1a)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000440)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)

2.446824672s ago: executing program 4 (id=1744):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xffff}]}}}]}, 0x40}}, 0x40)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ee1}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

2.374568431s ago: executing program 4 (id=1745):
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001c00)={{0xffffffffffffffff, &(0x7f0000000600)='.\x00', 0x0, &(0x7f0000000640)={@_ha_fsid={[0x9]}, {0x3, 0x6, 0x3, 0x8}}, 0xb, &(0x7f0000000680), &(0x7f00000006c0)}, {[0x3ff, 0x4, 0x10000, 0x1]}, 0x5c20, 0x1000, &(0x7f0000000c00)=""/4096})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x100}], 0x18, 0x8005}, 0x40040)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x3, 0xffe0}, {0x9}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0xffffff01, 0x9, 0x8000, 0x10001, 0x3, 0x80000000, 0xb4cb, 0x5, 0x2, 0xfffffeff, 0x3ff, 0x5, 0x2, 0x1b92, 0x8, 0x5, 0x6d58, 0x81, 0x6, 0x0, 0x6f, 0x7f, 0x3, 0x80, 0x7, 0x7, 0x12fd96d2, 0xfffff000, 0x40, 0x7, 0xa, 0x2, 0x3, 0x5, 0x6, 0x401, 0x1000, 0x0, 0xd, 0x6, 0xa, 0x800, 0x8, 0x7, 0x8, 0xfffffffa, 0x20000, 0x8, 0x6, 0x80, 0x1, 0x8, 0x73, 0x800, 0x351, 0x70b0, 0x1, 0x3, 0xb, 0x51d22a98, 0x0, 0x3, 0x8000, 0xf, 0xfffff81f, 0x3, 0x7, 0x8, 0x3, 0x400, 0x8001, 0xfffffffa, 0x1000, 0x293, 0x7, 0x4, 0xb, 0x9, 0x3, 0x2, 0x1, 0x200, 0x7, 0x80000001, 0x4, 0x10, 0x7, 0x7, 0x3a, 0xfffffffd, 0x4, 0x3, 0xd, 0xebf, 0x100, 0x8, 0x2, 0xe, 0x401, 0x1, 0xfffff801, 0x4, 0x7fffffff, 0x8, 0x80000001, 0x10, 0xffffffff, 0x800, 0x9, 0x3, 0x80, 0x8, 0x3, 0x396e, 0x200, 0xffffffff, 0x10, 0x81, 0x0, 0x80000001, 0x4, 0xb, 0x31, 0x6, 0x5, 0x316, 0x4, 0xc880eca, 0x80000000, 0x9, 0x401, 0xf, 0x3, 0xc, 0x0, 0x924, 0x5, 0x8001, 0x400000, 0x1ff, 0x2, 0x3, 0x7fffffff, 0x6, 0x2, 0x3, 0x25a, 0x6a, 0x6, 0x9, 0x9, 0xb4, 0x217, 0x8f, 0x9, 0x2c, 0x2, 0x9, 0x7, 0x9, 0x100, 0x4, 0x6, 0x7, 0x7, 0x3, 0x6, 0x0, 0x7fffffff, 0x0, 0x9, 0x2, 0xb6c, 0x4, 0x8, 0x3, 0x401, 0x3, 0x0, 0xa1, 0x7f, 0x80000001, 0x7, 0x9, 0x800, 0x7, 0x1000, 0xe9, 0x3, 0x6, 0xffffffff, 0x3, 0xae9, 0xba3, 0x6, 0x3, 0xac, 0x8001, 0x2c562366, 0x9, 0xfffffff7, 0x1, 0x3, 0x657, 0x4196, 0x0, 0x8, 0x0, 0xb, 0x3ff, 0x7, 0x5, 0x2, 0x3, 0x41, 0xfffffffe, 0x8, 0x0, 0x8, 0x269, 0xfffffffc, 0xffff70e1, 0x40000000, 0x8, 0x7, 0x1000, 0x4, 0x1, 0x80, 0x8000000, 0x0, 0x7f, 0x67, 0x6, 0xf, 0xbfca, 0x2, 0x8, 0x1, 0x4, 0x66a7633e, 0x9e4, 0x10000, 0x9, 0x3, 0x4, 0x1, 0x3, 0xad2, 0x7, 0x80, 0x2, 0x9, 0x39, 0x10000]}]}]}}]}, 0x43c}}, 0x0)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x2, 0x60, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e008d2a00000100000000000a000000", @ANYRES32=0x0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff2bbd700001dcdf", @ANYBLOB="01000000230800004800128009000100766c616e000000003800028006000100030000001c0004"], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40001)
ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000300)={'gre0\x00', {0x2, 0x4e24, @local}})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.310134048s ago: executing program 4 (id=1746):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x11000000)

2.212353271s ago: executing program 4 (id=1747):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x3a0, 0xd}, 0x50)
r2 = socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}})
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x10, @rand_addr=' \x01\x00', 0x67}, 0x1c)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r1}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000180)=""/128}, 0x20)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/73, 0x49}], 0x1}, 0x7fffffff}], 0x1, 0x40010022, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0198000000000000180012800e00010077697265677561726400000004000280080029001615070008001b00"], 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
syz_emit_ethernet(0xdb6, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0xd80, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x5e, 0xa, 0x4, 0x5, 0x0, 0x28, 0x1, [@private0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x62, 0x18c, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0x3a, 0x6, [0xfffffffffffffffc, 0x8000, 0x100000000, 0x80000001, 0x7, 0x9, 0x5, 0xffffffffffffff01]}}, @ra, @calipso={0x7, 0x38, {0x3, 0xc, 0x9, 0x1, [0x2000000, 0xcf, 0x5, 0x7, 0xfff, 0x5]}}, @generic={0x8a, 0xbcf, "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"}]}], {0x4e20, 0x4e21, 0xc0, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}, "26bc4d426df105a1b58f88af5302632add03e74e52382f19361f1ac1f419c10d8b6bcf60e47c33ead5f2965f642051faafa26d8ebe6a0e0cace9ef28675a63eca98617a63b857c37b5785c467a08a996f9aa07fe5cab460e9de65bd9e2ad58279e4f028fc7a6b55dc1d00e27cb2ad9861d298078b453f5dbb2241454dc9b9bc17b74bdd8ad9bf50703c1d01160085441e3ea5a106541ac9d52358163e17b4702087136898c219933a98f9110629833a0c862f817"}}}}}}}, 0x0)

2.20571023s ago: executing program 4 (id=1748):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000085)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x0, 0xf41, 0x4})
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="70010000", @ANYRES16=r2, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

221.235274ms ago: executing program 3 (id=1749):
socket$vsock_stream(0x28, 0x1, 0x0)
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) (async)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) (async)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async)
ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000000))
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010ca1eec0fb7106516ffffff00000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c04001c0012800c0001006d6163766c616e000c0002800800010008000000140035006d6163766c616e300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x400c844}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x49801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x40}}, 0x0)
splice(r0, 0x0, r4, 0x0, 0x10d00, 0xf)

215.048228ms ago: executing program 0 (id=1750):
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex, 0x3, 0x1, 0x2e04, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], <r2=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map=r1, 0xffffffffffffffff, 0x35, 0x2000, r1, @value=r1, @void, @void, @void, r2}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r1, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdddab5e", 0x4) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdddab5e", 0x4)

202.378538ms ago: executing program 1 (id=1751):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x28, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1}}}}}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async)
syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x28, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1}}}}}}, 0x0) (async)

200.764925ms ago: executing program 2 (id=1752):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', <r1=>0x0})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r5, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), <r6=>0x0, 0xbb, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f00000005c0), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x30, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000fd01000200000000000000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2b0d, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx={0x18, 0xfec10a8845458734, 0x5, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0xc4, &(0x7f0000000500)=""/196, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x10, 0xf1ed}, 0x10, 0x22847, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000006c0)=[{0x3, 0x3, 0x9, 0x5}], 0x10, 0x65f8f7ff}, 0x94)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000000008000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="02000000010000000300000000000000000000000000000000002c0073ab30e310c646e7fb9ec66833e405042a18ddecb86056d80b5b0d3a8bfe5eb54b5ad5591c66408c4417a980ec3edf557e3fe11d141086fea3e38870dc072fe416588df45e19678051b4ac015d116fc88304efcf9ca4f19b8ff9692db360cfbe4b9895970c4e094a12af80a808bd4201"], 0x50)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', r4, 0xffffffffffffffff, 0x1, 0xac3, 0x2}, 0x50)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x4008, r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xf5dcf9ac94bd117d, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a}, [@ldst={0x0, 0x3, 0x0, 0x2, 0x9, 0x20, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000240), 0x41100, 0x2, '\x00', r1, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x0, 0xdd26}, 0x10, r6, r7, 0x3, &(0x7f0000000940)=[r2, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9, r10], &(0x7f0000000980)=[{0x0, 0x5, 0x8, 0x8}, {0x0, 0x2, 0xb, 0xc}, {0x1, 0x3, 0xa}], 0x10, 0xb}, 0x94)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r11, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xaa}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x30048810}, 0x40088c4)
r12 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

139.788943ms ago: executing program 4 (id=1753):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x24}, 0x94)
r2 = socket(0x11, 0x3, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x41424344, @ANYRES32=<r3=>0x41424344], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000006000000517005288500000004920000", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES64=r4, @ANYRES32, @ANYBLOB="0400000000000000001700000000060000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000003800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=r5], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESDEC=r6, @ANYRES32=0x0, @ANYRESDEC=r6, @ANYBLOB="000000000000000000000000000000000000000700000000000000001b9f28dc9ee16c8a8b8f00a12fb6381408294e76deb3ebede8f079b27aba2e06c36625d57b92dd9725857964f4a9b078c644d3aa8b2fdd2a3e7cc5683381d73fd98502f7d6f3a1446674a13a772b0fee2d1c26310143e55a3659d996ae7f86f9359ffb788cb9917f95fe7ad4e921a8e0d59e81d52868a69f52602d8ef0dcd05a4efddec2abceeab533907e0e05328cc830540e3742a2d8df7a2c69f4f39f7588c4b214faf1bd850431bdbac2bf1669a6869f63aabd852f80adcf9e39b5dae112d096af6c705ed276265f075df7a818d1e0cb0a53403506bc837f410065d8cb4b74d7"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=<r8=>r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="9cedfeb40059c668170ad80ae7ccba21c92f8b496e0624395e7c91c48d2a09ce", @ANYRES8=r8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x810, r10, 0x0)
pipe(&(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0600000004000000a5000000080000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES16=r11, @ANYBLOB="00000f3e9dd3e05e4382cd3aa3616f00000000000000000000da000000bee2f55a5f676e626fb781c9c47491f5cc33ceb3380614e2e1f74fdf8734550f7054c72b95a3fdb628c7545f97166a762bcd902334ce5c861408f536273506a0d928170a4804476f65b130afa9ae98d4165b76fb79bfbdb0a81c875441fac0dfcc1f8bf241f77c0f8d4cd68960301135e17cdb463694091f0001707916c41eefd8ca7f4fabc00479a05ccf210442c504cd986e692ccef951f61f0e2d51ac65c42d74a9d15dcdda59c138d6937c0d4560cc8769cda7e4caa8bfabec2305b5374957c5abe28a74ce455d24", @ANYRES32=<r14=>0xffffffffffffffff, @ANYRESOCT], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xd9, r13, 0x800000000000000}, 0x38)
vmsplice(r12, 0x0, 0x0, 0x1)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
r15 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r15, 0x29, 0x1e, 0x0, 0x0)
sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x40)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_generic(r12, 0x0, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYRES8=r14, @ANYBLOB="409132799200b5e1f0a334a9be88c8ab000f81d6acd735a09d361c62362315635a8e59b1653902f3c041233f", @ANYBLOB='\x00'/20, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB="00000000000000000400"/28, @ANYRES32=r1, @ANYRES32=r9, @ANYRESOCT=r11], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, 0x0, 0x0}, 0x94)

0s ago: executing program 0 (id=1754):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x20, 0x1}, 0x6)

kernel console output (not intermixed with test programs):

ocess `syz.2.284'.
[  128.290744][ T6899] syzkaller0: entered promiscuous mode
[  128.316638][ T6899] syzkaller0: entered allmulticast mode
[  128.479951][ T5744] IPVS: starting estimator thread 0...
[  128.601740][ T6911] IPVS: using max 25 ests per chain, 60000 per kthread
[  131.108506][ T6905] netlink: 10184 bytes leftover after parsing attributes in process `syz.3.292'.
[  131.118085][ T6905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.292'.
[  131.910715][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'.
[  131.957660][ T6957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.177167][ T6971] netlink: 'syz.0.310': attribute type 10 has an invalid length.
[  132.195951][ T6971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'.
[  132.242678][ T6973] netlink: 'syz.1.311': attribute type 7 has an invalid length.
[  132.270829][ T6973] netlink: 148 bytes leftover after parsing attributes in process `syz.1.311'.
[  132.369645][  T811] IPVS: starting estimator thread 0...
[  132.471173][ T6979] IPVS: using max 26 ests per chain, 62400 per kthread
[  132.580558][ T6982] __nla_validate_parse: 2 callbacks suppressed
[  132.580582][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[  132.900583][ T5744] IPVS: starting estimator thread 0...
[  132.929535][ T6994] netlink: 'syz.4.316': attribute type 1 has an invalid length.
[  132.963626][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'.
[  133.017743][ T6993] IPVS: using max 28 ests per chain, 67200 per kthread
[  133.027051][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  133.037915][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  133.048762][ T6997] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  133.105923][ T6994] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.219492][ T6998] bond0: (slave veth3): Enslaving as an active interface with a down link
[  133.277343][ T7000] bond0: (slave dummy0): making interface the new active one
[  133.312342][ T7000] dummy0: entered promiscuous mode
[  133.324097][ T7000] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  133.355855][ T7004] openvswitch: netlink: Message has 4 unknown bytes.
[  133.377935][ T7003] netlink: 'syz.2.317': attribute type 4 has an invalid length.
[  133.646812][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'.
[  133.909446][ T7022] netlink: 3 bytes leftover after parsing attributes in process `syz.4.324'.
[  134.062853][ T7026] netlink: 8740 bytes leftover after parsing attributes in process `syz.2.325'.
[  134.084778][ T7026] openvswitch: netlink: Flow key attr not present in new flow.
[  134.164584][ T7031] netlink: 144 bytes leftover after parsing attributes in process `syz.2.325'.
[  134.581806][ T7042] netlink: 156 bytes leftover after parsing attributes in process `syz.3.328'.
[  134.770983][ T7046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.797568][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'.
[  135.046806][ T7053] netlink: 'syz.2.330': attribute type 1 has an invalid length.
[  135.297680][ T7053] bond1: entered promiscuous mode
[  135.315069][ T7053] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.407962][ T7061] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.417431][ T7061] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  135.431971][ T7061] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  135.447110][ T7061] bond1: (slave ip6gre1): making interface the new active one
[  135.472757][ T7061] ip6gre1: entered promiscuous mode
[  135.480195][ T7061] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  135.877337][ T7073] netlink: 68 bytes leftover after parsing attributes in process `syz.2.333'.
[  136.051289][ T4948] Bluetooth: hci4: command tx timeout
[  136.390877][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.334'.
[  137.956120][ T7132] x_tables: duplicate underflow at hook 3
[  138.827726][ T7147] __nla_validate_parse: 5 callbacks suppressed
[  138.827746][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'.
[  138.872927][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'.
[  138.937334][ T7147] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  138.944532][ T7148] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  139.037097][ T7156] bridge0: port 3(erspan0) entered blocking state
[  139.100147][ T7156] bridge0: port 3(erspan0) entered disabled state
[  139.138279][ T7156] erspan0: entered allmulticast mode
[  139.192860][ T7161] netlink: 68 bytes leftover after parsing attributes in process `syz.1.355'.
[  139.226643][ T7156] erspan0: entered promiscuous mode
[  139.236407][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.358'.
[  139.252019][ T7156] bridge0: port 3(erspan0) entered blocking state
[  139.259930][ T7156] bridge0: port 3(erspan0) entered forwarding state
[  139.289605][ T7161] netlink: 64 bytes leftover after parsing attributes in process `syz.1.355'.
[  139.382691][ T7158] erspan0: left allmulticast mode
[  139.409351][ T7158] erspan0: left promiscuous mode
[  139.431884][ T7158] bridge0: port 3(erspan0) entered disabled state
[  139.632592][ T7177] netlink: 40 bytes leftover after parsing attributes in process `syz.4.360'.
[  139.744408][ T7181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.362'.
[  139.766747][ T7177] syzkaller0: entered promiscuous mode
[  139.773039][ T7177] syzkaller0: entered allmulticast mode
[  140.489163][ T7202] openvswitch: netlink: Key type 349 is out of range max 32
[  143.866259][ T7285] netlink: 'syz.3.391': attribute type 1 has an invalid length.
[  144.150735][ T7291] bond2: (slave bridge1): Enslaving as a backup interface with an up link
[  144.213983][ T7302] macvlan2: entered promiscuous mode
[  144.228166][ T7302] macvlan2: entered allmulticast mode
[  144.235807][ T7302] bond2: entered promiscuous mode
[  144.241388][ T7302] bridge1: entered promiscuous mode
[  144.248082][ T7302] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  144.266511][ T7304] netlink: 'syz.2.395': attribute type 11 has an invalid length.
[  144.309558][ T7302] bond2: left promiscuous mode
[  144.319771][ T7302] bridge1: left promiscuous mode
[  144.533561][ T6041] dummy0: left promiscuous mode
[  144.589170][ T7304] netlink: 84 bytes leftover after parsing attributes in process `syz.2.395'.
[  144.630674][ T7304] syzkaller0: entered promiscuous mode
[  144.656048][ T7304] syzkaller0: entered allmulticast mode
[  145.156079][ T7325] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.402'.
[  145.167997][ T7325] syzkaller0: entered promiscuous mode
[  145.186381][ T7325] syzkaller0: entered allmulticast mode
[  145.486132][ T7193] Set syz1 is full, maxelem 65536 reached
[  145.846373][ T7352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.409'.
[  146.123677][ T7360] netlink: 64 bytes leftover after parsing attributes in process `syz.3.411'.
[  146.147711][ T7356] syzkaller0: entered promiscuous mode
[  146.156142][ T7356] syzkaller0: entered allmulticast mode
[  146.217274][ T7356] netlink: 'syz.4.412': attribute type 2 has an invalid length.
[  146.225438][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'.
[  146.335996][ T7360] syzkaller1: entered promiscuous mode
[  146.356161][ T7360] syzkaller1: entered allmulticast mode
[  146.497881][ T7372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.416'.
[  146.677240][ T7377] openvswitch: netlink: Message has 4 unknown bytes.
[  146.830467][ T7382] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  146.990110][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'.
[  147.066455][ T7394] ipvlan2: entered allmulticast mode
[  147.075143][ T7394] syz_tun: entered allmulticast mode
[  147.219200][ T7401] syzkaller0: entered promiscuous mode
[  147.230243][ T7401] syzkaller0: entered allmulticast mode
[  147.305127][ T7407] netlink: 'syz.0.426': attribute type 1 has an invalid length.
[  147.313288][ T7408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'.
[  147.379684][ T7407] bond1: entered promiscuous mode
[  147.392867][ T7407] 8021q: adding VLAN 0 to HW filter on device bond1
[  147.776649][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.430'.
[  147.887843][ T7434] netlink: 'syz.1.433': attribute type 1 has an invalid length.
[  147.925017][ T7434] netlink: 'syz.1.433': attribute type 2 has an invalid length.
[  147.969089][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'.
[  148.344217][  T143] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.381335][  T143] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.420286][  T143] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.452477][  T143] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.635773][ T7466] netlink: 'syz.3.439': attribute type 3 has an invalid length.
[  149.064595][ T7472] bridge2: port 1(gretap1) entered blocking state
[  149.102339][ T7472] bridge2: port 1(gretap1) entered disabled state
[  149.136934][ T7472] gretap1: entered allmulticast mode
[  149.157884][ T7472] gretap1: entered promiscuous mode
[  149.237093][ T7479] geneve0: entered promiscuous mode
[  149.255106][ T7479] geneve0: left promiscuous mode
[  149.708992][ T7508] __nla_validate_parse: 3 callbacks suppressed
[  149.709043][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'.
[  149.760799][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'.
[  149.803921][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'.
[  149.840561][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'.
[  150.156379][ T7522] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  150.227672][ T7522] bond2 (unregistering): Released all slaves
[  150.369788][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'.
[  150.880010][ T7569] netlink: 'syz.1.463': attribute type 10 has an invalid length.
[  150.888919][ T7569] syz_tun: entered promiscuous mode
[  150.958143][ T7569] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  151.155644][ T7569] bridge_slave_1: Caught tx_queue_len zero misconfig
[  151.389657][ T7593] openvswitch: netlink: Flow actions attr not present in new flow.
[  151.692435][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.014923][ T7622] netlink: 60 bytes leftover after parsing attributes in process `syz.2.478'.
[  152.072507][ T7626] netlink: 232 bytes leftover after parsing attributes in process `syz.4.480'.
[  152.161699][ T7632] netlink: 1048 bytes leftover after parsing attributes in process `syz.4.481'.
[  152.292576][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.482'.
[  152.303900][ T7635] netlink: 'syz.2.482': attribute type 7 has an invalid length.
[  152.312244][ T7635] netlink: 'syz.2.482': attribute type 8 has an invalid length.
[  152.326531][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'.
[  152.347225][ T7635] bond0: entered promiscuous mode
[  152.353982][ T7635] bond_slave_0: entered promiscuous mode
[  152.363349][ T7635] bond_slave_1: entered promiscuous mode
[  152.369866][ T7635] bridge0: entered promiscuous mode
[  152.388518][ T7635] bond0: left promiscuous mode
[  152.395177][ T7635] bond_slave_0: left promiscuous mode
[  152.420322][ T7635] bond_slave_1: left promiscuous mode
[  152.441459][ T7635] bridge0: left promiscuous mode
[  153.399986][ T7678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  153.417206][ T7690] syzkaller1: entered promiscuous mode
[  153.422931][ T7690] syzkaller1: entered allmulticast mode
[  154.000307][ T7715] netlink: 'syz.2.503': attribute type 11 has an invalid length.
[  154.533577][ T7735] bond3: entered promiscuous mode
[  154.621599][ T7748] netlink: 'syz.4.512': attribute type 1 has an invalid length.
[  154.709986][ T7750] geneve2: entered promiscuous mode
[  154.727550][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 43080 - 0
[  154.773896][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 43080 - 0
[  154.811736][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 43080 - 0
[  154.865667][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 43080 - 0
[  154.960613][ T7757] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  154.995610][ T7772] openvswitch: netlink: ct_state flags ffffffff unsupported
[  155.090707][ T7775] __nla_validate_parse: 7 callbacks suppressed
[  155.097824][ T7775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.518'.
[  155.384511][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  155.898497][ T7806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.526'.
[  156.159435][ T7808] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  156.183961][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.195429][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.396984][ T7815] bridge0: port 3(vlan2) entered blocking state
[  156.453320][ T7815] bridge0: port 3(vlan2) entered disabled state
[  156.483986][ T7815] vlan2: entered allmulticast mode
[  156.494384][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.521'.
[  156.538449][ T7823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.531'.
[  156.566529][ T7815] geneve0: entered allmulticast mode
[  156.575519][ T7825] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[  156.584580][ T7825] netlink: 'syz.2.532': attribute type 2 has an invalid length.
[  156.604464][ T7815] vlan2: entered promiscuous mode
[  156.623844][ T7815] geneve0: entered promiscuous mode
[  156.642822][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'.
[  156.668591][ T7825] ipt_REJECT: ECHOREPLY no longer supported.
[  156.856559][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'.
[  156.868360][ T7836] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  157.015691][ T7844] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  157.026326][ T7844] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  157.276707][ T7858] netlink: 52 bytes leftover after parsing attributes in process `syz.3.542'.
[  157.631871][ T7874] netlink: 'syz.4.545': attribute type 5 has an invalid length.
[  157.761151][ T7878] x_tables: ip6_tables: mh match: only valid for protocol 135
[  157.921659][ T7881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.978862][ T7881] : entered promiscuous mode
[  158.016431][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'.
[  158.245044][ T7886] netlink: 'syz.3.549': attribute type 1 has an invalid length.
[  158.270019][ T7888] netlink: 'syz.3.549': attribute type 1 has an invalid length.
[  158.491761][ T7886] 8021q: adding VLAN 0 to HW filter on device bond4
[  158.676183][ T7904] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20003
[  158.766731][ T7911] openvswitch: netlink: Missing key (keys=40, expected=80)
[  158.834302][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'.
[  158.857452][ T7916] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  159.023841][ T7927] syz_tun: entered promiscuous mode
[  160.176417][ T7966] netlink: 'syz.4.571': attribute type 1 has an invalid length.
[  160.383054][ T7966] bond2: entered promiscuous mode
[  160.389292][ T7966] 8021q: adding VLAN 0 to HW filter on device bond2
[  160.408819][ T7975] netlink: 'syz.0.572': attribute type 1 has an invalid length.
[  160.414953][ T7968] vlan2: entered allmulticast mode
[  160.424722][ T7968] bond2: entered allmulticast mode
[  160.477728][ T7972] bond2: (slave bridge2): making interface the new active one
[  160.502277][ T7972] bridge2: entered promiscuous mode
[  160.516067][ T7972] bridge2: entered allmulticast mode
[  160.537621][ T7972] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  160.553623][ T7984] netlink: 48 bytes leftover after parsing attributes in process `syz.3.573'.
[  160.588083][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'.
[  160.601464][ T7976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.573'.
[  160.635402][ T7982] syzkaller0: entered promiscuous mode
[  160.643352][ T7982] syzkaller0: entered allmulticast mode
[  160.655624][ T7975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.572'.
[  160.985865][ T7986] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.265579][ T7986] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.387212][ T8021] netlink: 68 bytes leftover after parsing attributes in process `syz.0.586'.
[  161.557918][ T7986] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.638234][ T8007] syzkaller0: refused to change device tx_queue_len
[  161.839592][ T7986] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.017839][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'.
[  162.037559][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'.
[  162.075918][ T8041] veth1_macvtap: left promiscuous mode
[  162.094202][ T8043] netlink: 'syz.4.593': attribute type 111 has an invalid length.
[  162.169911][ T6039] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.245971][ T6039] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.346349][ T6041] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.486165][ T6041] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.531683][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'.
[  162.582143][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'.
[  162.636006][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'.
[  162.695216][ T8067] netlink: 'syz.1.602': attribute type 1 has an invalid length.
[  162.900302][ T8067] 8021q: adding VLAN 0 to HW filter on device bond2
[  162.918516][ T8080] syzkaller0: entered promiscuous mode
[  162.945436][ T8080] syzkaller0: entered allmulticast mode
[  162.963392][ T8066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.095660][ T8079] bond2: (slave ip6gretap1): making interface the new active one
[  163.150432][ T8079] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  163.297476][ T8055] tipc: Resetting bearer <eth:syzkaller0>
[  163.372821][ T8055] tipc: Disabling bearer <eth:syzkaller0>
[  164.095387][ T8115] netlink: 'syz.3.617': attribute type 11 has an invalid length.
[  164.127691][ T8114] netlink: 'syz.3.617': attribute type 11 has an invalid length.
[  164.489335][ T8128] xt_hl: Unknown TTL match mode: 237
[  164.546718][ T8128] syzkaller0: entered promiscuous mode
[  164.573668][ T8128] syzkaller0: entered allmulticast mode
[  164.619880][ T8138] netlink: 'syz.3.624': attribute type 4 has an invalid length.
[  164.659596][ T8139] Unsupported ieee802154 address type: 0
[  164.768927][ T8142] netlink: 'syz.3.625': attribute type 5 has an invalid length.
[  167.386265][ T8134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  179.120315][ T8191] __nla_validate_parse: 7 callbacks suppressed
[  179.120336][ T8191] netlink: 84 bytes leftover after parsing attributes in process `syz.3.639'.
[  179.526469][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.640'.
[  179.542262][ T8194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.640'.
[  179.791964][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.644'.
[  181.482313][ T8231] netlink: zone id is out of range
[  181.489228][ T8231] netlink: zone id is out of range
[  181.495422][ T8231] netlink: zone id is out of range
[  181.501980][ T8231] netlink: zone id is out of range
[  181.508438][ T8231] netlink: zone id is out of range
[  181.524574][ T8231] netlink: zone id is out of range
[  181.530315][ T8231] netlink: zone id is out of range
[  181.536271][ T8231] netlink: zone id is out of range
[  181.542867][ T8231] netlink: zone id is out of range
[  181.557719][ T8231] netlink: zone id is out of range
[  181.826156][ T8236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.653'.
[  182.168468][ T8242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  182.177205][ T8242] IPv6: NLM_F_CREATE should be set when creating new route
[  182.184587][ T8242] IPv6: NLM_F_CREATE should be set when creating new route
[  182.496036][ T8260] netlink: 'syz.4.660': attribute type 9 has an invalid length.
[  182.506018][ T8260] netlink: 212396 bytes leftover after parsing attributes in process `syz.4.660'.
[  182.769951][ T8273] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.664'.
[  182.801139][ T8273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.664'.
[  182.965829][ T8278] bond3: option mode: invalid value (254)
[  183.016782][ T8278] bond3 (unregistering): Released all slaves
[  183.250837][ T8293] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  183.370034][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'.
[  184.107051][ T8334] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.677'.
[  184.126040][ T8334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.677'.
[  184.629748][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'.
[  184.643859][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.680'.
[  184.695199][ T8353] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  184.718478][ T8353] bond3 (unregistering): Released all slaves
[  184.889174][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.682'.
[  185.142435][ T8366] netlink: 604 bytes leftover after parsing attributes in process `syz.4.683'.
[  185.176344][ T8366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.683'.
[  185.207681][ T8366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.683'.
[  185.548136][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.692'.
[  185.601556][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'.
[  185.743785][ T8380] bond2: invalid ARP target 0.0.0.0 specified for addition
[  185.771314][ T8380] bond2: option arp_ip_target: invalid value (0)
[  185.802417][ T8380] bond2 (unregistering): Released all slaves
[  186.119361][ T8416] netlink: 'syz.0.698': attribute type 10 has an invalid length.
[  186.725920][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'.
[  186.757231][ T8446] net_ratelimit: 49 callbacks suppressed
[  186.757250][ T8446] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  187.229065][ T8463] tipc: Invalid UDP bearer configuration
[  187.229138][ T8463] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  187.254902][ T8465] tipc: Invalid UDP bearer configuration
[  187.254952][ T8465] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  187.874293][ T6035] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.908794][ T6035] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 43080 - 0
[  187.927592][ T8499] netlink: 'syz.2.725': attribute type 29 has an invalid length.
[  187.953878][ T8499] netlink: 'syz.2.725': attribute type 29 has an invalid length.
[  188.044316][ T8499] netlink: 'syz.2.725': attribute type 29 has an invalid length.
[  188.101612][ T8499] netlink: 'syz.2.725': attribute type 29 has an invalid length.
[  188.132611][ T8499] netlink: 'syz.2.725': attribute type 29 has an invalid length.
[  188.169381][ T8499] netlink: 'syz.2.725': attribute type 29 has an invalid length.
[  188.183008][ T8499] netlink: 'syz.2.725': attribute type 29 has an invalid length.
[  188.192752][ T8499] netlink: 'syz.2.725': attribute type 29 has an invalid length.
[  188.233098][ T8499] netlink: 'syz.2.725': attribute type 29 has an invalid length.
[  188.254973][ T8503] veth1_to_batadv: entered allmulticast mode
[  188.272285][ T8499] netlink: 'syz.2.725': attribute type 29 has an invalid length.
[  188.705269][ T8522] vlan3: entered promiscuous mode
[  188.710399][ T8522] bridge0: entered promiscuous mode
[  189.135829][ T8540] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  189.235740][ T8543] __nla_validate_parse: 30 callbacks suppressed
[  189.235762][ T8543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.742'.
[  189.309492][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.743'.
[  189.379670][   T30] audit: type=1804 audit(1780418626.082:7): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.742" name="/newroot/156/memory.events" dev="tmpfs" ino=808 res=1 errno=0
[  189.463281][   T30] audit: type=1800 audit(1780418626.082:8): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.742" name="memory.events" dev="tmpfs" ino=808 res=0 errno=0
[  189.490988][ T8551] IPVS: set_ctl: invalid protocol: 135 172.20.20.17:20001
[  189.523502][   T30] audit: type=1804 audit(1780418626.112:9): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.742" name="/newroot/156/memory.events" dev="tmpfs" ino=808 res=1 errno=0
[  190.010686][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'.
[  190.075018][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'.
[  190.698091][ T8601] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.873494][ T8606] netlink: 48 bytes leftover after parsing attributes in process `syz.3.757'.
[  191.000252][ T8603] bond0: (slave wlan0): Error: Device can not be enslaved while up
[  191.197580][ T8624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.760'.
[  191.358996][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.397088][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.418313][ T8617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.592590][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'.
[  191.705432][ T8637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.764'.
[  191.778464][ T8646] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  191.797245][ T8646] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  192.069625][ T8651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.770'.
[  192.282840][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'.
[  192.766212][ T8688] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  193.134285][    T9] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  193.224404][ T8720] validate_nla: 12 callbacks suppressed
[  193.224426][ T8720] netlink: 'syz.3.784': attribute type 12 has an invalid length.
[  193.367318][ T8730] xt_hashlimit: invalid rate
[  193.451574][    T9] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  193.489086][ T8728] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.496483][ T8728] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.504224][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.511479][ T8728] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.701254][ T8745] netlink: 'syz.4.790': attribute type 10 has an invalid length.
[  193.786079][ T8744] netlink: 'syz.1.789': attribute type 7 has an invalid length.
[  194.426168][ T8758] __nla_validate_parse: 5 callbacks suppressed
[  194.426187][ T8758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.795'.
[  194.456431][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  194.631801][ T8767] netlink: 60 bytes leftover after parsing attributes in process `syz.3.797'.
[  195.009061][ T8789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.804'.
[  195.062612][ T8789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.804'.
[  195.142217][ T8799] netlink: 180 bytes leftover after parsing attributes in process `syz.2.805'.
[  195.512705][ T8816] netlink: 'syz.3.811': attribute type 12 has an invalid length.
[  195.614879][ T8822] netlink: 'syz.4.812': attribute type 26 has an invalid length.
[  195.835964][ T6014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.860804][ T6014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.876536][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'.
[  196.140172][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'.
[  196.336901][ T8850] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  196.361412][ T8850] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  196.384424][ T8850] veth0_virt_wifi: entered allmulticast mode
[  196.419103][ T8850] veth0_virt_wifi: entered promiscuous mode
[  196.436297][ T8850] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  196.444049][ T8850] bridge0: port 3(veth0_virt_wifi) entered forwarding state
[  196.719722][ T8867] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  196.895612][ T8872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.914209][ T8872] syzkaller0: entered promiscuous mode
[  196.927721][ T8872] syzkaller0: entered allmulticast mode
[  197.014562][ T8872] tipc: Resetting bearer <eth:syzkaller0>
[  197.053102][ T8871] tipc: Resetting bearer <eth:syzkaller0>
[  197.125144][ T8871] tipc: Disabling bearer <eth:syzkaller0>
[  197.168551][ T8883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.830'.
[  197.273182][ T8886] block nbd3: not configured, cannot reconfigure
[  197.402058][ T8895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.607287][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[  197.645474][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[  198.369215][ T8929] team0: Port device team_slave_0 removed
[  198.421484][ T8935] syzkaller1: entered promiscuous mode
[  198.445155][ T8935] syzkaller1: entered allmulticast mode
[  199.670569][ T8976] __nla_validate_parse: 3 callbacks suppressed
[  199.670590][ T8976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.856'.
[  200.165644][ T8997] netlink: 84 bytes leftover after parsing attributes in process `syz.4.863'.
[  201.000091][ T9018] netlink: 10184 bytes leftover after parsing attributes in process `syz.3.870'.
[  201.021894][ T9018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.870'.
[  201.445294][ T9033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.591224][ T9033] syzkaller0: entered promiscuous mode
[  201.596936][ T9033] syzkaller0: entered allmulticast mode
[  201.607176][ T9033] tipc: Resetting bearer <eth:syzkaller0>
[  201.650087][ T9032] tipc: Resetting bearer <eth:syzkaller0>
[  202.174783][ T9067] netlink: 'syz.1.881': attribute type 10 has an invalid length.
[  202.288324][ T9069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.881'.
[  204.165773][ T9032] tipc: Disabling bearer <eth:syzkaller0>
[  204.187283][ T9061] veth0_macvtap: entered allmulticast mode
[  204.201451][ T9061] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  204.241653][ T9072] batman_adv: batadv0: Adding interface: dummy0
[  204.248060][ T9072] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  204.276268][ T9072] batman_adv: batadv0: Interface activated: dummy0
[  204.295109][   T29] tipc: Node number set to 590358276
[  204.376973][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.883'.
[  204.431538][ T9083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.943570][ T9116] netlink: 'syz.0.889': attribute type 1 has an invalid length.
[  204.974923][ T9116] netlink: 224 bytes leftover after parsing attributes in process `syz.0.889'.
[  205.149940][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.890'.
[  205.403606][ T9123] netlink: 48 bytes leftover after parsing attributes in process `syz.0.891'.
[  205.471220][ T9123] netlink: 'syz.0.891': attribute type 1 has an invalid length.
[  205.500018][ T9130] netlink: 48 bytes leftover after parsing attributes in process `syz.4.892'.
[  205.529392][ T9123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.891'.
[  205.586433][ T9133] netlink: 'syz.1.893': attribute type 1 has an invalid length.
[  205.626009][ T9133] bond3: option mode: invalid value (7)
[  205.633531][ T9133] bond3 (unregistering): Released all slaves
[  205.704153][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'.
[  206.349903][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'.
[  206.375294][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'.
[  206.386820][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'.
[  206.404400][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'.
[  206.416046][ T9156] team0: entered allmulticast mode
[  206.422322][ T9156] team_slave_1: entered allmulticast mode
[  206.447324][ T9156] team0: left allmulticast mode
[  206.453453][ T9156] team_slave_1: left allmulticast mode
[  206.514819][ T9160] netlink: 'syz.3.900': attribute type 13 has an invalid length.
[  206.560289][ T9160] netlink: 'syz.3.900': attribute type 17 has an invalid length.
[  206.649668][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.657304][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.778587][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  206.782253][ T4948] Bluetooth: hci3: command 0x0406 tx timeout
[  206.791623][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  207.100019][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.120645][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.227412][ T9174] netlink: 'syz.2.901': attribute type 1 has an invalid length.
[  207.743495][ T8174] udevd[8174]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  207.802232][ T9221] netlink: 'syz.0.905': attribute type 4 has an invalid length.
[  207.924191][ T9160] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.945216][ T9160] 8021q: adding VLAN 0 to HW filter on device team0
[  207.980019][ T9160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.114706][ T9160] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.122216][ T9160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.145121][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.152785][ T9160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.214807][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.226977][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.237892][ T9236] netlink: 'syz.1.910': attribute type 1 has an invalid length.
[  208.267401][ T9160] veth1_vlan: left promiscuous mode
[  208.274432][ T9160] veth0_vlan: left promiscuous mode
[  208.280956][ T9160] veth0_vlan: entered promiscuous mode
[  208.296899][ T9160] veth1_vlan: entered promiscuous mode
[  208.313092][ T9160] bridge0: port 3(vlan2) entered blocking state
[  208.319508][ T9160] bridge0: port 3(vlan2) entered forwarding state
[  208.330708][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  208.344843][ T9243] netlink: 'syz.0.911': attribute type 10 has an invalid length.
[  208.348397][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  208.367750][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  208.383002][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  208.404392][ T9160] 8021q: adding VLAN 0 to HW filter on device bond1
[  208.418011][ T9160] 8021q: adding VLAN 0 to HW filter on device bond2
[  208.444369][ T9160] bridge2: port 1(gretap1) entered blocking state
[  208.451159][ T9160] bridge2: port 1(gretap1) entered forwarding state
[  208.466981][ T6014] bond2: (slave bridge1): link status up again after 0 ms
[  208.516332][ T9160] bond3: left promiscuous mode
[  208.521908][ T9160] 8021q: adding VLAN 0 to HW filter on device bond3
[  208.533610][ T6014] bond2: (slave bridge1): link status up again after 0 ms
[  208.546628][ T6014] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  208.559804][ T9160] 8021q: adding VLAN 0 to HW filter on device bond4
[  208.572842][ T6014] bond2: (slave bridge1): link status up again after 0 ms
[  208.612506][ T6029] bond2: (slave bridge1): link status up again after 0 ms
[  208.642069][   T12] bond2: (slave bridge1): link status up again after 0 ms
[  208.686406][ T9241] batman_adv: batadv0: Interface deactivated: dummy0
[  208.698683][ T6029] bond2: (slave bridge1): link status up again after 0 ms
[  208.728147][ T9241] batman_adv: batadv0: Removing interface: dummy0
[  208.736833][ T6029] bond2: (slave bridge1): link status up again after 0 ms
[  208.764673][ T9241] bridge2: port 1(dummy0) entered blocking state
[  208.775455][ T9241] bridge2: port 1(dummy0) entered disabled state
[  208.782246][ T9241] dummy0: entered allmulticast mode
[  208.790053][ T9241] dummy0: entered promiscuous mode
[  208.792509][ T6029] bond2: (slave bridge1): link status up again after 0 ms
[  208.835818][ T9243] bridge2: port 1(dummy0) entered blocking state
[  208.843905][ T9243] bridge2: port 1(dummy0) entered forwarding state
[  208.864696][ T9243] dummy0: left allmulticast mode
[  208.870415][ T9243] bridge2: port 1(dummy0) entered disabled state
[  209.166891][ T9259] netlink: 'syz.4.914': attribute type 1 has an invalid length.
[  209.211211][ T6035] net_ratelimit: 10 callbacks suppressed
[  209.211233][ T6035] bond2: (slave bridge1): failed to get link speed/duplex
[  209.374064][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  209.501242][  T143] bond2: (slave bridge1): failed to get link speed/duplex
[  209.843426][  T143] bond2: (slave bridge1): failed to get link speed/duplex
[  209.886293][ T9274] syzkaller0: entered promiscuous mode
[  209.908967][ T9274] syzkaller0: entered allmulticast mode
[  210.181813][  T143] bond2: (slave bridge1): failed to get link speed/duplex
[  210.227041][ T9289] __nla_validate_parse: 12 callbacks suppressed
[  210.227063][ T9289] netlink: 48 bytes leftover after parsing attributes in process `syz.3.924'.
[  210.321238][ T6027] bond2: (slave bridge1): failed to get link speed/duplex
[  210.441405][ T6027] bond2: (slave bridge1): failed to get link speed/duplex
[  210.801420][ T6027] bond2: (slave bridge1): failed to get link speed/duplex
[  210.941539][ T6035] bond2: (slave bridge1): failed to get link speed/duplex
[  211.024034][ T9314] netlink: 'syz.1.928': attribute type 1 has an invalid length.
[  211.061311][ T9314] netlink: 224 bytes leftover after parsing attributes in process `syz.1.928'.
[  211.132025][ T6035] bond2: (slave bridge1): failed to get link speed/duplex
[  212.047788][ T9363] netlink: 48 bytes leftover after parsing attributes in process `syz.2.940'.
[  212.277505][ T9373] netlink: 'syz.0.943': attribute type 3 has an invalid length.
[  212.286173][ T9373] netlink: 'syz.0.943': attribute type 16 has an invalid length.
[  212.287513][ T9375] netlink: 'syz.4.942': attribute type 1 has an invalid length.
[  212.309317][ T9373] netlink: 132 bytes leftover after parsing attributes in process `syz.0.943'.
[  212.318959][ T9375] netlink: 224 bytes leftover after parsing attributes in process `syz.4.942'.
[  212.358883][ T9373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.943'.
[  212.525091][ T9380] syzkaller1: entered promiscuous mode
[  212.530900][ T9380] syzkaller1: entered allmulticast mode
[  212.899413][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'.
[  212.956060][ T9400] macvlan0: entered promiscuous mode
[  213.007023][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'.
[  213.072748][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'.
[  213.099706][ T9409] netlink: 348 bytes leftover after parsing attributes in process `syz.0.952'.
[  213.122780][ T9406] –: renamed from dummy0 (while UP)
[  213.158201][ T9412] netlink: 'syz.1.954': attribute type 1 has an invalid length.
[  213.264796][ T9411] ip6gre1: entered promiscuous mode
[  213.310230][ T9411] ip6gre1: entered allmulticast mode
[  214.160423][ T9446] ip6t_rpfilter: unknown options
[  214.279299][ T9450] netlink: 'syz.3.964': attribute type 1 has an invalid length.
[  214.345991][ T9450] 8021q: adding VLAN 0 to HW filter on device bond5
[  214.373969][ T6029] net_ratelimit: 23 callbacks suppressed
[  214.373991][ T6029] bond2: (slave bridge1): failed to get link speed/duplex
[  214.398846][ T9450] vlan3: entered promiscuous mode
[  214.404347][ T9450] bond5: entered promiscuous mode
[  214.411484][ T9450] vlan3: entered allmulticast mode
[  214.421416][ T9450] bond5: entered allmulticast mode
[  214.469666][ T9450] 8021q: adding VLAN 0 to HW filter on device batadv1
[  214.488443][ T9450] bond5: (slave batadv1): making interface the new active one
[  214.506245][ T9450] batadv1: entered promiscuous mode
[  214.563994][ T9450] batadv1: entered allmulticast mode
[  214.587519][ T9450] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  214.641344][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  214.761182][  T143] bond2: (slave bridge1): failed to get link speed/duplex
[  214.844324][ T9460] FAULT_INJECTION: forcing a failure.
[  214.844324][ T9460] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  214.885136][ T9460] CPU: 0 UID: 0 PID: 9460 Comm: syz.1.966 Not tainted syzkaller #0 PREEMPT(full) 
[  214.885166][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  214.885179][ T9460] Call Trace:
[  214.885188][ T9460]  <TASK>
[  214.885197][ T9460]  dump_stack_lvl+0xe8/0x150
[  214.885226][ T9460]  should_fail_ex+0x412/0x560
[  214.885255][ T9460]  _copy_from_user+0x2d/0xb0
[  214.885281][ T9460]  ____sys_sendmsg+0x308/0x9f0
[  214.885315][ T9460]  ? __pfx_____sys_sendmsg+0x10/0x10
[  214.885348][ T9460]  ? import_iovec+0x73/0xa0
[  214.885377][ T9460]  ___sys_sendmsg+0x2a5/0x360
[  214.885399][ T9460]  ? __lock_acquire+0x6b5/0x2cf0
[  214.885426][ T9460]  ? __pfx____sys_sendmsg+0x10/0x10
[  214.885455][ T9460]  ? kstrtouint+0x6e/0xe0
[  214.885513][ T9460]  ? __fget_files+0x2a/0x420
[  214.885537][ T9460]  ? __fget_files+0x3a0/0x420
[  214.885572][ T9460]  __sys_sendmmsg+0x27c/0x4e0
[  214.885601][ T9460]  ? __pfx___sys_sendmmsg+0x10/0x10
[  214.885623][ T9460]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  214.885673][ T9460]  ? ksys_write+0x242/0x270
[  214.885706][ T9460]  ? __pfx_ksys_write+0x10/0x10
[  214.885751][ T9460]  __x64_sys_sendmmsg+0xa0/0xc0
[  214.885775][ T9460]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.885797][ T9460]  do_syscall_64+0x174/0x580
[  214.885818][ T9460]  ? trace_irq_disable+0x3b/0x140
[  214.885848][ T9460]  ? clear_bhb_loop+0x40/0x90
[  214.885878][ T9460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.885898][ T9460] RIP: 0033:0x7f8ee719ce59
[  214.885930][ T9460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.885946][ T9460] RSP: 002b:00007f8ee7f7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  214.885971][ T9460] RAX: ffffffffffffffda RBX: 00007f8ee7415fa0 RCX: 00007f8ee719ce59
[  214.885986][ T9460] RDX: 0000000000000001 RSI: 0000200000003680 RDI: 0000000000000003
[  214.885998][ T9460] RBP: 00007f8ee7f7c090 R08: 0000000000000000 R09: 0000000000000000
[  214.886010][ T9460] R10: 0000000000008840 R11: 0000000000000246 R12: 0000000000000001
[  214.886021][ T9460] R13: 00007f8ee7416038 R14: 00007f8ee7415fa0 R15: 00007ffc78587b48
[  214.886053][ T9460]  </TASK>
[  214.978406][  T143] bond2: (slave bridge1): failed to get link speed/duplex
[  215.230848][ T9468] netlink: 'syz.3.968': attribute type 1 has an invalid length.
[  215.244614][ T6014] bond2: (slave bridge1): failed to get link speed/duplex
[  215.269729][ T9468] __nla_validate_parse: 7 callbacks suppressed
[  215.269753][ T9468] netlink: 224 bytes leftover after parsing attributes in process `syz.3.968'.
[  215.358688][ T9467] syzkaller1: entered promiscuous mode
[  215.390859][ T9467] syzkaller1: entered allmulticast mode
[  215.441171][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  215.472649][ T9467] netlink: 5 bytes leftover after parsing attributes in process `syz.0.969'.
[  215.503044][ T9467] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  215.545293][ T9472] Bluetooth: MGMT ver 1.23
[  215.669601][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.972'.
[  215.678920][  T143] bond2: (slave bridge1): failed to get link speed/duplex
[  215.741212][ T9484] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  215.781875][  T143] bond2: (slave bridge1): failed to get link speed/duplex
[  215.850521][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.973'.
[  215.933632][  T143] bond2: (slave bridge1): failed to get link speed/duplex
[  215.985705][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.975'.
[  216.407871][ T9504] ip6erspan0: entered promiscuous mode
[  216.449068][ T9504] ip6erspan0: entered allmulticast mode
[  216.497123][ T9512] FAULT_INJECTION: forcing a failure.
[  216.497123][ T9512] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.530704][ T9512] CPU: 0 UID: 0 PID: 9512 Comm: syz.0.982 Not tainted syzkaller #0 PREEMPT(full) 
[  216.530733][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  216.530745][ T9512] Call Trace:
[  216.530754][ T9512]  <TASK>
[  216.530761][ T9512]  dump_stack_lvl+0xe8/0x150
[  216.530790][ T9512]  should_fail_ex+0x412/0x560
[  216.530817][ T9512]  _copy_to_user+0x31/0xb0
[  216.530844][ T9512]  simple_read_from_buffer+0xe1/0x170
[  216.530875][ T9512]  proc_fail_nth_read+0x1bb/0x230
[  216.530905][ T9512]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  216.530935][ T9512]  ? rw_verify_area+0x2a6/0x4d0
[  216.530962][ T9512]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  216.530990][ T9512]  vfs_read+0x20c/0xa70
[  216.531027][ T9512]  ? __pfx___mutex_lock+0x10/0x10
[  216.531050][ T9512]  ? __pfx_vfs_read+0x10/0x10
[  216.531079][ T9512]  ? __fget_files+0x2a/0x420
[  216.531109][ T9512]  ? __fget_files+0x3a0/0x420
[  216.531133][ T9512]  ? __fget_files+0x2a/0x420
[  216.531167][ T9512]  ksys_read+0x150/0x270
[  216.531206][ T9512]  ? __pfx_ksys_read+0x10/0x10
[  216.531244][ T9512]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.531267][ T9512]  do_syscall_64+0x174/0x580
[  216.531290][ T9512]  ? clear_bhb_loop+0x40/0x90
[  216.531315][ T9512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.531335][ T9512] RIP: 0033:0x7f902ef5d68e
[  216.531354][ T9512] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  216.531370][ T9512] RSP: 002b:00007f902feabfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  216.531391][ T9512] RAX: ffffffffffffffda RBX: 00007f902feac6c0 RCX: 00007f902ef5d68e
[  216.531405][ T9512] RDX: 000000000000000f RSI: 00007f902feac0a0 RDI: 0000000000000004
[  216.531417][ T9512] RBP: 00007f902feac090 R08: 0000000000000000 R09: 0000000000000000
[  216.531429][ T9512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.531440][ T9512] R13: 00007f902f216038 R14: 00007f902f215fa0 R15: 00007fffd184cf08
[  216.531474][ T9512]  </TASK>
[  216.867226][ T9520] netlink: 'syz.3.984': attribute type 1 has an invalid length.
[  216.898917][ T9527] netlink: 'syz.1.983': attribute type 1 has an invalid length.
[  216.941281][ T9527] netlink: 224 bytes leftover after parsing attributes in process `syz.1.983'.
[  216.976180][ T9524] bond6: option lp_interval: invalid value (18446744073709551607)
[  216.991205][ T9524] bond6: option lp_interval: allowed values 1 - 2147483647
[  217.007634][ T9524] bond6 (unregistering): Released all slaves
[  217.053095][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'.
[  217.155166][ T9520] 8021q: adding VLAN 0 to HW filter on device bond6
[  217.316035][ T9539] netlink: 224 bytes leftover after parsing attributes in process `syz.1.988'.
[  217.352761][ T9539] netlink: 'syz.1.988': attribute type 16 has an invalid length.
[  217.361001][ T9539] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.988'.
[  217.560796][ T9547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.993'.
[  217.680493][ T9548] nbd: device at index 64 is going down
[  217.935584][ T9560] netlink: 'syz.1.997': attribute type 62 has an invalid length.
[  217.960296][ T8174] udevd[8174]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  217.981498][ T9560] netlink: 'syz.1.997': attribute type 62 has an invalid length.
[  218.018017][ T9568] netlink: 'syz.3.996': attribute type 1 has an invalid length.
[  218.018579][ T8174] udevd[8174]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  218.042154][ T9560] netlink: 'syz.1.997': attribute type 62 has an invalid length.
[  218.338591][ T9580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.416311][ T9580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.507859][ T9580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.663004][ T9598] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2143501288/2143501289
[  218.722306][ T9173] IPVS: starting estimator thread 0...
[  218.821966][ T9601] IPVS: using max 27 ests per chain, 64800 per kthread
[  219.228085][ T9622] netlink: 'syz.0.1012': attribute type 1 has an invalid length.
[  219.286292][ T9623] tipc: Started in network mode
[  219.324552][ T9623] tipc: Node identity 2e7b31412e65, cluster identity 4711
[  219.356200][ T9623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.396671][ T9623] syzkaller0: entered promiscuous mode
[  219.402761][ T9623] syzkaller0: entered allmulticast mode
[  219.421208][ T6014] net_ratelimit: 25 callbacks suppressed
[  219.421230][ T6014] bond2: (slave bridge1): failed to get link speed/duplex
[  219.541517][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  219.579539][ T9635] xt_hashlimit: size too large, truncated to 1048576
[  219.652634][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  219.726059][ T9648] netlink: 'syz.4.1020': attribute type 12 has an invalid length.
[  219.774418][ T6029] bond2: (slave bridge1): failed to get link speed/duplex
[  219.889012][ T9611] tipc: Resetting bearer <eth:syzkaller0>
[  219.973284][ T9611] tipc: Disabling bearer <eth:syzkaller0>
[  220.030011][ T9652] macsec0: entered promiscuous mode
[  220.048971][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  220.058952][    C1] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  220.191627][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  220.312446][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  220.392915][ T9661] __nla_validate_parse: 13 callbacks suppressed
[  220.392938][ T9661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1023'.
[  220.431169][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  220.441832][ T9661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1023'.
[  220.561570][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  220.806016][ T9654] macsec0: left promiscuous mode
[  221.346599][ T9682] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1029'.
[  221.396331][ T9682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.420537][ T9682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.450985][ T9687] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1029'.
[  221.461494][ T9682] bond0 (unregistering): Released all slaves
[  221.657633][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1033'.
[  221.668970][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1033'.
[  221.861970][ T9701] syzkaller0: entered promiscuous mode
[  221.868188][ T9701] syzkaller0: entered allmulticast mode
[  222.328861][ T9627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  222.339806][ T9681] netlink: 'syz.4.1027': attribute type 1 has an invalid length.
[  222.348124][ T9681] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1027'.
[  222.564769][ T9707] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[  223.355592][ T9746] netlink: 'syz.2.1045': attribute type 1 has an invalid length.
[  223.386451][ T9746] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1045'.
[  223.597120][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'.
[  223.648156][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'.
[  223.834432][ T9770] xt_CONNSECMARK: invalid mode: 254
[  223.858841][ T9768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.882275][ T9768] syzkaller0: entered promiscuous mode
[  223.887999][ T9768] syzkaller0: entered allmulticast mode
[  223.896958][ T9770] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20003
[  224.404678][ T9756] tipc: Resetting bearer <eth:syzkaller0>
[  224.436683][ T9756] tipc: Disabling bearer <eth:syzkaller0>
[  224.489800][ T9792] netlink: 'syz.0.1062': attribute type 1 has an invalid length.
[  224.501974][ T6031] net_ratelimit: 31 callbacks suppressed
[  224.501998][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  224.633744][ T6014] bond2: (slave bridge1): failed to get link speed/duplex
[  224.647942][ T9793] sctp: [Deprecated]: syz.2.1060 (pid 9793) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.647942][ T9793] Use struct sctp_sack_info instead
[  224.782436][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  224.913991][ T6027] bond2: (slave bridge1): failed to get link speed/duplex
[  225.042088][ T9809] veth0_macvtap: left promiscuous mode
[  225.285900][ T6014] bond2: (slave bridge1): failed to get link speed/duplex
[  225.342213][ T9829] tipc: Started in network mode
[  225.376738][ T9829] tipc: Node identity faa0102ce6d1, cluster identity 4711
[  225.425519][ T9829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.461830][ T9838] netlink: 'syz.1.1076': attribute type 1 has an invalid length.
[  225.492122][ T9838] __nla_validate_parse: 6 callbacks suppressed
[  225.492145][ T9838] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1076'.
[  225.504820][   T13] bond2: (slave bridge1): failed to get link speed/duplex
[  225.541422][ T9837] syzkaller0: entered promiscuous mode
[  225.558387][ T9837] syzkaller0: entered allmulticast mode
[  225.604023][ T9828] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.644248][ T9817] tipc: Disabling bearer <eth:syzkaller0>
[  225.711237][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  225.842508][ T6027] bond2: (slave bridge1): failed to get link speed/duplex
[  225.971367][ T6027] bond2: (slave bridge1): failed to get link speed/duplex
[  226.005130][ T9819] tipc: Resetting bearer <eth:syzkaller0>
[  226.073104][ T9819] tipc: Disabling bearer <eth:syzkaller0>
[  226.141645][ T6027] bond2: (slave bridge1): failed to get link speed/duplex
[  226.329750][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1084'.
[  226.405919][ T9881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1086'.
[  226.501410][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'.
[  226.770130][ T9891] 8021q: VLANs not supported on gtp0
[  227.103923][ T9908] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  227.147148][ T9910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1100'.
[  227.211615][ T9910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1100'.
[  227.240789][ T9912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1100'.
[  227.360002][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'.
[  227.657742][ T9919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.670795][ T9919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.875658][ T9919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.920949][ T9919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.026237][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1109'.
[  228.068094][ T9919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.087183][ T9919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.231470][ T9952] netlink: 'syz.2.1111': attribute type 1 has an invalid length.
[  228.322205][ T9952] 8021q: adding VLAN 0 to HW filter on device bond3
[  228.378356][ T9919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.391435][ T9919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.437379][ T9954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.454931][ T9954] bond3: (slave batadv0): Enslaving as a backup interface with an up link
[  228.564975][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'.
[  228.721880][ T9965] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  228.778665][ T9965] vlan2: entered promiscuous mode
[  228.785213][ T9965] bridge0: entered promiscuous mode
[  228.945228][ T6014] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  228.965217][ T6014] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.008276][ T6027] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  229.045849][ T6027] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.099975][ T9980] Bluetooth: MGMT ver 1.23
[  229.153213][ T6029] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  229.177749][ T6029] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.269908][ T6027] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  229.294381][ T6027] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.591465][ T6014] net_ratelimit: 22 callbacks suppressed
[  229.591487][ T6014] bond2: (slave bridge1): failed to get link speed/duplex
[  229.732188][   T13] bond2: (slave bridge1): failed to get link speed/duplex
[  229.861482][   T13] bond2: (slave bridge1): failed to get link speed/duplex
[  230.001396][ T6029] bond2: (slave bridge1): failed to get link speed/duplex
[  230.094770][T10021] batman_adv: batadv0: Adding interface: dummy0
[  230.105547][T10021] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  230.168686][T10021] batman_adv: batadv0: Interface activated: dummy0
[  230.201170][ T6014] bond2: (slave bridge1): failed to get link speed/duplex
[  230.331888][ T6014] bond2: (slave bridge1): failed to get link speed/duplex
[  230.363681][T10033] netlink: 'syz.4.1136': attribute type 29 has an invalid length.
[  230.492817][   T13] bond2: (slave bridge1): failed to get link speed/duplex
[  230.558192][T10043] __nla_validate_parse: 5 callbacks suppressed
[  230.558214][T10043] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1135'.
[  230.623104][T10039] bond4 (unregistering): Released all slaves
[  230.695088][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'.
[  231.171260][ T6029] bond2: (slave bridge1): failed to get link speed/duplex
[  231.321878][ T6014] bond2: (slave bridge1): failed to get link speed/duplex
[  231.493570][ T6027] bond2: (slave bridge1): failed to get link speed/duplex
[  231.787576][T10069] xt_CT: No such helper "snmp_trap"
[  231.799046][T10071] xt_CT: No such helper "snmp_trap"
[  231.990323][T10085] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1146'.
[  232.102551][T10078] block nbd1: not configured, cannot reconfigure
[  232.187229][T10082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.994171][T10119] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1158'.
[  233.307638][T10129] syzkaller0: entered promiscuous mode
[  233.332207][T10129] syzkaller0: entered allmulticast mode
[  233.361132][T10140] netlink: 'syz.1.1163': attribute type 2 has an invalid length.
[  233.374149][T10140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1163'.
[  233.692268][T10155] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1165'.
[  233.873732][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'.
[  235.994849][ T6035] net_ratelimit: 13 callbacks suppressed
[  235.994870][ T6035] bond2: (slave bridge1): failed to get link speed/duplex
[  236.133482][   T13] bond2: (slave bridge1): failed to get link speed/duplex
[  236.249050][T10162] pim6reg: entered allmulticast mode
[  236.261159][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  236.271171][T10162] pim6reg: left allmulticast mode
[  236.381157][ T6014] bond2: (slave bridge1): failed to get link speed/duplex
[  236.404383][T10168] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1171'.
[  236.611791][ T6014] bond2: (slave bridge1): failed to get link speed/duplex
[  236.657632][T10179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1172'.
[  236.675235][T10179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1172'.
[  236.702628][T10186] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1173'.
[  236.712073][T10179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1172'.
[  236.881248][ T6014] bond2: (slave bridge1): failed to get link speed/duplex
[  237.140105][T10201] netlink: 'syz.2.1176': attribute type 7 has an invalid length.
[  237.253835][ T9185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.292751][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  237.320742][T10209] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1178'.
[  237.461807][ T6014] bond2: (slave bridge1): failed to get link speed/duplex
[  237.578277][T10214] syzkaller0: entered promiscuous mode
[  237.588740][T10214] syzkaller0: entered allmulticast mode
[  237.641262][ T6035] bond2: (slave bridge1): failed to get link speed/duplex
[  237.846560][T10226] netlink: 'syz.4.1184': attribute type 1 has an invalid length.
[  237.869185][T10226] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1184'.
[  238.059051][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'.
[  238.341673][T10246] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1187'.
[  238.447105][T10248] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.1191'.
[  239.019765][T10279] netlink: 'syz.3.1198': attribute type 1 has an invalid length.
[  239.292892][T10279] bond0: entered promiscuous mode
[  239.327702][T10279] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.430701][T10284] bond0: (slave veth9): making interface the new active one
[  239.438339][T10284] veth9: entered promiscuous mode
[  239.455368][T10284] bond0: (slave veth9): Enslaving as an active interface with an up link
[  240.370540][T10339] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.386207][T10339] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.429775][T10342] netlink: 'syz.4.1212': attribute type 20 has an invalid length.
[  240.444137][T10339] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  240.566872][T10341] syz_tun: left promiscuous mode
[  240.615542][T10341] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.622945][T10341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.647332][T10341] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.654651][T10341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.707642][T10341] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  240.715058][T10341] bridge0: port 3(veth0_virt_wifi) entered forwarding state
[  240.742287][T10341] veth0_macvtap: left allmulticast mode
[  240.832027][T10355] syzkaller0: entered promiscuous mode
[  240.839702][T10355] syzkaller0: entered allmulticast mode
[  241.011982][ T9209] net_ratelimit: 29 callbacks suppressed
[  241.012002][ T9209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.082347][   T13] bond2: (slave bridge1): failed to get link speed/duplex
[  241.185639][T10367] ip6tnl1: entered allmulticast mode
[  241.213687][ T6035] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  241.257674][   T13] bond2: (slave bridge1): failed to get link speed/duplex
[  241.332804][ T9182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.342993][ T9196] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  241.517610][T10384] __nla_validate_parse: 4 callbacks suppressed
[  241.517629][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1223'.
[  241.603861][T10391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1225'.
[  241.631232][ T6027] bond2: (slave bridge1): link status up again after 0 ms
[  241.661208][ T6027] bond2: (slave bridge1): link status up again after 0 ms
[  241.696249][ T6027] bond2: (slave bridge1): link status up again after 0 ms
[  241.707645][T10378] 8021q: adding VLAN 0 to HW filter on device eth0
[  241.734078][T10378] 8021q: adding VLAN 0 to HW filter on device eth1
[  241.742516][ T6027] bond2: (slave bridge1): link status up again after 0 ms
[  241.756769][T10378] 8021q: adding VLAN 0 to HW filter on device eth2
[  241.768244][T10378] 8021q: adding VLAN 0 to HW filter on device eth3
[  241.774958][ T6039] bond2: (slave bridge1): link status up again after 0 ms
[  241.858106][T10391] ip6gre1: entered promiscuous mode
[  241.866673][T10391] ip6gre1: entered allmulticast mode
[  241.943657][T10400] 8021q: adding VLAN 0 to HW filter on device bond5
[  241.973854][T10400] bond5 (unregistering): Released all slaves
[  242.026830][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'.
[  242.258905][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1231'.
[  242.337219][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'.
[  242.409248][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1233'.
[  242.818144][T10444] FAULT_INJECTION: forcing a failure.
[  242.818144][T10444] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  242.855790][T10444] CPU: 1 UID: 0 PID: 10444 Comm: syz.0.1240 Not tainted syzkaller #0 PREEMPT(full) 
[  242.855825][T10444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  242.855837][T10444] Call Trace:
[  242.855845][T10444]  <TASK>
[  242.855853][T10444]  dump_stack_lvl+0xe8/0x150
[  242.855881][T10444]  should_fail_ex+0x412/0x560
[  242.855908][T10444]  _copy_from_iter+0x1d3/0x1670
[  242.855933][T10444]  ? rcu_is_watching+0x15/0xb0
[  242.855965][T10444]  ? __pfx__copy_from_iter+0x10/0x10
[  242.856006][T10444]  ? netlink_sendmsg+0x650/0xb40
[  242.856028][T10444]  ? skb_put+0x11b/0x210
[  242.856052][T10444]  netlink_sendmsg+0x6c0/0xb40
[  242.856085][T10444]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.856111][T10444]  ? aa_sock_msg_perm+0xf1/0x1b0
[  242.856144][T10444]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  242.856174][T10444]  ____sys_sendmsg+0x972/0x9f0
[  242.856197][T10444]  ? __might_fault+0xaf/0x130
[  242.856231][T10444]  ? __pfx_____sys_sendmsg+0x10/0x10
[  242.856263][T10444]  ? import_iovec+0x73/0xa0
[  242.856291][T10444]  ___sys_sendmsg+0x2a5/0x360
[  242.856313][T10444]  ? __lock_acquire+0x6b5/0x2cf0
[  242.856339][T10444]  ? __pfx____sys_sendmsg+0x10/0x10
[  242.856400][T10444]  ? __fget_files+0x2a/0x420
[  242.856425][T10444]  ? __fget_files+0x3a0/0x420
[  242.856461][T10444]  __x64_sys_sendmsg+0x1bd/0x2a0
[  242.856487][T10444]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  242.856520][T10444]  ? __pfx_ksys_write+0x10/0x10
[  242.856558][T10444]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.856580][T10444]  do_syscall_64+0x174/0x580
[  242.856601][T10444]  ? trace_irq_disable+0x3b/0x140
[  242.856631][T10444]  ? clear_bhb_loop+0x40/0x90
[  242.856655][T10444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.856682][T10444] RIP: 0033:0x7f902ef9ce59
[  242.856702][T10444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.856719][T10444] RSP: 002b:00007f902feac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  242.856740][T10444] RAX: ffffffffffffffda RBX: 00007f902f215fa0 RCX: 00007f902ef9ce59
[  242.856754][T10444] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[  242.856766][T10444] RBP: 00007f902feac090 R08: 0000000000000000 R09: 0000000000000000
[  242.856777][T10444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  242.856788][T10444] R13: 00007f902f216038 R14: 00007f902f215fa0 R15: 00007fffd184cf08
[  242.856820][T10444]  </TASK>
[  243.415704][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'.
[  243.555456][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1249'.
[  243.796901][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'.
[  244.625852][T10523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1266'.
[  244.718569][T10521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.818747][T10521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.845273][T10528] netlink: 'syz.3.1270': attribute type 7 has an invalid length.
[  245.014224][T10535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.491459][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  246.022389][ T6031] net_ratelimit: 40 callbacks suppressed
[  246.022411][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  246.057829][T10569] FAULT_INJECTION: forcing a failure.
[  246.057829][T10569] name failslab, interval 1, probability 0, space 0, times 0
[  246.103451][T10569] CPU: 0 UID: 0 PID: 10569 Comm: syz.4.1280 Not tainted syzkaller #0 PREEMPT(full) 
[  246.103481][T10569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  246.103494][T10569] Call Trace:
[  246.103502][T10569]  <TASK>
[  246.103511][T10569]  dump_stack_lvl+0xe8/0x150
[  246.103541][T10569]  should_fail_ex+0x412/0x560
[  246.103569][T10569]  should_failslab+0xa8/0x100
[  246.103589][T10569]  ? skb_clone+0x212/0x3a0
[  246.103613][T10569]  kmem_cache_alloc_noprof+0x87/0x650
[  246.103645][T10569]  ? apparmor_capable+0x126/0x170
[  246.103675][T10569]  skb_clone+0x212/0x3a0
[  246.103697][T10569]  ? nfnetlink_rcv+0x4b0/0x27b0
[  246.103720][T10569]  nfnetlink_rcv+0x4de/0x27b0
[  246.103753][T10569]  ? lockdep_hardirqs_on+0x7a/0x110
[  246.103782][T10569]  ? __local_bh_enable_ip+0xd0/0x130
[  246.103802][T10569]  ? __dev_queue_xmit+0x2b6/0x3950
[  246.103827][T10569]  ? __dev_queue_xmit+0x1fe5/0x3950
[  246.103850][T10569]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  246.103880][T10569]  ? __dev_queue_xmit+0x2b6/0x3950
[  246.103910][T10569]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  246.103947][T10569]  ? ref_tracker_free+0x693/0x840
[  246.103975][T10569]  ? __pfx_ref_tracker_free+0x10/0x10
[  246.104016][T10569]  ? skb_clone+0x246/0x3a0
[  246.104043][T10569]  ? __netlink_deliver_tap+0x807/0x850
[  246.104066][T10569]  ? netlink_deliver_tap+0x2e/0x1b0
[  246.104096][T10569]  ? netlink_deliver_tap+0x2e/0x1b0
[  246.104118][T10569]  ? netlink_deliver_tap+0x2e/0x1b0
[  246.104146][T10569]  netlink_unicast+0x75c/0x8e0
[  246.104178][T10569]  netlink_sendmsg+0x813/0xb40
[  246.104211][T10569]  ? __pfx_netlink_sendmsg+0x10/0x10
[  246.104238][T10569]  ? aa_sock_msg_perm+0xf1/0x1b0
[  246.104270][T10569]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  246.104302][T10569]  ____sys_sendmsg+0x972/0x9f0
[  246.104325][T10569]  ? __might_fault+0xaf/0x130
[  246.104358][T10569]  ? __pfx_____sys_sendmsg+0x10/0x10
[  246.104390][T10569]  ? import_iovec+0x73/0xa0
[  246.104418][T10569]  ___sys_sendmsg+0x2a5/0x360
[  246.104439][T10569]  ? __lock_acquire+0x6b5/0x2cf0
[  246.104466][T10569]  ? __pfx____sys_sendmsg+0x10/0x10
[  246.104526][T10569]  ? __fget_files+0x2a/0x420
[  246.104551][T10569]  ? __fget_files+0x3a0/0x420
[  246.104586][T10569]  __x64_sys_sendmsg+0x1bd/0x2a0
[  246.104612][T10569]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  246.104646][T10569]  ? __pfx_ksys_write+0x10/0x10
[  246.104684][T10569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.104706][T10569]  do_syscall_64+0x174/0x580
[  246.104727][T10569]  ? trace_irq_disable+0x3b/0x140
[  246.104755][T10569]  ? clear_bhb_loop+0x40/0x90
[  246.104789][T10569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.104809][T10569] RIP: 0033:0x7fa4d7f9ce59
[  246.104829][T10569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.104846][T10569] RSP: 002b:00007fa4d8da1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  246.104868][T10569] RAX: ffffffffffffffda RBX: 00007fa4d8215fa0 RCX: 00007fa4d7f9ce59
[  246.104882][T10569] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[  246.104895][T10569] RBP: 00007fa4d8da1090 R08: 0000000000000000 R09: 0000000000000000
[  246.104908][T10569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.104920][T10569] R13: 00007fa4d8216038 R14: 00007fa4d8215fa0 R15: 00007ffdc931f238
[  246.104952][T10569]  </TASK>
[  246.125355][T10568] syzkaller0: entered promiscuous mode
[  246.543012][ T9196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.581793][T10568] syzkaller0: entered allmulticast mode
[  246.604449][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  246.731171][ T6035] bond2: (slave bridge1): failed to get link speed/duplex
[  246.756349][T10588] __nla_validate_parse: 4 callbacks suppressed
[  246.756371][T10588] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1289'.
[  246.853224][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  246.928319][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'.
[  246.954230][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'.
[  247.093050][ T9210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.261195][ T6039] bond2: (slave bridge1): failed to get link speed/duplex
[  247.381147][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  247.512462][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  247.577076][ T9196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.779036][T10634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1299'.
[  248.173278][T10645] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  248.435392][T10652] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1305'.
[  248.716068][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'.
[  248.943068][T10670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1311'.
[  249.180553][T10688] netlink: 'syz.4.1315': attribute type 2 has an invalid length.
[  249.224862][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1315'.
[  249.284529][T10688] netlink: 'syz.4.1315': attribute type 2 has an invalid length.
[  249.443435][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1317'.
[  249.534793][T10697] 8021q: adding VLAN 0 to HW filter on device bond4
[  249.559916][T10699] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  249.882996][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'.
[  250.524808][T10741] netlink: 'syz.4.1329': attribute type 20 has an invalid length.
[  251.082582][ T6035] net_ratelimit: 32 callbacks suppressed
[  251.082602][ T6035] bond2: (slave bridge1): failed to get link speed/duplex
[  251.115131][T10766] netlink: 'syz.2.1338': attribute type 2 has an invalid length.
[  251.231338][ T6041] bond2: (slave bridge1): failed to get link speed/duplex
[  251.264102][T10766] batadv0: entered promiscuous mode
[  251.270222][T10766] batadv0: left promiscuous mode
[  251.342549][ T6035] bond2: (slave bridge1): failed to get link speed/duplex
[  251.451250][ T6027] bond2: (slave bridge1): failed to get link speed/duplex
[  251.561266][ T6035] bond2: (slave bridge1): failed to get link speed/duplex
[  251.691418][ T6027] bond2: (slave bridge1): failed to get link speed/duplex
[  251.732256][ T9196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.757424][T10798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.777453][T10800] netlink: 'syz.0.1348': attribute type 5 has an invalid length.
[  251.833132][ T6027] bond2: (slave bridge1): failed to get link speed/duplex
[  251.874553][T10803] __nla_validate_parse: 5 callbacks suppressed
[  251.874574][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'.
[  251.901570][T10803] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  251.920046][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1349'.
[  251.959456][T10805] 8021q: adding VLAN 0 to HW filter on device bond7
[  252.144861][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'.
[  252.157824][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1351'.
[  252.169796][T10819] netlink: 'syz.2.1351': attribute type 20 has an invalid length.
[  252.264340][T10805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1349'.
[  252.274889][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'.
[  252.674623][T10841] netlink: 'syz.4.1358': attribute type 21 has an invalid length.
[  252.767123][T10841] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1358'.
[  253.415894][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'.
[  254.031737][T10896] FAULT_INJECTION: forcing a failure.
[  254.031737][T10896] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.061515][T10896] CPU: 1 UID: 0 PID: 10896 Comm: syz.3.1374 Not tainted syzkaller #0 PREEMPT(full) 
[  254.061545][T10896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  254.061557][T10896] Call Trace:
[  254.061565][T10896]  <TASK>
[  254.061573][T10896]  dump_stack_lvl+0xe8/0x150
[  254.061602][T10896]  should_fail_ex+0x412/0x560
[  254.061630][T10896]  _copy_from_user+0x2d/0xb0
[  254.061657][T10896]  __sys_bpf+0x229/0x950
[  254.061691][T10896]  ? __pfx___sys_bpf+0x10/0x10
[  254.061739][T10896]  ? ksys_write+0x242/0x270
[  254.061771][T10896]  ? __pfx_ksys_write+0x10/0x10
[  254.061806][T10896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.061829][T10896]  __x64_sys_bpf+0x7c/0x90
[  254.061858][T10896]  do_syscall_64+0x174/0x580
[  254.061879][T10896]  ? trace_irq_disable+0x3b/0x140
[  254.061909][T10896]  ? clear_bhb_loop+0x40/0x90
[  254.061935][T10896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.061955][T10896] RIP: 0033:0x7f45cab9ce59
[  254.061975][T10896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.061992][T10896] RSP: 002b:00007f45cbac5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  254.062023][T10896] RAX: ffffffffffffffda RBX: 00007f45cae15fa0 RCX: 00007f45cab9ce59
[  254.062038][T10896] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a
[  254.062051][T10896] RBP: 00007f45cbac5090 R08: 0000000000000000 R09: 0000000000000000
[  254.062064][T10896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.062075][T10896] R13: 00007f45cae16038 R14: 00007f45cae15fa0 R15: 00007fffce4f4358
[  254.062109][T10896]  </TASK>
[  254.117804][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1365'.
[  254.528953][T10903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1377'.
[  254.611457][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  255.069227][T10937] FAULT_INJECTION: forcing a failure.
[  255.069227][T10937] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.083338][T10937] CPU: 0 UID: 0 PID: 10937 Comm: syz.1.1385 Not tainted syzkaller #0 PREEMPT(full) 
[  255.083358][T10937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  255.083369][T10937] Call Trace:
[  255.083374][T10937]  <TASK>
[  255.083381][T10937]  dump_stack_lvl+0xe8/0x150
[  255.083403][T10937]  should_fail_ex+0x412/0x560
[  255.083423][T10937]  _copy_from_user+0x2d/0xb0
[  255.083441][T10937]  kstrtouint_from_user+0xd6/0x180
[  255.083458][T10937]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  255.083484][T10937]  proc_fail_nth_write+0x8e/0x210
[  255.083504][T10937]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  255.083528][T10937]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  255.083548][T10937]  vfs_write+0x29a/0xb90
[  255.083576][T10937]  ? __pfx_vfs_write+0x10/0x10
[  255.083598][T10937]  ? __fget_files+0x2a/0x420
[  255.083619][T10937]  ? __fget_files+0x3a0/0x420
[  255.083636][T10937]  ? __fget_files+0x2a/0x420
[  255.083659][T10937]  ksys_write+0x150/0x270
[  255.083682][T10937]  ? __pfx_ksys_write+0x10/0x10
[  255.083709][T10937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.083725][T10937]  do_syscall_64+0x174/0x580
[  255.083740][T10937]  ? trace_irq_disable+0x3b/0x140
[  255.083762][T10937]  ? clear_bhb_loop+0x40/0x90
[  255.083781][T10937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.083795][T10937] RIP: 0033:0x7f8ee715d68e
[  255.083810][T10937] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  255.083822][T10937] RSP: 002b:00007f8ee7f7bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  255.083838][T10937] RAX: ffffffffffffffda RBX: 00007f8ee7f7c6c0 RCX: 00007f8ee715d68e
[  255.083848][T10937] RDX: 0000000000000001 RSI: 00007f8ee7f7c0a0 RDI: 0000000000000004
[  255.083866][T10937] RBP: 00007f8ee7f7c090 R08: 0000000000000000 R09: 0000000000000000
[  255.083875][T10937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.083883][T10937] R13: 00007f8ee7416038 R14: 00007f8ee7415fa0 R15: 00007ffc78587b48
[  255.083939][T10937]  </TASK>
[  255.342281][T10941] veth0_macvtap: Caught tx_queue_len zero misconfig
[  255.895357][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  256.098344][T10976] net_ratelimit: 43 callbacks suppressed
[  256.098366][T10976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.114274][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.164445][T10983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.191867][ T6035] bond2: (slave bridge1): failed to get link speed/duplex
[  256.211365][ T9210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.273662][T10985] netlink: 'syz.4.1397': attribute type 20 has an invalid length.
[  256.302712][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  256.411279][ T6031] bond2: (slave bridge1): failed to get link speed/duplex
[  256.521674][ T6039] bond2: (slave bridge1): failed to get link speed/duplex
[  256.649152][ T6041] bond2: (slave bridge1): failed to get link speed/duplex
[  256.761516][ T6039] bond2: (slave bridge1): failed to get link speed/duplex
[  257.681480][T10910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  258.057999][T11008] bond5: option all_slaves_active: invalid value (127)
[  258.068835][T11008] bond5 (unregistering): Released all slaves
[  258.106319][T11002] __nla_validate_parse: 6 callbacks suppressed
[  258.106338][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'.
[  258.379803][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'.
[  258.399110][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1408'.
[  258.419760][T11027] netlink: 'syz.4.1408': attribute type 20 has an invalid length.
[  258.552044][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'.
[  258.569917][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'.
[  258.579409][T11032] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1412'.
[  258.976405][T11050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1418'.
[  259.240207][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'.
[  259.347411][T11066] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.1422'.
[  259.371528][T11066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1422'.
[  259.404598][T11076] netlink: 'syz.3.1425': attribute type 1 has an invalid length.
[  259.562967][T11085] : renamed from veth0_to_bond (while UP)
[  260.046975][T11110] netlink: 'syz.2.1436': attribute type 3 has an invalid length.
[  260.131894][T11117] netlink: 'syz.4.1434': attribute type 20 has an invalid length.
[  260.224330][T11110] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  260.245200][T11110] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  260.263227][T11110] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  260.280420][T11110] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  260.332201][T11110] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  261.134811][ T6014] net_ratelimit: 42 callbacks suppressed
[  261.134833][ T6014] bond2: (slave bridge1): failed to get link speed/duplex
[  261.351297][   T13] bond2: (slave bridge1): failed to get link speed/duplex
[  261.472605][   T13] bond2: (slave bridge1): failed to get link speed/duplex
[  261.601152][  T143] bond2: (slave bridge1): failed to get link speed/duplex
[  261.731385][  T143] bond2: (slave bridge1): failed to get link speed/duplex
[  261.861197][ T6027] bond2: (slave bridge1): failed to get link speed/duplex
[  262.016077][ T6027] bond2: (slave bridge1): failed to get link speed/duplex
[  262.026614][T11197] netlink: 'syz.1.1453': attribute type 20 has an invalid length.
[  262.132910][ T9196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.201875][  T143] bond2: (slave bridge1): failed to get link speed/duplex
[  262.286829][T11201] nbd3: detected capacity change from 0 to 63
[  262.301373][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.344152][T11209] block nbd3: NBD_DISCONNECT
[  262.354780][T11209] block nbd3: Disconnected due to user request.
[  262.365818][T11209] block nbd3: shutting down sockets
[  262.382522][    C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.391892][    C0] Buffer I/O error on dev nbd3, logical block 0, async page read
[  262.408819][    C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.418202][    C0] Buffer I/O error on dev nbd3, logical block 1, async page read
[  262.428372][    C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.437511][    C0] Buffer I/O error on dev nbd3, logical block 2, async page read
[  262.445475][    C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.454581][    C0] Buffer I/O error on dev nbd3, logical block 3, async page read
[  262.472052][T11201] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  262.535849][ T8174] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.576306][ T8174] Buffer I/O error on dev nbd3, logical block 0, async page read
[  262.611756][ T8174] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.644255][ T8174] Buffer I/O error on dev nbd3, logical block 1, async page read
[  262.666732][ T8174] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.698546][ T8174] Buffer I/O error on dev nbd3, logical block 2, async page read
[  262.749618][ T8174] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.796562][ T8174] Buffer I/O error on dev nbd3, logical block 3, async page read
[  262.831335][ T8174] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.857263][ T8174] Buffer I/O error on dev nbd3, logical block 0, async page read
[  262.893971][ T8174] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.922224][ T8174] Buffer I/O error on dev nbd3, logical block 1, async page read
[  262.968691][ T8174] ldm_validate_partition_table(): Disk read failed.
[  263.018677][ T8174] Dev nbd3: unable to read RDB block 0
[  263.067631][ T8174]  nbd3: unable to read partition table
[  263.157564][ T8174] ldm_validate_partition_table(): Disk read failed.
[  263.186910][ T8174] Dev nbd3: unable to read RDB block 0
[  263.205009][T11232] __nla_validate_parse: 13 callbacks suppressed
[  263.205030][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1466'.
[  263.230496][ T8174]  nbd3: unable to read partition table
[  263.304714][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'.
[  263.596954][T11248] netlink: 'syz.4.1472': attribute type 21 has an invalid length.
[  263.627527][T11252] netlink: 'syz.4.1472': attribute type 21 has an invalid length.
[  263.668477][T11248] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1472'.
[  263.695413][T11256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.703144][T11252] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1472'.
[  263.713872][T11260] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  263.735079][T11256] syzkaller0: entered promiscuous mode
[  263.750953][T11256] syzkaller0: entered allmulticast mode
[  263.837878][T11256] tipc: Resetting bearer <eth:syzkaller0>
[  263.945653][T11256] tipc: Disabling bearer <eth:syzkaller0>
[  264.196182][T11278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1480'.
[  264.744888][T11296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1484'.
[  264.818349][   T30] audit: type=1804 audit(1780418701.522:10): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1484" name="/newroot/274/memory.events" dev="tmpfs" ino=1419 res=1 errno=0
[  264.869705][T11298] geneve1: entered allmulticast mode
[  264.898382][   T30] audit: type=1800 audit(1780418701.522:11): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1484" name="memory.events" dev="tmpfs" ino=1419 res=0 errno=0
[  264.924784][T11298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.987032][   T30] audit: type=1804 audit(1780418701.532:12): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1484" name="/newroot/274/memory.events" dev="tmpfs" ino=1419 res=1 errno=0
[  265.049648][T11297] tipc: Disabling bearer <eth:syzkaller0>
[  265.293023][T11307] netlink: 'syz.1.1489': attribute type 1 has an invalid length.
[  265.414299][T11326] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  265.681355][T11329] bond3: (slave gretap1): making interface the new active one
[  265.734614][T11329] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  265.746563][T11307] syzkaller1: tun_chr_ioctl cmd 1074025677
[  265.753408][T11307] syzkaller1: Refused to change device type
[  265.838072][T11339] bridge0: port 3(vlan2) entered disabled state
[  265.844647][T11339] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.852099][T11339] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.977419][T11339] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  266.014582][T11339] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  266.125079][T11352] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1501'.
[  266.166387][T11339] bridge2: port 1(gretap1) entered disabled state
[  266.220467][T11339] ip6gre1: left promiscuous mode
[  266.229732][T11339] ip6gre1: left allmulticast mode
[  266.247049][T11339] vlan3: left promiscuous mode
[  266.252079][T11339] bond5: left promiscuous mode
[  266.256927][T11339] batadv1: left promiscuous mode
[  266.262630][T11339] vlan3: left allmulticast mode
[  266.267619][T11339] bond5: left allmulticast mode
[  266.273080][T11339] batadv1: left allmulticast mode
[  266.296583][T11339] bond0: left promiscuous mode
[  266.301776][T11339] veth9: left promiscuous mode
[  266.311355][T11339] ip6tnl1: left allmulticast mode
[  266.367748][ T6029] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  266.378159][ T6029] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.444158][ T6029] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  266.467620][ T6029] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.634562][ T6029] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  266.654016][ T6029] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.671535][ T6029] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  266.682976][ T6029] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.686458][T11379] net_ratelimit: 1052 callbacks suppressed
[  266.686513][T11379] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.776383][ T6037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.829129][T11385] bridge0: port 1(syz_tun) entered blocking state
[  266.849675][T11385] bridge0: port 1(syz_tun) entered disabled state
[  266.873798][T11385] bridge0: port 1(syz_tun) entered blocking state
[  266.880526][T11385] bridge0: port 1(syz_tun) entered forwarding state
[  266.938460][T11385] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  267.012220][ T9182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.171402][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.268478][T11398] FAULT_INJECTION: forcing a failure.
[  267.268478][T11398] name failslab, interval 1, probability 0, space 0, times 0
[  267.282292][T11398] CPU: 1 UID: 0 PID: 11398 Comm: syz.3.1514 Not tainted syzkaller #0 PREEMPT(full) 
[  267.282322][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  267.282335][T11398] Call Trace:
[  267.282342][T11398]  <TASK>
[  267.282350][T11398]  dump_stack_lvl+0xe8/0x150
[  267.282380][T11398]  should_fail_ex+0x412/0x560
[  267.282408][T11398]  should_failslab+0xa8/0x100
[  267.282432][T11398]  __kmalloc_cache_noprof+0x88/0x660
[  267.282461][T11398]  ? security_capable+0x7e/0x2c0
[  267.282488][T11398]  ? cgw_create_job+0x1fe/0xc90
[  267.282513][T11398]  cgw_create_job+0x1fe/0xc90
[  267.282531][T11398]  ? __pfx___mutex_lock+0x10/0x10
[  267.282562][T11398]  ? __pfx_cgw_create_job+0x10/0x10
[  267.282591][T11398]  ? __pfx_cgw_create_job+0x10/0x10
[  267.282610][T11398]  rtnetlink_rcv_msg+0x77e/0xbe0
[  267.282628][T11398]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[  267.282655][T11398]  ? netlink_sendmsg+0x5d4/0xb40
[  267.282680][T11398]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  267.282709][T11398]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  267.282728][T11398]  ? __lock_acquire+0x6b5/0x2cf0
[  267.282760][T11398]  netlink_rcv_skb+0x232/0x4b0
[  267.282781][T11398]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  267.282801][T11398]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  267.282834][T11398]  ? netlink_deliver_tap+0x2e/0x1b0
[  267.282855][T11398]  ? netlink_deliver_tap+0x2e/0x1b0
[  267.282880][T11398]  netlink_unicast+0x75c/0x8e0
[  267.282909][T11398]  netlink_sendmsg+0x813/0xb40
[  267.282939][T11398]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.282964][T11398]  ? aa_sock_msg_perm+0xf1/0x1b0
[  267.282993][T11398]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  267.283022][T11398]  ____sys_sendmsg+0x972/0x9f0
[  267.283044][T11398]  ? __might_fault+0xaf/0x130
[  267.283076][T11398]  ? __pfx_____sys_sendmsg+0x10/0x10
[  267.283106][T11398]  ? import_iovec+0x73/0xa0
[  267.283131][T11398]  ___sys_sendmsg+0x2a5/0x360
[  267.283151][T11398]  ? __lock_acquire+0x6b5/0x2cf0
[  267.283174][T11398]  ? __pfx____sys_sendmsg+0x10/0x10
[  267.283239][T11398]  ? __fget_files+0x2a/0x420
[  267.283263][T11398]  ? __fget_files+0x3a0/0x420
[  267.283299][T11398]  __x64_sys_sendmsg+0x1bd/0x2a0
[  267.283326][T11398]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  267.283359][T11398]  ? __pfx_ksys_write+0x10/0x10
[  267.283396][T11398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.283420][T11398]  do_syscall_64+0x174/0x580
[  267.283441][T11398]  ? trace_irq_disable+0x3b/0x140
[  267.283472][T11398]  ? clear_bhb_loop+0x40/0x90
[  267.283499][T11398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.283520][T11398] RIP: 0033:0x7f45cab9ce59
[  267.283540][T11398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  267.283558][T11398] RSP: 002b:00007f45cbac5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.283580][T11398] RAX: ffffffffffffffda RBX: 00007f45cae15fa0 RCX: 00007f45cab9ce59
[  267.283596][T11398] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  267.283608][T11398] RBP: 00007f45cbac5090 R08: 0000000000000000 R09: 0000000000000000
[  267.283621][T11398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.283633][T11398] R13: 00007f45cae16038 R14: 00007f45cae15fa0 R15: 00007fffce4f4358
[  267.283665][T11398]  </TASK>
[  267.714702][T11405] tls_set_device_offload_rx: netdev not found
[  267.918597][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1518'.
[  268.051717][ T9182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.091217][T11423] syzkaller0: entered promiscuous mode
[  268.117549][T11423] syzkaller0: entered allmulticast mode
[  268.145188][T11424] netlink: 'syz.4.1518': attribute type 15 has an invalid length.
[  268.284452][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1523'.
[  268.372270][ T9209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.495191][T11441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.501346][T11436] syzkaller1: entered promiscuous mode
[  268.509284][T11436] syzkaller1: entered allmulticast mode
[  268.548710][T11442] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  268.566208][T11436] netlink: 2256 bytes leftover after parsing attributes in process `syz.2.1525'.
[  268.595977][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'.
[  268.607920][T11446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1526'.
[  268.618960][T11442] 8021q: adding VLAN 0 to HW filter on device bond1
[  268.627101][T11446] netlink: 'syz.4.1526': attribute type 20 has an invalid length.
[  268.640570][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1528'.
[  268.658396][T11442] 8021q: adding VLAN 0 to HW filter on device eth0
[  268.668773][T11442] 8021q: adding VLAN 0 to HW filter on device eth1
[  268.678624][T11442] 8021q: adding VLAN 0 to HW filter on device eth2
[  268.689084][T11442] 8021q: adding VLAN 0 to HW filter on device eth3
[  268.699947][T11442] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  269.091709][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.111172][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'.
[  269.328566][T11469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1536'.
[  269.375491][T11474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1535'.
[  269.434024][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'.
[  269.590588][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1538'.
[  269.969878][T11494] syzkaller0: entered promiscuous mode
[  269.992730][T11494] syzkaller0: entered allmulticast mode
[  270.091933][T11508] netlink: 'syz.1.1546': attribute type 26 has an invalid length.
[  270.549124][T11525] netlink: 'syz.2.1548': attribute type 20 has an invalid length.
[  271.059296][T11546] FAULT_INJECTION: forcing a failure.
[  271.059296][T11546] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  271.088025][T11546] CPU: 1 UID: 0 PID: 11546 Comm: syz.3.1557 Not tainted syzkaller #0 PREEMPT(full) 
[  271.088054][T11546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  271.088067][T11546] Call Trace:
[  271.088074][T11546]  <TASK>
[  271.088083][T11546]  dump_stack_lvl+0xe8/0x150
[  271.088111][T11546]  should_fail_ex+0x412/0x560
[  271.088139][T11546]  _copy_to_user+0x31/0xb0
[  271.088166][T11546]  simple_read_from_buffer+0xe1/0x170
[  271.088195][T11546]  proc_fail_nth_read+0x1bb/0x230
[  271.088226][T11546]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  271.088256][T11546]  ? rw_verify_area+0x2a6/0x4d0
[  271.088284][T11546]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  271.088313][T11546]  vfs_read+0x20c/0xa70
[  271.088347][T11546]  ? __pfx___mutex_lock+0x10/0x10
[  271.088370][T11546]  ? __pfx_vfs_read+0x10/0x10
[  271.088402][T11546]  ? __fget_files+0x2a/0x420
[  271.088433][T11546]  ? __fget_files+0x3a0/0x420
[  271.088457][T11546]  ? __fget_files+0x2a/0x420
[  271.088492][T11546]  ksys_read+0x150/0x270
[  271.088575][T11546]  ? __pfx_ksys_read+0x10/0x10
[  271.088615][T11546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.088751][T11546]  do_syscall_64+0x174/0x580
[  271.088828][T11546]  ? trace_irq_disable+0x3b/0x140
[  271.088861][T11546]  ? clear_bhb_loop+0x40/0x90
[  271.088887][T11546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.088909][T11546] RIP: 0033:0x7f45cab5d68e
[  271.088929][T11546] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  271.088946][T11546] RSP: 002b:00007f45cbac4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  271.088969][T11546] RAX: ffffffffffffffda RBX: 00007f45cbac56c0 RCX: 00007f45cab5d68e
[  271.088984][T11546] RDX: 000000000000000f RSI: 00007f45cbac50a0 RDI: 0000000000000004
[  271.088997][T11546] RBP: 00007f45cbac5090 R08: 0000000000000000 R09: 0000000000000000
[  271.089010][T11546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.089021][T11546] R13: 00007f45cae16038 R14: 00007f45cae15fa0 R15: 00007fffce4f4358
[  271.089065][T11546]  </TASK>
[  271.808516][T11567] net_ratelimit: 7 callbacks suppressed
[  271.808536][T11567] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  271.990424][T11573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.160866][T11573] syzkaller0: entered promiscuous mode
[  272.173081][T11573] syzkaller0: entered allmulticast mode
[  272.184790][T11573] tipc: Resetting bearer <eth:syzkaller0>
[  272.203008][T11572] tipc: Resetting bearer <eth:syzkaller0>
[  272.288852][T11584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.299793][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.373178][ T9185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.452338][ T9185] page_pool_release_retry() stalled pool shutdown: id 58, 1 inflight 60 sec
[  272.541519][ T6037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.550989][ T9185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.594521][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.541726][ T9210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.612835][ T9185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.107276][T11572] tipc: Disabling bearer <eth:syzkaller0>
[  275.640468][T11630] __nla_validate_parse: 7 callbacks suppressed
[  275.640489][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1585'.
[  275.659241][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.677834][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1585'.
[  275.681158][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'.
[  276.599163][T11666] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000
[  276.632283][T11666] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  276.688699][T11661] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.929047][T11677] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  276.981656][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1599'.
[  277.019435][T11677] tipc: Disabling bearer <udp:syz2>
[  277.083864][T11683] net_ratelimit: 570 callbacks suppressed
[  277.083885][T11683] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  277.138981][T11677] veth1_to_bond: Caught tx_queue_len zero misconfig
[  277.177577][T11677] netlink: 'syz.1.1599': attribute type 10 has an invalid length.
[  277.199103][T11677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1599'.
[  277.252230][T11677] geneve1: entered promiscuous mode
[  277.278891][T11677] team0: Failed to send port change of device geneve1 via netlink (err -105)
[  277.316444][T11677] team0: Failed to send options change via netlink (err -105)
[  277.343659][T11677] team0: Port device geneve1 added
[  277.540243][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'.
[  277.571983][ T6037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.582159][ T9209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.594422][T11701] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  277.614057][T11700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.636117][T11703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1607'.
[  277.651514][T11700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.676178][T11700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.746965][T11700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.777338][T11700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.804363][T11700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.073674][T11720] netlink: 'syz.0.1611': attribute type 1 has an invalid length.
[  278.112452][T11720] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  278.316645][T11726] nicvf0: tun_chr_ioctl cmd 35111
[  278.379498][T11740] nicvf0: tun_chr_ioctl cmd 1074025677
[  278.400270][T11740] nicvf0: linktype set to 1
[  278.721133][T11753] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1618'.
[  278.758218][T11753] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1618'.
[  278.866995][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'.
[  278.950719][T11753] ip6gretap1: entered allmulticast mode
[  279.771552][T11799] veth0_macvtap: entered allmulticast mode
[  280.494759][T11829] ip6gretap1: entered allmulticast mode
[  280.616828][T11829] syzkaller0: entered promiscuous mode
[  280.628571][T11829] syzkaller0: entered allmulticast mode
[  280.974658][T11842] syzkaller0: entered promiscuous mode
[  280.982602][T11844] xt_hashlimit: size too large, truncated to 1048576
[  281.000326][T11842] syzkaller0: entered allmulticast mode
[  281.074317][T11858] FAULT_INJECTION: forcing a failure.
[  281.074317][T11858] name failslab, interval 1, probability 0, space 0, times 0
[  281.087292][T11858] CPU: 1 UID: 0 PID: 11858 Comm: syz.0.1642 Not tainted syzkaller #0 PREEMPT(full) 
[  281.087321][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  281.087334][T11858] Call Trace:
[  281.087343][T11858]  <TASK>
[  281.087351][T11858]  dump_stack_lvl+0xe8/0x150
[  281.087381][T11858]  should_fail_ex+0x412/0x560
[  281.087409][T11858]  should_failslab+0xa8/0x100
[  281.087430][T11858]  ? skb_ext_add+0x148/0x8f0
[  281.087453][T11858]  kmem_cache_alloc_noprof+0x87/0x650
[  281.087481][T11858]  ? br_validate_ipv6+0x47e/0x890
[  281.087509][T11858]  skb_ext_add+0x148/0x8f0
[  281.087532][T11858]  ? net_generic+0x1e/0x240
[  281.087570][T11858]  br_nf_pre_routing_ipv6+0x12e/0x6f0
[  281.087595][T11858]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  281.087622][T11858]  ? br_nf_pre_routing+0x75f/0x14c0
[  281.087661][T11858]  ? __pfx_br_nf_pre_routing+0x10/0x10
[  281.087691][T11858]  br_handle_frame+0x1277/0x1510
[  281.087732][T11858]  ? __pfx_br_handle_frame+0x10/0x10
[  281.087775][T11858]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  281.087817][T11858]  ? __pfx_br_handle_frame+0x10/0x10
[  281.087846][T11858]  __netif_receive_skb_core+0x98f/0x3170
[  281.087889][T11858]  ? __lock_acquire+0x6b5/0x2cf0
[  281.087917][T11858]  ? rcu_is_watching+0x15/0xb0
[  281.087946][T11858]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  281.087973][T11858]  ? __schedule+0x1837/0x5740
[  281.088002][T11858]  ? kasan_save_track+0x4f/0x80
[  281.088027][T11858]  ? kasan_save_track+0x3e/0x80
[  281.088054][T11858]  ? __build_skb+0x62/0x440
[  281.088071][T11858]  ? build_skb+0x23/0x180
[  281.088112][T11858]  ? netif_receive_skb+0x102/0xbf0
[  281.088138][T11858]  ? netif_receive_skb+0x102/0xbf0
[  281.088169][T11858]  netif_receive_skb+0x1fe/0xbf0
[  281.088205][T11858]  ? __pfx_netif_receive_skb+0x10/0x10
[  281.088239][T11858]  ? tun_rx_batched+0x185/0x790
[  281.088264][T11858]  tun_rx_batched+0x1de/0x790
[  281.088285][T11858]  ? trace_irq_disable+0x3b/0x140
[  281.088322][T11858]  ? __pfx_tun_rx_batched+0x10/0x10
[  281.088343][T11858]  ? tun_get_user+0x2787/0x43e0
[  281.088365][T11858]  ? tun_get_user+0x2787/0x43e0
[  281.088388][T11858]  ? tun_get_user+0x2394/0x43e0
[  281.088409][T11858]  ? tun_get_user+0x2394/0x43e0
[  281.088429][T11858]  ? __local_bh_enable_ip+0xd0/0x130
[  281.088456][T11858]  tun_get_user+0x2bbc/0x43e0
[  281.088482][T11858]  ? tun_get_user+0x2787/0x43e0
[  281.088520][T11858]  ? aa_file_perm+0x50e/0x15e0
[  281.088540][T11858]  ? __pfx_tun_get_user+0x10/0x10
[  281.088564][T11858]  ? __lock_acquire+0x6b5/0x2cf0
[  281.088602][T11858]  ? ref_tracker_alloc+0x35c/0x4c0
[  281.088628][T11858]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  281.088654][T11858]  ? tun_get+0x1c/0x2f0
[  281.088675][T11858]  ? tun_get+0x1c/0x2f0
[  281.088701][T11858]  ? tun_get+0x1c/0x2f0
[  281.088721][T11858]  ? tun_get+0x1c/0x2f0
[  281.088755][T11858]  tun_chr_write_iter+0x113/0x200
[  281.088780][T11858]  vfs_write+0x61d/0xb90
[  281.088824][T11858]  ? __pfx_vfs_write+0x10/0x10
[  281.088866][T11858]  ? __fget_files+0x2a/0x420
[  281.088901][T11858]  ksys_write+0x150/0x270
[  281.088934][T11858]  ? __pfx_ksys_write+0x10/0x10
[  281.088972][T11858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.088995][T11858]  do_syscall_64+0x174/0x580
[  281.089016][T11858]  ? trace_irq_disable+0x3b/0x140
[  281.089045][T11858]  ? clear_bhb_loop+0x40/0x90
[  281.089070][T11858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.089102][T11858] RIP: 0033:0x7f902ef5d68e
[  281.089123][T11858] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  281.089140][T11858] RSP: 002b:00007f902feabfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  281.089162][T11858] RAX: ffffffffffffffda RBX: 00007f902feac6c0 RCX: 00007f902ef5d68e
[  281.089177][T11858] RDX: 000000000000008e RSI: 0000200000000000 RDI: 00000000000000c8
[  281.089190][T11858] RBP: 00007f902feac090 R08: 0000000000000000 R09: 0000000000000000
[  281.089202][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.089214][T11858] R13: 00007f902f216038 R14: 00007f902f215fa0 R15: 00007fffd184cf08
[  281.089247][T11858]  </TASK>
[  281.800591][T11862] __nla_validate_parse: 4 callbacks suppressed
[  281.800613][T11862] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1643'.
[  283.018721][ T9173] net_ratelimit: 1139 callbacks suppressed
[  283.018742][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.413304][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.657218][ T9209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.053595][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.631194][T11886] syzkaller0: entered promiscuous mode
[  284.659911][T11889] FAULT_INJECTION: forcing a failure.
[  284.659911][T11889] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  284.663695][T11886] syzkaller0: entered allmulticast mode
[  284.736014][T11889] CPU: 1 UID: 0 PID: 11889 Comm: syz.0.1653 Not tainted syzkaller #0 PREEMPT(full) 
[  284.736040][T11889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  284.736051][T11889] Call Trace:
[  284.736058][T11889]  <TASK>
[  284.736065][T11889]  dump_stack_lvl+0xe8/0x150
[  284.736092][T11889]  should_fail_ex+0x412/0x560
[  284.736117][T11889]  _copy_to_user+0x31/0xb0
[  284.736140][T11889]  simple_read_from_buffer+0xe1/0x170
[  284.736169][T11889]  proc_fail_nth_read+0x1bb/0x230
[  284.736197][T11889]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  284.736223][T11889]  ? rw_verify_area+0x2a6/0x4d0
[  284.736254][T11889]  ? tun_chr_write_iter+0x18a/0x200
[  284.736271][T11889]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  284.736296][T11889]  vfs_read+0x20c/0xa70
[  284.736326][T11889]  ? __pfx___mutex_lock+0x10/0x10
[  284.736347][T11889]  ? __pfx_vfs_read+0x10/0x10
[  284.736373][T11889]  ? __fget_files+0x2a/0x420
[  284.736399][T11889]  ? __fget_files+0x3a0/0x420
[  284.736419][T11889]  ? __fget_files+0x2a/0x420
[  284.736449][T11889]  ksys_read+0x150/0x270
[  284.736477][T11889]  ? __pfx_ksys_read+0x10/0x10
[  284.736510][T11889]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.736541][T11889]  do_syscall_64+0x174/0x580
[  284.736565][T11889]  ? trace_irq_disable+0x3b/0x140
[  284.736591][T11889]  ? clear_bhb_loop+0x40/0x90
[  284.736614][T11889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.736636][T11889] RIP: 0033:0x7f902ef5d68e
[  284.736653][T11889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  284.736669][T11889] RSP: 002b:00007f902feabfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  284.736688][T11889] RAX: ffffffffffffffda RBX: 00007f902feac6c0 RCX: 00007f902ef5d68e
[  284.736700][T11889] RDX: 000000000000000f RSI: 00007f902feac0a0 RDI: 0000000000000003
[  284.736711][T11889] RBP: 00007f902feac090 R08: 0000000000000000 R09: 0000000000000000
[  284.736727][T11889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.736737][T11889] R13: 00007f902f216038 R14: 00007f902f215fa0 R15: 00007fffd184cf08
[  284.736792][T11889]  </TASK>
[  285.093045][ T9182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.273173][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1657'.
[  285.310607][T11901] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  285.984706][   T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.013091][T11933] netlink: 'syz.2.1669': attribute type 1 has an invalid length.
[  286.023334][T11935] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1670'.
[  286.044333][T11933] netlink: 'syz.2.1669': attribute type 2 has an invalid length.
[  286.097087][T11933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1669'.
[  286.132297][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.155892][T11942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1671'.
[  286.454013][T11954] netlink: 'syz.2.1676': attribute type 13 has an invalid length.
[  286.513243][   T13] bond3: (slave batadv0): link status up again after 0 ms
[  286.541187][   T13] bond3: (slave batadv0): link status up again after 0 ms
[  286.800325][T11967] netlink: 'syz.1.1679': attribute type 1 has an invalid length.
[  286.829788][T11967] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1679'.
[  286.920781][T11966] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.985972][T11966] bridge_slave_0 (unregistering): left allmulticast mode
[  287.032634][T11966] bridge_slave_0 (unregistering): left promiscuous mode
[  287.045705][T11966] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.313735][T11979] netlink: 'syz.4.1680': attribute type 4 has an invalid length.
[  287.322913][T11969] syzkaller1: entered promiscuous mode
[  287.328784][T11969] syzkaller1: entered allmulticast mode
[  287.372826][T11982] syzkaller0: entered promiscuous mode
[  287.388672][T11982] syzkaller0: entered allmulticast mode
[  287.673273][T11985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.726976][T11999] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1685'.
[  287.727320][T11985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 43080 - 0
[  287.807562][T11999] sctp: [Deprecated]: syz.4.1685 (pid 11999) Use of struct sctp_assoc_value in delayed_ack socket option.
[  287.807562][T11999] Use struct sctp_sack_info instead
[  288.079121][T12004] geneve2: entered promiscuous mode
[  288.110156][T12004] geneve2: entered allmulticast mode
[  288.211998][ T9196] net_ratelimit: 44 callbacks suppressed
[  288.212019][ T9196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.392234][T11985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.424539][T11985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 43080 - 0
[  288.521129][   T13] bond3: (slave batadv0): failed to get link speed/duplex
[  288.619844][T12017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1689'.
[  288.632946][T11985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.677191][T11985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 43080 - 0
[  288.769356][T12017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1689'.
[  288.779751][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  288.965159][T12029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.003771][   T71] bond3: (slave batadv0): failed to get link speed/duplex
[  289.026514][T12017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1689'.
[  289.173058][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.213742][ T6037] bond3: (slave batadv0): failed to get link speed/duplex
[  289.231943][T12038] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1692'.
[  289.251885][ T9185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.334956][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 43080 - 0
[  289.344310][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  289.352995][ T6014] bond3: (slave batadv0): failed to get link speed/duplex
[  289.479826][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 43080 - 0
[  289.501543][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  289.587590][ T6027] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 43080 - 0
[  289.617518][ T6027] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  289.688800][ T6027] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 43080 - 0
[  289.699141][ T6027] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  289.731508][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.997516][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1697'.
[  290.188270][T12069] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1699'.
[  290.261849][ T5635] block nbd1: Receive control failed (result -107)
[  290.497149][T12072] veth0_macvtap: entered allmulticast mode
[  290.545822][T12080] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0
[  290.957918][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1705'.
[  291.318631][T12105] --map-set only usable from mangle table
[  291.318631][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'.
[  291.616426][T12114] netlink: 'syz.2.1712': attribute type 16 has an invalid length.
[  291.651121][T12114] netlink: 'syz.2.1712': attribute type 3 has an invalid length.
[  291.899335][T12124] IPv6: Can't replace route, no match found
[  291.934897][T12121] __nla_validate_parse: 1 callbacks suppressed
[  291.934917][T12121] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1713'.
[  292.348041][T12083] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1702'.
[  292.382748][T12146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1719'.
[  292.812495][T12166] xt_bpf: check failed: parse error
[  292.927747][T12165] netlink: 'syz.0.1722': attribute type 5 has an invalid length.
[  292.985522][T12168] syzkaller0: entered promiscuous mode
[  293.013449][T12168] syzkaller0: entered allmulticast mode
[  293.174155][T12181] xt_hashlimit: overflow, try lower: 6/0
[  293.221165][ T6041] net_ratelimit: 35 callbacks suppressed
[  293.221188][ T6041] bond3: (slave batadv0): failed to get link speed/duplex
[  293.351223][ T6027] bond3: (slave batadv0): failed to get link speed/duplex
[  293.377078][T12190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1731'.
[  293.411539][ T9185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.442765][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.456022][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.466125][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.476175][ T6041] bond3: (slave batadv0): failed to get link speed/duplex
[  293.494081][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.526345][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.544587][T12197] netlink: 'syz.4.1733': attribute type 3 has an invalid length.
[  293.571389][T12192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.617731][T12201] tipc: Enabled bearer <eth:ip6gre0>, priority 2
[  294.070928][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'.
[  294.083227][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'.
[  294.110840][T12220] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1740'.
[  294.280525][T12231] syzkaller0: entered promiscuous mode
[  294.286783][T12231] syzkaller0: entered allmulticast mode
[  294.539360][T12234] gtp0: entered promiscuous mode
[  294.544527][T12234] gtp0: entered allmulticast mode
[  294.667449][T12238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1746'.
[  296.637704][T12204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  296.863051][T12252] xt_hashlimit: size too large, truncated to 1048576
[  296.956510][T12253] 
[  296.958998][T12253] ======================================================
[  296.966238][T12253] WARNING: possible circular locking dependency detected
[  296.973405][T12253] syzkaller #0 Not tainted
[  296.977898][T12253] ------------------------------------------------------
[  296.984958][T12253] syz.2.1752/12253 is trying to acquire lock:
[  296.991078][T12253] ffffffff8ea85600 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  297.000481][T12253] 
[  297.000481][T12253] but task is already holding lock:
[  297.007896][T12253] ffff88804ffe6530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[  297.016828][T12262] xt_hashlimit: size too large, truncated to 1048576
[  297.017198][T12253] 
[  297.017198][T12253] which lock already depends on the new lock.
[  297.017198][T12253] 
[  297.017211][T12253] 
[  297.017211][T12253] the existing dependency chain (in reverse order) is:
[  297.017222][T12253] 
[  297.017222][T12253] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[  297.051468][T12253]        __mutex_lock+0x1a3/0x1550
[  297.056647][T12253]        __ipv6_dev_mc_inc+0x4e/0xa50
[  297.062083][T12253]        __ipv6_sock_mc_join+0x503/0x750
[  297.067781][T12253]        do_ipv6_mcast_group_source+0x3df/0x4c0
[  297.074089][T12253]        do_ipv6_setsockopt+0x16e9/0x3150
[  297.079967][T12253]        ipv6_setsockopt+0x59/0x170
[  297.085237][T12253]        do_sock_setsockopt+0x17c/0x1b0
[  297.091216][T12253]        __x64_sys_setsockopt+0x13d/0x1b0
[  297.097076][T12253]        do_syscall_64+0x174/0x580
[  297.102252][T12253]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.108816][T12253] 
[  297.108816][T12253] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  297.116708][T12253]        lock_sock_nested+0x41/0x100
[  297.122269][T12253]        inet_shutdown+0x6a/0x390
[  297.127363][T12253]        nbd_mark_nsock_dead+0x2e9/0x560
[  297.133071][T12253]        recv_work+0x1c2e/0x1d40
[  297.138068][T12253]        process_scheduled_works+0xb5d/0x1860
[  297.144199][T12253]        worker_thread+0xa53/0xfc0
[  297.149381][T12253]        kthread+0x389/0x470
[  297.154031][T12253]        ret_from_fork+0x514/0xb70
[  297.159194][T12253]        ret_from_fork_asm+0x1a/0x30
[  297.164570][T12253] 
[  297.164570][T12253] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  297.172262][T12253]        __mutex_lock+0x1a3/0x1550
[  297.177416][T12253]        nbd_queue_rq+0x37b/0x1100
[  297.182568][T12253]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  297.188752][T12253]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  297.195893][T12253]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  297.202531][T12253]        blk_mq_run_hw_queue+0x348/0x4f0
[  297.208901][T12253]        blk_mq_dispatch_list+0xd16/0xe10
[  297.214667][T12253]        blk_mq_flush_plug_list+0x48d/0x570
[  297.220597][T12253]        __blk_flush_plug+0x3ed/0x4d0
[  297.226003][T12253]        __submit_bio+0x28d/0x580
[  297.231054][T12253]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  297.237243][T12253]        block_read_full_folio+0x599/0x830
[  297.243075][T12253]        filemap_read_folio+0x137/0x3b0
[  297.248650][T12253]        do_read_cache_folio+0x358/0x590
[  297.254308][T12253]        read_part_sector+0xb6/0x2b0
[  297.259615][T12253]        adfspart_check_ICS+0xb1/0x960
[  297.265103][T12253]        bdev_disk_changed+0x817/0x1770
[  297.270681][T12253]        blkdev_get_whole+0x380/0x510
[  297.276072][T12253]        bdev_open+0x31e/0xd30
[  297.280872][T12253]        blkdev_open+0x470/0x610
[  297.285837][T12253]        do_dentry_open+0x822/0x13a0
[  297.291413][T12253]        vfs_open+0x3b/0x340
[  297.296120][T12253]        path_openat+0x2e08/0x3860
[  297.301256][T12253]        do_file_open+0x23e/0x4a0
[  297.306384][T12253]        do_sys_openat2+0x113/0x200
[  297.311964][T12253]        __x64_sys_openat+0x138/0x170
[  297.317467][T12253]        do_syscall_64+0x174/0x580
[  297.322810][T12253]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.329275][T12253] 
[  297.329275][T12253] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  297.336511][T12253]        __mutex_lock+0x1a3/0x1550
[  297.341838][T12253]        nbd_queue_rq+0xc6/0x1100
[  297.347062][T12253]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  297.353157][T12253]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  297.360116][T12253]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  297.366658][T12253]        blk_mq_run_hw_queue+0x348/0x4f0
[  297.372311][T12253]        blk_mq_dispatch_list+0xd16/0xe10
[  297.378073][T12253]        blk_mq_flush_plug_list+0x48d/0x570
[  297.383988][T12253]        __blk_flush_plug+0x3ed/0x4d0
[  297.389379][T12253]        __submit_bio+0x28d/0x580
[  297.394505][T12253]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  297.400695][T12253]        block_read_full_folio+0x599/0x830
[  297.406713][T12253]        filemap_read_folio+0x137/0x3b0
[  297.412292][T12253]        do_read_cache_folio+0x358/0x590
[  297.418042][T12253]        read_part_sector+0xb6/0x2b0
[  297.423361][T12253]        adfspart_check_ICS+0xb1/0x960
[  297.428843][T12253]        bdev_disk_changed+0x817/0x1770
[  297.434427][T12253]        blkdev_get_whole+0x380/0x510
[  297.440008][T12253]        bdev_open+0x31e/0xd30
[  297.444887][T12253]        blkdev_open+0x470/0x610
[  297.449857][T12253]        do_dentry_open+0x822/0x13a0
[  297.455248][T12253]        vfs_open+0x3b/0x340
[  297.459864][T12253]        path_openat+0x2e08/0x3860
[  297.465001][T12253]        do_file_open+0x23e/0x4a0
[  297.470068][T12253]        do_sys_openat2+0x113/0x200
[  297.475402][T12253]        __x64_sys_openat+0x138/0x170
[  297.481061][T12253]        do_syscall_64+0x174/0x580
[  297.486550][T12253]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.493155][T12253] 
[  297.493155][T12253] -> #3 (set->srcu){.+.+}-{0:0}:
[  297.500400][T12253]        __synchronize_srcu+0xca/0x300
[  297.505972][T12253]        elevator_switch+0x1e8/0x7a0
[  297.511285][T12253]        elevator_change+0x2cc/0x450
[  297.516661][T12253]        elevator_set_default+0x36c/0x430
[  297.522668][T12253]        blk_register_queue+0x3e9/0x4e0
[  297.528240][T12253]        __add_disk+0x677/0xd50
[  297.533123][T12253]        add_disk_fwnode+0xfb/0x480
[  297.538460][T12253]        nbd_dev_add+0x72c/0xb50
[  297.543424][T12253]        nbd_init+0x168/0x1f0
[  297.548124][T12253]        do_one_initcall+0x250/0x870
[  297.553436][T12253]        do_initcall_level+0x104/0x190
[  297.559035][T12253]        do_initcalls+0x59/0xa0
[  297.564092][T12253]        kernel_init_freeable+0x2a6/0x3e0
[  297.569935][T12253]        kernel_init+0x1d/0x1d0
[  297.574834][T12253]        ret_from_fork+0x514/0xb70
[  297.579971][T12253]        ret_from_fork_asm+0x1a/0x30
[  297.585370][T12253] 
[  297.585370][T12253] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  297.593211][T12253]        __mutex_lock+0x1a3/0x1550
[  297.598434][T12253]        elevator_change+0x1b3/0x450
[  297.604125][T12253]        elevator_set_none+0xb5/0x140
[  297.609630][T12253]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  297.616264][T12253]        nbd_start_device+0x17f/0xb10
[  297.621845][T12253]        nbd_genl_connect+0x165b/0x1cf0
[  297.627726][T12253]        genl_family_rcv_msg_doit+0x22a/0x330
[  297.633841][T12253]        genl_rcv_msg+0x61c/0x7a0
[  297.638918][T12253]        netlink_rcv_skb+0x232/0x4b0
[  297.644334][T12253]        genl_rcv+0x28/0x40
[  297.648987][T12253]        netlink_unicast+0x75c/0x8e0
[  297.654414][T12253]        netlink_sendmsg+0x813/0xb40
[  297.659743][T12253]        ____sys_sendmsg+0x972/0x9f0
[  297.665183][T12253]        ___sys_sendmsg+0x2a5/0x360
[  297.670601][T12253]        __x64_sys_sendmsg+0x1bd/0x2a0
[  297.676187][T12253]        do_syscall_64+0x174/0x580
[  297.681417][T12253]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.687968][T12253] 
[  297.687968][T12253] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  297.696608][T12253]        blk_alloc_queue+0x546/0x680
[  297.701940][T12253]        __blk_mq_alloc_disk+0x197/0x390
[  297.707613][T12253]        nbd_dev_add+0x499/0xb50
[  297.712591][T12253]        nbd_init+0x168/0x1f0
[  297.717377][T12253]        do_one_initcall+0x250/0x870
[  297.722683][T12253]        do_initcall_level+0x104/0x190
[  297.728258][T12253]        do_initcalls+0x59/0xa0
[  297.733342][T12253]        kernel_init_freeable+0x2a6/0x3e0
[  297.739194][T12253]        kernel_init+0x1d/0x1d0
[  297.744084][T12253]        ret_from_fork+0x514/0xb70
[  297.749225][T12253]        ret_from_fork_asm+0x1a/0x30
[  297.754626][T12253] 
[  297.754626][T12253] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  297.762303][T12253]        __lock_acquire+0x15a5/0x2cf0
[  297.767971][T12253]        lock_acquire+0x106/0x350
[  297.773024][T12253]        fs_reclaim_acquire+0x71/0x100
[  297.778510][T12253]        __kmalloc_cache_noprof+0x40/0x660
[  297.784964][T12253]        __ipv6_dev_mc_inc+0x44f/0xa50
[  297.790455][T12253]        ipv6_add_dev+0xe34/0x13a0
[  297.795877][T12253]        addrconf_notify+0x771/0x1050
[  297.802239][T12253]        notifier_call_chain+0x1ad/0x3d0
[  297.808071][T12253]        register_netdevice+0x18c9/0x1ec0
[  297.814087][T12253]        br_add_bridge+0xa3/0xf0
[  297.819151][T12253]        br_ioctl_stub+0x588/0xd60
[  297.824467][T12253]        sock_ioctl+0x523/0x7f0
[  297.829449][T12253]        __se_sys_ioctl+0xfc/0x170
[  297.834725][T12253]        do_syscall_64+0x174/0x580
[  297.839886][T12253]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.846601][T12253] 
[  297.846601][T12253] other info that might help us debug this:
[  297.846601][T12253] 
[  297.857739][T12253] Chain exists of:
[  297.857739][T12253]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[  297.857739][T12253] 
[  297.871052][T12253]  Possible unsafe locking scenario:
[  297.871052][T12253] 
[  297.879125][T12253]        CPU0                    CPU1
[  297.885302][T12253]        ----                    ----
[  297.890895][T12253]   lock(&idev->mc_lock);
[  297.895528][T12253]                                lock(sk_lock-AF_INET6);
[  297.902942][T12253]                                lock(&idev->mc_lock);
[  297.910122][T12253]   lock(fs_reclaim);
[  297.914529][T12253] 
[  297.914529][T12253]  *** DEADLOCK ***
[  297.914529][T12253] 
[  297.924894][T12253] 3 locks held by syz.2.1752/12253:
[  297.930384][T12253]  #0: ffffffff8fda9b00 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0
[  297.940090][T12253]  #1: ffffffff8fdc8e80 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60
[  297.949743][T12253]  #2: ffff88804ffe6530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[  297.959613][T12253] 
[  297.959613][T12253] stack backtrace:
[  297.965526][T12253] CPU: 1 UID: 0 PID: 12253 Comm: syz.2.1752 Not tainted syzkaller #0 PREEMPT(full) 
[  297.965549][T12253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  297.965560][T12253] Call Trace:
[  297.965568][T12253]  <TASK>
[  297.965576][T12253]  dump_stack_lvl+0xe8/0x150
[  297.965597][T12253]  print_circular_bug+0x2e1/0x300
[  297.965622][T12253]  check_noncircular+0x12e/0x150
[  297.965646][T12253]  __lock_acquire+0x15a5/0x2cf0
[  297.965667][T12253]  ? rcu_is_watching+0x15/0xb0
[  297.965699][T12253]  ? trace_contention_end+0x3d/0x140
[  297.965722][T12253]  ? __mutex_lock+0x319/0x1550
[  297.965743][T12253]  ? __kmalloc_cache_noprof+0x40/0x660
[  297.965766][T12253]  lock_acquire+0x106/0x350
[  297.965782][T12253]  ? __kmalloc_cache_noprof+0x40/0x660
[  297.965808][T12253]  ? __pfx___mutex_lock+0x10/0x10
[  297.965828][T12253]  fs_reclaim_acquire+0x71/0x100
[  297.965852][T12253]  ? __kmalloc_cache_noprof+0x40/0x660
[  297.965875][T12253]  __kmalloc_cache_noprof+0x40/0x660
[  297.965899][T12253]  ? __ipv6_dev_mc_inc+0x44f/0xa50
[  297.965919][T12253]  __ipv6_dev_mc_inc+0x44f/0xa50
[  297.965938][T12253]  ? addrconf_sysctl_register+0x1a9/0x1c0
[  297.965963][T12253]  ipv6_add_dev+0xe34/0x13a0
[  297.965990][T12253]  addrconf_notify+0x771/0x1050
[  297.966015][T12253]  notifier_call_chain+0x1ad/0x3d0
[  297.966039][T12253]  register_netdevice+0x18c9/0x1ec0
[  297.966066][T12253]  ? __pfx_register_netdevice+0x10/0x10
[  297.966085][T12253]  ? alloc_netdev_mqs+0xce1/0x1210
[  297.966107][T12253]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  297.966134][T12253]  ? alloc_netdev_mqs+0xe00/0x1210
[  297.966157][T12253]  br_add_bridge+0xa3/0xf0
[  297.966182][T12253]  br_ioctl_stub+0x588/0xd60
[  297.966198][T12253]  ? do_vfs_ioctl+0x1166/0x1530
[  297.966213][T12253]  ? __pfx_br_ioctl_stub+0x10/0x10
[  297.966228][T12253]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  297.966244][T12253]  ? sock_ioctl+0x4fa/0x7f0
[  297.966267][T12253]  ? do_futex+0x333/0x420
[  297.966292][T12253]  ? __pfx_br_ioctl_stub+0x10/0x10
[  297.966306][T12253]  sock_ioctl+0x523/0x7f0
[  297.966327][T12253]  ? __pfx_sock_ioctl+0x10/0x10
[  297.966348][T12253]  ? __fget_files+0x2a/0x420
[  297.966368][T12253]  ? __fget_files+0x3a0/0x420
[  297.966387][T12253]  ? __fget_files+0x2a/0x420
[  297.966408][T12253]  ? bpf_lsm_file_ioctl+0x9/0x20
[  297.966433][T12253]  ? __pfx_sock_ioctl+0x10/0x10
[  297.966454][T12253]  __se_sys_ioctl+0xfc/0x170
[  297.966480][T12253]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.966498][T12253]  do_syscall_64+0x174/0x580
[  297.966514][T12253]  ? trace_irq_disable+0x3b/0x140
[  297.966539][T12253]  ? clear_bhb_loop+0x40/0x90
[  297.966557][T12253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.966574][T12253] RIP: 0033:0x7f547639ce59
[  297.966590][T12253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  297.966604][T12253] RSP: 002b:00007f547717a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  297.966622][T12253] RAX: ffffffffffffffda RBX: 00007f5476615fa0 RCX: 00007f547639ce59
[  297.966634][T12253] RDX: 0000200000000040 RSI: 00000000000089a0 RDI: 0000000000000003
[  297.966645][T12253] RBP: 00007f5476432d6f R08: 0000000000000000 R09: 0000000000000000
[  297.966655][T12253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  297.966665][T12253] R13: 00007f5476616038 R14: 00007f5476615fa0 R15: 00007ffcecc0a518
[  297.966685][T12253]  </TASK>
[  298.376412][ T9173] net_ratelimit: 1065 callbacks suppressed
[  298.376429][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.380717][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1752'.
[  298.386190][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.431109][   T13] bond3: (slave batadv0): failed to get link speed/duplex
[  298.447666][T12275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1756'.
[  298.457101][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.541206][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  298.651151][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  298.761165][ T6041] bond3: (slave batadv0): failed to get link speed/duplex
[  298.862180][ T9210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.871130][ T6027] bond3: (slave batadv0): failed to get link speed/duplex
[  298.981251][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  303.391233][ T6041] net_ratelimit: 52 callbacks suppressed
[  303.391283][ T6041] bond3: (slave batadv0): failed to get link speed/duplex
[  303.511181][   T13] bond3: (slave batadv0): failed to get link speed/duplex
[  303.571372][ T9196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.579808][ T9196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.621178][ T6041] bond3: (slave batadv0): failed to get link speed/duplex
[  303.731231][   T13] bond3: (slave batadv0): failed to get link speed/duplex
[  303.841174][ T6027] bond3: (slave batadv0): failed to get link speed/duplex
[  303.951202][   T13] bond3: (slave batadv0): failed to get link speed/duplex
[  304.061162][   T13] bond3: (slave batadv0): failed to get link speed/duplex
[  304.171198][ T6027] bond3: (slave batadv0): failed to get link speed/duplex