last executing test programs:

5.071468298s ago: executing program 1 (id=1483):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0xfffffff7, 0x10}, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xffffffff, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000075266f83000000000000000004000000ffffffffc3000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x79}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xc4db7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xd}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xfffffffd}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8001}]}}}]}, 0x58}}, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0xfffffffd, 0x0, 0x1bb, 0x4}}]}}}]}, 0x78}}, 0x0)

4.79418551s ago: executing program 1 (id=1487):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="580000000002010100000000000000000a00000504000180040003803c0002800c00028004000100210000002c00018014000300fc020000000000000000000000000000140004"], 0x58}}, 0x8044)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)

4.638862102s ago: executing program 1 (id=1491):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000180)={r1, 0x7})
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x5}, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket(0x28, 0x5, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(0x3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000001100)={r3, &(0x7f0000000140)='nat\x00', 0x10000, &(0x7f0000001000)={@align=0x8, {0x6, 0x1000, 0x5, 0xe293}}, 0x9, &(0x7f0000001080), &(0x7f00000010c0)=0x2})
sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x0, 0x3}, {0x0, 0x3, 0x400}], "098097"}, @datasec={0xa, 0x0, 0x0, 0xf, 0x1, [], "bf"}]}, {0x0, [0x2e, 0x61, 0x5f]}}, 0x0, 0x51, 0x0, 0x1, 0x5}, 0x28)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001180)={<r6=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000025c0)={{r6, 0x8, 0xaa1f, 0x4, 0x3, 0x0, 0xffffffff, 0x2, 0x6, 0x101, 0x7, 0xeb, 0x9, 0x2, 0x7fffffffffffffff}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f00000014c0)={{r6, 0x401, 0x800, 0x5, 0x8, 0x67d7ed7e, 0x6, 0x3ff, 0x3, 0xfffffbff, 0x3, 0x0, 0x3, 0x5, 0x65}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88)
recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x40000)

3.485337063s ago: executing program 4 (id=1503):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x8d1, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c)
listen(r2, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r4, 0x0, 0xffffffff000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

3.484127948s ago: executing program 1 (id=1504):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000001000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0001000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000001000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0001000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)

2.796394194s ago: executing program 0 (id=1507):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40))
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0x1, 0x3}, {0x6, 0x2, 0x4, 0x25e}]}, 0x10)
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800)
bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0xce9c, @any, 0x6b0, 0x2}, 0xe)
bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x2, @none, 0x2, 0x1}, 0xe)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000001f00)={{<r3=>0xffffffffffffffff, &(0x7f0000000180)='wlan1\x00', 0x4c002, &(0x7f00000001c0)={@align=0x5f, {0x20, 0x101, 0x4, 0x3}}, 0x8, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x3}, 0x5, &(0x7f0000001e40)=[{0x3, 0x8, &(0x7f0000000280)='\xff\xff\xff\xff\xff\xff', &(0x7f00000002c0)="74001025642d14f009747e5d16ed13e2f5212aa8777ced5e07921cf783a564421c11565e94eb2937a45c86a8a25c7f15af25a459173c3908245c198b24d396690b16c6d7e9a841c00cc449576f4c578f200c091a7df5a050e331dfe7f2508b64a40d9da89c1d42f6ebfbe36984b098d6c267b86fda8bd6fcee34cb737f428a361c42c3c1f63ba567313d25cfc53a1dd05507bf438eb9a79e4572945bea1873e9c94c19565b6dce9b69c04a05c445692a4cd0e7a1ff2fc636d998748eb0033ce6fcfe6d", 0xc3, 0xa}, {0x2, 0x3, &(0x7f00000003c0)='#\x00', &(0x7f0000000b80)="37a4f3fa65048688f04600e2ad0e9eaa0c8a1a2bd205f3f222d32add014a68ed9328705579b429f47cd338a1ad26035dac379ab76008286e6acb476e2fe15b074ff81c8db6564183fb2c1228f74e4457c918be491f18238aaa2d05c643dd8ce0ccf17a76bb9ff5459df8ce59ce07b973882a43be72bda29d49f493035e55f09b3a44d5131ff6a48ee58ebcd1e790267c34d4d3c2ed6c6022bef51560f96e3af6015afd5cab0980f3d790173ff7ba43b229a4d5858e8395fce72418f61dc7b9aa3d033bec28225aa87c572dea60510b1182b0bfb50df69aa92746e3e0771a3baceec37359fa428e48eee25a73d6accfd25d883c98d470a4c89f8b666649781649c38d258d6da4865dfa7dc9671b085b7727940ece0c07c26a679b7da4e0a9198c26e6732bf868ff33121662d71a0836f76d8e65c1bb665d3354a47c2f453b5beafd4ba5c933e1fd29e334c50e43cb4e27caa83d5f6a30865f30c5fc998b01d48abcba61557264b6a6e561b5785f45be60818f667a87e103235a8e0243d82b1ea6866a2065e91b351e8aa8fc261f56d995007c61e6697d8b8fb71c321958903282fb4a83f96746839d5bc61a727a84930d8c6b65142282f32934979ddc894f298f09b9c5e28fa8018a9c38074ad605ba0936a1a8498ad0be78ea724228cecad6bca95873276e7dd0257f243517abea997e3725dfb61dbb38caee55139799a57209f02ede445717fe5e703dd0d9fba5632fbdad5671a6c400f42b95e689b220cca1e051e0deb6ae07f2309e7515196e5a1dc80ce2719806418f8663e0b598a2022d3c0418933aa8acefb22d1778e664d51bfbe20436ecd57b89873945fdb3e14285ccbda2a364f0b977a630a8aaa82aace114d7e6335b6656d9790f3eb6c2c7325189f2e5df2eb0d57ff6922faf69db89cade2122806e12899fead1162c077b5d288d1c0a183caa0087bcc9442a679de8fc9bb994a2128bd02dca618d5e5007655ffe07e220b318c8912202f16be442c2b1ba4d78389f31454b7f2f3b669fc6a0f44e0bb5c73f2e5fa307a7432ab9f4460b907d1b6093ce9f8e1b95852e86e6e09bd834818bc09dae105a05940b51dc589caec5b46cc8ed13e5828934eea0b44fa032f9997e93016c7c4b598046dbbd324e519f07eed450572f39137eec30551b48e13c66ddb4274f3072e0d7b762677560b6799dec04df704b7b199461f1fcae99a8207071da7333760650a161050e58691ada8cafaa275a211223d58853c2b6d2c78702de9b5b9968f0dce658bef8bea0e0eeb3a0468ce42a2473c275eac4c6871683ea55626b3c6cd4afe05af855a327d1cb7c7448c30a314cb863cf2c3c27a4b7fc0f0607c831b58f7fd9eca30e67e6ef64826901b73c221f2445c99702e9491cdab26153d450cff37b555abc795ba071aff11e44cabe16c03ac19cbbeb764256147683a6166bfb553508ffb319f36d073d48a40eb3c6e3a7f8e21e5a7a6c615573a84315c978af1e8ad30af35bbd8542db42244f527a57ee8e824e11b27adba7c4c7766ba475d6536f2b2ad6cad3536dc1f28398edf13d858678715dd571668e94bdf504023de1894cf28f06542c6b46ff911736db675f0cecda5381d2af38bafab8425db21a8bc08739eff7ade07fdfaaf99be5ddea20ccd0927efbc126faa4f882ee48f27b96573beba9d9c0dfc1691ab9d72bddf4c4a619ac933c3adb6fe5736fe164023ab062f4630cf9d81d3b7c9d2f6a6c5da2abc4cd369bb3d660f1d8d443b01ad73733b44fd4afa520cdc76a3e5a2073dc743aa109a85dd619a1e9bd7cc72ec945517be004642839a3e811fbeab7890e7744365ce29458061879f275e95efcbdd644e9e69963c6601d2c26aecdab47745a14f7df59f073d093500c91f7a38153aef681ff32b93b4257bd0b59c3255a450b32906cd99eb210b765ab87ee4cb22147fd4c431a91c94eb5721f2c420186e218e8bf6abd3a934455f55e64e07d2518a357b3b88c33b511b42101d8c2e88d92b4e1539f3e73694413f6c1bb4687aec3340d5d01a487f5e67121dd7342e586cdb93ef6b0ec9ddda5875988e1d98c944b5e54fa14477bb2a194a3f54971231908bf234dd3377db6ceb0abe5c37f7ccbc606c69287ab26f594727640df8c75893cfe015ba677c4bf746ca8e34a5594bd8bb04948e98164a0b2794072b43af010f2d3769e3444d4906460489f0d0bf0bf51402dd3b535ce38666eff6956f7525fb4f9f8640d2c63fbc84a674800612ffe1cc42a077334b4adec2c34c1bb8316e84b12c4b6bbc0ce7427b9991320d047cb70b00787c674d951cb04246ce9d0935a65e82ba5442538ec44ba17c892d485164f5ac8064a3dc72def02db373aa705cd7893fb45423adb44678b8fc9c69f385432088b34c2ca694a3318666382adc9209bb47192e37915e5ca57d7b0713137e9890b9ac843a37ba331d1f3a08773f0c36fb3bd60e6ef9bfd8551cd5ef002b480cc224ae3d40d277464ae2f8b8fbc1a61a9b02693631a2a22b6bb6c1b39627bbe7cb895599792209d80542d11fe042dbf9b8074ef629614a0db8ee826e6231b55132c84d8929750ce69819cc43d3d765c1cf4ecf2a1ebd1810ec660d83d9aa76d37eb2cadb3e2db081b9511d2875b81a3db91ffcb111b918ac68e16f13e83b2df2e9d8ea5bb1fe807170fca95fed7595643b4e7636a5accdf6a45f79a5647cd5030aad1113ea8eb990a71e0c6953e1cfa706352a7603ab198c03f0e6d2fde28587b6e14fa77fb761d9b2597e98debfa7d606499f80e607c7a0199c4ee52ce5feb679901b5ad7543639a3d7604f272b8190272ca05857d37c0f92630588005990966c66675ed19a4adb1a653a621d9904735ad76ea2248766c875a6febd1166bdd95b60e2738eb0f1093d898e05d1ee94977bbaf4546346fc625d9dc0feb8b98781def7a8936de49b6357f843298093d2414377a5810104e1e7f14665f44b9093c63e386739dc7e165f385073f64b324e46b3947d22577a15074c4795b271b180d5324dae84c76bc44030701ca2b2e94a4b3a43bc2e98fb04d6860afd8a0ee96ab9670889c983892334e6aae4e91a8a78149290fdf3ea1a3b4e371bae127c53d38bf9b6bc5db14e89ec5f401caf045c6746b4024d0bb466f9dd73539b7b9d4b76a2e67ec5f6de7b2487f2606adbee629c5d4933e45dae561881eb10509d878890773ca7914424daa26c2d55e6bff85d2119c610ca8b0c85d0c3941701946592dc24fc1e239b58c93aa84eebef2989b3606920749f1a14ed0da676b880912940772541283f2e9c1d8a098187a6482dc4e072bda506178d2dbce0802dd74344c8a09465f1a4e653885b2cdaea0f61c5e1bb2ed8976ea8dc7e9972160a140a2e071a19d0093de65451521a4a2d5785f55dab38dc7133c7f611697d2eb2ee7ee4683a7d1377dce5a395e19cf0525ec16174bb39f826229886abaa1faae42ece83915de6c76d7c2c119aabf4af443413ca96818cabe667de16d9eaf2cdbe63f4ea224f511f9e5dff0a44d87ada1ca378f122afa1f15ca56ba3ac71d8e76c05cf58c365a70a6a47deec57e6bfafe779b47f473f96bc671da4ff4e56a65d0428d4a27de4e80b15c84a426e6f931d02afd0540d78e27e8b9f09a3206944448dc11c1f8879e9f93bcf667e5b26b17de6f7b7ccaae09e51e17086f2082d1c7c970fa691be5b4ce92503d7b1c7f8c755ba8fe4dc493c0b7bd493d97dca40d0d3d99710c873cb068fbb1aed59cd87c70b941ff5e8b29e95c4d46d913d40c3bfb81b1c103f8cdf8a308504a1ac9174b16561ec6f12c6a98de4b908edea858dd2e356469a61f53ae9626f600f069cfae2701eea79f0d1e8118b448fc3a636a1f83c3506b5d55b6bb3da4a7b3f39db1a2b62da6116de247d8994dbcce6fa0f1b6e75c7a6b2525bdc16ba7b2638f4c6d15873dc452059d0d80847f85e21f917961ddb4df9f60852d3295d78b4dee3892ab5f669b33d3109c4a8ea48118ca14c4bd2e6a87e3d1bdaa06f5144726d74c7b86bb4af69bf7ebbd5b31ded997dbc86ed01c1ce747f405d222d45f335a56194744a6263570803c2d8216db3b0006d928b8cde575ee587b87e38199f6ffc92a8729fbcb2f320d438ecfb8b2ed53fca57740e8f8c3549466fe7dfcdf40309beb75a45375e5349d51fff9d2f36ac91df5971f4ef4cb53137b36b1f7f99af6c6635b258bce2c81c8c1d140380d1084c8da01f00fc841918711aebc82ab92ad4150850ec1593bb0c13809448351e026150a34848ee5159558f18a180f171b1608cdb9c0bb0d49908271d95c43ced13bce49ee67c4ca29ad8b1b7b7af65b4247fcca50c35521f61c48c99ef7f0fc546cbb8de7be8645a5e9d6f706ae44748472bc189b715ff9a116f5fbb7ca1bc06b02609e6a09fc7ca7ec272d452e01d65cc75c593468cf94b82f3c67ff3de84639834e3c84ac15e9b47f985f8bad34735fdf27ecd25a88f8e27a2e2f09aecb3b899131d0bfcb72d7ddf12a94e22d6374a85438af118e1f5774401e4270e49c13e8af501dbd3d6ec4704f508206ce8c2231e5e59c820d7bf6f21818a63ced6f413731d26b7168632540380904723a3ce9bce621a05772aa50c79f1cb0fa0b09c984a6824e8b808f731a3fa88f30ac4dd49cfbef2c564bdbacab06c1c3896963a0a6fabe60aae8f62076efb0d61f70833acec1a49df71568b371c9baaa9c942e3f577cab66e9d487a68c5372fe85db9b98af480a6c2f9eec2d5613cc1dcfa0fb0043f412aece83cdda65c63cb3bc2371ce24fa4eceb4f246c1ceac8935aec9ae87b97b59d6bb111dae3318b569999415739428bbe1e7e313b01c879034a91a52b68b2af3ebaa01c410dbb437d935ffc2136260deac567a156873d4dce8f0140c3c0b841ca77f2dab079f6845f0644443d06e3ec997616463a335f08c7d051ca9c72337be0e5550f2f0e54b939f8abd866640015c59946c3492574d7c97d42aec293cb98c98e13f6b6da45b061a2df6eb49f91f91f7f3dff675a7b790a88802a0b79db9f1874ca53fa6ffbe82f8758063fe966d5e198636b622a13eb18217577d93be969ca68e07ddaa44f9da69661e3fc1ed99cd3075ab2dc3564e8c7b43082d7cbec5533ff1be8301c2af045736dfb717174cc1cc6f8a90166be838150f00f14309f2443d3678bc706e5ac705b0a425f0ceb645a99a113313cb7be153618a9169e04fb5a29f6e29b89af27f96e2ed8ed72848438f5d09fb6526d1b0efa351c02d15c3fe48b553f7bd549a022116f1ea680468de51104ec26337dbcf452e4d8a7d53bd7a4e44774d1723cd50172b3a9009a74b239168de48d56b147b9d4d55f910f771d11b240644118482e25ec5379f957d75689d260096dfadc39e76feca0ad4f9493c4e3461a367c4f73a97761425d19d83567394c89c32be1765bfe5e4c19b3069d8cf82e95cf65bab4323bc53413979df37f3183957a54961a9d5746fe7c3676fe758b1051e4702ffddbc2890ddc978aef2aa8acc6a2e0884728dc19a805e11d6ac6cb466aa07061bbe5785923abf05ae903c529e2c2e3929046499dfe47c6d791c2f7e22b7c0673d7a662ffc2240b2ebbce5418c9b80cc67104e36deeed2cb3bf711132be4602c62846c13151fe5286491b23afc14c569ded0b0ebc579a4e35d3f99632dfdf57bec4569da44c11ea50f9e623257286a9fb301f9317df01b339a37ce922cee238aa3edb19d10695b70d51e28963a6fb7e6606ad373d174ab199a1de7cad1073547f3", 0x1000, 0x10}, {0x3, 0x6, &(0x7f0000001b80)='%+/\xc4\x00', &(0x7f0000001bc0)="52b7ef7c6c4b029c8cc26c3bb67cb344d842174ea97d7ef20577183283a6fc01507bd7cc60b8e1e2f967db37a77ac6ff93a766bfc8487b8369363e4fca736aed8b7ce80d259816cb6ff033a26a894c45b79dd6af0326f956a1551f433049712714926a82d8a0d1153aaa92daabe60d0ef3b9bd6f5c79e105052aada3c4", 0x7d, 0x1a}, {0x3, 0x782, &(0x7f0000001c40)='\xff\xff\xff\xff\xff\xff', &(0x7f0000001c80)="6ca1c72bf76c822031e3805510b5475a2807daaa9641c9715d40a6f46bada16e5bb23ed05b10c25d1e49e4e6c0551864762a94d88d9214f53a9290025d3e7f1e6f1ed37c8df7c352e88181c55d397814f7ec2d368d343f111739e35045bfee368d11261500af28a5a868a07a442883942cecfa8a0c5d2495f9f00445767d43736ea8e77380c800362737074eed3efbf45ba39e19c86354bf9fc67aa1d734b12b1f479b3cdb0e3fbd392b1d7ae49ae5ffdaddcb07ebfc3181524a62cdcfc0c880a43f721dfe61e5f788db5a2af13da0d98d946d599ad592", 0xd7, 0x20}, {0x2, 0xb, &(0x7f0000001d80)='\x00', &(0x7f0000001dc0)="4c26f190f7afb47a0ef396e3a25d80e1ae4c06dbcbf9bccd46ab486a07bcfe27a8c45dd768a8f4665826a5ac24957c5f398c22c1775785fd6256a807ebc36fa317ac608c2a40f3ca6cdbdc296d6d", 0x4e, 0x30}]})
ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="dffeff8d00"})

2.706023611s ago: executing program 0 (id=1508):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) (async, rerun: 32)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) (async, rerun: 32)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (rerun: 64)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="f5f39ade", @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf250a00000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@getstats={0x1c, 0x5e, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3}, ["", "", "", ""]}, 0x1c}}, 0x4080) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r5, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x8002, 0x312, 0x7}}], 0x20, 0x4004}, 0x0) (async)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0xfffc, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x9}, {0x80000000000000, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xff}}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in6=@mcast1, 0x0, 0x4, 0x0, 0x50}, {{@in6=@loopback, 0x100000, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x2, 0x4, 0x0, 0x0, 0x0, 0x5, 0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002300)={{r6, &(0x7f00000002c0)='-/\x00', 0x200000, &(0x7f0000000340)={@_ha_fsid={[0x4, 0x1]}, {0x8001, 0x7fff, 0x1000, 0xffffffffb68df531}}, 0x1, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x1}, {[0x7fffffff, 0x7, 0xfffffffc, 0xeaf1]}, 0x5, 0x1000, &(0x7f0000001300)=""/4096}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0}) (async)
r9 = socket$inet6(0xa, 0x3, 0x7)
ioctl$sock_ifreq(r9, 0x8992, &(0x7f0000000100)={'lo\x00', @ifru_names='ipvlan0\x00'}) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffe0}, {}, {0xd, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@generic={0x1, 0x7, 0x2, 0x8, 0xa}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.623928918s ago: executing program 3 (id=1509):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19000000040000000400000002000000000000ad89b3d291f3e86e2d0f00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r3}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}, 0xfffa}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x1, 0x27dfdffd, {0xa, 0x0, 0x10, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19000000040000000400000002000000000000ad89b3d291f3e86e2d0f00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket(0x2, 0x80805, 0x0) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r3}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}, 0xfffa}, 0x90) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x1, 0x27dfdffd, {0xa, 0x0, 0x10, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) (async)

2.442144162s ago: executing program 3 (id=1511):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x120, 0x120, 0x448, 0x230, 0x448, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x6, 0x0, 0x6}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x7ff, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @DNPT={0x0, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@local, 0x36, 0xb, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x65a) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0xb, 0x0, 0x1, 0x5392, 0x7, 0x9, {0x0, @in6={{0xa, 0x4e60, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20050840) (async, rerun: 32)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003003e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

2.42884277s ago: executing program 2 (id=1512):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x18, 0xff, 0x3, 0x389, 0x8, 0x2, 0x4, 0x6, 0x2, 0x7, 0x7fffffff, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x9, [0xe, 0xfb]}})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="1c0600002c000100fefffffffcdbdf250a06f2801504"], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x1, 0x6, 0x7ad8, 0xf}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000104000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000008c4030024001280200001006772667461700000140027bbd60602002020000008000100", @ANYRES32=0x0, @ANYBLOB="3bfd70133ad2d04378d5a5da75cbfed8eed0925fc901248629583a2d91553cbfcf26649de1f247fef99ce465ae807ab6638477b8e267f00cf86d7269f9fde138650e3b0026d184f46dcc33417a59f577c62b350986d0f15155d6ef54a374e091217ee67b138f73bfca0a06b1bfa07b8357341892733c38c8e16ac7f4d3fa9f26a6e46919c23e60b89ff3f43670dc00c3b566d24ebd6f351a8d43f937a7e6456701245d9f3acfa00cd210746561bf6c24e500000000c49d2bb1bbd0640f1cc27d5026578cffff654fa132923ec4eae3e93fe781f982c6344a9622a316"], 0x44}, 0x1, 0x0, 0x0, 0x484c}, 0x0)

2.265008344s ago: executing program 4 (id=1513):
r0 = socket(0x26, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @empty}}, 0x1e)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000005700)=[{&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x7, @remote, 0x1}, 0x1c, &(0x7f0000001800)=[{&(0x7f00000006c0)='\\', 0x1}], 0x1, &(0x7f0000001840)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x0, 0x3, 0x6, 0x7, 0x2, 0x5, 0x7fff, r2}}], 0x30, 0x4000001}], 0x1, 0x0)
r3 = socket(0xa, 0x3, 0x87)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x8, 0x70bd2a, 0x2, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448c5}, 0x8000)
sendmmsg$unix(r3, &(0x7f000000cc80)=[{{&(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000000040)="a542", 0x2}, {&(0x7f00000000c0)="8f0d123a3cdf1fcf1357d5ee4e44b70e7d9e54ebca1c0ad3b840a28ca98bcdd63e6ae16ad547fe97d7a5059ada3be07e9026d9f78b2acb2f297164ba642835482b87b218ec3a6e73080e6139d06395ea94f6a23cadce58b7af330d691542c6555130188d2b7aa36ed7f6bade6490515b728a5559b522be", 0x77}], 0x103c}}], 0x1, 0x20000884)
sendmsg$802154_raw(r3, &(0x7f0000001ac0)={&(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000001a80)={&(0x7f0000000a80)="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", 0x1000}, 0x1, 0x0, 0x0, 0x51}, 0x4005)

2.194206905s ago: executing program 0 (id=1514):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x72}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x10}, @TCA_CT_ZONE={0x6, 0x4, 0x1ff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6249}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x50}}, 0x800)

2.175551792s ago: executing program 1 (id=1515):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a0001000000000000e1ffff80808000000000000000000014000100fc00000000000000000000000000000008000f0007"], 0x38}}, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x100000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x28, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100))
r5 = epoll_create(0x1200000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x40000001})
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000080)={0x2000a212})
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r6, 0x1, 0x70bd2b, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7f}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x34}}, 0x0)

2.113420388s ago: executing program 2 (id=1516):
r0 = socket(0x2, 0x3, 0xff)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4) (fail_nth: 3)

2.026986501s ago: executing program 3 (id=1517):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket(0x10, 0x3, 0x0)
close(r4)
setsockopt$sock_void(r5, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.76302569s ago: executing program 2 (id=1518):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(0xffffffffffffffff)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83", 0x6a}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendfile(r2, r3, 0x0, 0xffffffff000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x3, 0x2, 0xfd}}, 0xe8)
close(r7)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

1.708390668s ago: executing program 1 (id=1519):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e305000a00000200000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'bond_slave_1\x00', 0x2000})
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180)={0x2}, 0x1)
socket$netlink(0x10, 0x3, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5}, 0x94)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000100000004000000926c2417101ccc194243adfff675848b014f1e560a3a56c1cc8bb54cf4d1aa75113a46663a7bd1490be33d0ebee7252ce3c5eae67b79dd4429d18466c735aaa9a3160e8a13569eba83830c08c98293d3791669c3fbf66004a09c4fe731364c1d76a24d725f7b44f6727f3f07b040d625bdb656d8"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd2b, 0x25dfdbff, {0x7, r5}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4a844}, 0x4010)

1.707654643s ago: executing program 0 (id=1520):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}})
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'})
r4 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01009eb5cc8df0f2bdb0c95b0000000000000074b80000000800030081f12b06fd65b5dece99ac0f98241d94e70b33ecd522a26b9fbb2731c93a7be39ad8d4ec986a780a10bd840291740500a1f0aaf71f71d1410102c917258662c2496661bbc7426ed38080f6089ada695461a8697d7068d73e760c45d3330d3519d0", @ANYRES32=r11, @ANYBLOB="04005b00"], 0x20}}, 0x48000)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r15}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r14}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.56143978s ago: executing program 4 (id=1521):
r0 = socket(0x2, 0x3, 0xff)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0xffff0000, 0x0, 0x80}, 0x4)

1.418740143s ago: executing program 4 (id=1522):
socket$unix(0x1, 0x5, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000600)=""/3, &(0x7f0000000480)=0x3)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000100)=0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000800)={0x2, 0xee1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000e00)="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", 0x179}, {&(0x7f0000000640)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbedd46c70c123cb43ed522a35874f4503d56d44c71c7", 0x69}, {&(0x7f0000000880)="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", 0x170}, {&(0x7f0000000400)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea8", 0x3a}], 0x6}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="aa9753868681adaec6843c1ac0e0dfa6496b75ddeb7cad9d757fc98ff91cbfbf063d8dcb9e8645307f0f7699b3d14947b05a8794bf13909d4181c326d30357498e3e7828746d53fa3d6c44b52bb3", 0x4e}, {&(0x7f0000000280)="03904cd6db32d2d4ab68b8b62671b62d7f020be2e22dc4b843bd2a191ec144a86f3313cd9d2348e1a641a7e3dd7386b20c8e04b4a6baff10ecf8e8b631e58bf293950f9b71a7d2637047fc4c61b442cd75", 0x51}], 0x2}}], 0x3, 0x2404c044)
writev(r1, &(0x7f0000001580)=[{&(0x7f0000000f80)="94ecf32a56f6", 0x6}], 0x1)
readv(r0, &(0x7f0000003540)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1)

1.286666764s ago: executing program 3 (id=1523):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf250700", @ANYRES32=0x0, @ANYBLOB="6b8a00003015010008001d0080"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @multicast1}, &(0x7f0000000180)=0xc)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x2000c851, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
sendto$inet(r4, 0x0, 0x3b, 0x2000c015, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYBLOB="12e01b", @ANYRESOCT], 0x1000f)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)

1.024446616s ago: executing program 0 (id=1524):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfffffffb, 0x8}, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfffffffa, 0x4, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r12, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x54}}, 0x4c000)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r10}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

711.614066ms ago: executing program 2 (id=1525):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff0000000000000000009500040000000000367239e55adaedaef5af0a020000000000180100002020782500000000002020207b1a00fe000000000c0000000000000007010000f8ffffffb702000008000000b501000000000000850000000600000095000000000000003e71b573b26b7efaef166c1ac746d1f9ffc79c57a6db1810000000345c7d0399ff1d22bd9aa4"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) (rerun: 32)

528.579843ms ago: executing program 0 (id=1526):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x26}, 0x28)
r3 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000002cc0)={0xa, 0xfe80, @empty}, 0x27, &(0x7f0000002c80)=[{&(0x7f0000001980)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a34af0e2eabf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819eeae05952", 0x1004}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000002b80)="14d4c4bf5bc626102171937479b1cb3c53696466d0ad4a4b612125ef4d9b81c1a69a564acfc2d5cc65e2f74fdf5e9e2ba036876350bf81ea6f4e9cbcb244c1766c7d813441cb1382291870019811339fea4bb296d41b6d74493a8c13facb99e2878a429a45b6908d8b16012c1f9db0370d561ef978db4b03218239f8017b40c59b89b7e035fc3e6e320930197c381f39217f874bb2b169bd68d33645893c976624315eda8d1af448ab284ce5520d248637db264cff682991312753779e8ad5449e2faacb63f3898221e1d1b91b689d2e43075a750637ee34dd89cc3777c834ff62960979d02c2bb3d31ea7a022661b4cdcf58de6b9b5818dbd", 0xf9}], 0x3, &(0x7f00000010c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0xff00)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r6], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(0xffffffffffffffff, 0x0, 0x0)

364.956521ms ago: executing program 4 (id=1527):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async, rerun: 64)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2f7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6d}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (rerun: 64)
r4 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async, rerun: 64)
readv(r4, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) (async, rerun: 64)
recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x4, 0x4, 0x1, {0xa, 0x4e22, 0xb41, @mcast2, 0x81}}}, 0x3a) (async, rerun: 64)
sendmmsg$unix(r4, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) (rerun: 64)

361.933109ms ago: executing program 2 (id=1528):
syz_80211_join_ibss(&(0x7f0000000700)='wlan1\x00', &(0x7f0000000740)=@default_ibss_ssid, 0x6, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000440)={<r1=>0xffffffffffffffff, &(0x7f0000000340)='/dev/ppp\x00', 0x208400, &(0x7f0000000380)={@_ha_fsid={[0xd80, 0x8]}, {0x3, 0x7fff, 0x639, 0x2a}}, 0x7, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x7})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5f, 0x0, 0x0, 0x0, <r3=>0x0, 0x16, 0x0, 0x0, 0x10, &(0x7f0000000300), 0x0, 0x0, 0x63, 0x8, 0x0, 0x0}}, 0x10)
r4 = socket(0xa, 0x3, 0x87)
sendmmsg$unix(r4, &(0x7f000000cc80)=[{{&(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000001dc0)="a5", 0x1}, {0x0, 0xa00}], 0x2}}], 0x1, 0x24040080)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x2, 0xd2, &(0x7f00000009c0)=""/210, 0x0, 0x40, '\x00', r2, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000000000000000000000fd1723589a18b7522be8950b49e4431d1465ff40c56fccf421741c2598b2576d592bb91fac37acda0d6cf79bdf054d8be9bc1f45da91a51ce1214bc430c0a04fee37d726dc4cabcdcfa19dda069ad6c94d5f94b7d79508c22508a448e9f2b7e19837654469794625c30028fc4ac248625aa6894ad1529207cdf96ccbfba516f628331e8ddfc914e9fb17f2b6191511bcaae5fd7604b690d8d2e20f04624ae8b50566fb140220edd7737ae72b723f55415f07354cc0c0df27664973e8534166058a6c4a11d32c9419502b090a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000500"/28], 0x50)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0x7, &(0x7f0000000140)=@raw=[@exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ldst={0x3, 0x1, 0x3, 0x0, 0xa, 0xc, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc}], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x41, &(0x7f0000000240)=""/65, 0x41100, 0x1, '\x00', r0, @fallback=0x27, r1, 0x8, &(0x7f0000000780)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x5, &(0x7f0000000580)=[r5, r6], &(0x7f00000005c0)=[{0x1, 0x5}, {0x80000001, 0x2, 0x5, 0x8}, {0x2, 0x2, 0x5, 0x7}, {0x3, 0x2, 0xb, 0x9}, {0x3, 0x4, 0x5, 0x1}], 0x10, 0x3}, 0x94)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, 0x0, &(0x7f0000000100)=0x1f)
r9 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x891b, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x1)
ioctl$PPPIOCGNPMODE(r7, 0x4008744b, &(0x7f0000000100)={0x283})

247.38756ms ago: executing program 3 (id=1529):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

89.8204ms ago: executing program 3 (id=1530):
r0 = socket(0x2b, 0x80801, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000005c0)={0x3c, r2, 0x1, 0xfbffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x163}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040081}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x40040)
close(r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x14, 0x2, 0x4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xa, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350)
accept$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040)
sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801)

9.057658ms ago: executing program 4 (id=1531):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10000000}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000050900000000000000000000850000007500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_bt_hci(r1, 0x800448d2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c07000000000108000000000000000000550400", @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8017000100", @ANYRES32, @ANYBLOB="080003000300000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0xc000)

0s ago: executing program 2 (id=1532):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @generic={0x306, 0x8863, 0x6, 0x4, 0x4, @random="454efa9f6429", "a63af4ca"}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

0:50:50:50:50
[  245.400741][ T5868] netlink: 'syz.2.3': attribute type 3 has an invalid length.
[  245.402083][ T5867] Zero length message leads to an empty skb
[  245.458411][ T5868] netlink: 'syz.2.3': attribute type 3 has an invalid length.
[  245.503179][ T5867] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  245.730902][ T5878] IPVS: Scheduler module ip_vs_ not found
[  245.884982][ T5887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'.
[  245.908818][ T5887] netlink: 'syz.2.12': attribute type 7 has an invalid length.
[  245.918024][ T5887] netlink: 'syz.2.12': attribute type 8 has an invalid length.
[  245.932917][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'.
[  246.060645][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'.
[  246.122802][  T992] IPVS: starting estimator thread 0...
[  246.245116][ T5896] IPVS: Scheduler module ip_vs_ not found
[  246.280570][ T5905] dummy0: entered allmulticast mode
[  246.294091][ T5906] xt_hashlimit: size too large, truncated to 1048576
[  246.313550][ T5903] dummy0: left allmulticast mode
[  246.361383][ T5900] IPVS: using max 33 ests per chain, 79200 per kthread
[  246.393423][ T5909] tipc: Started in network mode
[  246.410214][ T5909] tipc: Node identity c67471cd014d, cluster identity 4711
[  246.436261][ T5909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.457699][ T5912] syzkaller0: entered promiscuous mode
[  246.463411][ T5912] syzkaller0: entered allmulticast mode
[  246.768562][ T5904] tipc: Resetting bearer <eth:syzkaller0>
[  246.808980][ T5904] tipc: Disabling bearer <eth:syzkaller0>
[  246.999944][ T5934] syzkaller0: entered promiscuous mode
[  247.014492][ T5934] syzkaller0: entered allmulticast mode
[  247.223223][  T992] IPVS: starting estimator thread 0...
[  247.358260][ T5946] IPVS: Scheduler module ip_vs_ not found
[  247.401650][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'.
[  247.421337][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'.
[  247.478107][ T5947] IPVS: using max 28 ests per chain, 67200 per kthread
[  247.735774][ T5963] wg1 speed is unknown, defaulting to 1000
[  247.758342][ T5963] wg1 speed is unknown, defaulting to 1000
[  247.786739][ T5963] wg1 speed is unknown, defaulting to 1000
[  247.843797][ T5963] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  247.898113][ T5963] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  247.949978][ T5963] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  248.011512][ T5963] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  248.043240][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'.
[  248.066537][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'.
[  248.077707][ T5972] netlink: 40 bytes leftover after parsing attributes in process `syz.4.36'.
[  248.094229][ T5963] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  248.115998][ T5944] raw_sendmsg: syz.0.28 forgot to set AF_INET. Fix it!
[  248.141209][ T5963] wg1 speed is unknown, defaulting to 1000
[  248.195575][ T5982] wg1 speed is unknown, defaulting to 1000
[  248.459956][ T5963] wg1 speed is unknown, defaulting to 1000
[  248.639749][ T5963] wg1 speed is unknown, defaulting to 1000
[  248.665488][ T5994] IPVS: Scheduler module ip_vs_ not found
[  248.672340][ T5963] wg1 speed is unknown, defaulting to 1000
[  248.716783][ T5963] wg1 speed is unknown, defaulting to 1000
[  248.749402][ T5999] netlink: 76 bytes leftover after parsing attributes in process `syz.3.44'.
[  248.772262][ T5963] wg1 speed is unknown, defaulting to 1000
[  248.813762][ T5999] syzkaller0: entered promiscuous mode
[  248.830617][ T5999] syzkaller0: entered allmulticast mode
[  248.840831][ T6002] netlink: 88 bytes leftover after parsing attributes in process `syz.0.46'.
[  249.274711][ T6011] wg1 speed is unknown, defaulting to 1000
[  250.066678][ T6012] syz.0.48 (6012) used greatest stack depth: 17376 bytes left
[  250.275809][ T6044] tipc: Started in network mode
[  250.303554][ T6044] tipc: Node identity 76efc4085438, cluster identity 4711
[  250.326145][ T6044] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.393469][ T6055] syzkaller0: entered promiscuous mode
[  250.426129][ T6055] syzkaller0: entered allmulticast mode
[  250.457254][    C0] syzkaller0: tun_net_xmit 90
[  250.478782][ T6043] tipc: Resetting bearer <eth:syzkaller0>
[  250.563294][ T6043] tipc: Disabling bearer <eth:syzkaller0>
[  250.761350][ T6066] bond1: option resend_igmp: invalid value (2878)
[  250.768121][ T6066] bond1: option resend_igmp: allowed values 0 - 255
[  250.779832][ T6066] bond1 (unregistering): Released all slaves
[  251.106157][ T6100] __nla_validate_parse: 4 callbacks suppressed
[  251.106177][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'.
[  251.294090][ T6100] netlink: 'syz.1.64': attribute type 11 has an invalid length.
[  251.681919][ T6132] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.74'.
[  251.834078][ T6138] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.77'.
[  251.960052][ T6138] syzkaller1: entered promiscuous mode
[  251.980551][ T6138] syzkaller1: entered allmulticast mode
[  252.208533][ T6157] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  252.568051][ T6172] netlink: 'syz.4.84': attribute type 1 has an invalid length.
[  252.942916][ T6190] netlink: 'syz.0.90': attribute type 1 has an invalid length.
[  253.056636][ T6197] netlink: 6048 bytes leftover after parsing attributes in process `syz.1.88'.
[  253.325611][ T6209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.353427][ T6206] syzkaller0: entered promiscuous mode
[  253.359803][ T6206] syzkaller0: entered allmulticast mode
[  253.380405][ T6206] tipc: Resetting bearer <eth:syzkaller0>
[  253.406325][ T6205] tipc: Resetting bearer <eth:syzkaller0>
[  253.456668][ T6205] tipc: Disabling bearer <eth:syzkaller0>
[  253.506883][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.96'.
[  253.675952][ T6238] netlink: 'syz.0.101': attribute type 32 has an invalid length.
[  253.721420][ T6238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'.
[  253.836753][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'.
[  253.847705][ T6243] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  253.936935][ T6232] bond1: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms
[  253.948908][ T6232] bond1: entered promiscuous mode
[  254.122891][ T6239] wg1 speed is unknown, defaulting to 1000
[  254.141466][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'.
[  254.563053][ T6285] netlink: 404 bytes leftover after parsing attributes in process `syz.1.110'.
[  254.653365][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.110'.
[  254.946754][ T6301] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  254.984671][ T6301] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  255.085840][ T6310] netlink: 'syz.2.114': attribute type 8 has an invalid length.
[  255.145247][ T6310] veth1_to_team: entered promiscuous mode
[  255.182064][ T6310] gretap0: entered promiscuous mode
[  255.231473][ T6310] veth1_to_batadv: entered promiscuous mode
[  255.285578][ T6310] hsr1: entered promiscuous mode
[  255.442669][  T807] IPVS: starting estimator thread 0...
[  255.493185][ T6333] IPVS: Scheduler module ip_vs_ not found
[  255.523809][ T6328] netlink: 'syz.3.119': attribute type 3 has an invalid length.
[  255.587962][ T6334] IPVS: using max 35 ests per chain, 84000 per kthread
[  255.719346][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  255.739429][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  256.078751][ T6362] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  256.116261][ T6362] macvlan1: entered promiscuous mode
[  256.144147][ T6362] macvlan1: entered allmulticast mode
[  256.176164][ T6362] veth1_vlan: entered allmulticast mode
[  256.223520][ T6375] __nla_validate_parse: 6 callbacks suppressed
[  256.223538][ T6375] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.128'.
[  256.448896][ T6385] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.131'.
[  256.619645][ T6390] FAULT_INJECTION: forcing a failure.
[  256.619645][ T6390] name failslab, interval 1, probability 0, space 0, times 1
[  256.664612][ T6390] CPU: 1 UID: 0 PID: 6390 Comm: syz.0.132 Not tainted syzkaller #0 PREEMPT(full) 
[  256.664638][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  256.664655][ T6390] Call Trace:
[  256.664666][ T6390]  <TASK>
[  256.664673][ T6390]  dump_stack_lvl+0xe8/0x150
[  256.664705][ T6390]  should_fail_ex+0x412/0x560
[  256.664733][ T6390]  should_failslab+0xa8/0x100
[  256.664760][ T6390]  __kmalloc_cache_noprof+0x88/0x660
[  256.664782][ T6390]  ? lockdep_hardirqs_on+0x7a/0x110
[  256.664803][ T6390]  ? __request_module+0x2d0/0x630
[  256.664829][ T6390]  __request_module+0x2d0/0x630
[  256.664850][ T6390]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  256.664873][ T6390]  ? __pfx___request_module+0x10/0x10
[  256.664896][ T6390]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  256.664932][ T6390]  ip_vs_scheduler_get+0x131/0x270
[  256.664954][ T6390]  ip_vs_add_service+0xab/0x1990
[  256.664987][ T6390]  ? __ip_vs_service_find+0x1c3/0x8e0
[  256.665022][ T6390]  ? rcu_read_unlock+0x87/0xa0
[  256.665049][ T6390]  do_ip_vs_set_ctl+0x89f/0xb00
[  256.665078][ T6390]  ? __pfx_do_ip_vs_set_ctl+0x10/0x10
[  256.665117][ T6390]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  256.665136][ T6390]  ? nf_setsockopt+0x3a/0x290
[  256.665158][ T6390]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  256.665186][ T6390]  ? __pfx_aa_sk_perm+0x10/0x10
[  256.665212][ T6390]  nf_setsockopt+0x26f/0x290
[  256.665230][ T6390]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  256.665250][ T6390]  do_sock_setsockopt+0x17c/0x1b0
[  256.665276][ T6390]  __x64_sys_setsockopt+0x13d/0x1b0
[  256.665299][ T6390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.665318][ T6390]  do_syscall_64+0x15f/0xf80
[  256.665337][ T6390]  ? trace_irq_disable+0x3b/0x140
[  256.665361][ T6390]  ? clear_bhb_loop+0x40/0x90
[  256.665382][ T6390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.665403][ T6390] RIP: 0033:0x7f3925b9cdd9
[  256.665423][ T6390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.665437][ T6390] RSP: 002b:00007f3926abf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  256.665462][ T6390] RAX: ffffffffffffffda RBX: 00007f3925e15fa0 RCX: 00007f3925b9cdd9
[  256.665474][ T6390] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003
[  256.665484][ T6390] RBP: 00007f3926abf090 R08: 000000000000002c R09: 0000000000000000
[  256.665495][ T6390] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  256.665505][ T6390] R13: 00007f3925e16038 R14: 00007f3925e15fa0 R15: 00007fff973f3cc8
[  256.665534][ T6390]  </TASK>
[  256.666764][ T6390] IPVS: Scheduler module ip_vs_ not found
[  256.759595][ T6394] netlink: 140 bytes leftover after parsing attributes in process `syz.1.133'.
[  257.180257][ T6407] netlink: zone id is out of range
[  257.312640][ T6416] tipc: Started in network mode
[  257.333428][ T6416] tipc: Node identity 3e44f5754f77, cluster identity 4711
[  257.365132][ T6416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.387978][ T6420] syzkaller0: entered promiscuous mode
[  257.407374][ T6420] syzkaller0: entered allmulticast mode
[  257.426580][ T6421] warning: `syz.2.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  257.453127][ T6414] IPVS: Scheduler module ip_vs_ not found
[  257.494200][ T6416] tipc: Resetting bearer <eth:syzkaller0>
[  257.539757][ T6416] Driver unsupported XDP return value 0 on prog  (id 26) dev N/A, expect packet loss!
[  257.667665][ T6427] bond1: entered promiscuous mode
[  257.672884][ T6427] bond1: entered allmulticast mode
[  257.683416][ T6427] 8021q: adding VLAN 0 to HW filter on device bond1
[  257.699457][ T6413] tipc: Resetting bearer <eth:syzkaller0>
[  257.740172][ T6413] tipc: Disabling bearer <eth:syzkaller0>
[  257.830890][ T6439] IPVS: Scheduler module ip_vs_ not found
[  258.056871][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'.
[  258.113642][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'.
[  258.173553][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.145'.
[  258.246415][ T6459] netlink: 'syz.2.149': attribute type 1 has an invalid length.
[  258.302321][ T6459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.149'.
[  258.348885][ T6459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.149'.
[  258.376092][ T6459] macvlan2: entered promiscuous mode
[  258.384462][ T6459] macvlan2: entered allmulticast mode
[  258.475682][ T6463] ip6gretap0: entered promiscuous mode
[  258.798428][ T6478] IPVS: Scheduler module ip_vs_ not found
[  259.003789][ T6494] netlink: 104 bytes leftover after parsing attributes in process `syz.1.157'.
[  260.332035][ T6518] xt_l2tp: invalid flags combination: 0
[  260.630800][ T6515] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  260.783337][ T6523] block nbd3: not configured, cannot reconfigure
[  260.861022][ T6525] trusted_key: syz.0.166 sent an empty control message without MSG_MORE.
[  261.025420][ T6541] netlink: 52 bytes leftover after parsing attributes in process `syz.4.167'.
[  261.195938][ T6553] netlink: 'syz.2.172': attribute type 12 has an invalid length.
[  261.231310][ T6553] netlink: 'syz.2.172': attribute type 29 has an invalid length.
[  261.253522][ T6553] __nla_validate_parse: 1 callbacks suppressed
[  261.253540][ T6553] netlink: 148 bytes leftover after parsing attributes in process `syz.2.172'.
[  261.338480][ T6555] xt_hashlimit: size too large, truncated to 1048576
[  261.467675][ T6557] xt_hashlimit: size too large, truncated to 1048576
[  261.469402][ T6565] xt_hashlimit: size too large, truncated to 1048576
[  261.493294][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'.
[  261.709529][ T6565] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  261.751219][ T6557] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  261.772142][ T6574] Cannot find set identified by id 0 to match
[  261.784826][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.179'.
[  262.250874][ T6601] x_tables: duplicate underflow at hook 2
[  262.724576][ T6612] wg1 speed is unknown, defaulting to 1000
[  262.728581][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[  262.764676][ T6618] netlink: 'syz.3.190': attribute type 1 has an invalid length.
[  262.839186][ T6618] 8021q: adding VLAN 0 to HW filter on device bond1
[  262.956576][ T6618] netlink: 'syz.3.190': attribute type 10 has an invalid length.
[  263.068403][ T6618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  263.080709][ T6618] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  263.090731][ T6618] team0: Failed to send options change via netlink (err -105)
[  263.098910][ T6618] team0: Port device netdevsim1 added
[  263.114538][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'.
[  263.253733][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'.
[  263.319230][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'.
[  263.332010][ T6638] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.196'.
[  263.370328][ T6641] netlink: 84 bytes leftover after parsing attributes in process `syz.0.197'.
[  263.444832][ T6641] lo: entered allmulticast mode
[  263.514878][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.198'.
[  263.812357][ T6655] syzkaller0: entered promiscuous mode
[  263.842060][ T6655] syzkaller0: entered allmulticast mode
[  263.866896][ T6662] veth1_to_batadv: entered allmulticast mode
[  263.889824][ T6662] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  264.367670][ T6697] wg1 speed is unknown, defaulting to 1000
[  264.593650][ T6708] syz.2.213: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  264.612928][ T6708] CPU: 0 UID: 0 PID: 6708 Comm: syz.2.213 Not tainted syzkaller #0 PREEMPT(full) 
[  264.612956][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  264.612968][ T6708] Call Trace:
[  264.612975][ T6708]  <TASK>
[  264.612984][ T6708]  dump_stack_lvl+0xe8/0x150
[  264.613012][ T6708]  warn_alloc+0x249/0x340
[  264.613042][ T6708]  ? stack_trace_save+0xa9/0x100
[  264.613076][ T6708]  ? __pfx_warn_alloc+0x10/0x10
[  264.613110][ T6708]  ? kasan_save_track+0x4f/0x80
[  264.613134][ T6708]  ? kasan_save_track+0x3e/0x80
[  264.613157][ T6708]  ? __kasan_kmalloc+0x93/0xb0
[  264.613187][ T6708]  ? __kmalloc_cache_noprof+0x31c/0x660
[  264.613214][ T6708]  ? xskq_create+0x56/0x170
[  264.613234][ T6708]  ? xsk_setsockopt+0x54c/0x990
[  264.613276][ T6708]  ? do_sock_setsockopt+0x17c/0x1b0
[  264.613297][ T6708]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  264.613318][ T6708]  ? do_syscall_64+0x15f/0xf80
[  264.613345][ T6708]  __vmalloc_node_range_noprof+0x132/0x1750
[  264.613404][ T6708]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  264.613438][ T6708]  ? __kasan_kmalloc+0x93/0xb0
[  264.613468][ T6708]  vmalloc_user_noprof+0xad/0xe0
[  264.613494][ T6708]  ? xskq_create+0xbf/0x170
[  264.613525][ T6708]  xskq_create+0xbf/0x170
[  264.613548][ T6708]  xsk_init_queue+0x8a/0xe0
[  264.613575][ T6708]  xsk_setsockopt+0x54c/0x990
[  264.613614][ T6708]  ? __pfx_xsk_setsockopt+0x10/0x10
[  264.613645][ T6708]  ? __pfx_aa_sk_perm+0x10/0x10
[  264.613672][ T6708]  ? aa_sock_opt_perm+0xff/0x1a0
[  264.613700][ T6708]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  264.613728][ T6708]  ? __pfx_xsk_setsockopt+0x10/0x10
[  264.613760][ T6708]  do_sock_setsockopt+0x17c/0x1b0
[  264.613790][ T6708]  __x64_sys_setsockopt+0x13d/0x1b0
[  264.613818][ T6708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.613840][ T6708]  do_syscall_64+0x15f/0xf80
[  264.613862][ T6708]  ? trace_irq_disable+0x3b/0x140
[  264.613892][ T6708]  ? clear_bhb_loop+0x40/0x90
[  264.613916][ T6708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.613936][ T6708] RIP: 0033:0x7f17e419cdd9
[  264.613954][ T6708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.613971][ T6708] RSP: 002b:00007f17e4fe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  264.613991][ T6708] RAX: ffffffffffffffda RBX: 00007f17e4416090 RCX: 00007f17e419cdd9
[  264.614006][ T6708] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  264.614018][ T6708] RBP: 00007f17e4232d69 R08: 0000000000000004 R09: 0000000000000000
[  264.614030][ T6708] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  264.614043][ T6708] R13: 00007f17e4416128 R14: 00007f17e4416090 R15: 00007ffc05e0ef98
[  264.614076][ T6708]  </TASK>
[  264.614123][ T6708] Mem-Info:
[  264.735560][ T6710] 8021q: VLANs not supported on wg2
[  264.738810][ T6708] active_anon:5722 inactive_anon:0 isolated_anon:0
[  264.738810][ T6708]  active_file:3082 inactive_file:39947 isolated_file:0
[  264.738810][ T6708]  unevictable:768 dirty:236 writeback:0
[  264.738810][ T6708]  slab_reclaimable:10129 slab_unreclaimable:93784
[  264.738810][ T6708]  mapped:29334 shmem:1291 pagetables:1185
[  264.738810][ T6708]  sec_pagetables:0 bounce:0
[  264.738810][ T6708]  kernel_misc_reclaimable:0
[  264.738810][ T6708]  free:1334881 free_pcp:10417 free_cma:0
[  264.751901][ T6710] netlink: 'syz.1.214': attribute type 8 has an invalid length.
[  264.758108][ T6708] Node 0 active_anon:22888kB inactive_anon:0kB active_file:12328kB inactive_file:159580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117336kB dirty:944kB writeback:0kB shmem:3628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12416kB pagetables:4600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  264.991505][ T6708] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  265.026077][ T6708] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  265.036882][ T6684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  265.071995][ T6696] netlink: 'syz.0.209': attribute type 1 has an invalid length.
[  265.089842][ T6696] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR
[  265.094548][ T6708] lowmem_reserve[]: 0 2492 2493 2493 2493
[  265.186874][ T6708] Node 0 DMA32 free:1379116kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22852kB inactive_anon:0kB active_file:12328kB inactive_file:159580kB unevictable:1536kB writepending:984kB zspages:0kB present:3129332kB managed:2552676kB mlocked:0kB bounce:0kB free_pcp:42108kB local_pcp:21008kB free_cma:0kB
[  265.225381][ T6715] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  265.296961][ T6721] netlink: 'syz.4.216': attribute type 14 has an invalid length.
[  265.332640][ T6708] lowmem_reserve[]: 0 0 0 0 0
[  265.334986][ T6722] netlink: 'syz.4.216': attribute type 14 has an invalid length.
[  265.340274][ T6708] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  265.368910][ T6721] netlink: 'syz.4.216': attribute type 13 has an invalid length.
[  265.417660][ T6722] netlink: 'syz.4.216': attribute type 13 has an invalid length.
[  265.434974][ T6708] lowmem_reserve[]: 0 0 0 0 0
[  265.453590][ T6708] Node 1 Normal free:3945056kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  265.503430][ T6708] lowmem_reserve[]: 0 0 0 0 0
[  265.510018][ T6708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  265.575985][ T6708] Node 0 DMA32: 3118*4kB (UME) 913*8kB (UME) 434*16kB (UME) 241*32kB (UME) 153*64kB (UME) 76*128kB (UME) 38*256kB (UM) 17*512kB (UM) 11*1024kB (UM) 5*2048kB (UME) 314*4096kB (M) = 1380032kB
[  265.641891][ T6708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  265.692418][ T6708] Node 1 Normal: 4*4kB (U) 6*8kB (UM) 8*16kB (UM) 9*32kB (UM) 6*64kB (UM) 4*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3945056kB
[  265.706911][ T6733] ip6gre1: entered promiscuous mode
[  265.749307][ T6733] ip6gre1: entered allmulticast mode
[  265.764037][ T6708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  265.814423][ T6708] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  265.857172][ T6708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  265.889051][ T6708] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  265.947147][ T6708] 44318 total pagecache pages
[  265.971232][ T6708] 0 pages in swap cache
[  265.983122][ T6708] Free swap  = 124996kB
[  265.989099][ T6708] Total swap = 124996kB
[  265.993456][ T6708] 2097051 pages RAM
[  265.997879][ T6708] 0 pages HighMem/MovableOnly
[  266.010049][ T6708] 427099 pages reserved
[  266.021424][ T6708] 0 pages cma reserved
[  266.259363][ T6764] __nla_validate_parse: 8 callbacks suppressed
[  266.259383][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'.
[  266.620277][ T6788] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.235'.
[  266.667366][ T6786] bridge0: port 3(vlan2) entered blocking state
[  266.674633][ T6786] bridge0: port 3(vlan2) entered disabled state
[  266.724288][ T6786] vlan2: entered allmulticast mode
[  266.743295][ T6786] dummy0: entered allmulticast mode
[  266.769181][ T6786] vlan2: entered promiscuous mode
[  266.779939][ T6786] dummy0: entered promiscuous mode
[  267.405235][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'.
[  267.555828][ T6831] bridge0: port 3(vlan2) entered blocking state
[  267.563192][ T6831] bridge0: port 3(vlan2) entered forwarding state
[  315.575307][ T6875] xt_CONNSECMARK: invalid mode: 0
[  315.672655][ T6882] vlan3: entered promiscuous mode
[  315.701621][ T6882] bridge0: entered promiscuous mode
[  316.017014][ T6904] IPv6: NLM_F_CREATE should be specified when creating new route
[  316.019864][ T6905] netlink: 'syz.3.256': attribute type 1 has an invalid length.
[  316.051459][ T6904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  316.059933][ T6904] IPv6: NLM_F_CREATE should be set when creating new route
[  316.067417][ T6904] IPv6: NLM_F_CREATE should be set when creating new route
[  316.074700][ T6904] IPv6: NLM_F_CREATE should be set when creating new route
[  316.129290][ T6910] netlink: 'syz.4.259': attribute type 1 has an invalid length.
[  316.172015][ T6905] 8021q: adding VLAN 0 to HW filter on device bond2
[  316.298996][ T6910] 8021q: adding VLAN 0 to HW filter on device bond1
[  316.392302][ T6917] bond1: (slave syz_tun): Enslaving as a backup interface with an up link
[  316.533726][ T6922] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  316.591835][ T6922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.261'.
[  316.687959][ T6928] netlink: 'syz.1.262': attribute type 4 has an invalid length.
[  316.721616][ T6922] bond2: (slave bond_slave_1): Device is not our slave
[  316.728798][ T6922] bond2: option active_slave: invalid value (bond_slave_1)
[  316.739685][ T6929] netlink: 'syz.1.262': attribute type 4 has an invalid length.
[  316.760331][ T6922] bond2 (unregistering): Released all slaves
[  316.830320][ T6935] netlink: 'syz.3.264': attribute type 10 has an invalid length.
[  316.866656][ T6935] ipvlan0: entered allmulticast mode
[  316.874705][ T6935] veth0_vlan: entered allmulticast mode
[  316.886403][ T6935] team0: Device ipvlan0 failed to register rx_handler
[  317.013612][ T6940] netlink: 'syz.2.266': attribute type 7 has an invalid length.
[  317.033260][ T6940] netlink: 'syz.2.266': attribute type 8 has an invalid length.
[  317.060395][ T6940] netlink: 209828 bytes leftover after parsing attributes in process `syz.2.266'.
[  317.113312][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'.
[  317.139097][ T6948] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  317.154360][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'.
[  317.165952][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  317.167118][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  317.323774][ T6957] netlink: 6060 bytes leftover after parsing attributes in process `syz.2.271'.
[  317.356465][ T6962] netlink: 6060 bytes leftover after parsing attributes in process `syz.1.273'.
[  317.372370][ T6961] Bluetooth: MGMT ver 1.23
[  317.398280][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.407032][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.576413][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  317.596570][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.734167][ T6958] bond1: (slave syz_tun): Removing an active aggregator
[  317.743341][ T6958] bond1: (slave syz_tun): Releasing backup interface
[  317.752216][ T6958] bridge_slave_0: left allmulticast mode
[  317.758400][ T6958] bridge_slave_0: left promiscuous mode
[  317.764195][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.774944][ T6958] bridge_slave_1: left allmulticast mode
[  317.780803][ T6958] bridge_slave_1: left promiscuous mode
[  317.786640][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.802020][ T6958] bond0: (slave bond_slave_0): Releasing backup interface
[  317.811199][ T6958] bond0: (slave bond_slave_1): Releasing backup interface
[  317.822180][ T6958] team0: Port device team_slave_0 removed
[  317.829558][ T6958] team0: Port device team_slave_1 removed
[  317.835611][ T6958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  317.844736][ T6958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  317.853113][ T6958] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  317.870743][ T6962] FAULT_INJECTION: forcing a failure.
[  317.870743][ T6962] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  317.889648][ T6962] CPU: 0 UID: 0 PID: 6962 Comm: syz.1.273 Not tainted syzkaller #0 PREEMPT(full) 
[  317.889672][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  317.889683][ T6962] Call Trace:
[  317.889688][ T6962]  <TASK>
[  317.889693][ T6962]  dump_stack_lvl+0xe8/0x150
[  317.889710][ T6962]  should_fail_ex+0x412/0x560
[  317.889726][ T6962]  _copy_from_user+0x2d/0xb0
[  317.889742][ T6962]  ___sys_sendmsg+0x1c6/0x360
[  317.889755][ T6962]  ? __lock_acquire+0x6b5/0x2cf0
[  317.889768][ T6962]  ? __pfx____sys_sendmsg+0x10/0x10
[  317.889779][ T6962]  ? __lock_acquire+0x6b5/0x2cf0
[  317.889792][ T6962]  ? kstrtouint+0x6e/0xe0
[  317.889821][ T6962]  __sys_sendmmsg+0x27c/0x4e0
[  317.889843][ T6962]  ? __pfx___sys_sendmmsg+0x10/0x10
[  317.889854][ T6962]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  317.889879][ T6962]  ? ksys_write+0x242/0x270
[  317.889894][ T6962]  ? __pfx_ksys_write+0x10/0x10
[  317.889910][ T6962]  __x64_sys_sendmmsg+0xa0/0xc0
[  317.889922][ T6962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.889932][ T6962]  do_syscall_64+0x15f/0xf80
[  317.889944][ T6962]  ? trace_irq_disable+0x3b/0x140
[  317.889958][ T6962]  ? clear_bhb_loop+0x40/0x90
[  317.889969][ T6962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.889979][ T6962] RIP: 0033:0x7f9190d9cdd9
[  317.889989][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.889996][ T6962] RSP: 002b:00007f918eff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  317.890008][ T6962] RAX: ffffffffffffffda RBX: 00007f9191015fa0 RCX: 00007f9190d9cdd9
[  317.890015][ T6962] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[  317.890021][ T6962] RBP: 00007f918eff6090 R08: 0000000000000000 R09: 0000000000000000
[  317.890027][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  317.890032][ T6962] R13: 00007f9191016038 R14: 00007f9191015fa0 R15: 00007ffec0c862d8
[  317.890047][ T6962]  </TASK>
[  318.167642][   T86] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  318.176629][   T86] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  318.224048][   T86] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  318.233201][   T86] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  318.377258][ T6977] wg1 speed is unknown, defaulting to 1000
[  318.456474][ T6987] 8021q: VLANs not supported on gre0
[  318.541337][ T6992] netlink: 104 bytes leftover after parsing attributes in process `syz.3.281'.
[  318.624399][ T6999] netlink: 364 bytes leftover after parsing attributes in process `syz.0.283'.
[  318.668223][ T7000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.931718][ T7017] netlink: 6060 bytes leftover after parsing attributes in process `syz.2.286'.
[  319.148621][ T7007] wg1 speed is unknown, defaulting to 1000
[  319.277021][ T7031] sctp: [Deprecated]: syz.1.288 (pid 7031) Use of int in max_burst socket option deprecated.
[  319.277021][ T7031] Use struct sctp_assoc_value instead
[  319.282663][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.290'.
[  320.046348][ T7059] wg1 speed is unknown, defaulting to 1000
[  320.219844][ T7068] batadv0: entered promiscuous mode
[  320.374114][ T7068] wg1 speed is unknown, defaulting to 1000
[  320.383245][ T7077] netlink: 'syz.2.302': attribute type 1 has an invalid length.
[  320.391182][ T7077] netlink: 'syz.2.302': attribute type 1 has an invalid length.
[  320.460954][ T7077] syzkaller1: entered promiscuous mode
[  320.469087][ T7077] syzkaller1: entered allmulticast mode
[  321.111162][ T7098] tipc: New replicast peer: 255.255.255.255
[  321.120647][ T7098] tipc: Enabled bearer <udp:syz2>, priority 10
[  321.127177][ T7096] syzkaller0: entered promiscuous mode
[  321.133473][ T7096] syzkaller0: entered allmulticast mode
[  321.183050][ T7102] x_tables: duplicate underflow at hook 3
[  321.333997][   T29] IPVS: starting estimator thread 0...
[  321.431015][ T7110] IPVS: Scheduler module ip_vs_ not found
[  321.540893][ T7114] IPVS: using max 31 ests per chain, 74400 per kthread
[  321.678491][ T7129] __nla_validate_parse: 11 callbacks suppressed
[  321.678507][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'.
[  322.132409][   T29] tipc: Node number set to 1899230581
[  322.626915][   T24] wg1 speed is unknown, defaulting to 1000
[  322.641727][   T29] wg1 speed is unknown, defaulting to 1000
[  323.411602][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'.
[  323.421373][ T7214] netlink: 356 bytes leftover after parsing attributes in process `syz.0.343'.
[  323.471769][ T7206] bond3: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  323.509040][ T7206] bond3 (unregistering): Released all slaves
[  323.564723][ T7214] syzkaller0: entered promiscuous mode
[  323.599690][ T7214] syzkaller0: entered allmulticast mode
[  323.619033][ T7206] netlink: 200 bytes leftover after parsing attributes in process `syz.3.340'.
[  323.929347][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.348'.
[  324.555316][ T7270] netlink: 48 bytes leftover after parsing attributes in process `syz.3.357'.
[  324.606334][ T7273] vlan4: entered promiscuous mode
[  324.685353][ T7276] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[  324.769488][ T7271] wg1 speed is unknown, defaulting to 1000
[  324.871949][ T7279] netlink: 'syz.0.360': attribute type 4 has an invalid length.
[  325.152604][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'.
[  325.170041][ T7282] syzkaller0: entered promiscuous mode
[  325.175567][ T7282] syzkaller0: entered allmulticast mode
[  325.207452][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'.
[  325.356110][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'.
[  325.782820][ T7284] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  325.789375][ T7284] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  325.850651][ T7284] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  325.857724][ T7284] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  325.886679][ T7284] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  325.902494][ T7284] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  325.917555][ T7284] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  325.925248][ T7284] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  327.478580][ T7318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.370'.
[  327.819460][ T7350] netlink: 60 bytes leftover after parsing attributes in process `syz.2.374'.
[  327.871113][ T7352] netlink: 'syz.1.378': attribute type 10 has an invalid length.
[  327.950881][ T7352] syz_tun: entered promiscuous mode
[  327.992165][ T7352] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  328.008959][ T7356] netlink: 44 bytes leftover after parsing attributes in process `syz.3.380'.
[  328.029752][ T7356] netlink: 43 bytes leftover after parsing attributes in process `syz.3.380'.
[  328.044688][ T7356] netlink: 'syz.3.380': attribute type 5 has an invalid length.
[  328.061422][ T7356] netlink: 43 bytes leftover after parsing attributes in process `syz.3.380'.
[  328.304838][ T7370] x_tables: ip6_tables: mh match: only valid for protocol 135
[  328.562853][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'.
[  328.601778][ T7385] xt_hashlimit: size too large, truncated to 1048576
[  328.717016][ T7397] openvswitch: netlink: Key type 187 is out of range max 32
[  329.745777][ T7457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.407'.
[  329.914093][ T7459] bond3: Unable to set up delay as MII monitoring is disabled
[  329.934040][ T7459] bond3 (unregistering): Released all slaves
[  330.120354][ T7475] tipc: Started in network mode
[  330.125253][ T7475] tipc: Node identity ba5684d22c4a, cluster identity 4711
[  330.134818][ T7475] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.142152][ T7475] syzkaller0: entered promiscuous mode
[  330.148810][ T7475] syzkaller0: entered allmulticast mode
[  330.175635][ T7475] tipc: Resetting bearer <eth:syzkaller0>
[  330.221282][ T7474] tipc: Resetting bearer <eth:syzkaller0>
[  330.236103][ T7474] tipc: Disabling bearer <eth:syzkaller0>
[  330.500128][ T7490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.510050][ T7490] syzkaller0: entered promiscuous mode
[  330.515643][ T7490] syzkaller0: entered allmulticast mode
[  330.528425][ T7490] tipc: Resetting bearer <eth:syzkaller0>
[  330.541808][ T7489] tipc: Resetting bearer <eth:syzkaller0>
[  330.559574][ T7489] tipc: Disabling bearer <eth:syzkaller0>
[  330.830703][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.421'.
[  330.908974][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'.
[  331.056623][ T7509] netlink: 276 bytes leftover after parsing attributes in process `syz.1.425'.
[  331.348922][ T7523] vlan5: entered allmulticast mode
[  331.362260][ T7523] veth0_to_bond: entered allmulticast mode
[  331.407957][ T7527] dvmrp0: entered allmulticast mode
[  331.594025][ T7530] IPVS: length: 43 != 24
[  331.661685][ T7539] smc: net device wlan0 applied user defined pnetid SYZ0
[  331.748914][ T7548] netlink: 'syz.2.438': attribute type 1 has an invalid length.
[  331.944063][ T7548] netlink: 'syz.2.438': attribute type 27 has an invalid length.
[  332.515341][ T7572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.527981][ T7572] syzkaller0: entered promiscuous mode
[  332.533654][ T7572] syzkaller0: entered allmulticast mode
[  332.557847][ T7572] tipc: Resetting bearer <eth:syzkaller0>
[  332.576233][ T7572] __nla_validate_parse: 6 callbacks suppressed
[  332.576252][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'.
[  333.557354][ T5767] tipc: Node number set to 2518451410
[  335.482484][ T7572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  335.542295][ T7571] tipc: Resetting bearer <eth:syzkaller0>
[  335.595250][ T7571] tipc: Disabling bearer <eth:syzkaller0>
[  335.718449][ T7616] sctp: [Deprecated]: syz.3.455 (pid 7616) Use of struct sctp_assoc_value in delayed_ack socket option.
[  335.718449][ T7616] Use struct sctp_sack_info instead
[  336.474273][ T7659] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.498567][ T7659] batadv_slave_0: entered promiscuous mode
[  336.693961][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.466'.
[  336.876207][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.470'.
[  336.981699][ T7698] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  337.034943][ T7700] syzkaller1: entered promiscuous mode
[  337.055059][ T7700] syzkaller1: entered allmulticast mode
[  337.536001][ T7731] netlink: 'syz.2.479': attribute type 27 has an invalid length.
[  338.316403][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.324179][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.572880][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.593780][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.624860][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'.
[  338.790084][ T7731] hsr1: left promiscuous mode
[  338.800161][ T7738] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  338.810474][ T7738] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  338.823220][ T7774] netlink: 'syz.3.487': attribute type 34 has an invalid length.
[  338.853550][ T7660] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.873387][ T7660] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.922075][ T7660] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.950207][ T7746] wg1 speed is unknown, defaulting to 1000
[  338.956217][ T7660] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  339.069157][ T7787] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  339.081030][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.488'.
[  339.093411][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'.
[  339.190303][ T7793] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.201649][ T7788] syzkaller1: entered promiscuous mode
[  339.214249][ T7788] syzkaller1: entered allmulticast mode
[  339.325589][ T7783] syzkaller0: entered promiscuous mode
[  339.346203][ T7783] syzkaller0: entered allmulticast mode
[  339.367814][ T7783] tipc: Resetting bearer <eth:syzkaller0>
[  339.472771][ T7805] nbd0: detected capacity change from 0 to 63
[  339.486602][ T7808] block nbd0: NBD_DISCONNECT
[  339.496064][ T7808] block nbd0: Disconnected due to user request.
[  339.527045][ T7808] block nbd0: shutting down sockets
[  339.548734][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.558125][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  339.574601][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.583823][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  339.591938][ T7811] wg1 speed is unknown, defaulting to 1000
[  339.592708][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.606870][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  339.614819][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.623913][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  339.645870][ T7047] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.681389][ T7047] Buffer I/O error on dev nbd0, logical block 0, async page read
[  339.683124][ T7816] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  339.706754][ T7047] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.716893][ T7047] Buffer I/O error on dev nbd0, logical block 1, async page read
[  339.736808][ T7047] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.753441][ T7047] Buffer I/O error on dev nbd0, logical block 2, async page read
[  339.777097][ T7047] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.817116][ T7047] Buffer I/O error on dev nbd0, logical block 3, async page read
[  339.870028][ T7047] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.926076][ T7047] Buffer I/O error on dev nbd0, logical block 0, async page read
[  339.936746][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.499'.
[  339.957137][ T7047] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.994573][ T7047] Buffer I/O error on dev nbd0, logical block 1, async page read
[  340.022076][ T7047] ldm_validate_partition_table(): Disk read failed.
[  340.032984][ T7047] Dev nbd0: unable to read RDB block 0
[  340.064834][ T7047]  nbd0: unable to read partition table
[  340.130151][ T7047] ldm_validate_partition_table(): Disk read failed.
[  340.163217][ T7047] Dev nbd0: unable to read RDB block 0
[  340.182349][ T7047]  nbd0: unable to read partition table
[  340.212060][   T47] tipc: Resetting bearer <eth:syzkaller0>
[  340.235121][ T7826] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  340.271454][ T7837] netlink: 'syz.1.504': attribute type 2 has an invalid length.
[  340.532952][ T7849] openvswitch: netlink: IP tunnel dst address not specified
[  340.756844][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'.
[  340.970283][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'.
[  341.051922][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'.
[  341.222944][ T7883] netlink: 'syz.2.518': attribute type 1 has an invalid length.
[  341.274143][ T7883] 8021q: adding VLAN 0 to HW filter on device bond3
[  341.450667][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'.
[  341.894371][ T7913] syzkaller0: entered promiscuous mode
[  341.901595][ T7913] syzkaller0: entered allmulticast mode
[  341.926116][ T7913] 8021q: VLANs not supported on wg0
[  343.405466][ T7781] tipc: Resetting bearer <eth:syzkaller0>
[  344.836691][ T7781] tipc: Disabling bearer <eth:syzkaller0>
[  345.254434][ T7947] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001
[  345.296598][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.537'.
[  345.364085][ T7954] netlink: 32 bytes leftover after parsing attributes in process `syz.4.534'.
[  345.586812][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'.
[  345.618369][ T7965] netlink: 'syz.1.540': attribute type 1 has an invalid length.
[  345.675906][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.540'.
[  345.756400][ T7965] 8021q: adding VLAN 0 to HW filter on device bond2
[  345.833963][ T7965] netlink: 'syz.1.540': attribute type 1 has an invalid length.
[  345.844365][ T7965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.540'.
[  346.220568][   T30] audit: type=1804 audit(1777915477.557:2): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.545" name="/newroot/88/memory.events" dev="tmpfs" ino=467 res=1 errno=0
[  346.272177][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'.
[  346.719154][ T8013] FAULT_INJECTION: forcing a failure.
[  346.719154][ T8013] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  346.739890][ T8013] CPU: 1 UID: 0 PID: 8013 Comm: syz.3.551 Not tainted syzkaller #0 PREEMPT(full) 
[  346.739929][ T8013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  346.739943][ T8013] Call Trace:
[  346.739950][ T8013]  <TASK>
[  346.739958][ T8013]  dump_stack_lvl+0xe8/0x150
[  346.739985][ T8013]  should_fail_ex+0x412/0x560
[  346.740012][ T8013]  _copy_to_iter+0x1e4/0x17d0
[  346.740046][ T8013]  ? _copy_to_iter+0x255/0x17d0
[  346.740066][ T8013]  ? __pfx__copy_to_iter+0x10/0x10
[  346.740088][ T8013]  ? do_raw_spin_lock+0x12b/0x2f0
[  346.740122][ T8013]  __skb_datagram_iter+0xf8/0x980
[  346.740153][ T8013]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  346.740177][ T8013]  ? __skb_try_recv_datagram+0x3d4/0x4d0
[  346.740206][ T8013]  __skb_datagram_iter+0x6ef/0x980
[  346.740237][ T8013]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  346.740269][ T8013]  skb_copy_datagram_iter+0xb5/0x240
[  346.740296][ T8013]  packet_recvmsg+0x699/0x1630
[  346.740327][ T8013]  ? __pfx_packet_recvmsg+0x10/0x10
[  346.740345][ T8013]  ? __pfx_aa_sk_perm+0x10/0x10
[  346.740370][ T8013]  ? aa_sock_msg_perm+0xf1/0x1b0
[  346.740394][ T8013]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  346.740416][ T8013]  ? security_socket_recvmsg+0x7e/0x2c0
[  346.740442][ T8013]  ? __pfx_packet_recvmsg+0x10/0x10
[  346.740458][ T8013]  sock_recvmsg+0x172/0x1b0
[  346.740478][ T8013]  sock_read_iter+0x251/0x320
[  346.740506][ T8013]  ? __pfx_sock_read_iter+0x10/0x10
[  346.740551][ T8013]  do_iter_readv_writev+0x619/0x8c0
[  346.740580][ T8013]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  346.740610][ T8013]  ? bpf_lsm_file_permission+0x9/0x20
[  346.740633][ T8013]  ? security_file_permission+0x75/0x260
[  346.740652][ T8013]  ? rw_verify_area+0x2a6/0x4d0
[  346.740679][ T8013]  vfs_readv+0x288/0x840
[  346.740705][ T8013]  ? __pfx_vfs_readv+0x10/0x10
[  346.740737][ T8013]  ? __fget_files+0x2a/0x420
[  346.740761][ T8013]  ? __fget_files+0x3a0/0x420
[  346.740780][ T8013]  ? __fget_files+0x2a/0x420
[  346.740808][ T8013]  do_readv+0x154/0x2e0
[  346.740828][ T8013]  ? __pfx_do_readv+0x10/0x10
[  346.740854][ T8013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.740873][ T8013]  do_syscall_64+0x15f/0xf80
[  346.740895][ T8013]  ? clear_bhb_loop+0x40/0x90
[  346.740917][ T8013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.740933][ T8013] RIP: 0033:0x7f387f39cdd9
[  346.740950][ T8013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.740964][ T8013] RSP: 002b:00007f38802cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  346.740982][ T8013] RAX: ffffffffffffffda RBX: 00007f387f615fa0 RCX: 00007f387f39cdd9
[  346.740995][ T8013] RDX: 0000000000000001 RSI: 0000200000003540 RDI: 0000000000000004
[  346.741005][ T8013] RBP: 00007f38802cc090 R08: 0000000000000000 R09: 0000000000000000
[  346.741016][ T8013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  346.741026][ T8013] R13: 00007f387f616038 R14: 00007f387f615fa0 R15: 00007ffc933bccc8
[  346.741054][ T8013]  </TASK>
[  347.576454][ T8044] bridge_slave_0: left allmulticast mode
[  347.596192][ T8044] bridge_slave_0: left promiscuous mode
[  347.609046][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.640540][ T8044] bridge_slave_1: left allmulticast mode
[  347.678187][ T8044] bridge_slave_1: left promiscuous mode
[  347.698255][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.801001][ T8044] bond0: (slave bond_slave_0): Releasing backup interface
[  347.831709][ T8044] bond0: (slave bond_slave_1): Releasing backup interface
[  347.870760][ T8044] team0: Port device team_slave_0 removed
[  347.926489][ T8044] team0: Port device team_slave_1 removed
[  347.966005][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  347.989551][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'.
[  348.005374][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.007838][ T8071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.558'.
[  348.043128][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  348.073706][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.112667][ T8044] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  348.199501][ T8065] team0: Mode changed to "activebackup"
[  348.574845][ T8089] bridge_slave_0 (unregistering): left allmulticast mode
[  348.599660][ T8089] bridge_slave_0 (unregistering): left promiscuous mode
[  348.626945][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.841456][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'.
[  348.930915][ T8100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.564'.
[  348.995721][ T8105] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  349.146204][ T8109] wg1 speed is unknown, defaulting to 1000
[  349.361957][ T8122] batadv1: entered promiscuous mode
[  349.370312][ T8122] batadv1: entered allmulticast mode
[  350.139978][ T8146] openvswitch: netlink: Message has 28 unknown bytes.
[  350.282538][ T8153] netlink: 'syz.2.581': attribute type 9 has an invalid length.
[  350.411842][ T8161] __nla_validate_parse: 6 callbacks suppressed
[  350.411862][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.582'.
[  350.766002][ T8176] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  350.783237][ T8176] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  350.857145][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'.
[  350.904148][ T8173] syzkaller0: entered promiscuous mode
[  350.917558][ T8173] syzkaller0: entered allmulticast mode
[  351.018168][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'.
[  351.168180][ T8198] openvswitch: netlink: IP tunnel dst address not specified
[  351.303721][ T8207] netlink: 'syz.4.590': attribute type 28 has an invalid length.
[  352.944227][ T8189] team0: Port device team_slave_0 removed
[  353.247702][ T8230] FAULT_INJECTION: forcing a failure.
[  353.247702][ T8230] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  353.277756][ T8230] CPU: 0 UID: 0 PID: 8230 Comm: syz.0.598 Not tainted syzkaller #0 PREEMPT(full) 
[  353.277779][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  353.277787][ T8230] Call Trace:
[  353.277794][ T8230]  <TASK>
[  353.277801][ T8230]  dump_stack_lvl+0xe8/0x150
[  353.277823][ T8230]  should_fail_ex+0x412/0x560
[  353.277847][ T8230]  _copy_from_user+0x2d/0xb0
[  353.277869][ T8230]  ___sys_sendmsg+0x1c6/0x360
[  353.277887][ T8230]  ? __lock_acquire+0x6b5/0x2cf0
[  353.277908][ T8230]  ? __pfx____sys_sendmsg+0x10/0x10
[  353.277956][ T8230]  ? __fget_files+0x2a/0x420
[  353.277973][ T8230]  ? __fget_files+0x3a0/0x420
[  353.277998][ T8230]  __x64_sys_sendmsg+0x1bd/0x2a0
[  353.278020][ T8230]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  353.278047][ T8230]  ? __pfx_ksys_write+0x10/0x10
[  353.278074][ T8230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.278090][ T8230]  do_syscall_64+0x15f/0xf80
[  353.278107][ T8230]  ? trace_irq_disable+0x3b/0x140
[  353.278128][ T8230]  ? clear_bhb_loop+0x40/0x90
[  353.278146][ T8230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.278161][ T8230] RIP: 0033:0x7f3925b9cdd9
[  353.278176][ T8230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  353.278188][ T8230] RSP: 002b:00007f3926abf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.278205][ T8230] RAX: ffffffffffffffda RBX: 00007f3925e15fa0 RCX: 00007f3925b9cdd9
[  353.278215][ T8230] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003
[  353.278224][ T8230] RBP: 00007f3926abf090 R08: 0000000000000000 R09: 0000000000000000
[  353.278233][ T8230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.278241][ T8230] R13: 00007f3925e16038 R14: 00007f3925e15fa0 R15: 00007fff973f3cc8
[  353.278266][ T8230]  </TASK>
[  354.164518][ T8275] Bluetooth: MGMT ver 1.23
[  354.473490][ T8285] netlink: 2548 bytes leftover after parsing attributes in process `syz.0.612'.
[  354.510324][ T8285] netlink: 2548 bytes leftover after parsing attributes in process `syz.0.612'.
[  354.673892][ T8291] netlink: 'syz.1.614': attribute type 39 has an invalid length.
[  354.676487][ T8290] netlink: 'syz.1.614': attribute type 39 has an invalid length.
[  354.772251][ T8291] bond0: (slave syz_tun): Releasing backup interface
[  354.972332][ T8298] netlink: 2548 bytes leftover after parsing attributes in process `syz.4.616'.
[  355.009158][ T8298] netlink: 2548 bytes leftover after parsing attributes in process `syz.4.616'.
[  355.098790][ T8306] syzkaller1: entered promiscuous mode
[  355.108567][ T8306] syzkaller1: entered allmulticast mode
[  355.338493][ T8314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.425345][ T8314] syzkaller0: entered promiscuous mode
[  355.438926][ T8314] syzkaller0: entered allmulticast mode
[  355.450467][ T8314] tipc: Resetting bearer <eth:syzkaller0>
[  355.515523][ T8312] tipc: Resetting bearer <eth:syzkaller0>
[  356.881420][ T8347] netlink: 'syz.0.630': attribute type 1 has an invalid length.
[  356.946042][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.630'.
[  357.246776][ T8312] tipc: Disabling bearer <eth:syzkaller0>
[  357.455971][ T8355] netlink: 2548 bytes leftover after parsing attributes in process `syz.4.632'.
[  357.491191][ T8359] xt_TCPMSS: Only works on TCP SYN packets
[  357.497453][ T8355] netlink: 2548 bytes leftover after parsing attributes in process `syz.4.632'.
[  357.610688][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'.
[  357.882400][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'.
[  358.098687][ T8383] netem: invalid attributes len -1
[  358.118710][ T8383] netem: change failed
[  358.143519][ T8389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.645'.
[  358.204883][ T8390] bond3: option lacp_active: invalid value (8)
[  358.214017][ T8390] bond3 (unregistering): Released all slaves
[  358.242192][ T8387] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  358.340965][ T8399] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20001
[  358.484198][ T8404] netlink: 68 bytes leftover after parsing attributes in process `syz.4.648'.
[  358.796140][ T8423] netlink: 'syz.1.653': attribute type 3 has an invalid length.
[  359.249775][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'.
[  359.690943][ T8455] wg1 speed is unknown, defaulting to 1000
[  359.772743][ T8468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.665'.
[  359.932878][ T8470] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  359.986762][ T8470] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  360.045211][ T8470] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  360.092778][ T8470] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len
[  360.139133][ T8473] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len
[  360.273216][ T8490] unsupported nlmsg_type 40
[  360.451563][ T8480] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  360.702186][ T8507] Cannot find add_set index 0 as target
[  361.283712][ T8542] netlink: 'syz.1.685': attribute type 10 has an invalid length.
[  361.324642][ T8542] netlink: 2 bytes leftover after parsing attributes in process `syz.1.685'.
[  361.357982][ T8542] veth1_virt_wifi: entered promiscuous mode
[  361.389002][ T8542] FAULT_INJECTION: forcing a failure.
[  361.389002][ T8542] name failslab, interval 1, probability 0, space 0, times 0
[  361.434519][ T8542] CPU: 1 UID: 0 PID: 8542 Comm: syz.1.685 Not tainted syzkaller #0 PREEMPT(full) 
[  361.434543][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  361.434557][ T8542] Call Trace:
[  361.434568][ T8542]  <TASK>
[  361.434575][ T8542]  dump_stack_lvl+0xe8/0x150
[  361.434601][ T8542]  should_fail_ex+0x412/0x560
[  361.434628][ T8542]  should_failslab+0xa8/0x100
[  361.434656][ T8542]  __kmalloc_noprof+0xe8/0x760
[  361.434676][ T8542]  ? nlmsg_notify+0xf0/0x1a0
[  361.434697][ T8542]  ? new_nbp+0x29/0x440
[  361.434724][ T8542]  new_nbp+0x29/0x440
[  361.434744][ T8542]  ? mutex_is_locked+0x17/0x50
[  361.434770][ T8542]  br_add_if+0x283/0xeb0
[  361.434794][ T8542]  ? __pfx___dev_change_flags+0x10/0x10
[  361.434815][ T8542]  ? __irq_work_queue_local+0x1f2/0x4c0
[  361.434844][ T8542]  ? mutex_is_locked+0x17/0x50
[  361.434869][ T8542]  do_set_master+0x533/0x6d0
[  361.434899][ T8542]  do_setlink+0x103d/0x45a0
[  361.434926][ T8542]  ? __wake_up_klogd+0xe6/0x120
[  361.434957][ T8542]  ? __pfx_vprintk_emit+0x10/0x10
[  361.434986][ T8542]  ? __pfx_do_setlink+0x10/0x10
[  361.435019][ T8542]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  361.435039][ T8542]  ? rcu_is_watching+0x15/0xb0
[  361.435063][ T8542]  ? __mutex_trylock_common+0x158/0x260
[  361.435087][ T8542]  ? __pfx___mutex_trylock_common+0x10/0x10
[  361.435110][ T8542]  ? rcu_is_watching+0x15/0xb0
[  361.435128][ T8542]  ? trace_contention_end+0x3d/0x140
[  361.435150][ T8542]  ? __mutex_lock+0x319/0x1550
[  361.435171][ T8542]  ? __pfx___nla_validate_parse+0x10/0x10
[  361.435206][ T8542]  ? rtnl_newlink+0x883/0x1bb0
[  361.435226][ T8542]  ? __pfx___mutex_lock+0x10/0x10
[  361.435256][ T8542]  ? ns_capable+0x89/0xe0
[  361.435281][ T8542]  rtnl_newlink+0x15ad/0x1bb0
[  361.435313][ T8542]  ? __pfx_rtnl_newlink+0x10/0x10
[  361.435330][ T8542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.435384][ T8542]  ? kasan_quarantine_put+0xbb/0x1f0
[  361.435408][ T8542]  ? lockdep_hardirqs_on+0x7a/0x110
[  361.435432][ T8542]  ? nlmon_xmit+0xb0/0x100
[  361.435451][ T8542]  ? kmem_cache_free+0x182/0x650
[  361.435485][ T8542]  ? __lock_acquire+0x6b5/0x2cf0
[  361.435510][ T8542]  ? __dev_queue_xmit+0x2b6/0x3950
[  361.435534][ T8542]  ? __local_bh_enable_ip+0xd0/0x130
[  361.435552][ T8542]  ? lockdep_hardirqs_on+0x7a/0x110
[  361.435570][ T8542]  ? __dev_queue_xmit+0x2b6/0x3950
[  361.435591][ T8542]  ? __local_bh_enable_ip+0xd0/0x130
[  361.435606][ T8542]  ? __dev_queue_xmit+0x2b6/0x3950
[  361.435634][ T8542]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  361.435667][ T8542]  ? __pfx_rtnl_newlink+0x10/0x10
[  361.435686][ T8542]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  361.435707][ T8542]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  361.435726][ T8542]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  361.435744][ T8542]  ? ref_tracker_free+0x693/0x840
[  361.435767][ T8542]  ? __pfx_ref_tracker_free+0x10/0x10
[  361.435787][ T8542]  ? __asan_memcpy+0x40/0x70
[  361.435807][ T8542]  ? __skb_clone+0x63/0x7a0
[  361.435838][ T8542]  netlink_rcv_skb+0x232/0x4b0
[  361.435861][ T8542]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  361.435883][ T8542]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  361.435924][ T8542]  ? netlink_deliver_tap+0x2e/0x1b0
[  361.435944][ T8542]  ? netlink_deliver_tap+0x2e/0x1b0
[  361.435970][ T8542]  netlink_unicast+0x75c/0x8e0
[  361.436000][ T8542]  netlink_sendmsg+0x813/0xb40
[  361.436031][ T8542]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.436056][ T8542]  ? aa_sock_msg_perm+0xf1/0x1b0
[  361.436080][ T8542]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  361.436106][ T8542]  ____sys_sendmsg+0x972/0x9f0
[  361.436129][ T8542]  ? __might_fault+0xaf/0x130
[  361.436156][ T8542]  ? __pfx_____sys_sendmsg+0x10/0x10
[  361.436187][ T8542]  ? import_iovec+0x73/0xa0
[  361.436214][ T8542]  ___sys_sendmsg+0x2a5/0x360
[  361.436235][ T8542]  ? __lock_acquire+0x6b5/0x2cf0
[  361.436258][ T8542]  ? __pfx____sys_sendmsg+0x10/0x10
[  361.436312][ T8542]  ? __fget_files+0x2a/0x420
[  361.436332][ T8542]  ? __fget_files+0x3a0/0x420
[  361.436360][ T8542]  __x64_sys_sendmsg+0x1bd/0x2a0
[  361.436384][ T8542]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  361.436413][ T8542]  ? __pfx_ksys_write+0x10/0x10
[  361.436446][ T8542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.436465][ T8542]  do_syscall_64+0x15f/0xf80
[  361.436485][ T8542]  ? trace_irq_disable+0x3b/0x140
[  361.436510][ T8542]  ? clear_bhb_loop+0x40/0x90
[  361.436532][ T8542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.436549][ T8542] RIP: 0033:0x7f9190d9cdd9
[  361.436566][ T8542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  361.436580][ T8542] RSP: 002b:00007f918eff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  361.436600][ T8542] RAX: ffffffffffffffda RBX: 00007f9191015fa0 RCX: 00007f9190d9cdd9
[  361.436612][ T8542] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003
[  361.436623][ T8542] RBP: 00007f918eff6090 R08: 0000000000000000 R09: 0000000000000000
[  361.436634][ T8542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  361.436644][ T8542] R13: 00007f9191016038 R14: 00007f9191015fa0 R15: 00007ffec0c862d8
[  361.436672][ T8542]  </TASK>
[  361.958130][ T8545] wg1 speed is unknown, defaulting to 1000
[  362.755188][ T8587] wg1 speed is unknown, defaulting to 1000
[  363.431780][ T8622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.462746][ T8622] syzkaller0: entered promiscuous mode
[  363.488832][ T8622] syzkaller0: entered allmulticast mode
[  363.565035][ T8622] tipc: Resetting bearer <eth:syzkaller0>
[  363.586201][ T8622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.704'.
[  363.648866][ T8620] tipc: Resetting bearer <eth:syzkaller0>
[  363.721141][ T8620] tipc: Disabling bearer <eth:syzkaller0>
[  364.130099][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'.
[  364.448271][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.718'.
[  364.595149][ T8686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.089977][ T8725] veth5: entered promiscuous mode
[  367.488519][ T8748] hsr0: entered allmulticast mode
[  367.505678][ T8748] hsr_slave_0: entered allmulticast mode
[  367.521626][ T8748] hsr_slave_1: entered allmulticast mode
[  367.583347][ T8749] wg1 speed is unknown, defaulting to 1000
[  367.821402][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'.
[  367.863586][ T8767] veth3: entered promiscuous mode
[  367.929474][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'.
[  368.206875][   T30] audit: type=1800 audit(1777915499.537:3): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.746" name="memory.events" dev="tmpfs" ino=853 res=0 errno=0
[  368.331141][ T8792] 
: renamed from bond0 (while UP)
[  368.559481][ T8802] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  369.053214][ T8809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.749'.
[  369.107082][ T8809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.749'.
[  369.443884][ T8839] netlink: 'syz.4.758': attribute type 1 has an invalid length.
[  369.575847][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'.
[  369.600476][ T8845] netlink: 44 bytes leftover after parsing attributes in process `syz.3.761'.
[  369.804803][ T8863] netlink: 'syz.4.766': attribute type 31 has an invalid length.
[  369.941122][ T8870] netlink: 104 bytes leftover after parsing attributes in process `syz.3.768'.
[  369.953291][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'.
[  370.021615][ T8868] gretap0: entered promiscuous mode
[  370.051353][ T8868] macvlan2: entered promiscuous mode
[  370.087649][ T8868] gretap0: left promiscuous mode
[  370.164623][ T8875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  370.242303][ T8880] netlink: 'syz.2.772': attribute type 10 has an invalid length.
[  370.269542][ T8880] netlink: 2 bytes leftover after parsing attributes in process `syz.2.772'.
[  370.291037][ T8880] veth1_virt_wifi: entered promiscuous mode
[  370.333102][ T8880] bridge0: port 1(veth1_virt_wifi) entered blocking state
[  370.338698][ T8884] netlink: 'syz.1.773': attribute type 178 has an invalid length.
[  370.358869][ T8880] bridge0: port 1(veth1_virt_wifi) entered disabled state
[  370.372753][ T8880] veth1_virt_wifi: entered allmulticast mode
[  370.391710][ T8880] veth1_virt_wifi: left allmulticast mode
[  370.776097][ T8906] netlink: 'syz.4.779': attribute type 10 has an invalid length.
[  370.792984][ T8906] netlink: 2 bytes leftover after parsing attributes in process `syz.4.779'.
[  370.816642][ T8906] veth1_virt_wifi: entered promiscuous mode
[  370.830848][ T8906] bridge0: port 1(veth1_virt_wifi) entered blocking state
[  370.839182][ T8906] bridge0: port 1(veth1_virt_wifi) entered disabled state
[  370.846676][ T8906] veth1_virt_wifi: entered allmulticast mode
[  370.856163][ T8906] veth1_virt_wifi: left allmulticast mode
[  370.862773][ T8903] wg1 speed is unknown, defaulting to 1000
[  371.026494][ T8909] dvmrp0: entered allmulticast mode
[  371.254045][ T8918] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0
[  371.420847][ T8917] netlink: 2548 bytes leftover after parsing attributes in process `syz.0.783'.
[  371.421034][ T8922] netlink: 'syz.3.784': attribute type 21 has an invalid length.
[  371.441743][ T8917] netlink: 2548 bytes leftover after parsing attributes in process `syz.0.783'.
[  371.497041][ T8922] netlink: 'syz.3.784': attribute type 21 has an invalid length.
[  371.497089][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  371.519233][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  371.573417][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  371.602931][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  371.672352][ T8933] netlink: 'syz.2.786': attribute type 10 has an invalid length.
[  371.727989][ T8933] bridge0: port 1(veth1_virt_wifi) entered blocking state
[  371.750666][ T8933] bridge0: port 1(veth1_virt_wifi) entered disabled state
[  371.761126][ T8933] veth1_virt_wifi: entered allmulticast mode
[  371.786838][ T8933] veth1_virt_wifi: left allmulticast mode
[  372.654797][ T8989] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  373.175259][ T9017] netlink: 'syz.3.811': attribute type 29 has an invalid length.
[  373.192823][ T9017] netlink: 'syz.3.811': attribute type 29 has an invalid length.
[  373.942777][ T9046] wg1 speed is unknown, defaulting to 1000
[  374.136300][ T9057] __nla_validate_parse: 11 callbacks suppressed
[  374.136319][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'.
[  374.629610][ T9074] bond0: (slave vlan2): Opening slave failed
[  374.665113][ T9085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.829'.
[  374.678373][ T9071] netlink: 64 bytes leftover after parsing attributes in process `syz.4.826'.
[  374.721517][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.829'.
[  375.314596][ T9105] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  375.398298][ T9099] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.683502][ T9120] validate_nla: 1 callbacks suppressed
[  375.683519][ T9120] netlink: 'syz.0.834': attribute type 10 has an invalid length.
[  375.729863][ T9120] netlink: 2 bytes leftover after parsing attributes in process `syz.0.834'.
[  375.794206][ T9120] veth1_virt_wifi: entered promiscuous mode
[  375.805649][ T9120] bridge0: port 1(veth1_virt_wifi) entered blocking state
[  375.831411][ T9120] bridge0: port 1(veth1_virt_wifi) entered disabled state
[  375.859900][ T9120] veth1_virt_wifi: entered allmulticast mode
[  375.893680][ T9120] veth1_virt_wifi: left allmulticast mode
[  376.036125][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'.
[  376.130116][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'.
[  376.180944][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'.
[  376.235940][ T9127] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  376.304178][ T9127] bond3 (unregistering): Released all slaves
[  376.402200][ T9148] netlink: 'syz.2.839': attribute type 32 has an invalid length.
[  376.430524][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'.
[  376.452457][ T9096] tipc: Disabling bearer <eth:syzkaller0>
[  376.541969][ T9134] vlan0: entered allmulticast mode
[  376.555542][ T9134] macvtap0: entered allmulticast mode
[  376.567748][ T9134] veth0_macvtap: entered allmulticast mode
[  376.632713][ T9148] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  376.874857][ T9160] netlink: 'syz.3.843': attribute type 1 has an invalid length.
[  376.892543][ T9166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.846'.
[  377.096493][ T9169] gretap1: entered allmulticast mode
[  377.149929][ T9169] bond0: (slave gretap1): making interface the new active one
[  377.165415][ T9176] netlink: 'syz.0.848': attribute type 1 has an invalid length.
[  377.192614][ T9176] netlink: 'syz.0.848': attribute type 10 has an invalid length.
[  377.219679][ T9169] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  377.240687][ T9176] bridge0: port 1(veth1_virt_wifi) entered blocking state
[  377.251441][ T9176] bridge0: port 1(veth1_virt_wifi) entered disabled state
[  377.261708][ T9176] veth1_virt_wifi: entered allmulticast mode
[  377.271954][ T9176] veth1_virt_wifi: left allmulticast mode
[  377.369835][ T9190] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ůŕ^!‚Y‡°”őËí
[  377.369835][ T9190] 3ěUH†5rşBnśŹć
[  377.642267][ T5798] IPVS: starting estimator thread 0...
[  377.734493][ T9207] xt_hashlimit: size too large, truncated to 1048576
[  377.738050][ T9205] IPVS: using max 33 ests per chain, 79200 per kthread
[  377.782723][ T9209] xt_hashlimit: size too large, truncated to 1048576
[  378.144204][ T9214] syzkaller1: entered promiscuous mode
[  378.149864][ T9214] syzkaller1: entered allmulticast mode
[  378.566390][ T9228] tipc: Started in network mode
[  378.594833][ T9228] tipc: Node identity 2ee09a7e006c, cluster identity 4711
[  378.608380][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  378.615346][ T9228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.615742][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  378.649736][ T9239] pim6reg: entered allmulticast mode
[  378.695771][ T9240] syzkaller0: MTU too low for tipc bearer
[  378.714896][ T9240] tipc: Disabling bearer <eth:syzkaller0>
[  378.746527][ T9241] pim6reg: left allmulticast mode
[  379.290761][ T9260] bond3: entered promiscuous mode
[  379.385341][ T9275] netlink: 'syz.2.875': attribute type 21 has an invalid length.
[  379.492676][ T9278] syzkaller0: entered promiscuous mode
[  379.509133][ T9278] syzkaller0: entered allmulticast mode
[  379.546337][ T9285] __nla_validate_parse: 3 callbacks suppressed
[  379.546368][ T9285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.879'.
[  379.571399][ T9285] netlink: 44 bytes leftover after parsing attributes in process `syz.1.879'.
[  379.886575][ T9285] netlink: 756 bytes leftover after parsing attributes in process `syz.1.879'.
[  379.939040][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.882'.
[  380.188679][ T9308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.886'.
[  380.464576][ T9306] bridge0: port 3(vlan2) entered disabled state
[  381.420963][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.456032][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.517765][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.569961][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.587152][ T9321] wg1 speed is unknown, defaulting to 1000
[  381.796985][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'.
[  382.058528][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'.
[  382.114595][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'.
[  382.532742][ T9378] IPv6: NLM_F_CREATE should be specified when creating new route
[  382.538766][ T9370] xt_connbytes: Forcing CT accounting to be enabled
[  382.542075][ T9378] sock: sock_timestamping_bind_phc: sock not bind to device
[  382.595604][ T7652] nci: nci_rsp_packet: unknown rsp opcode 0x123
[  382.665405][ T9384] netlink: 'syz.4.904': attribute type 25 has an invalid length.
[  382.674692][ T9384] netlink: 'syz.4.904': attribute type 3 has an invalid length.
[  382.683766][ T9384] netlink: 132 bytes leftover after parsing attributes in process `syz.4.904'.
[  382.733013][ T9388] openvswitch: netlink: IPv4 tun info is not correct
[  382.976231][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.909'.
[  383.164283][ T9408] wg1 speed is unknown, defaulting to 1000
[  383.316552][ T9371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  383.752982][ T9431] pim6reg1: entered promiscuous mode
[  383.773635][ T9431] pim6reg1: entered allmulticast mode
[  383.918166][ T9431] wg1 speed is unknown, defaulting to 1000
[  383.949442][ T9435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  384.560256][ T9453] __nla_validate_parse: 5 callbacks suppressed
[  384.560275][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'.
[  384.589671][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.925'.
[  384.719818][ T9450] veth1_vlan (unregistering): left allmulticast mode
[  384.979775][ T9457] 8021q: adding VLAN 0 to HW filter on device bond5
[  385.073794][ T9463] bond5: (slave veth11): Enslaving as an active interface with an up link
[  385.105743][ T9467] batman_adv: batadv0: Adding interface: dummy0
[  385.128077][ T9467] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.167861][ T9467] batman_adv: batadv0: Interface activated: dummy0
[  385.239069][ T9448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.286274][ T9475] batadv0: mtu less than device minimum
[  385.296107][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  385.309948][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  385.321687][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  385.332851][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  385.344034][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  385.355074][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  385.366271][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  385.377576][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  385.539017][ T9485] netlink: 132 bytes leftover after parsing attributes in process `syz.2.929'.
[  385.590651][ T9448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.702975][ T9482] wg1 speed is unknown, defaulting to 1000
[  385.779790][ T9493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.932'.
[  385.786643][ T9448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.820949][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'.
[  385.845336][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'.
[  385.863625][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'.
[  385.884963][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'.
[  385.895986][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'.
[  385.952095][ T9448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.976502][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'.
[  385.989110][ T9500] tc_dump_action: action bad kind
[  386.338265][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.656223][ T7650] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.701685][ T9532] netlink: 'syz.0.942': attribute type 21 has an invalid length.
[  386.725794][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.785246][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.956973][ T9547] FAULT_INJECTION: forcing a failure.
[  386.956973][ T9547] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  386.973777][ T9547] CPU: 0 UID: 0 PID: 9547 Comm: syz.1.944 Not tainted syzkaller #0 PREEMPT(full) 
[  386.973803][ T9547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  386.973813][ T9547] Call Trace:
[  386.973820][ T9547]  <TASK>
[  386.973827][ T9547]  dump_stack_lvl+0xe8/0x150
[  386.973853][ T9547]  should_fail_ex+0x412/0x560
[  386.973880][ T9547]  _copy_from_iter+0x1d3/0x1670
[  386.973901][ T9547]  ? rcu_is_watching+0x15/0xb0
[  386.973923][ T9547]  ? trace_kmem_cache_alloc+0x29/0xe0
[  386.973945][ T9547]  ? __build_skb+0x62/0x440
[  386.973966][ T9547]  ? __build_skb+0x62/0x440
[  386.973986][ T9547]  ? __pfx__copy_from_iter+0x10/0x10
[  386.974010][ T9547]  ? __build_skb+0x2a2/0x440
[  386.974027][ T9547]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  386.974053][ T9547]  ? netlink_sendmsg+0x650/0xb40
[  386.974073][ T9547]  ? skb_put+0x11b/0x210
[  386.974096][ T9547]  netlink_sendmsg+0x6c0/0xb40
[  386.974127][ T9547]  ? __pfx_netlink_sendmsg+0x10/0x10
[  386.974151][ T9547]  ? aa_sock_msg_perm+0xf1/0x1b0
[  386.974174][ T9547]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  386.974199][ T9547]  ____sys_sendmsg+0x972/0x9f0
[  386.974220][ T9547]  ? __might_fault+0xaf/0x130
[  386.974242][ T9547]  ? __pfx_____sys_sendmsg+0x10/0x10
[  386.974268][ T9547]  ? import_iovec+0x73/0xa0
[  386.974294][ T9547]  ___sys_sendmsg+0x2a5/0x360
[  386.974316][ T9547]  ? __lock_acquire+0x6b5/0x2cf0
[  386.974338][ T9547]  ? __pfx____sys_sendmsg+0x10/0x10
[  386.974357][ T9547]  ? __lock_acquire+0x6b5/0x2cf0
[  386.974379][ T9547]  ? kstrtouint+0x6e/0xe0
[  386.974434][ T9547]  __sys_sendmmsg+0x27c/0x4e0
[  386.974461][ T9547]  ? __pfx___sys_sendmmsg+0x10/0x10
[  386.974478][ T9547]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  386.974517][ T9547]  ? ksys_write+0x242/0x270
[  386.974542][ T9547]  ? __pfx_ksys_write+0x10/0x10
[  386.974571][ T9547]  __x64_sys_sendmmsg+0xa0/0xc0
[  386.974594][ T9547]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.974612][ T9547]  do_syscall_64+0x15f/0xf80
[  386.974632][ T9547]  ? trace_irq_disable+0x3b/0x140
[  386.974657][ T9547]  ? clear_bhb_loop+0x40/0x90
[  386.974679][ T9547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.974696][ T9547] RIP: 0033:0x7f9190d9cdd9
[  386.974720][ T9547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  386.974737][ T9547] RSP: 002b:00007f918eff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  386.974759][ T9547] RAX: ffffffffffffffda RBX: 00007f9191015fa0 RCX: 00007f9190d9cdd9
[  386.974772][ T9547] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009
[  386.974783][ T9547] RBP: 00007f918eff6090 R08: 0000000000000000 R09: 0000000000000000
[  386.974792][ T9547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  386.974801][ T9547] R13: 00007f9191016038 R14: 00007f9191015fa0 R15: 00007ffec0c862d8
[  386.974830][ T9547]  </TASK>
[  387.851905][ T9570] wg1 speed is unknown, defaulting to 1000
[  388.068764][ T9592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.130970][ T9592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.153771][ T9587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.563695][ T9610] syzkaller1: entered promiscuous mode
[  388.581310][ T9610] syzkaller1: entered allmulticast mode
[  389.108011][ T9636] netlink: 'syz.0.968': attribute type 10 has an invalid length.
[  389.135081][ T9636] bridge0: port 1(veth1_virt_wifi) entered blocking state
[  389.143019][ T9636] bridge0: port 1(veth1_virt_wifi) entered disabled state
[  389.150698][ T9636] veth1_virt_wifi: entered allmulticast mode
[  389.159599][ T9636] veth1_virt_wifi: left allmulticast mode
[  389.316152][ T9639] netlink: 'syz.2.970': attribute type 11 has an invalid length.
[  389.704934][ T9664] syzkaller1: entered allmulticast mode
[  389.780513][ T9673] __nla_validate_parse: 38 callbacks suppressed
[  389.780530][ T9673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.975'.
[  389.806961][ T9671] wg1 speed is unknown, defaulting to 1000
[  390.420750][ T9688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.982'.
[  390.742296][ T9707] netlink: 'syz.4.987': attribute type 3 has an invalid length.
[  390.906328][ T9712] wg1 speed is unknown, defaulting to 1000
[  390.947175][ T9718] x_tables: ip6_tables: mh match: only valid for protocol 135
[  391.152835][ T9725] netlink: 277 bytes leftover after parsing attributes in process `syz.2.992'.
[  392.132509][ T9759] pimreg: entered allmulticast mode
[  392.178128][ T9760] netlink: 'syz.4.1002': attribute type 3 has an invalid length.
[  392.239210][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1003'.
[  392.362230][ T9770] net_ratelimit: 11 callbacks suppressed
[  392.362247][ T9770] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  392.429936][ T9764] netlink: 60 bytes leftover after parsing attributes in process `syz.3.995'.
[  392.464388][ T9778] xt_hashlimit: max too large, truncated to 1048576
[  392.494886][ T9778] x_tables: ip_tables: ah match: only valid for protocol 51
[  392.644287][ T9780] wg1 speed is unknown, defaulting to 1000
[  392.800676][ T9778] syzkaller0: entered promiscuous mode
[  392.819467][ T9778] syzkaller0: entered allmulticast mode
[  392.862015][ T9778] TC_ACT_REPEAT abuse ?
[  393.557157][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1015'.
[  393.698570][ T9827] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1016'.
[  393.714392][ T9827] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1016'.
[  393.768447][ T9827] netlink: 'syz.4.1016': attribute type 1 has an invalid length.
[  393.787459][ T9827] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1016'.
[  393.809960][ T9827] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1016'.
[  393.827405][ T9827] netlink: 'syz.4.1016': attribute type 1 has an invalid length.
[  394.405315][ T9852] x_tables: duplicate underflow at hook 1
[  394.615410][ T9860] x_tables: duplicate underflow at hook 4
[  394.770408][ T9865] wg1 speed is unknown, defaulting to 1000
[  397.872805][ T9892] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  398.018621][ T9906] __nla_validate_parse: 1 callbacks suppressed
[  398.018638][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'.
[  398.030474][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'.
[  398.570320][ T9927] netlink: 'syz.3.1044': attribute type 1 has an invalid length.
[  398.642073][ T9927] bond3: entered promiscuous mode
[  398.649852][ T9927] 8021q: adding VLAN 0 to HW filter on device bond3
[  398.693529][ T9928] wg1 speed is unknown, defaulting to 1000
[  398.718738][ T9941] netlink: 'syz.0.1047': attribute type 1 has an invalid length.
[  398.755960][ T9941] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1047'.
[  399.965781][ T9960] wg1 speed is unknown, defaulting to 1000
[  401.120247][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'.
[  401.149835][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'.
[  401.352107][T10020] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.1067'.
[  401.392832][T10020] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.1067'.
[  401.664349][T10029] wg1 speed is unknown, defaulting to 1000
[  402.174927][ T9993] infiniband !yz!: set down
[  402.189798][ T9993] infiniband !yz!: added team_slave_0
[  402.261040][T10055] netlink: 2548 bytes leftover after parsing attributes in process `syz.0.1074'.
[  402.305939][T10051] syzkaller0: entered promiscuous mode
[  402.312184][ T9993] smbdirect: ib_dev[!yz!]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  402.333706][T10065] netlink: 2548 bytes leftover after parsing attributes in process `syz.0.1074'.
[  402.343054][T10051] syzkaller0: entered allmulticast mode
[  402.366382][ T9993] smbdirect: ib_dev[!yz!]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  402.431019][ T9993] smbdirect: ib_dev[!yz!]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  402.505171][ T9993] RDS/IB: !yz!: added
[  402.516808][ T9993] smc: adding ib device !yz! with port count 1
[  402.535554][ T9993] smc:    ib device !yz! port 1 has no pnetid
[  404.643750][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'.
[  404.847531][T10071] wg1 speed is unknown, defaulting to 1000
[  404.875619][T10074] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1080'.
[  404.960645][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1084'.
[  404.970334][T10088] netlink: 'syz.1.1084': attribute type 11 has an invalid length.
[  405.001629][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1084'.
[  405.013732][ T7650] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  405.028330][T10088] netlink: 'syz.1.1084': attribute type 11 has an invalid length.
[  405.036366][ T7650] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  405.055574][ T7650] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  405.075386][ T7650] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  405.223194][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'.
[  405.323270][T10093] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.349181][T10093] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.469485][T10093] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.503965][T10093] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.582960][T10093] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.598620][T10093] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.603467][T10100] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1087'.
[  405.664908][T10093] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.676916][T10093] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.866332][ T7650] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  405.876912][ T7650] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.952372][ T7650] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  405.971991][ T7650] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.096664][ T7654] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  406.112390][ T7654] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.160761][ T7654] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  406.171437][ T7654] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.280684][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'.
[  406.507769][T10121] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1095'.
[  406.555706][T10121] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1095'.
[  406.580549][T10121] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048)
[  407.265838][T10141] netlink: 'syz.1.1102': attribute type 51 has an invalid length.
[  407.517147][T10145] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1104'.
[  407.816634][T10125] wg1 speed is unknown, defaulting to 1000
[  408.241573][T10176] team1: entered promiscuous mode
[  408.247015][T10176] team1: entered allmulticast mode
[  408.263192][T10176] 8021q: adding VLAN 0 to HW filter on device team1
[  408.584307][T10179] team2: entered promiscuous mode
[  408.591896][T10179] team2: entered allmulticast mode
[  408.598204][T10179] 8021q: adding VLAN 0 to HW filter on device team2
[  408.766990][T10201] xt_hashlimit: overflow, rate too high: 0
[  409.283060][T10224] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  409.659861][T10249] __nla_validate_parse: 6 callbacks suppressed
[  409.659879][T10249] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1126'.
[  409.703940][T10252] sctp: [Deprecated]: syz.1.1128 (pid 10252) Use of int in max_burst socket option.
[  409.703940][T10252] Use struct sctp_assoc_value instead
[  409.806365][T10260] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1130'.
[  410.066212][T10277] openvswitch: netlink: IPv4 tun info is not correct
[  410.176220][T10273] wg1 speed is unknown, defaulting to 1000
[  410.299803][T10291] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1136'.
[  410.427869][ T7650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.460662][ T7650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.540143][T10292] block nbd4: not configured, cannot reconfigure
[  410.639506][T10304] netlink: 'syz.0.1140': attribute type 64 has an invalid length.
[  410.966885][T10316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1144'.
[  411.623996][T10344] lo speed is unknown, defaulting to 1000
[  411.666091][T10344] lo speed is unknown, defaulting to 1000
[  411.711963][T10349] xt_hashlimit: size too large, truncated to 1048576
[  411.720475][T10349] xt_hashlimit: max too large, truncated to 1048576
[  411.731168][T10344] lo speed is unknown, defaulting to 1000
[  411.739633][T10336] wg1 speed is unknown, defaulting to 1000
[  411.777443][T10355] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1153'.
[  411.795180][T10331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1148'.
[  411.824826][T10349] ipt_REJECT: TCP_RESET invalid for non-tcp
[  411.879753][T10357] openvswitch: netlink: Invalid VLAN frame
[  411.919319][T10331] ip6gretap0: left promiscuous mode
[  411.948742][T10331] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.959037][T10331] 8021q: adding VLAN 0 to HW filter on device team0
[  411.988352][T10331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  412.095608][T10331] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.115906][T10331] batman_adv: batadv0: Interface activated: batadv_slave_1
[  412.142242][T10331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  412.167394][T10331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  412.193575][T10331] veth1_vlan: left promiscuous mode
[  412.202678][T10331] veth0_vlan: left promiscuous mode
[  412.209654][T10331] veth0_vlan: entered promiscuous mode
[  412.228031][T10344] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  412.248335][T10344] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  412.257398][T10331] veth1_vlan: entered promiscuous mode
[  412.267828][T10344] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  412.298384][T10344] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  412.320015][T10331] veth1_macvtap: left promiscuous mode
[  412.341343][T10331] veth0_macvtap: left promiscuous mode
[  412.349565][T10331] veth0_macvtap: entered promiscuous mode
[  412.358032][T10331] veth1_macvtap: entered promiscuous mode
[  412.386390][T10331] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  412.400007][T10331] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  412.409730][T10331] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  412.419531][T10331] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  412.436798][T10331] 8021q: adding VLAN 0 to HW filter on device bond1
[  412.444892][T10331] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network
[  412.456609][T10331] hsr1: Interlink (veth1_to_batadv) is not up; please bring it up to get a fully working HSR network
[  412.474372][T10331] 8021q: adding VLAN 0 to HW filter on device bond2
[  412.482899][T10331] ip6gretap0: entered promiscuous mode
[  412.501798][T10357] macsec1: entered promiscuous mode
[  412.507296][T10357] virt_wifi0: entered promiscuous mode
[  412.522051][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.529303][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.583626][T10344] lo speed is unknown, defaulting to 1000
[  412.588544][ T7646] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.599188][ T7646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.610501][ T7646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.636802][T10344] lo speed is unknown, defaulting to 1000
[  412.643336][ T7646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.663674][T10344] lo speed is unknown, defaulting to 1000
[  412.776428][T10344] lo speed is unknown, defaulting to 1000
[  412.795290][T10344] lo speed is unknown, defaulting to 1000
[  412.810215][T10344] lo speed is unknown, defaulting to 1000
[  412.875613][T10374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1159'.
[  413.336551][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'.
[  413.532676][T10403] netlink: 'syz.1.1168': attribute type 1 has an invalid length.
[  413.542560][T10403] netlink: 'syz.1.1168': attribute type 1 has an invalid length.
[  413.565449][T10403] veth0_to_bridge: entered promiscuous mode
[  413.575180][T10403] batadv0: entered promiscuous mode
[  413.582133][T10403] debugfs: 'hsr1' already exists in 'hsr'
[  413.598416][T10403] Cannot create hsr debugfs directory
[  413.645695][T10403] veth0_to_bridge: left promiscuous mode
[  413.680685][T10403] batadv0: left promiscuous mode
[  413.954633][T10426] netlink: 'syz.1.1174': attribute type 12 has an invalid length.
[  413.967651][T10426] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1174'.
[  414.395207][T10442] wg1 speed is unknown, defaulting to 1000
[  414.654499][T10468] netlink: 'syz.2.1184': attribute type 2 has an invalid length.
[  414.685747][T10461] netlink: 'syz.2.1184': attribute type 4 has an invalid length.
[  415.088288][T10442] lo speed is unknown, defaulting to 1000
[  415.886056][T10507] netlink: 'syz.3.1194': attribute type 1 has an invalid length.
[  416.046110][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'.
[  416.091694][T10515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  416.101530][T10515] syzkaller0: entered promiscuous mode
[  416.107350][T10515] syzkaller0: entered allmulticast mode
[  416.163758][T10515] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1197'.
[  416.191882][T10515] tipc: Resetting bearer <eth:syzkaller0>
[  416.251371][T10514] tipc: Resetting bearer <eth:syzkaller0>
[  416.305723][T10514] tipc: Disabling bearer <eth:syzkaller0>
[  416.351211][T10531] netlink: 'syz.1.1203': attribute type 1 has an invalid length.
[  416.366428][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'.
[  416.390949][T10530] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004
[  416.647325][T10541] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1205'.
[  416.663109][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'.
[  416.855351][T10554] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1210'.
[  416.998882][T10565] syzkaller0: entered promiscuous mode
[  417.010600][T10565] syzkaller0: entered allmulticast mode
[  417.265949][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'.
[  417.302276][T10585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1216'.
[  417.497053][T10592] vlan0: entered allmulticast mode
[  417.504367][T10592] bridge_slave_0: entered allmulticast mode
[  417.513651][T10592] bridge0: port 1(vlan0) entered blocking state
[  417.521078][T10592] bridge0: port 1(vlan0) entered disabled state
[  417.532121][T10592] vlan0: entered promiscuous mode
[  417.537841][T10592] bridge_slave_0: entered promiscuous mode
[  417.552619][T10600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1217'.
[  417.571144][T10593] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check.
[  418.714512][T10642] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1232'.
[  419.018535][T10653] wg1 speed is unknown, defaulting to 1000
[  419.422334][ T5654] block nbd0: Receive control failed (result -32)
[  419.422338][ T5658] block nbd0: Receive control failed (result -32)
[  419.680056][T10678] wg1 speed is unknown, defaulting to 1000
[  419.683164][T10653] lo speed is unknown, defaulting to 1000
[  419.981274][T10695] netlink: 'syz.1.1246': attribute type 1 has an invalid length.
[  420.068929][T10695] 8021q: adding VLAN 0 to HW filter on device bond4
[  420.114098][T10693] bond4: (slave veth3): Enslaving as an active interface with a down link
[  420.146430][T10695] 8021q: adding VLAN 0 to HW filter on device batadv1
[  420.153963][T10695] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  420.183213][T10678] lo speed is unknown, defaulting to 1000
[  420.611212][T10701] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  420.630155][T10701] bond5 (unregistering): Released all slaves
[  421.146808][T10731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  421.181910][T10731] syzkaller0: entered promiscuous mode
[  421.203886][T10731] syzkaller0: entered allmulticast mode
[  421.360143][T10731] __nla_validate_parse: 3 callbacks suppressed
[  421.360159][T10731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1258'.
[  421.398960][T10735] tipc: Resetting bearer <eth:syzkaller0>
[  421.525048][T10730] tipc: Resetting bearer <eth:syzkaller0>
[  421.595185][T10730] tipc: Disabling bearer <eth:syzkaller0>
[  422.029117][T10790] netlink: 'syz.3.1274': attribute type 5 has an invalid length.
[  422.067983][T10773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1271'.
[  422.138254][T10782] wg1 speed is unknown, defaulting to 1000
[  422.164389][T10773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1271'.
[  422.250855][T10794] 5nč: entered promiscuous mode
[  422.285388][T10801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1275'.
[  422.386788][T10794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1275'.
[  422.619973][T10809] netlink: 'syz.4.1278': attribute type 12 has an invalid length.
[  422.649433][T10809] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1278'.
[  423.453240][T10861] syzkaller1: entered promiscuous mode
[  423.481228][T10861] syzkaller1: entered allmulticast mode
[  423.562792][T10782] lo speed is unknown, defaulting to 1000
[  423.572007][T10868] netlink: 'syz.1.1286': attribute type 8 has an invalid length.
[  423.588287][T10861] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1284'.
[  423.639511][T10870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  423.836030][T10877] netlink: 'syz.1.1288': attribute type 15 has an invalid length.
[  423.850198][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'.
[  423.991755][T10877] netlink: 'syz.1.1288': attribute type 15 has an invalid length.
[  424.021578][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'.
[  424.130098][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1291'.
[  424.145042][   T65] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  424.154036][   T65] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  424.229934][   T65] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  424.329251][   T65] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  424.521264][T10900] bond5: option ad_actor_sys_prio: invalid value (0)
[  424.549006][T10900] bond5: option ad_actor_sys_prio: allowed values 1 - 65535
[  424.582585][T10900] bond5 (unregistering): Released all slaves
[  425.236805][T10930] netlink: 'syz.1.1296': attribute type 11 has an invalid length.
[  425.512936][T10943] netlink: 'syz.3.1299': attribute type 9 has an invalid length.
[  426.111977][T10958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.141357][T10958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.389343][T10958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.434782][T10989] Bluetooth: MGMT ver 1.23
[  426.458450][T10958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.555530][T10998] __nla_validate_parse: 4 callbacks suppressed
[  426.555550][T10998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1314'.
[  426.621753][T10958] team0: Port device netdevsim1 removed
[  426.635796][T10958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.660972][T10958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.832063][T10958] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[  426.878334][T10958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.903143][T10958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.052596][T11002] wg1 speed is unknown, defaulting to 1000
[  427.290458][ T7652] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  427.318664][ T7652] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.421445][ T7646] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  427.436577][ T7646] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.566718][ T7657] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  427.593209][ T7657] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.673768][ T7657] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  427.695185][ T7657] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.895096][T11002] lo speed is unknown, defaulting to 1000
[  428.044846][T11039] wg1 speed is unknown, defaulting to 1000
[  428.366168][T11056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1331'.
[  428.386435][T11056] netlink: 'syz.3.1331': attribute type 1 has an invalid length.
[  428.405193][T11056] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1331'.
[  428.661411][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'.
[  428.679882][T11039] lo speed is unknown, defaulting to 1000
[  428.942693][T11074] netlink: 'syz.3.1336': attribute type 8 has an invalid length.
[  428.954383][T11074] netlink: 'syz.3.1336': attribute type 9 has an invalid length.
[  429.088072][T11079] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1338'.
[  429.106739][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'.
[  429.179137][T11077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'.
[  429.204566][T11079] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  429.215583][T11079] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  429.225726][T11079] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  429.300605][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'.
[  429.810963][T11097] netlink: 'syz.0.1343': attribute type 13 has an invalid length.
[  429.819634][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1343'.
[  429.880702][T11084] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1339'.
[  429.920232][ T7657] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  429.932953][T11097] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  429.935735][T11084] veth1_to_team: entered promiscuous mode
[  429.950019][T11084] gretap0: entered promiscuous mode
[  429.956101][T11084] debugfs: 'hsr1' already exists in 'hsr'
[  429.964427][T11084] Cannot create hsr debugfs directory
[  429.976573][T11084] hsr1: entered promiscuous mode
[  429.991839][ T7657] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  430.008995][ T7657] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  430.143526][T11107] syzkaller1: entered promiscuous mode
[  430.168606][T11107] syzkaller1: entered allmulticast mode
[  430.329558][T11113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  430.348769][T11113] syzkaller0: entered promiscuous mode
[  430.358461][T11113] syzkaller0: entered allmulticast mode
[  430.380938][T11115] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20001
[  430.436103][T11113] tipc: Resetting bearer <eth:syzkaller0>
[  430.498694][T11111] tipc: Resetting bearer <eth:syzkaller0>
[  430.525102][T11111] tipc: Disabling bearer <eth:syzkaller0>
[  430.829091][T11135] tipc: Invalid UDP bearer configuration
[  430.829142][T11135] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  431.398935][T11152] wg1 speed is unknown, defaulting to 1000
[  431.918733][T11181] netlink: 'syz.3.1368': attribute type 1 has an invalid length.
[  432.084316][T11181] bond4: entered promiscuous mode
[  432.096008][T11181] 8021q: adding VLAN 0 to HW filter on device bond4
[  432.156428][T11186] bond4: (slave veth7): making interface the new active one
[  432.164672][T11186] veth7: entered promiscuous mode
[  432.173257][T11186] bond4: (slave veth7): Enslaving as an active interface with an up link
[  432.350780][T11204] xt_hashlimit: size too large, truncated to 1048576
[  432.462062][T11208] dvmrp6: entered allmulticast mode
[  432.552003][T11213] __nla_validate_parse: 5 callbacks suppressed
[  432.552024][T11213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1375'.
[  432.572814][T11152] lo speed is unknown, defaulting to 1000
[  432.710348][T11218] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  432.826705][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'.
[  432.847999][T11227] netlink: 'syz.3.1378': attribute type 1 has an invalid length.
[  432.877741][T11227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1378'.
[  432.994005][T11230] bridge4: entered promiscuous mode
[  433.335961][T11244] netlink: zone id is out of range
[  433.352007][T11244] netlink: zone id is out of range
[  433.367030][T11244] netlink: zone id is out of range
[  433.383277][T11244] netlink: zone id is out of range
[  433.393421][T11244] netlink: zone id is out of range
[  433.405564][T11244] netlink: zone id is out of range
[  433.420209][T11244] netlink: zone id is out of range
[  433.432558][T11244] netlink: zone id is out of range
[  433.448393][T11244] netlink: zone id is out of range
[  433.457129][T11244] netlink: zone id is out of range
[  435.799048][T11228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  436.019577][T11269] x_tables: duplicate underflow at hook 1
[  436.877550][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'.
[  436.902771][T11341] x_tables: ip_tables: ah match: only valid for protocol 51
[  436.904481][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1405'.
[  436.981664][T11338] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1405'.
[  437.291623][T11350] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  437.360535][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'.
[  437.429597][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'.
[  437.472911][T11367] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  437.967530][T11391] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  438.015927][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1420'.
[  438.057285][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1420'.
[  438.206892][T11406] netlink: 488 bytes leftover after parsing attributes in process `syz.4.1424'.
[  438.228646][T11406] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1424'.
[  438.429828][T11419] syzkaller0: entered promiscuous mode
[  438.442165][T11419] syzkaller0: entered allmulticast mode
[  438.706630][T11428] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1429'.
[  438.803522][T11432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'.
[  438.999796][   T30] audit: type=1804 audit(1777915570.327:4): pid=11441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1433" name="/newroot/297/cgroup.controllers" dev="tmpfs" ino=1539 res=1 errno=0
[  439.035532][   T30] audit: type=1800 audit(1777915570.337:5): pid=11441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1433" name="cgroup.controllers" dev="tmpfs" ino=1539 res=0 errno=0
[  439.196167][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1438'.
[  439.215455][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'.
[  439.228311][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1438'.
[  439.250756][T11456] netlink: 'syz.0.1438': attribute type 20 has an invalid length.
[  439.291250][T11461] ipt_ECN: cannot use operation on non-tcp rule
[  439.311587][T11461] erspan0: entered promiscuous mode
[  439.353623][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1439'.
[  439.449643][T11470] netlink: 'syz.0.1440': attribute type 9 has an invalid length.
[  439.638107][T11475] wg1 speed is unknown, defaulting to 1000
[  440.051593][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  440.142300][T11475] lo speed is unknown, defaulting to 1000
[  440.162714][T11505] netlink: 'syz.2.1449': attribute type 1 has an invalid length.
[  440.651632][T11530] vlan0: entered promiscuous mode
[  440.811784][T11536] netlink: 'syz.3.1455': attribute type 29 has an invalid length.
[  440.840803][T11536] netlink: 'syz.3.1455': attribute type 29 has an invalid length.
[  440.856168][T11536] netlink: 'syz.3.1455': attribute type 29 has an invalid length.
[  440.868425][T11536] netlink: 'syz.3.1455': attribute type 29 has an invalid length.
[  440.876834][T11536] netlink: 'syz.3.1455': attribute type 29 has an invalid length.
[  440.890863][T11536] netlink: 'syz.3.1455': attribute type 29 has an invalid length.
[  440.903216][T11536] netlink: 'syz.3.1455': attribute type 29 has an invalid length.
[  442.712556][T11486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  442.960107][T11546] net_ratelimit: 240 callbacks suppressed
[  442.960125][T11546] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  443.289652][T11568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.333429][T11568] syzkaller0: entered promiscuous mode
[  443.344921][T11568] syzkaller0: entered allmulticast mode
[  443.363563][T11577] __nla_validate_parse: 27 callbacks suppressed
[  443.363582][T11577] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1464'.
[  443.429648][T11568] tipc: Resetting bearer <eth:syzkaller0>
[  443.471580][T11566] tipc: Resetting bearer <eth:syzkaller0>
[  443.546046][T11589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  443.572897][T11566] tipc: Disabling bearer <eth:syzkaller0>
[  443.892222][T11600] bond5: entered promiscuous mode
[  443.919684][T11600] bond5: entered allmulticast mode
[  443.940529][T11600] 8021q: adding VLAN 0 to HW filter on device bond5
[  443.958559][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1471'.
[  444.000467][T11600] erspan1: entered allmulticast mode
[  444.026656][T11600] bond5: (slave erspan1): making interface the new active one
[  444.050340][T11600] erspan1: entered promiscuous mode
[  444.094199][T11600] bond5: (slave erspan1): Enslaving as an active interface with an up link
[  444.296166][T11614] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1476'.
[  444.299749][T11615] x_tables: duplicate entry at hook 3
[  444.343763][T11615] validate_nla: 17 callbacks suppressed
[  444.343780][T11615] netlink: 'syz.3.1475': attribute type 1 has an invalid length.
[  444.398152][T11621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'.
[  444.409891][T11621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'.
[  444.520515][T11615] bond6: entered promiscuous mode
[  444.542846][T11615] 8021q: adding VLAN 0 to HW filter on device bond6
[  444.668671][T11631] bond6: (slave bridge5): making interface the new active one
[  444.696654][T11631] bridge5: entered promiscuous mode
[  444.717902][T11631] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  444.791665][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'.
[  444.858718][T11649] ip6gretap1: entered promiscuous mode
[  444.877945][T11649] ip6gretap1: entered allmulticast mode
[  444.913109][T11649] netem: change failed
[  444.927165][T11656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1486'.
[  444.941613][T11656] netlink: 'syz.3.1486': attribute type 1 has an invalid length.
[  444.950068][T11656] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1486'.
[  444.978629][T11659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1486'.
[  445.066787][T11663] netlink: 'syz.1.1487': attribute type 1 has an invalid length.
[  445.124801][T11665] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1488'.
[  445.286377][T11675] syzkaller0: entered promiscuous mode
[  445.309051][T11675] syzkaller0: entered allmulticast mode
[  445.365337][T11675] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  445.398946][T11669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.426516][T11668] tipc: Resetting bearer <eth:syzkaller0>
[  445.511223][T11668] tipc: Disabling bearer <eth:syzkaller0>
[  445.684523][T11694] netlink: 'syz.4.1495': attribute type 9 has an invalid length.
[  445.707846][T11694] netlink: 'syz.4.1495': attribute type 7 has an invalid length.
[  445.722971][T11700] netlink: 'syz.3.1497': attribute type 13 has an invalid length.
[  445.734381][T11694] netlink: 'syz.4.1495': attribute type 8 has an invalid length.
[  445.747809][T11700] netlink: 'syz.3.1497': attribute type 17 has an invalid length.
[  445.811427][T11700] erspan0: left promiscuous mode
[  446.159375][T11700] veth3: left promiscuous mode
[  446.173129][T11700] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.194943][T11700] gretap1: left allmulticast mode
[  446.214989][T11700] bond3: left promiscuous mode
[  446.245490][T11700] 8021q: adding VLAN 0 to HW filter on device eth0
[  446.303773][T11700] 8021q: adding VLAN 0 to HW filter on device eth1
[  446.346703][T11700] 8021q: adding VLAN 0 to HW filter on device eth2
[  446.387085][T11700] 8021q: adding VLAN 0 to HW filter on device eth3
[  446.413845][T11700] bond4: left promiscuous mode
[  446.423105][T11700] veth7: left promiscuous mode
[  446.451328][T11700] bridge4: left promiscuous mode
[  446.469382][T11700] bond5: left promiscuous mode
[  446.484925][T11700] erspan1: left promiscuous mode
[  446.495722][T11700] bond5: left allmulticast mode
[  446.510567][T11700] erspan1: left allmulticast mode
[  446.529103][T11700] bond6: left promiscuous mode
[  446.542061][T11700] bridge5: left promiscuous mode
[  446.579865][ T7646] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  446.611287][T11721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.657885][T11725] syzkaller0: entered promiscuous mode
[  446.663585][T11725] syzkaller0: entered allmulticast mode
[  446.685989][T11713] tipc: Resetting bearer <eth:syzkaller0>
[  446.782962][T11713] tipc: Disabling bearer <eth:syzkaller0>
[  446.836442][T11746] veth0_macvtap: left promiscuous mode
[  447.036767][T11746] veth0_macvtap: entered promiscuous mode
[  447.734600][T11777] netlink: 'syz.1.1515': attribute type 1 has an invalid length.
[  447.758641][T11779] FAULT_INJECTION: forcing a failure.
[  447.758641][T11779] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.796552][T11779] CPU: 0 UID: 0 PID: 11779 Comm: syz.2.1516 Not tainted syzkaller #0 PREEMPT(full) 
[  447.796578][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  447.796589][T11779] Call Trace:
[  447.796596][T11779]  <TASK>
[  447.796604][T11779]  dump_stack_lvl+0xe8/0x150
[  447.796630][T11779]  should_fail_ex+0x412/0x560
[  447.796659][T11779]  _copy_to_user+0x31/0xb0
[  447.796687][T11779]  simple_read_from_buffer+0xe1/0x170
[  447.796713][T11779]  proc_fail_nth_read+0x1bb/0x230
[  447.796739][T11779]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  447.796765][T11779]  ? rw_verify_area+0x2a6/0x4d0
[  447.796788][T11779]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  447.796812][T11779]  vfs_read+0x20c/0xa70
[  447.796839][T11779]  ? __pfx___mutex_lock+0x10/0x10
[  447.796862][T11779]  ? __pfx_vfs_read+0x10/0x10
[  447.796884][T11779]  ? __fget_files+0x2a/0x420
[  447.796909][T11779]  ? __fget_files+0x3a0/0x420
[  447.796928][T11779]  ? __fget_files+0x2a/0x420
[  447.796954][T11779]  ksys_read+0x150/0x270
[  447.796979][T11779]  ? __pfx_ksys_read+0x10/0x10
[  447.797010][T11779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.797054][T11779]  do_syscall_64+0x15f/0xf80
[  447.797073][T11779]  ? trace_irq_disable+0x3b/0x140
[  447.797098][T11779]  ? clear_bhb_loop+0x40/0x90
[  447.797120][T11779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.797135][T11779] RIP: 0033:0x7f17e415d60e
[  447.797151][T11779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  447.797165][T11779] RSP: 002b:00007f17e5002fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  447.797187][T11779] RAX: ffffffffffffffda RBX: 00007f17e50036c0 RCX: 00007f17e415d60e
[  447.797198][T11779] RDX: 000000000000000f RSI: 00007f17e50030a0 RDI: 0000000000000004
[  447.797208][T11779] RBP: 00007f17e5003090 R08: 0000000000000000 R09: 0000000000000000
[  447.797217][T11779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.797227][T11779] R13: 00007f17e4416038 R14: 00007f17e4415fa0 R15: 00007ffc05e0ef98
[  447.797255][T11779]  </TASK>
[  447.835639][T11782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.064191][T11785] syzkaller0: entered promiscuous mode
[  448.091959][T11785] syzkaller0: entered allmulticast mode
[  448.166586][T11781] tipc: Resetting bearer <eth:syzkaller0>
[  448.291122][T11781] tipc: Disabling bearer <eth:syzkaller0>
[  448.600189][T11800] wg1 speed is unknown, defaulting to 1000
[  448.650440][T11823] __nla_validate_parse: 5 callbacks suppressed
[  448.650462][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1523'.
[  448.815816][T11828] pim6reg: entered allmulticast mode
[  448.841000][T11827] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.871124][T11829] syzkaller0: entered promiscuous mode
[  448.891273][T11829] syzkaller0: entered allmulticast mode
[  449.001210][T11827] tipc: Resetting bearer <eth:syzkaller0>
[  449.056401][T11826] tipc: Resetting bearer <eth:syzkaller0>
[  449.115321][T11826] tipc: Disabling bearer <eth:syzkaller0>
[  449.471529][   T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.515440][   T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.535852][T11800] lo speed is unknown, defaulting to 1000
[  449.630833][T11858] netlink: 'syz.3.1529': attribute type 1 has an invalid length.
[  449.903275][ T5658] block nbd1: Receive control failed (result -107)
[  449.916442][ T5658] 
[  449.918813][ T5658] ======================================================
[  449.925835][ T5658] WARNING: possible circular locking dependency detected
[  449.932873][ T5658] syzkaller #0 Not tainted
[  449.937301][ T5658] ------------------------------------------------------
[  449.944327][ T5658] kworker/u9:4/5658 is trying to acquire lock:
[  449.950477][ T5658] ffff8880513c0fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390
[  449.959896][ T5658] 
[  449.959896][ T5658] but task is already holding lock:
[  449.967266][ T5658] ffff88807ca07a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c19/0x1d40
[  449.976169][ T5658] 
[  449.976169][ T5658] which lock already depends on the new lock.
[  449.976169][ T5658] 
[  449.986574][ T5658] 
[  449.986574][ T5658] the existing dependency chain (in reverse order) is:
[  449.995593][ T5658] 
[  449.995593][ T5658] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  450.003256][ T5658]        __mutex_lock+0x1a3/0x1550
[  450.008371][ T5658]        nbd_queue_rq+0x37b/0x1100
[  450.013568][ T5658]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  450.019638][ T5658]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  450.026483][ T5658]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  450.032979][ T5658]        blk_mq_run_hw_queue+0x348/0x4f0
[  450.038608][ T5658]        blk_mq_dispatch_list+0xd16/0xe10
[  450.044324][ T5658]        blk_mq_flush_plug_list+0x48d/0x570
[  450.050216][ T5658]        __blk_flush_plug+0x3ed/0x4d0
[  450.055579][ T5658]        __submit_bio+0x28d/0x580
[  450.060597][ T5658]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  450.066743][ T5658]        block_read_full_folio+0x599/0x830
[  450.072535][ T5658]        filemap_read_folio+0x137/0x3b0
[  450.078075][ T5658]        do_read_cache_folio+0x358/0x590
[  450.083708][ T5658]        read_part_sector+0xb6/0x2b0
[  450.088991][ T5658]        adfspart_check_ICS+0xb1/0x960
[  450.094448][ T5658]        bdev_disk_changed+0x817/0x1770
[  450.100001][ T5658]        blkdev_get_whole+0x380/0x510
[  450.105365][ T5658]        bdev_open+0x31e/0xd30
[  450.110128][ T5658]        blkdev_open+0x470/0x610
[  450.115053][ T5658]        do_dentry_open+0x785/0x14e0
[  450.120329][ T5658]        vfs_open+0x3b/0x340
[  450.124903][ T5658]        path_openat+0x2e08/0x3860
[  450.130004][ T5658]        do_file_open+0x23e/0x4a0
[  450.135025][ T5658]        do_sys_openat2+0x113/0x200
[  450.140234][ T5658]        __x64_sys_openat+0x138/0x170
[  450.145593][ T5658]        do_syscall_64+0x15f/0xf80
[  450.150694][ T5658]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.157099][ T5658] 
[  450.157099][ T5658] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  450.164300][ T5658]        __mutex_lock+0x1a3/0x1550
[  450.169403][ T5658]        nbd_queue_rq+0xc6/0x1100
[  450.174420][ T5658]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  450.180496][ T5658]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  450.187341][ T5658]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  450.193843][ T5658]        blk_mq_run_hw_queue+0x348/0x4f0
[  450.199472][ T5658]        blk_mq_dispatch_list+0xd16/0xe10
[  450.205192][ T5658]        blk_mq_flush_plug_list+0x48d/0x570
[  450.211080][ T5658]        __blk_flush_plug+0x3ed/0x4d0
[  450.216453][ T5658]        __submit_bio+0x28d/0x580
[  450.221476][ T5658]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  450.227745][ T5658]        block_read_full_folio+0x599/0x830
[  450.233653][ T5658]        filemap_read_folio+0x137/0x3b0
[  450.239220][ T5658]        do_read_cache_folio+0x358/0x590
[  450.244865][ T5658]        read_part_sector+0xb6/0x2b0
[  450.250153][ T5658]        adfspart_check_ICS+0xb1/0x960
[  450.255606][ T5658]        bdev_disk_changed+0x817/0x1770
[  450.261147][ T5658]        blkdev_get_whole+0x380/0x510
[  450.266514][ T5658]        bdev_open+0x31e/0xd30
[  450.271267][ T5658]        blkdev_open+0x470/0x610
[  450.276200][ T5658]        do_dentry_open+0x785/0x14e0
[  450.281469][ T5658]        vfs_open+0x3b/0x340
[  450.286047][ T5658]        path_openat+0x2e08/0x3860
[  450.291149][ T5658]        do_file_open+0x23e/0x4a0
[  450.296162][ T5658]        do_sys_openat2+0x113/0x200
[  450.301352][ T5658]        __x64_sys_openat+0x138/0x170
[  450.306711][ T5658]        do_syscall_64+0x15f/0xf80
[  450.311811][ T5658]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.318213][ T5658] 
[  450.318213][ T5658] -> #4 (set->srcu){.+.+}-{0:0}:
[  450.325326][ T5658]        __synchronize_srcu+0xca/0x300
[  450.330775][ T5658]        elevator_switch+0x1e8/0x7a0
[  450.336056][ T5658]        elevator_change+0x2cc/0x450
[  450.341333][ T5658]        elevator_set_default+0x36c/0x430
[  450.347314][ T5658]        blk_register_queue+0x3e9/0x4e0
[  450.352872][ T5658]        __add_disk+0x677/0xd50
[  450.357725][ T5658]        add_disk_fwnode+0xfb/0x480
[  450.362916][ T5658]        nbd_dev_add+0x72c/0xb50
[  450.367851][ T5658]        nbd_init+0x168/0x1f0
[  450.372538][ T5658]        do_one_initcall+0x250/0x870
[  450.377821][ T5658]        do_initcall_level+0x104/0x190
[  450.383273][ T5658]        do_initcalls+0x59/0xa0
[  450.388232][ T5658]        kernel_init_freeable+0x2a6/0x3e0
[  450.393941][ T5658]        kernel_init+0x1d/0x1d0
[  450.398783][ T5658]        ret_from_fork+0x514/0xb70
[  450.403881][ T5658]        ret_from_fork_asm+0x1a/0x30
[  450.409154][ T5658] 
[  450.409154][ T5658] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  450.416973][ T5658]        __mutex_lock+0x1a3/0x1550
[  450.422092][ T5658]        elevator_change+0x1b3/0x450
[  450.427388][ T5658]        elevator_set_none+0xb5/0x140
[  450.432842][ T5658]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  450.439243][ T5658]        nbd_start_device+0x17f/0xb10
[  450.444604][ T5658]        nbd_genl_connect+0x165b/0x1cf0
[  450.450130][ T5658]        genl_family_rcv_msg_doit+0x22a/0x330
[  450.456196][ T5658]        genl_rcv_msg+0x61c/0x7a0
[  450.461208][ T5658]        netlink_rcv_skb+0x232/0x4b0
[  450.466482][ T5658]        genl_rcv+0x28/0x40
[  450.470972][ T5658]        netlink_unicast+0x75c/0x8e0
[  450.476239][ T5658]        netlink_sendmsg+0x813/0xb40
[  450.481511][ T5658]        ____sys_sendmsg+0x972/0x9f0
[  450.486786][ T5658]        ___sys_sendmsg+0x2a5/0x360
[  450.491973][ T5658]        __x64_sys_sendmsg+0x1bd/0x2a0
[  450.497418][ T5658]        do_syscall_64+0x15f/0xf80
[  450.502518][ T5658]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.508922][ T5658] 
[  450.508922][ T5658] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  450.517519][ T5658]        blk_alloc_queue+0x546/0x680
[  450.522882][ T5658]        __blk_mq_alloc_disk+0x197/0x390
[  450.528512][ T5658]        nbd_dev_add+0x499/0xb50
[  450.533434][ T5658]        nbd_init+0x168/0x1f0
[  450.538101][ T5658]        do_one_initcall+0x250/0x870
[  450.543378][ T5658]        do_initcall_level+0x104/0x190
[  450.548868][ T5658]        do_initcalls+0x59/0xa0
[  450.553708][ T5658]        kernel_init_freeable+0x2a6/0x3e0
[  450.559415][ T5658]        kernel_init+0x1d/0x1d0
[  450.564256][ T5658]        ret_from_fork+0x514/0xb70
[  450.569354][ T5658]        ret_from_fork_asm+0x1a/0x30
[  450.574634][ T5658] 
[  450.574634][ T5658] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  450.581844][ T5658]        fs_reclaim_acquire+0x71/0x100
[  450.587331][ T5658]        __kmalloc_cache_noprof+0x40/0x660
[  450.593143][ T5658]        tcp_sendmsg_fastopen+0x1de/0x5e0
[  450.598857][ T5658]        tcp_sendmsg_locked+0x4a88/0x5360
[  450.604564][ T5658]        tcp_sendmsg+0x2f/0x50
[  450.609320][ T5658]        smc_sendmsg+0x250/0x4d0
[  450.614254][ T5658]        ____sys_sendmsg+0x972/0x9f0
[  450.619532][ T5658]        ___sys_sendmsg+0x2a5/0x360
[  450.624722][ T5658]        __x64_sys_sendmsg+0x1bd/0x2a0
[  450.630178][ T5658]        do_syscall_64+0x15f/0xf80
[  450.635295][ T5658]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.641698][ T5658] 
[  450.641698][ T5658] -> #0 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  450.649600][ T5658]        __lock_acquire+0x15a5/0x2cf0
[  450.654978][ T5658]        lock_acquire+0x106/0x350
[  450.659997][ T5658]        lock_sock_nested+0x41/0x100
[  450.665278][ T5658]        inet_shutdown+0x6a/0x390
[  450.670297][ T5658]        nbd_mark_nsock_dead+0x2e9/0x560
[  450.675918][ T5658]        recv_work+0x1c2e/0x1d40
[  450.677424][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  450.680842][ T5658]        process_scheduled_works+0xb5d/0x1860
[  450.694334][ T5658]        worker_thread+0xa53/0xfc0
[  450.699441][ T5658]        kthread+0x388/0x470
[  450.704039][ T5658]        ret_from_fork+0x514/0xb70
[  450.709144][ T5658]        ret_from_fork_asm+0x1a/0x30
[  450.714422][ T5658] 
[  450.714422][ T5658] other info that might help us debug this:
[  450.714422][ T5658] 
[  450.724634][ T5658] Chain exists of:
[  450.724634][ T5658]   k-sk_lock-AF_INET6 --> &cmd->lock --> &nsock->tx_lock
[  450.724634][ T5658] 
[  450.737490][ T5658]  Possible unsafe locking scenario:
[  450.737490][ T5658] 
[  450.744968][ T5658]        CPU0                    CPU1
[  450.750402][ T5658]        ----                    ----
[  450.755752][ T5658]   lock(&nsock->tx_lock);
[  450.760162][ T5658]                                lock(&cmd->lock);
[  450.766652][ T5658]                                lock(&nsock->tx_lock);
[  450.773590][ T5658]   lock(k-sk_lock-AF_INET6);
[  450.778270][ T5658] 
[  450.778270][ T5658]  *** DEADLOCK ***
[  450.778270][ T5658] 
[  450.786403][ T5658] 3 locks held by kworker/u9:4/5658:
[  450.791675][ T5658]  #0: ffff888026e96940 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  450.802894][ T5658]  #1: ffffc90004377c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  450.814639][ T5658]  #2: ffff88807ca07a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c19/0x1d40
[  450.823948][ T5658] 
[  450.823948][ T5658] stack backtrace:
[  450.829825][ T5658] CPU: 1 UID: 0 PID: 5658 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  450.829843][ T5658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  450.829853][ T5658] Workqueue: nbd1-recv recv_work
[  450.829871][ T5658] Call Trace:
[  450.829878][ T5658]  <TASK>
[  450.829884][ T5658]  dump_stack_lvl+0xe8/0x150
[  450.829901][ T5658]  print_circular_bug+0x2e1/0x300
[  450.829921][ T5658]  check_noncircular+0x12e/0x150
[  450.829941][ T5658]  __lock_acquire+0x15a5/0x2cf0
[  450.829958][ T5658]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  450.829974][ T5658]  ? try_to_wake_up+0x7f2/0x1380
[  450.829996][ T5658]  ? inet_shutdown+0x6a/0x390
[  450.830014][ T5658]  lock_acquire+0x106/0x350
[  450.830032][ T5658]  ? inet_shutdown+0x6a/0x390
[  450.830052][ T5658]  ? __queue_work+0xc42/0xfc0
[  450.830069][ T5658]  lock_sock_nested+0x41/0x100
[  450.830082][ T5658]  ? inet_shutdown+0x6a/0x390
[  450.830101][ T5658]  inet_shutdown+0x6a/0x390
[  450.830120][ T5658]  nbd_mark_nsock_dead+0x2e9/0x560
[  450.830137][ T5658]  recv_work+0x1c2e/0x1d40
[  450.830151][ T5658]  ? seqcount_lockdep_reader_access+0xd4/0x100
[  450.830171][ T5658]  ? ktime_get+0x1f5/0x220
[  450.830198][ T5658]  ? __pfx_recv_work+0x10/0x10
[  450.830211][ T5658]  ? lockdep_hardirqs_on+0x7a/0x110
[  450.830227][ T5658]  ? irqentry_exit+0x218/0x730
[  450.830241][ T5658]  ? trace_irq_disable+0x3b/0x140
[  450.830268][ T5658]  ? lock_acquire+0x221/0x350
[  450.830281][ T5658]  ? process_scheduled_works+0xa70/0x1860
[  450.830295][ T5658]  ? process_scheduled_works+0xa70/0x1860
[  450.830309][ T5658]  process_scheduled_works+0xb5d/0x1860
[  450.830333][ T5658]  ? __pfx_process_scheduled_works+0x10/0x10
[  450.830348][ T5658]  ? assign_work+0x3d5/0x5e0
[  450.830363][ T5658]  worker_thread+0xa53/0xfc0
[  450.830386][ T5658]  kthread+0x388/0x470
[  450.830403][ T5658]  ? __pfx_worker_thread+0x10/0x10
[  450.830416][ T5658]  ? __pfx_kthread+0x10/0x10
[  450.830433][ T5658]  ret_from_fork+0x514/0xb70
[  450.830448][ T5658]  ? __pfx_ret_from_fork+0x10/0x10
[  450.830462][ T5658]  ? __switch_to+0xc79/0x1410
[  450.830482][ T5658]  ? __pfx_kthread+0x10/0x10
[  450.830498][ T5658]  ret_from_fork_asm+0x1a/0x30
[  450.830520][ T5658]  </TASK>
[  451.132623][T11875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  451.140120][T11875] syzkaller0: entered promiscuous mode
[  451.145641][T11875] syzkaller0: entered allmulticast mode
[  451.165156][T11874] tipc: Resetting bearer <eth:syzkaller0>
[  451.198214][T11874] tipc: Disabling bearer <eth:syzkaller0>
[  459.248290][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!