last executing test programs:

5.755924625s ago: executing program 1 (id=3314):
socket$netlink(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4048814}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.633956149s ago: executing program 1 (id=3316):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x19, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40da7, 0x79269}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xcc93f1264b7710bb}, 0x8040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000810000000000000004000630162000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.417522492s ago: executing program 1 (id=3321):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='mm_page_alloc\x00', r1, 0x0, 0x7}, 0xd)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES16=0x0, @ANYRESDEC=r1], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x6, 0x9, 0x6, 0x200, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x8}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xe, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x2, 0x2, 0x6, 0x2, 0x1, 0x18, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x1, 0x4, 0x0, 0x1, 0x30, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa94c73b51ed37faf}}], &(0x7f0000000180)='syzkaller\x00', 0x7fffffff, 0x1e, &(0x7f0000000280)=""/30, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xc, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x0, 0x10, 0x10000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000140), &(0x7f0000000440)=r5}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100008000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

5.180191624s ago: executing program 1 (id=3326):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="d2a534b308834d054586feb5c9428624db4b878120e41be144acec28b091f1237c91d74cf1ce0c17632e8dce6ac8c6822c2382fc3ac7c89f2d955bc265df5364df0d56866c920de52e29535b686bb2b4e7e485d65da8513267bc112d12e86bf2a6c815e7e152ecfcde4de24108b1", 0x6e}, {&(0x7f0000000a00)="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", 0x53f}], 0x2}}], 0x2, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf050100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x60}, 0x1, 0xd00, 0x0, 0x4000401}, 0x88c4)

4.985711056s ago: executing program 1 (id=3328):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0x0, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'geneve1\x00', {}, {0xff}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xf0, 0x118, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@limit={{0x48}, {0x10000, 0x9, 0x3, 0x4, 0x8001, 0xfffff54d, 0x4}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x1}, {0x0, 0x0, 0x1}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff000000], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x0, 0x30}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x3ff, 0x9, 0xc, 0x6, 0x6d, 0x3a, 0x489, 0x5, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x74e6, 0x6, 0x9, 0x1}}}], {{'\x00', 0x1801, 0xa8, 0xd0}, {0x28}}}}, 0x368)

4.892325383s ago: executing program 1 (id=3329):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002020752500000000002020207b1af82000000000bfa100000000200007010000f8ffffffb702000008000000b7030000070000008500000006000000154bfcffffffffff95"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)

2.794669374s ago: executing program 2 (id=3352):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'sed\x00', 0x1, 0x400000, 0x4}, 0x2c)
r1 = socket(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x40)
getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r11, @ANYRES64=r0], 0x34}}, 0x4008000)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r11, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a0000000900080000000228d3fcb026e2254589637e4396afe52bfbe1b60e0ea6c7f4cc33faa78a2a9c3ba22f0b7f2cfdbdcf579545f1ac88572a8cf46ab421486ea4638aca0895a8ea5b0da1ea57662b48ba4baa9f214a60ac6d9eb32df9a4309231322c97cec023fc418e", @ANYRES32=r11, @ANYBLOB="14000500fe80917a952a643f152befd0599ecd85f55afcd7d85070a802fc3c9b75011f7bb27cfa7e4e", @ANYRESOCT=r1], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)

2.547380205s ago: executing program 3 (id=3356):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
socket(0x400000000010, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1)
setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f00000007c0), 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x5, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000019100)={&(0x7f0000000640)=@newqdisc={0xe0, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x6, 0x2, 0x8, 0x1, 0x5, 0x0, 0x9}}, {0x16, 0x2, [0x5, 0x0, 0x3, 0x40, 0x100, 0x3, 0x2, 0x0, 0x7ff]}}, {{0x1c, 0x1, {0x3, 0x5, 0x2, 0x4d0, 0x2, 0xffffff20, 0x8, 0x7}}, {0x12, 0x2, [0x6, 0xff, 0x1, 0x1, 0x5, 0xdc, 0x9]}}, {{0x1c, 0x1, {0x8, 0xbc, 0x4aa9, 0x80000001, 0x2, 0x8, 0x10, 0x2}}, {0x8, 0x2, [0x9, 0x1000]}}, {{0x1c, 0x1, {0x2, 0xd, 0x8, 0x101, 0x9055b5b06c9f790e, 0x9, 0x78, 0x7}}, {0x12, 0x2, [0x1000, 0x5, 0x0, 0x3c8, 0xff, 0x4, 0x5]}}]}]}, 0xe0}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r7)
r8 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc800}, 0x40)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4040088)
setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000180)=0x8, 0x4)
recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x0)

2.534768368s ago: executing program 4 (id=3357):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df60000000000000000003f0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0)

2.39466775s ago: executing program 0 (id=3359):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000000)=0x2, 0x4)
recvfrom(r0, &(0x7f0000000040)=""/6, 0x6, 0x40010060, 0x0, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x10}, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000000c0)="06f3d9124adec478723517294eb14412b1453eb91c2d86ed06879448dccd2f3b1e5e5fa2b5e8e3266eae9aecd82f04f1dce9d3a4cdc07392fd9a5d", &(0x7f0000000100)=@tcp=r2, 0x2}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0)
ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000001c0))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r4=>0x0})
sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="184db5aca70ac8110bc84961372350a00634f3d8c4e728f4bb2044942d43e5328033b743689ca576504a4720ef3af7c36b8c26ae61077693ca72e7a87a4c8c2f712be6215ed56f059b5824fe55694bce9ed886513444891e8efd7503ea68709d", 0x60}], 0x1, &(0x7f0000000300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0xfffd0e777d3e78f1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000380)=0x5)
pselect6(0x40, &(0x7f00000003c0)={0x0, 0x2, 0x6, 0x1, 0x2, 0x7, 0x800, 0x6}, &(0x7f0000000400)={0x8000, 0x9, 0x5, 0x3, 0xc5b, 0x5, 0x0, 0xf}, &(0x7f0000000440)={0xb0, 0x0, 0x0, 0xc, 0xfffffffffffffff9, 0x4, 0x800, 0xb171}, &(0x7f0000000480)={0x77359400}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x180000000000000]}, 0x8})
r6 = socket$inet6(0xa, 0x80000, 0x1)
bind$inet6(r6, &(0x7f0000000540)={0xa, 0x4e21, 0xa, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x100}, 0x1c)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x2e, 0x0, 0x5f, 0x61, 0x2e]}}, &(0x7f00000005c0)=""/94, 0x2f, 0x5e, 0x0, 0x7, 0x10000}, 0x28)
sendfile(r7, r0, &(0x7f0000000680)=0x6b, 0x7dba)
connect$rxrpc(r5, &(0x7f00000006c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3}}, 0x24)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000840)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/243, 0xf3, 0x1, &(0x7f0000000800)=""/31, 0x1f}, &(0x7f0000000880)=0x40)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r8)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000900)={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private1, 0x27b, 0x7, 0x2, 0x400, 0x6, 0x400000, r4})
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000980), 0x402, 0x0)
ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f00000009c0)=0x3)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000a00)={'veth0_to_bond\x00', 0x1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40))
r10 = socket$inet(0x2, 0x3596f06fe74b2c5a, 0x9)
setsockopt$inet_group_source_req(r10, 0x0, 0x7, &(0x7f0000000a80)={0x0, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e24, @broadcast}}}, 0x108)

2.224827575s ago: executing program 4 (id=3360):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x3, 0xa, 0x5a, 0x5e4}, {0x4, 0x5, 0x7, 0x8001}, {0x6, 0x9, 0x8, 0x6}, {0x308, 0x6d, 0x8, 0xe}, {0xe713, 0x9, 0x0, 0xf}, {0x7, 0x10, 0x2, 0xfffffff8}]}, 0x10) (async)
connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (async)
ppoll(&(0x7f0000000100)=[{r0, 0x5082}], 0x1, 0x0, 0x0, 0x0)

2.024408844s ago: executing program 4 (id=3361):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2.003818724s ago: executing program 0 (id=3362):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
syz_emit_ethernet(0x1f, &(0x7f0000000700)={@broadcast, @random="4ccb9831e888", @void, {@llc_tr={0x11, {@llc={0xaa, 0x0, 'o', "4cddd689f527e6cafe5005ed64e6"}}}}}, 0x0)
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x44}, 0x1, 0x800000000000000, 0x0, 0x4040010}, 0x0)
write$6lowpan_control(r0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2e, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, 0x0, 0x200088d0)
r6 = socket$inet6(0xa, 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
sendmmsg$inet(r6, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)

1.966576914s ago: executing program 4 (id=3363):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000100000000000202000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e", @ANYRES32=r0], 0x0, 0x5e, 0x0, 0x1}, 0x28)

1.764309129s ago: executing program 4 (id=3364):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x15)

1.763320205s ago: executing program 2 (id=3365):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0xc8, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0x8001}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x9c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'macsec0\x00'}, @TCA_U32_SEL={0x84, 0x5, {0xb, 0x1, 0x7, 0xd, 0x0, 0xcc, 0x4, 0x1, [{0x1, 0xffffffff, 0xf82, 0x101}, {0x6, 0x1, 0x1, 0xc}, {0x4, 0x0, 0x2, 0x2562}, {0x0, 0x5, 0x1, 0xfffffff1}, {0x9, 0x3, 0xfffffff9, 0x2}, {0xedf5, 0xc, 0x2, 0xffff}, {0x0, 0x0, 0x81, 0x4}]}}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r3=>0x0})
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000180)=""/3)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25640000000800d4a9d77d14317ea36896d17a08c7063be61d6ab9523dd00afff1acbe049a24d5ed8f05943cd416692296bb4c46a5a6343166d29b9441b6a502d09492cba1543b9bb344dc1e4e518196d648964406000000ba3ed5", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40409c4)

1.578521016s ago: executing program 4 (id=3366):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xb}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
unshare(0x68040200)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x32, r1, 0x97369000)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000002500000004000000da41000018110000", @ANYRES32=r2, @ANYBLOB="0000000500000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100800400009500000000000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r3, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r4, 0x0, 0xffffffff004)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={<r6=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={r6, 0x5, 0x5, 0x3}, 0x10)
close(0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)

1.380226737s ago: executing program 0 (id=3367):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a802000000014000300"], 0x40}}, 0x0) (fail_nth: 5)

1.219866683s ago: executing program 2 (id=3368):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x3000000, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)

738.660312ms ago: executing program 0 (id=3369):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000180)="000000070020ac", 0x7}], 0x2}, 0x0)
socket(0x2, 0x80805, 0x0)

670.915942ms ago: executing program 2 (id=3370):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r0, 0x0, 0x51}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x52, 0x10, &(0x7f0000000000), 0x85}, 0x52)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000008000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)

580.657551ms ago: executing program 3 (id=3371):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)

578.646572ms ago: executing program 0 (id=3372):
r0 = socket$inet(0x2, 0x3, 0x8d)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
socket$kcm(0xa, 0x3, 0x87)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x503, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x15615, 0xef}}, 0x20}}, 0x28048810)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x33, 0x66, "bd2a6819706f416cb5cca0ed72c213c5bcdc3de37b23db1e5cb14d217cbaba3846af49558d8567575b26524b04f480020dec10e238e67c4dcb2757f55744836d959aa95192d3f571da2bea300c0bb1e8ca4dc2be041d39d504c184ed27a97c9278ae01c98f42"}})
r4 = socket(0xa, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, 0x0)
ioctl(r4, 0x8916, &(0x7f0000000000))
ioctl(r4, 0x9, 0x0)

400.327758ms ago: executing program 2 (id=3373):
sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x24008000, 0x0, 0x0) (async)
sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x24008000, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x3}}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)

317.931827ms ago: executing program 3 (id=3374):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000300000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000"], 0xd8}}, 0x0)

220.899552ms ago: executing program 2 (id=3375):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (fail_nth: 33)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)

148.390794ms ago: executing program 3 (id=3376):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x2, 0x4, 0x4})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x20000000}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf}]}, &(0x7f00000003c0)='GPL\x00', 0xc}, 0x94)

147.279027ms ago: executing program 0 (id=3377):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000063019f000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe5}, 0x94)
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="8400028040000100240001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000880)="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", 0x320}, {&(0x7f0000000540)="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", 0x113}, {&(0x7f00000001c0)="823d1f7912645eca72a2f14cb51fa9d981ecabfec6125254df06006686af", 0x1e}, {&(0x7f0000000300)="661b75d3fc1ee5ece1dd61b967525adcd39729be9e103da5cc11f4cba1dc89c2faf0c5c6d05bc89c0c18bd0417d0b69625613626b63fd2b89a7fca4b89cbd5e5f2fa44a1eabf2507ce92b8f3ec65ece08803f016dd0000000000", 0x5a}, {&(0x7f0000000780)="ed2ce30bcb1c12f7446d4968dab4c7267e7fa9d4703979f45c0c4f312e7749937d2e755b05af85948b1426a5092f680bf43408f404764cffee0526570948d95c1f021f76d448b341212781138bbaf824747a769f4307fa2139ecffab2ec3ce768c4ae19ffe4c6e19a9f75a76da0b8d1ab9b8f6017ddd8ebc8962940cbe1a2f635bc2968d89120ff70a4fde457b598898fd4cd72c902de6979a8957d4ca606305ef829cfe115f62d72eb2d2b697c8063d300734c95a4d838574afa069ebfe9741712e22a8c34468ac3c15d0504d805d634f1c89d0e8a17613bc06cb6a3810e667c39bbf21e49e9a39e5251038d70ca294332ebc057d", 0xf5}], 0x5}, 0x24000001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)={0x44, 0x42, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x146}, @nested={0x29, 0x1, 0x0, 0x1, [@generic="af8c28adc3738f1aa449efd27f", @nested={0x4, 0x3c}, @nested={0x12, 0x11f, 0x0, 0x1, [@generic="dde1e0a778a55ac75c252c777c10"]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000000)={0x6, 'batadv0\x00', {0xb}, 0xdb7})
r5 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r0)
sendmsg$FOU_CMD_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x60, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_AF={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x240000c0}, 0x20000000)

111.811552ms ago: executing program 3 (id=3378):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xff00, @empty=0xff000000}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x43, 0x1, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x75}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc78e, 0x26}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004001)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipmr_newroute={0x2c, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0x80, 0x0, 0x80, 0x8, 0xff, 0x0, 0xff, 0xb, 0x3000}, [@RTA_MARK={0x8, 0x10, 0xe}, @RTA_UID={0x8, 0x19, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000001)

0s ago: executing program 3 (id=3379):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@cswp={0x57, 0x114, 0x7, {{}, &(0x7f0000000100), 0x0}}], 0x58}, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r8, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)

kernel console output (not intermixed with test programs):


[  291.205253][T13194] netlink: 'syz.2.2386': attribute type 31 has an invalid length.
[  291.226737][T13194] netlink: 'syz.2.2386': attribute type 2 has an invalid length.
[  292.061957][T13219] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  292.091448][T13219] bond2 (unregistering): Released all slaves
[  292.307397][T13226] netlink: 'syz.2.2396': attribute type 3 has an invalid length.
[  292.442044][T13240] syzkaller1: entered promiscuous mode
[  292.447752][T13240] syzkaller1: entered allmulticast mode
[  292.662787][T13252] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  292.671885][T13254] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001
[  292.679001][T13255] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001
[  292.697109][T13254] __nla_validate_parse: 4 callbacks suppressed
[  292.697126][T13254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2406'.
[  293.022103][T13264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2410'.
[  293.048854][T13264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2410'.
[  293.189540][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  293.275902][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'.
[  294.170904][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2420'.
[  296.127105][T13279] bridge0: entered allmulticast mode
[  296.148870][T13281] bridge_slave_1: left allmulticast mode
[  296.178484][T13281] bridge_slave_1: left promiscuous mode
[  296.185782][T13281] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.197266][T13281] bridge_slave_0: left allmulticast mode
[  296.205259][T13281] bridge_slave_0: left promiscuous mode
[  296.211414][T13281] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.278693][T13281] bridge0 (unregistering): left allmulticast mode
[  296.743193][T13334] lo speed is unknown, defaulting to 1000
[  296.796555][T13340] syz_tun: entered allmulticast mode
[  296.820427][T13340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2431'.
[  296.910622][T13331] syz_tun: left allmulticast mode
[  297.148357][T13354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2437'.
[  297.306684][T13362] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2439'.
[  297.622910][T13377] lo speed is unknown, defaulting to 1000
[  297.733898][T13376] lo speed is unknown, defaulting to 1000
[  297.977012][T13399] x_tables: duplicate underflow at hook 1
[  298.364525][T13417] IPv6: NLM_F_CREATE should be specified when creating new route
[  298.428751][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2460'.
[  298.582918][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'.
[  298.609566][T13425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2463'.
[  298.716371][T13425] bond3: entered promiscuous mode
[  298.732487][T13425] 8021q: adding VLAN 0 to HW filter on device bond3
[  298.853791][T13439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2470'.
[  298.992705][T13442] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2470'.
[  299.002520][T13442] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2470'.
[  299.721784][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2478'.
[  299.846955][T13471] batadv0: left allmulticast mode
[  299.860477][T13471] vlan2: left promiscuous mode
[  299.865970][T13471] vlan2: left allmulticast mode
[  299.872611][T13471] hsr_slave_1: left allmulticast mode
[  299.909881][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'.
[  300.537252][T13475] x_tables: ip_tables: osf match: only valid for protocol 6
[  300.915460][T13491] syzkaller1: entered promiscuous mode
[  300.926488][T13491] syzkaller1: entered allmulticast mode
[  301.020687][T13500] FAULT_INJECTION: forcing a failure.
[  301.020687][T13500] name failslab, interval 1, probability 0, space 0, times 0
[  301.042277][T13500] CPU: 1 UID: 0 PID: 13500 Comm: syz.3.2495 Not tainted syzkaller #0 PREEMPT(full) 
[  301.042308][T13500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  301.042321][T13500] Call Trace:
[  301.042330][T13500]  <TASK>
[  301.042339][T13500]  dump_stack_lvl+0x189/0x250
[  301.042376][T13500]  ? __pfx____ratelimit+0x10/0x10
[  301.042418][T13500]  ? __pfx_dump_stack_lvl+0x10/0x10
[  301.042446][T13500]  ? __pfx__printk+0x10/0x10
[  301.042475][T13500]  ? __pfx___might_resched+0x10/0x10
[  301.042496][T13500]  ? fs_reclaim_acquire+0x7d/0x100
[  301.042523][T13500]  should_fail_ex+0x414/0x560
[  301.042562][T13500]  should_failslab+0xa8/0x100
[  301.042586][T13500]  __kmalloc_noprof+0xcb/0x7f0
[  301.042615][T13500]  ? fib6_info_alloc+0x30/0xf0
[  301.042652][T13500]  fib6_info_alloc+0x30/0xf0
[  301.042683][T13500]  ip6_route_info_create+0x142/0x860
[  301.042723][T13500]  ip6_route_add+0x49/0x1b0
[  301.042758][T13500]  addrconf_add_dev+0x24f/0x340
[  301.042789][T13500]  ? __pfx_addrconf_add_dev+0x10/0x10
[  301.042844][T13500]  ? __mutex_trylock_common+0x153/0x260
[  301.042875][T13500]  ? __pfx___mutex_trylock_common+0x10/0x10
[  301.042911][T13500]  inet6_addr_add+0x1a1/0xc00
[  301.042945][T13500]  ? __lock_acquire+0xab9/0xd20
[  301.042966][T13500]  ? __pfx_inet6_addr_add+0x10/0x10
[  301.042997][T13500]  ? addrconf_add_ifaddr+0x13e/0x400
[  301.043028][T13500]  ? __pfx___mutex_lock+0x10/0x10
[  301.043075][T13500]  addrconf_add_ifaddr+0x27d/0x400
[  301.043114][T13500]  ? __pfx_addrconf_add_ifaddr+0x10/0x10
[  301.043147][T13500]  ? kasan_quarantine_put+0xdd/0x220
[  301.043177][T13500]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.043206][T13500]  inet6_ioctl+0x13d/0x280
[  301.043233][T13500]  ? __pfx_inet6_ioctl+0x10/0x10
[  301.043264][T13500]  ? do_vfs_ioctl+0xbe8/0x1430
[  301.043290][T13500]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  301.043318][T13500]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  301.043354][T13500]  sock_do_ioctl+0xdc/0x300
[  301.043388][T13500]  ? __pfx_sock_do_ioctl+0x10/0x10
[  301.043442][T13500]  sock_ioctl+0x576/0x790
[  301.043472][T13500]  ? __pfx_sock_ioctl+0x10/0x10
[  301.043505][T13500]  ? __fget_files+0x3a0/0x420
[  301.043524][T13500]  ? __fget_files+0x2a/0x420
[  301.043548][T13500]  ? bpf_lsm_file_ioctl+0x9/0x20
[  301.043573][T13500]  ? __pfx_sock_ioctl+0x10/0x10
[  301.043600][T13500]  __se_sys_ioctl+0xfc/0x170
[  301.043630][T13500]  do_syscall_64+0xfa/0xfa0
[  301.043650][T13500]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.043670][T13500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.043691][T13500]  ? clear_bhb_loop+0x60/0xb0
[  301.043717][T13500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.043737][T13500] RIP: 0033:0x7f57e8b8f6c9
[  301.043762][T13500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.043781][T13500] RSP: 002b:00007f57e9a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  301.043804][T13500] RAX: ffffffffffffffda RBX: 00007f57e8de5fa0 RCX: 00007f57e8b8f6c9
[  301.043818][T13500] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000004
[  301.043832][T13500] RBP: 00007f57e9a7f090 R08: 0000000000000000 R09: 0000000000000000
[  301.043844][T13500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.043857][T13500] R13: 00007f57e8de6038 R14: 00007f57e8de5fa0 R15: 00007ffcfa4ba238
[  301.043893][T13500]  </TASK>
[  301.464448][  T982] IPVS: starting estimator thread 0...
[  301.569325][T13511] IPVS: using max 29 ests per chain, 69600 per kthread
[  301.789975][T13531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.836748][T13529] bridge7: the hash_elasticity option has been deprecated and is always 16
[  301.899837][T13529] bridge7: entered allmulticast mode
[  301.940660][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'.
[  302.044234][T13540] lo speed is unknown, defaulting to 1000
[  302.056973][T13540] lo speed is unknown, defaulting to 1000
[  302.070239][T13540] lo speed is unknown, defaulting to 1000
[  302.165744][T13531] lo speed is unknown, defaulting to 1000
[  302.322110][T13540] infiniband syz2: set down
[  302.327011][T13540] infiniband syz2: added lo
[  302.367585][  T982] lo speed is unknown, defaulting to 1000
[  302.394730][T13540] RDS/IB: syz2: added
[  302.400258][T13540] smc: adding ib device syz2 with port count 1
[  302.406845][T13540] smc:    ib device syz2 port 1 has no pnetid
[  302.415818][  T982] lo speed is unknown, defaulting to 1000
[  302.426915][T13540] lo speed is unknown, defaulting to 1000
[  302.685241][T13540] lo speed is unknown, defaulting to 1000
[  302.997432][T13558] syz_tun: entered allmulticast mode
[  303.017521][T13557] lo speed is unknown, defaulting to 1000
[  303.024571][T13558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2516'.
[  303.162209][T13540] lo speed is unknown, defaulting to 1000
[  303.345168][T13572] netlink: 'syz.4.2522': attribute type 10 has an invalid length.
[  303.373871][T13572] netlink: 'syz.4.2522': attribute type 10 has an invalid length.
[  303.385605][T13572] team0: Port device dummy0 removed
[  303.417134][T13572] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  303.551667][T13540] lo speed is unknown, defaulting to 1000
[  303.704014][T13556] syz_tun: left allmulticast mode
[  303.740250][T13583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2527'.
[  303.906194][T13540] lo speed is unknown, defaulting to 1000
[  304.021752][T13589] syzkaller1: entered promiscuous mode
[  304.037399][T13589] syzkaller1: entered allmulticast mode
[  304.267214][T13596] FAULT_INJECTION: forcing a failure.
[  304.267214][T13596] name failslab, interval 1, probability 0, space 0, times 0
[  304.284507][T13597] netlink: 'syz.4.2532': attribute type 1 has an invalid length.
[  304.289796][T13596] CPU: 1 UID: 0 PID: 13596 Comm: syz.1.2533 Not tainted syzkaller #0 PREEMPT(full) 
[  304.289833][T13596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  304.289853][T13596] Call Trace:
[  304.289863][T13596]  <TASK>
[  304.289873][T13596]  dump_stack_lvl+0x189/0x250
[  304.289936][T13596]  ? __pfx____ratelimit+0x10/0x10
[  304.289973][T13596]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.290006][T13596]  ? __pfx__printk+0x10/0x10
[  304.290034][T13596]  ? __pfx___might_resched+0x10/0x10
[  304.290061][T13596]  ? fs_reclaim_acquire+0x7d/0x100
[  304.290090][T13596]  should_fail_ex+0x414/0x560
[  304.290132][T13596]  should_failslab+0xa8/0x100
[  304.290158][T13596]  __kmalloc_cache_noprof+0x6f/0x6f0
[  304.290194][T13596]  ? ipv6_add_addr+0x530/0x1090
[  304.290232][T13596]  ipv6_add_addr+0x530/0x1090
[  304.290270][T13596]  ? __pfx_ipv6_add_addr+0x10/0x10
[  304.290296][T13596]  ? __mutex_trylock_common+0x153/0x260
[  304.290330][T13596]  ? __pfx___mutex_trylock_common+0x10/0x10
[  304.290369][T13596]  inet6_addr_add+0x387/0xc00
[  304.290412][T13596]  ? __pfx_inet6_addr_add+0x10/0x10
[  304.290447][T13596]  ? addrconf_add_ifaddr+0x13e/0x400
[  304.290480][T13596]  ? __pfx___mutex_lock+0x10/0x10
[  304.290532][T13596]  addrconf_add_ifaddr+0x27d/0x400
[  304.290575][T13596]  ? __pfx_addrconf_add_ifaddr+0x10/0x10
[  304.290608][T13596]  ? kasan_quarantine_put+0xdd/0x220
[  304.290641][T13596]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.290674][T13596]  inet6_ioctl+0x13d/0x280
[  304.290702][T13596]  ? __pfx_inet6_ioctl+0x10/0x10
[  304.290736][T13596]  ? do_vfs_ioctl+0xbe8/0x1430
[  304.290770][T13596]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  304.290804][T13596]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  304.290843][T13596]  sock_do_ioctl+0xdc/0x300
[  304.290887][T13596]  ? __pfx_sock_do_ioctl+0x10/0x10
[  304.290941][T13596]  sock_ioctl+0x576/0x790
[  304.290976][T13596]  ? __pfx_sock_ioctl+0x10/0x10
[  304.291011][T13596]  ? __fget_files+0x3a0/0x420
[  304.291032][T13596]  ? __fget_files+0x2a/0x420
[  304.291059][T13596]  ? bpf_lsm_file_ioctl+0x9/0x20
[  304.291087][T13596]  ? __pfx_sock_ioctl+0x10/0x10
[  304.291117][T13596]  __se_sys_ioctl+0xfc/0x170
[  304.291149][T13596]  do_syscall_64+0xfa/0xfa0
[  304.291170][T13596]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.291193][T13596]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.291215][T13596]  ? clear_bhb_loop+0x60/0xb0
[  304.291243][T13596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.291271][T13596] RIP: 0033:0x7f175378f6c9
[  304.291295][T13596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  304.291315][T13596] RSP: 002b:00007f17545ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  304.291340][T13596] RAX: ffffffffffffffda RBX: 00007f17539e5fa0 RCX: 00007f175378f6c9
[  304.291356][T13596] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000004
[  304.291372][T13596] RBP: 00007f17545ee090 R08: 0000000000000000 R09: 0000000000000000
[  304.291387][T13596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  304.291400][T13596] R13: 00007f17539e6038 R14: 00007f17539e5fa0 R15: 00007ffc54489d28
[  304.291441][T13596]  </TASK>
[  304.291620][T13540] lo speed is unknown, defaulting to 1000
[  304.304467][T13597] netlink: 'syz.4.2532': attribute type 3 has an invalid length.
[  304.633758][T13597] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2532'.
[  304.659240][T13597] NCSI netlink: No device for ifindex 813332851
[  304.783200][T13540] lo speed is unknown, defaulting to 1000
[  305.126474][T13617] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2540'.
[  305.307214][T13625] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2545'.
[  305.467349][T13629] lo speed is unknown, defaulting to 1000
[  305.541068][T13633] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2544'.
[  305.989189][T13629] lo speed is unknown, defaulting to 1000
[  306.026185][T13642] syzkaller1: entered promiscuous mode
[  306.047679][T13642] syzkaller1: entered allmulticast mode
[  306.325343][T13655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2552'.
[  306.448374][T13661] FAULT_INJECTION: forcing a failure.
[  306.448374][T13661] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  306.489428][T13661] CPU: 1 UID: 0 PID: 13661 Comm: syz.2.2555 Not tainted syzkaller #0 PREEMPT(full) 
[  306.489457][T13661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  306.489470][T13661] Call Trace:
[  306.489477][T13661]  <TASK>
[  306.489486][T13661]  dump_stack_lvl+0x189/0x250
[  306.489519][T13661]  ? __pfx____ratelimit+0x10/0x10
[  306.489553][T13661]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.489585][T13661]  ? __pfx__printk+0x10/0x10
[  306.489609][T13661]  ? fs_reclaim_acquire+0x7d/0x100
[  306.489635][T13661]  should_fail_ex+0x414/0x560
[  306.489667][T13661]  prepare_alloc_pages+0x213/0x610
[  306.489690][T13661]  __alloc_frozen_pages_noprof+0x123/0x370
[  306.489721][T13661]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  306.489746][T13661]  ? policy_nodemask+0x27c/0x720
[  306.489762][T13661]  ? __pfx__copy_from_iter+0x10/0x10
[  306.489784][T13661]  alloc_pages_mpol+0x232/0x4a0
[  306.489806][T13661]  alloc_pages_noprof+0xa9/0x190
[  306.489824][T13661]  af_alg_sendmsg+0x1445/0x2440
[  306.489865][T13661]  ? __pfx_af_alg_sendmsg+0x10/0x10
[  306.489885][T13661]  ? __pfx_aa_sk_perm+0x10/0x10
[  306.489908][T13661]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  306.489940][T13661]  ? aa_sock_msg_perm+0xf1/0x1d0
[  306.489968][T13661]  ? skcipher_sendmsg+0x26/0xf0
[  306.489990][T13661]  ? __pfx_skcipher_sendmsg+0x10/0x10
[  306.490014][T13661]  __sock_sendmsg+0x21c/0x270
[  306.490042][T13661]  ____sys_sendmsg+0x52d/0x830
[  306.490067][T13661]  ? __pfx_____sys_sendmsg+0x10/0x10
[  306.490095][T13661]  ? import_iovec+0x74/0xa0
[  306.490120][T13661]  ___sys_sendmsg+0x21f/0x2a0
[  306.490141][T13661]  ? __pfx____sys_sendmsg+0x10/0x10
[  306.490193][T13661]  ? __fget_files+0x2a/0x420
[  306.490208][T13661]  ? __fget_files+0x3a0/0x420
[  306.490233][T13661]  __sys_sendmmsg+0x227/0x430
[  306.490258][T13661]  ? __pfx___sys_sendmmsg+0x10/0x10
[  306.490286][T13661]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  306.490321][T13661]  ? ksys_write+0x22a/0x250
[  306.490348][T13661]  ? __pfx_ksys_write+0x10/0x10
[  306.490376][T13661]  __x64_sys_sendmmsg+0xa0/0xc0
[  306.490398][T13661]  do_syscall_64+0xfa/0xfa0
[  306.490413][T13661]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.490429][T13661]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.490446][T13661]  ? clear_bhb_loop+0x60/0xb0
[  306.490467][T13661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.490483][T13661] RIP: 0033:0x7fbbd9d8f6c9
[  306.490499][T13661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.490513][T13661] RSP: 002b:00007fbbdac96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  306.490532][T13661] RAX: ffffffffffffffda RBX: 00007fbbd9fe5fa0 RCX: 00007fbbd9d8f6c9
[  306.490544][T13661] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004
[  306.490555][T13661] RBP: 00007fbbdac96090 R08: 0000000000000000 R09: 0000000000000000
[  306.490565][T13661] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002
[  306.490575][T13661] R13: 00007fbbd9fe6038 R14: 00007fbbd9fe5fa0 R15: 00007ffc18ba1b38
[  306.490603][T13661]  </TASK>
[  307.326945][T13679] netlink: 'syz.4.2560': attribute type 10 has an invalid length.
[  307.378444][T13686] netlink: 'syz.4.2560': attribute type 10 has an invalid length.
[  307.387683][T13679] bond0: (slave dummy0): Releasing backup interface
[  307.401252][T13679] team0: Port device dummy0 added
[  307.469985][T13686] team0: Port device dummy0 removed
[  307.562785][T13695] xt_NFQUEUE: number of queues (65532) out of range (got 118598)
[  308.031118][T13712] netlink: 'syz.3.2573': attribute type 29 has an invalid length.
[  308.062607][T13712] netlink: 'syz.3.2573': attribute type 29 has an invalid length.
[  308.090212][T13712] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2573'.
[  308.325390][T13725] netlink: 'syz.1.2576': attribute type 6 has an invalid length.
[  308.378602][T13725] IPv6: NLM_F_CREATE should be specified when creating new route
[  308.510124][T13739] veth5: entered promiscuous mode
[  308.629060][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2588'.
[  308.638931][T13747] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2588'.
[  308.698139][T13750] netlink: 'syz.3.2589': attribute type 8 has an invalid length.
[  308.836767][T13756] netlink: 'syz.0.2591': attribute type 10 has an invalid length.
[  308.862919][T13756] `: Port device dummy0 added
[  308.878298][T13756] netlink: 'syz.0.2591': attribute type 10 has an invalid length.
[  308.902663][T13756] `: Port device dummy0 removed
[  308.908855][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2593'.
[  308.942016][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2593'.
[  308.964200][T13758] netlink: 'syz.2.2593': attribute type 3 has an invalid length.
[  309.594544][T13787] lo speed is unknown, defaulting to 1000
[  309.608740][T13787] lo speed is unknown, defaulting to 1000
[  309.635703][T13791] syz_tun: entered allmulticast mode
[  309.674637][T13791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2603'.
[  310.170295][T13808] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  310.184922][T13805] lo speed is unknown, defaulting to 1000
[  310.193931][T13808] syzkaller0: entered promiscuous mode
[  310.202990][T13808] syzkaller0: entered allmulticast mode
[  310.211523][T13805] lo speed is unknown, defaulting to 1000
[  310.219678][T13786] syz_tun: left allmulticast mode
[  310.852103][T13830] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  310.875102][T13830] bond2 (unregistering): Released all slaves
[  311.333726][T13862] netlink: 'syz.2.2622': attribute type 29 has an invalid length.
[  311.372267][T13864] netlink: 'syz.1.2624': attribute type 10 has an invalid length.
[  311.381914][T13862] netlink: 'syz.2.2622': attribute type 29 has an invalid length.
[  311.433494][T13862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2622'.
[  311.454260][T13869] netlink: 'syz.1.2624': attribute type 10 has an invalid length.
[  311.484593][T13864] dummy0: entered promiscuous mode
[  311.492106][T13864] team0: Port device dummy0 added
[  311.520086][T13872] netlink: 'syz.4.2625': attribute type 1 has an invalid length.
[  311.574722][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2625'.
[  311.589663][T13868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2625'.
[  311.630543][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2625'.
[  313.148926][T13869] dummy0: left promiscuous mode
[  313.162946][T13869] team0: Port device dummy0 removed
[  313.172334][T13869] dummy0: entered promiscuous mode
[  313.178086][T13869] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  313.438354][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2633'.
[  313.810981][T13914] netlink: 'syz.1.2640': attribute type 1 has an invalid length.
[  313.902439][T13914] 8021q: adding VLAN 0 to HW filter on device bond3
[  313.952634][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2640'.
[  314.003196][T13918] bond3: (slave gretap1): making interface the new active one
[  314.013729][T13918] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  314.038874][T13924] netlink: 'syz.4.2643': attribute type 29 has an invalid length.
[  314.049335][T13928] netlink: 'syz.4.2643': attribute type 29 has an invalid length.
[  314.061593][T13924] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2643'.
[  314.283933][T13914] bond3 (unregistering): (slave gretap1): Releasing active interface
[  314.316029][T13914] bond3 (unregistering): Released all slaves
[  314.635763][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2650'.
[  314.661211][T13958] lo speed is unknown, defaulting to 1000
[  314.670746][T13958] lo speed is unknown, defaulting to 1000
[  314.901968][T13967] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.914249][T13967] 8021q: adding VLAN 0 to HW filter on device team0
[  314.928364][T13967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  314.958113][ T8363] lo speed is unknown, defaulting to 1000
[  314.994915][ T8363] syz2: Port: 1 Link ACTIVE
[  315.021948][ T8366] lo speed is unknown, defaulting to 1000
[  315.824611][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2670'.
[  315.867340][T14002] 8021q: adding VLAN 0 to HW filter on device bond3
[  315.918995][T14002] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  315.944978][T14002] 8021q: adding VLAN 0 to HW filter on device bond3
[  315.958759][T14002] bond3: (slave lo): Enslaving as an active interface with an up link
[  315.968508][T14007] lo speed is unknown, defaulting to 1000
[  316.039428][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2670'.
[  316.124625][T14009] bond3 (unregistering): (slave lo): Releasing backup interface
[  316.133363][T14009] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  316.154634][T14009] bond3 (unregistering): Released all slaves
[  316.175943][T14012] syz_tun: entered allmulticast mode
[  316.181824][T14007] lo speed is unknown, defaulting to 1000
[  316.221949][T14012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2672'.
[  316.522095][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2679'.
[  316.594926][T14005] syz_tun: left allmulticast mode
[  316.958652][T14043] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  317.021184][T14043] bond3 (unregistering): Released all slaves
[  317.042097][T14059] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2692'.
[  317.053400][T14060] xt_policy: neither incoming nor outgoing policy selected
[  317.074445][T14060] sctp: [Deprecated]: syz.3.2691 (pid 14060) Use of int in max_burst socket option.
[  317.074445][T14060] Use struct sctp_assoc_value instead
[  317.079624][T14056] netlink: 'syz.2.2689': attribute type 29 has an invalid length.
[  317.115323][T14062] netlink: 'syz.2.2689': attribute type 29 has an invalid length.
[  317.167535][T14056] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2689'.
[  317.452429][T14074] macsec1: entered promiscuous mode
[  317.489051][T14074] ip6gretap0: entered promiscuous mode
[  317.540541][T14074] ip6gretap0: left promiscuous mode
[  317.719709][T14067] syzkaller1: entered promiscuous mode
[  317.740016][T14067] syzkaller1: entered allmulticast mode
[  317.814413][T14091] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  317.847131][T14067] tipc: Enabled bearer <udp:syz2>, priority 10
[  317.987311][T14097] lo speed is unknown, defaulting to 1000
[  318.010663][T14097] lo speed is unknown, defaulting to 1000
[  318.334353][T14113] lo speed is unknown, defaulting to 1000
[  318.421018][T14113] lo speed is unknown, defaulting to 1000
[  318.715356][T14125] FAULT_INJECTION: forcing a failure.
[  318.715356][T14125] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  318.733767][T14125] CPU: 0 UID: 0 PID: 14125 Comm: syz.0.2710 Not tainted syzkaller #0 PREEMPT(full) 
[  318.733796][T14125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  318.733819][T14125] Call Trace:
[  318.733827][T14125]  <TASK>
[  318.733836][T14125]  dump_stack_lvl+0x189/0x250
[  318.733870][T14125]  ? __pfx____ratelimit+0x10/0x10
[  318.733902][T14125]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.733948][T14125]  ? __pfx__printk+0x10/0x10
[  318.733973][T14125]  ? fs_reclaim_acquire+0x7d/0x100
[  318.734003][T14125]  should_fail_ex+0x414/0x560
[  318.734040][T14125]  prepare_alloc_pages+0x213/0x610
[  318.734070][T14125]  __alloc_frozen_pages_noprof+0x123/0x370
[  318.734095][T14125]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  318.734125][T14125]  ? policy_nodemask+0x27c/0x720
[  318.734145][T14125]  ? __pfx__copy_from_iter+0x10/0x10
[  318.734173][T14125]  alloc_pages_mpol+0x232/0x4a0
[  318.734204][T14125]  alloc_pages_noprof+0xa9/0x190
[  318.734227][T14125]  af_alg_sendmsg+0x1445/0x2440
[  318.734279][T14125]  ? __pfx_af_alg_sendmsg+0x10/0x10
[  318.734305][T14125]  ? __pfx_aa_sk_perm+0x10/0x10
[  318.734332][T14125]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  318.734372][T14125]  ? aa_sock_msg_perm+0xf1/0x1d0
[  318.734405][T14125]  ? skcipher_sendmsg+0x26/0xf0
[  318.734432][T14125]  ? __pfx_skcipher_sendmsg+0x10/0x10
[  318.734462][T14125]  __sock_sendmsg+0x21c/0x270
[  318.734495][T14125]  ____sys_sendmsg+0x52d/0x830
[  318.734525][T14125]  ? __pfx_____sys_sendmsg+0x10/0x10
[  318.734559][T14125]  ? import_iovec+0x74/0xa0
[  318.734588][T14125]  ___sys_sendmsg+0x21f/0x2a0
[  318.734624][T14125]  ? __pfx____sys_sendmsg+0x10/0x10
[  318.734689][T14125]  ? __fget_files+0x2a/0x420
[  318.734707][T14125]  ? __fget_files+0x3a0/0x420
[  318.734739][T14125]  __sys_sendmmsg+0x227/0x430
[  318.734770][T14125]  ? __pfx___sys_sendmmsg+0x10/0x10
[  318.734805][T14125]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  318.734849][T14125]  ? ksys_write+0x22a/0x250
[  318.734880][T14125]  ? __pfx_ksys_write+0x10/0x10
[  318.734915][T14125]  __x64_sys_sendmmsg+0xa0/0xc0
[  318.734941][T14125]  do_syscall_64+0xfa/0xfa0
[  318.734961][T14125]  ? lockdep_hardirqs_on+0x9c/0x150
[  318.734980][T14125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.735001][T14125]  ? clear_bhb_loop+0x60/0xb0
[  318.735026][T14125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.735046][T14125] RIP: 0033:0x7f9fe758f6c9
[  318.735066][T14125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.735083][T14125] RSP: 002b:00007f9fe8454038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  318.735104][T14125] RAX: ffffffffffffffda RBX: 00007f9fe77e5fa0 RCX: 00007f9fe758f6c9
[  318.735117][T14125] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004
[  318.735128][T14125] RBP: 00007f9fe8454090 R08: 0000000000000000 R09: 0000000000000000
[  318.735139][T14125] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002
[  318.735150][T14125] R13: 00007f9fe77e6038 R14: 00007f9fe77e5fa0 R15: 00007ffd8e579848
[  318.735181][T14125]  </TASK>
[  319.088363][ T8344] tipc: Node number set to 1241431745
[  319.265954][T14135] syzkaller1: entered promiscuous mode
[  319.312501][T14135] syzkaller1: entered allmulticast mode
[  319.342222][T14138] lo speed is unknown, defaulting to 1000
[  319.559419][T14138] lo speed is unknown, defaulting to 1000
[  319.630955][T14133] syzkaller0: entered promiscuous mode
[  319.636494][T14133] syzkaller0: entered allmulticast mode
[  320.304878][T14140] lo speed is unknown, defaulting to 1000
[  320.443101][T14164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2723'.
[  320.601318][T14140] lo speed is unknown, defaulting to 1000
[  321.264218][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2729'.
[  321.330546][T14183] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  321.353530][T14182] lo speed is unknown, defaulting to 1000
[  321.372789][T14182] lo speed is unknown, defaulting to 1000
[  321.463646][T14188] netlink: 'syz.4.2730': attribute type 4 has an invalid length.
[  321.473892][T14188] netlink: 'syz.4.2730': attribute type 4 has an invalid length.
[  321.995663][T14201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2737'.
[  322.815537][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  322.832506][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  322.841222][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  322.849705][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  322.857484][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  323.015664][T14219] lo speed is unknown, defaulting to 1000
[  323.042032][T14219] lo speed is unknown, defaulting to 1000
[  323.128910][T14228] netlink: 'syz.1.2746': attribute type 83 has an invalid length.
[  323.169738][T14232] netlink: 'syz.0.2748': attribute type 11 has an invalid length.
[  323.177722][T14232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2748'.
[  323.229924][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2747'.
[  323.313271][T14234] tipc: Resetting bearer <eth:syzkaller0>
[  323.319964][T14234] syzkaller0: left promiscuous mode
[  323.325528][T14234] syzkaller0: left allmulticast mode
[  323.333565][T14234] veth5: left promiscuous mode
[  323.339791][ T5907] lo speed is unknown, defaulting to 1000
[  323.345692][ T5907] syz2: Port: 1 Link DOWN
[  323.416796][ T8363] lo speed is unknown, defaulting to 1000
[  323.426395][T14227] lo speed is unknown, defaulting to 1000
[  323.520925][T14227] lo speed is unknown, defaulting to 1000
[  323.578182][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2750'.
[  323.596289][T14246] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2750'.
[  323.857759][T14253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2753'.
[  324.235034][T10927] bond3 (unregistering): (slave gretap1): Releasing active interface
[  324.456626][T10927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  324.467328][T10927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.477630][T10927] bond0 (unregistering): Released all slaves
[  324.590921][T10927] bond1 (unregistering): (slave veth3): Releasing backup interface
[  324.600139][T10927] bond1 (unregistering): Released all slaves
[  324.711875][T10927] bond2 (unregistering): Released all slaves
[  324.729766][T10927] bond3 (unregistering): Released all slaves
[  324.770844][T14256] pimreg: left allmulticast mode
[  324.836467][T14219] chnl_net:caif_netlink_parms(): no params data found
[  324.868086][T10927] : left promiscuous mode
[  324.949373][ T5828] Bluetooth: hci2: command tx timeout
[  325.282620][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'.
[  325.418107][T14219] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.426039][T14219] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.433866][T14219] bridge_slave_0: entered allmulticast mode
[  325.442145][T14219] bridge_slave_0: entered promiscuous mode
[  325.464310][T14219] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.471929][T14219] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.479729][T14219] bridge_slave_1: entered allmulticast mode
[  325.487205][T14219] bridge_slave_1: entered promiscuous mode
[  325.575291][T14219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.618490][T14219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.745419][T14219] team0: Port device team_slave_0 added
[  325.875805][T14219] team0: Port device team_slave_1 added
[  326.051577][T14219] batman_adv: batadv0: Adding interface: batadv_slave_0
[  326.061875][T14219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.091927][T14219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  326.124475][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'.
[  326.141003][T14309] syzkaller1: entered promiscuous mode
[  326.146677][T14309] syzkaller1: entered allmulticast mode
[  326.155851][T14219] batman_adv: batadv0: Adding interface: batadv_slave_1
[  326.163950][T14219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.190735][T14219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  326.543279][T10927] macvlan0: left promiscuous mode
[  326.556447][T10927] batadv0: left promiscuous mode
[  326.575872][T10927] hsr_slave_0: left promiscuous mode
[  326.583321][T10927] hsr_slave_1: left promiscuous mode
[  326.590644][T10927] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.600356][T10927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.661585][T10927] pim6reg (unregistering): left allmulticast mode
[  326.731708][T10927] pimreg (unregistering): left allmulticast mode
[  327.029348][ T5828] Bluetooth: hci2: command tx timeout
[  327.160572][T10927] team0 (unregistering): Port device team_slave_1 removed
[  327.642692][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2773'.
[  327.813220][T14219] hsr_slave_0: entered promiscuous mode
[  327.821714][T14219] hsr_slave_1: entered promiscuous mode
[  327.828852][T14219] debugfs: 'hsr0' already exists in 'hsr'
[  327.841331][T14219] Cannot create hsr debugfs directory
[  328.009692][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'.
[  328.023112][T14350] FAULT_INJECTION: forcing a failure.
[  328.023112][T14350] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  328.064339][T14350] CPU: 0 UID: 0 PID: 14350 Comm: syz.3.2781 Not tainted syzkaller #0 PREEMPT(full) 
[  328.064369][T14350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  328.064383][T14350] Call Trace:
[  328.064391][T14350]  <TASK>
[  328.064400][T14350]  dump_stack_lvl+0x189/0x250
[  328.064435][T14350]  ? __pfx____ratelimit+0x10/0x10
[  328.064468][T14350]  ? __pfx_dump_stack_lvl+0x10/0x10
[  328.064497][T14350]  ? __pfx__printk+0x10/0x10
[  328.064522][T14350]  ? fs_reclaim_acquire+0x7d/0x100
[  328.064553][T14350]  should_fail_ex+0x414/0x560
[  328.064591][T14350]  prepare_alloc_pages+0x213/0x610
[  328.064622][T14350]  __alloc_frozen_pages_noprof+0x123/0x370
[  328.064649][T14350]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  328.064682][T14350]  ? policy_nodemask+0x27c/0x720
[  328.064702][T14350]  ? __pfx__copy_from_iter+0x10/0x10
[  328.064730][T14350]  alloc_pages_mpol+0x232/0x4a0
[  328.064765][T14350]  alloc_pages_noprof+0xa9/0x190
[  328.064790][T14350]  af_alg_sendmsg+0x1445/0x2440
[  328.064842][T14350]  ? __pfx_af_alg_sendmsg+0x10/0x10
[  328.064868][T14350]  ? __pfx_aa_sk_perm+0x10/0x10
[  328.064896][T14350]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  328.064936][T14350]  ? aa_sock_msg_perm+0xf1/0x1d0
[  328.064970][T14350]  ? skcipher_sendmsg+0x26/0xf0
[  328.064998][T14350]  ? __pfx_skcipher_sendmsg+0x10/0x10
[  328.065044][T14350]  __sock_sendmsg+0x21c/0x270
[  328.065078][T14350]  ____sys_sendmsg+0x52d/0x830
[  328.065110][T14350]  ? __pfx_____sys_sendmsg+0x10/0x10
[  328.065146][T14350]  ? import_iovec+0x74/0xa0
[  328.065182][T14350]  ___sys_sendmsg+0x21f/0x2a0
[  328.065210][T14350]  ? __pfx____sys_sendmsg+0x10/0x10
[  328.065277][T14350]  ? __fget_files+0x2a/0x420
[  328.065297][T14350]  ? __fget_files+0x3a0/0x420
[  328.065330][T14350]  __sys_sendmmsg+0x227/0x430
[  328.065362][T14350]  ? __pfx___sys_sendmmsg+0x10/0x10
[  328.065398][T14350]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  328.065444][T14350]  ? ksys_write+0x22a/0x250
[  328.065477][T14350]  ? __pfx_ksys_write+0x10/0x10
[  328.065513][T14350]  __x64_sys_sendmmsg+0xa0/0xc0
[  328.065541][T14350]  do_syscall_64+0xfa/0xfa0
[  328.065560][T14350]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.065580][T14350]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.065601][T14350]  ? clear_bhb_loop+0x60/0xb0
[  328.065627][T14350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.065648][T14350] RIP: 0033:0x7f57e8b8f6c9
[  328.065667][T14350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.065685][T14350] RSP: 002b:00007f57e9a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  328.065708][T14350] RAX: ffffffffffffffda RBX: 00007f57e8de5fa0 RCX: 00007f57e8b8f6c9
[  328.065723][T14350] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004
[  328.065736][T14350] RBP: 00007f57e9a7f090 R08: 0000000000000000 R09: 0000000000000000
[  328.065750][T14350] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002
[  328.065769][T14350] R13: 00007f57e8de6038 R14: 00007f57e8de5fa0 R15: 00007ffcfa4ba238
[  328.065806][T14350]  </TASK>
[  328.611286][T10927] IPVS: stop unused estimator thread 0...
[  328.637062][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2782'.
[  328.653076][T14354] syzkaller1: entered promiscuous mode
[  328.659301][T14354] syzkaller1: entered allmulticast mode
[  328.791915][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'.
[  328.842756][T14359] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  328.858784][T14359] bond2 (unregistering): Released all slaves
[  328.918802][T14364] lo speed is unknown, defaulting to 1000
[  328.943870][T14364] lo speed is unknown, defaulting to 1000
[  329.109364][ T5828] Bluetooth: hci2: command tx timeout
[  329.140789][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2789'.
[  329.181680][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2789'.
[  329.292813][T14219] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  329.335968][T14219] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  329.354606][T14219] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  329.405151][T14219] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  329.474166][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2795'.
[  329.573550][T14219] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.603122][T14219] 8021q: adding VLAN 0 to HW filter on device team0
[  329.619058][  T196] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.626337][  T196] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.647008][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.654273][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.174440][T14219] 8021q: adding VLAN 0 to HW filter on device batadv0
[  330.266258][T14408] openvswitch: netlink: IP tunnel dst address not specified
[  330.408286][T14415] lo speed is unknown, defaulting to 1000
[  330.430968][T14420] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2804'.
[  330.506997][T14415] lo speed is unknown, defaulting to 1000
[  330.541309][T14423] lo speed is unknown, defaulting to 1000
[  330.774793][T14431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2806'.
[  330.800006][T14423] lo speed is unknown, defaulting to 1000
[  331.065753][T14219] veth0_vlan: entered promiscuous mode
[  331.189381][ T5828] Bluetooth: hci2: command tx timeout
[  331.230251][T14219] veth1_vlan: entered promiscuous mode
[  331.263242][T14219] veth0_macvtap: entered promiscuous mode
[  331.298627][T14219] veth1_macvtap: entered promiscuous mode
[  331.338596][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'.
[  331.365619][T14438] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2808'.
[  331.568172][T14219] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.612457][T14219] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.702054][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.730947][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2812'.
[  331.847128][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.873634][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.904273][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.134084][ T6068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.159737][ T6068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.216762][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.225400][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.332468][T14471] FAULT_INJECTION: forcing a failure.
[  332.332468][T14471] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  332.345980][T14471] CPU: 1 UID: 0 PID: 14471 Comm: syz.1.2822 Not tainted syzkaller #0 PREEMPT(full) 
[  332.346009][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  332.346022][T14471] Call Trace:
[  332.346030][T14471]  <TASK>
[  332.346039][T14471]  dump_stack_lvl+0x189/0x250
[  332.346072][T14471]  ? __pfx____ratelimit+0x10/0x10
[  332.346104][T14471]  ? __pfx_dump_stack_lvl+0x10/0x10
[  332.346131][T14471]  ? __pfx__printk+0x10/0x10
[  332.346152][T14471]  ? __might_fault+0xb0/0x130
[  332.346193][T14471]  should_fail_ex+0x414/0x560
[  332.346229][T14471]  _copy_from_iter+0x1de/0x1790
[  332.346255][T14471]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  332.346286][T14471]  ? policy_nodemask+0x27c/0x720
[  332.346305][T14471]  ? __pfx__copy_from_iter+0x10/0x10
[  332.346336][T14471]  ? set_page_refcounted+0xa0/0x1e0
[  332.346363][T14471]  af_alg_sendmsg+0x1562/0x2440
[  332.346414][T14471]  ? __pfx_af_alg_sendmsg+0x10/0x10
[  332.346438][T14471]  ? __pfx_aa_sk_perm+0x10/0x10
[  332.346463][T14471]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  332.346502][T14471]  ? aa_sock_msg_perm+0xf1/0x1d0
[  332.346551][T14471]  ? skcipher_sendmsg+0x26/0xf0
[  332.346578][T14471]  ? __pfx_skcipher_sendmsg+0x10/0x10
[  332.346616][T14471]  __sock_sendmsg+0x21c/0x270
[  332.346650][T14471]  ____sys_sendmsg+0x52d/0x830
[  332.346681][T14471]  ? __pfx_____sys_sendmsg+0x10/0x10
[  332.346716][T14471]  ? import_iovec+0x74/0xa0
[  332.346746][T14471]  ___sys_sendmsg+0x21f/0x2a0
[  332.346774][T14471]  ? __pfx____sys_sendmsg+0x10/0x10
[  332.346840][T14471]  ? __fget_files+0x2a/0x420
[  332.346859][T14471]  ? __fget_files+0x3a0/0x420
[  332.346895][T14471]  __sys_sendmmsg+0x227/0x430
[  332.346926][T14471]  ? __pfx___sys_sendmmsg+0x10/0x10
[  332.346961][T14471]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  332.347005][T14471]  ? ksys_write+0x22a/0x250
[  332.347038][T14471]  ? __pfx_ksys_write+0x10/0x10
[  332.347074][T14471]  __x64_sys_sendmmsg+0xa0/0xc0
[  332.347100][T14471]  do_syscall_64+0xfa/0xfa0
[  332.347118][T14471]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.347138][T14471]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.347159][T14471]  ? clear_bhb_loop+0x60/0xb0
[  332.347185][T14471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.347204][T14471] RIP: 0033:0x7f175378f6c9
[  332.347223][T14471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.347242][T14471] RSP: 002b:00007f17545ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  332.347264][T14471] RAX: ffffffffffffffda RBX: 00007f17539e5fa0 RCX: 00007f175378f6c9
[  332.347279][T14471] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004
[  332.347292][T14471] RBP: 00007f17545ee090 R08: 0000000000000000 R09: 0000000000000000
[  332.347306][T14471] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002
[  332.347318][T14471] R13: 00007f17539e6038 R14: 00007f17539e5fa0 R15: 00007ffc54489d28
[  332.347354][T14471]  </TASK>
[  332.649006][T14473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.682959][T14473] lo speed is unknown, defaulting to 1000
[  332.701245][T14473] lo speed is unknown, defaulting to 1000
[  332.999843][T14483] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2825'.
[  333.300489][T14494] sctp: [Deprecated]: syz.2.2825 (pid 14494) Use of struct sctp_assoc_value in delayed_ack socket option.
[  333.300489][T14494] Use struct sctp_sack_info instead
[  333.541866][T14502] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2831'.
[  333.585362][T14502] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2831'.
[  334.194659][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  334.205369][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  334.214993][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  334.239580][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  334.250545][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  334.286270][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2835'.
[  334.356499][T14511] lo speed is unknown, defaulting to 1000
[  334.377967][T14511] lo speed is unknown, defaulting to 1000
[  334.562621][T14519] x_tables: ip_tables: osf match: only valid for protocol 6
[  335.121820][   T12] bond1 (unregistering): (slave erspan0): Releasing backup interface
[  335.255958][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2845'.
[  335.275204][T14541] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2846'.
[  335.285847][T14541] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2846'.
[  335.626196][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.636788][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.647531][   T12] bond0 (unregistering): Released all slaves
[  335.771159][   T12] bond1 (unregistering): Released all slaves
[  335.884366][   T12] bond2 (unregistering): (slave veth9): Releasing backup interface
[  335.894270][   T12] bond2 (unregistering): Released all slaves
[  336.006486][   T12] bond3 (unregistering): Released all slaves
[  336.062932][T14543] 8021q: adding VLAN 0 to HW filter on device bond2
[  336.080130][T14548] netlink: 'syz.4.2848': attribute type 29 has an invalid length.
[  336.115844][T14549] netlink: 'syz.4.2848': attribute type 29 has an invalid length.
[  336.133535][T14552] netlink: 'syz.3.2849': attribute type 10 has an invalid length.
[  336.171439][T14552] netlink: 'syz.3.2849': attribute type 10 has an invalid length.
[  336.199392][   T12] tipc: Disabling bearer <udp:syz2>
[  336.207894][   T12] tipc: Left network mode
[  336.311569][ T5841] Bluetooth: hci0: command tx timeout
[  336.397485][T14563] syz_tun: entered allmulticast mode
[  336.478919][T14570] __nla_validate_parse: 2 callbacks suppressed
[  336.478940][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2856'.
[  336.502266][T14559] lo speed is unknown, defaulting to 1000
[  336.527615][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2851'.
[  336.624499][T14559] lo speed is unknown, defaulting to 1000
[  336.725280][T14511] chnl_net:caif_netlink_parms(): no params data found
[  336.880311][T14582] netlink: 'syz.3.2858': attribute type 13 has an invalid length.
[  336.881576][T14581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  336.888178][T14582] netlink: 'syz.3.2858': attribute type 17 has an invalid length.
[  337.048462][T14582] 8021q: adding VLAN 0 to HW filter on device team0
[  337.061601][T14582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  337.141042][ T8366] lo speed is unknown, defaulting to 1000
[  337.147211][ T8366] syz1: Port: 1 Link ACTIVE
[  337.208541][T14557] syz_tun: left allmulticast mode
[  337.298133][T14511] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.307446][T14511] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.316292][T14511] bridge_slave_0: entered allmulticast mode
[  337.325845][T14511] bridge_slave_0: entered promiscuous mode
[  337.369790][T14511] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.388050][T14511] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.406303][T14511] bridge_slave_1: entered allmulticast mode
[  337.421509][T14511] bridge_slave_1: entered promiscuous mode
[  337.430095][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2863'.
[  337.606427][T14511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.663911][T14511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.936369][T14511] team0: Port device team_slave_0 added
[  337.991399][T14511] team0: Port device team_slave_1 added
[  338.142157][T14511] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.162823][T14511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  338.193700][T14511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.221423][T14613] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.232443][T14511] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.240610][T14511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  338.268129][T14511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.291530][T14613] gre0: entered promiscuous mode
[  338.296644][T14613] gre0: entered allmulticast mode
[  338.389569][ T5841] Bluetooth: hci0: command tx timeout
[  338.437555][T14618] netlink: 'syz.2.2871': attribute type 43 has an invalid length.
[  338.467397][T14511] hsr_slave_0: entered promiscuous mode
[  338.475448][T14511] hsr_slave_1: entered promiscuous mode
[  338.485577][T14511] debugfs: 'hsr0' already exists in 'hsr'
[  338.491441][T14511] Cannot create hsr debugfs directory
[  338.802263][   T12] macvlan0: left promiscuous mode
[  338.808267][   T12] batadv0: left promiscuous mode
[  338.823859][   T12] hsr_slave_0: left promiscuous mode
[  338.830391][   T12] hsr_slave_1: left promiscuous mode
[  338.836781][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.845128][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.925872][   T12] pimreg3 (unregistering): left allmulticast mode
[  338.945393][   T12] pimreg (unregistering): left allmulticast mode
[  339.428334][   T12] ` (unregistering): Port device team_slave_1 removed
[  339.510964][   T12] ` (unregistering): Port device team_slave_0 removed
[  340.479735][ T5841] Bluetooth: hci0: command tx timeout
[  341.097512][T14685] netlink: 'syz.1.2893': attribute type 10 has an invalid length.
[  341.213918][T14687] netlink: 'syz.4.2894': attribute type 10 has an invalid length.
[  341.228985][T14687] team0: Port device dummy0 added
[  341.246945][T14687] netlink: 'syz.4.2894': attribute type 10 has an invalid length.
[  341.279320][T14687] team0: Port device dummy0 removed
[  341.307589][T14687] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  341.498803][T14511] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  341.533466][T14511] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  341.583773][T14511] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  341.619007][T14511] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  341.948643][T14714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2905'.
[  341.991969][T14714] geneve3: entered promiscuous mode
[  342.001465][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2906'.
[  342.005111][T14714] geneve3: entered allmulticast mode
[  342.039976][T14511] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.047051][   T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6144 - 0
[  342.070567][   T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6144 - 0
[  342.100682][T14720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  342.124746][   T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6144 - 0
[  342.146453][   T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6144 - 0
[  342.228403][T14511] 8021q: adding VLAN 0 to HW filter on device team0
[  342.260381][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.267612][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.293725][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.301015][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.308937][T14731] x_tables: ip_tables: osf match: only valid for protocol 6
[  342.360967][T14733] syzkaller1: entered promiscuous mode
[  342.366726][T14733] syzkaller1: entered allmulticast mode
[  342.382276][T14730] lo speed is unknown, defaulting to 1000
[  342.406368][T14730] lo speed is unknown, defaulting to 1000
[  342.406691][T14734] syz_tun: entered allmulticast mode
[  342.491931][T14734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2910'.
[  342.549721][ T5841] Bluetooth: hci0: command tx timeout
[  343.055508][T14758] FAULT_INJECTION: forcing a failure.
[  343.055508][T14758] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  343.071012][T14728] syz_tun: left allmulticast mode
[  343.076288][T14758] CPU: 1 UID: 0 PID: 14758 Comm: syz.4.2919 Not tainted syzkaller #0 PREEMPT(full) 
[  343.076315][T14758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  343.076327][T14758] Call Trace:
[  343.076334][T14758]  <TASK>
[  343.076343][T14758]  dump_stack_lvl+0x189/0x250
[  343.076377][T14758]  ? __pfx____ratelimit+0x10/0x10
[  343.076475][T14758]  ? __pfx_dump_stack_lvl+0x10/0x10
[  343.076503][T14758]  ? __pfx__printk+0x10/0x10
[  343.076539][T14758]  should_fail_ex+0x414/0x560
[  343.076578][T14758]  _copy_to_user+0x31/0xb0
[  343.076607][T14758]  simple_read_from_buffer+0xe1/0x170
[  343.076645][T14758]  proc_fail_nth_read+0x1b3/0x220
[  343.076676][T14758]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  343.076706][T14758]  ? rw_verify_area+0x2a6/0x4d0
[  343.076734][T14758]  ? __lock_acquire+0xab9/0xd20
[  343.076753][T14758]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  343.076781][T14758]  vfs_read+0x200/0xa30
[  343.076810][T14758]  ? fdget_pos+0x247/0x320
[  343.076835][T14758]  ? __pfx___mutex_lock+0x10/0x10
[  343.076859][T14758]  ? __pfx_vfs_read+0x10/0x10
[  343.076889][T14758]  ? __fget_files+0x2a/0x420
[  343.076912][T14758]  ? __fget_files+0x3a0/0x420
[  343.076930][T14758]  ? __fget_files+0x2a/0x420
[  343.076960][T14758]  ksys_read+0x145/0x250
[  343.076992][T14758]  ? __pfx_ksys_read+0x10/0x10
[  343.077025][T14758]  ? do_syscall_64+0xbe/0xfa0
[  343.077051][T14758]  do_syscall_64+0xfa/0xfa0
[  343.077070][T14758]  ? lockdep_hardirqs_on+0x9c/0x150
[  343.077090][T14758]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.077111][T14758]  ? clear_bhb_loop+0x60/0xb0
[  343.077136][T14758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.077157][T14758] RIP: 0033:0x7fe8c9f8e0dc
[  343.077176][T14758] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  343.077193][T14758] RSP: 002b:00007fe8caee4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  343.077215][T14758] RAX: ffffffffffffffda RBX: 00007fe8ca1e6090 RCX: 00007fe8c9f8e0dc
[  343.077258][T14758] RDX: 000000000000000f RSI: 00007fe8caee40a0 RDI: 0000000000000004
[  343.077271][T14758] RBP: 00007fe8caee4090 R08: 0000000000000000 R09: 0000000000000000
[  343.077284][T14758] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[  343.077295][T14758] R13: 00007fe8ca1e6128 R14: 00007fe8ca1e6090 R15: 00007ffe59fc3d68
[  343.077330][T14758]  </TASK>
[  343.460861][T14767] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2923'.
[  343.470880][T14767] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2923'.
[  343.604828][T14511] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.750253][T14777] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2925'.
[  343.762570][T14511] veth0_vlan: entered promiscuous mode
[  343.833464][T14511] veth1_vlan: entered promiscuous mode
[  343.947098][T14511] veth0_macvtap: entered promiscuous mode
[  343.982749][T14511] veth1_macvtap: entered promiscuous mode
[  344.083383][T14511] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.161118][T14511] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.168681][T14794] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2929'.
[  344.210808][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.236438][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.244470][T14787] netlink: 'syz.2.2929': attribute type 26 has an invalid length.
[  344.265910][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.289984][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.441730][T14798] FAULT_INJECTION: forcing a failure.
[  344.441730][T14798] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  344.455524][T14798] CPU: 0 UID: 0 PID: 14798 Comm: syz.1.2932 Not tainted syzkaller #0 PREEMPT(full) 
[  344.455552][T14798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  344.455565][T14798] Call Trace:
[  344.455574][T14798]  <TASK>
[  344.455584][T14798]  dump_stack_lvl+0x189/0x250
[  344.455627][T14798]  ? __pfx____ratelimit+0x10/0x10
[  344.455659][T14798]  ? __pfx_dump_stack_lvl+0x10/0x10
[  344.455688][T14798]  ? __pfx__printk+0x10/0x10
[  344.455712][T14798]  ? fs_reclaim_acquire+0x7d/0x100
[  344.455741][T14798]  should_fail_ex+0x414/0x560
[  344.455776][T14798]  prepare_alloc_pages+0x213/0x610
[  344.455804][T14798]  __alloc_frozen_pages_noprof+0x123/0x370
[  344.455830][T14798]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  344.455861][T14798]  ? policy_nodemask+0x27c/0x720
[  344.455881][T14798]  ? __pfx__copy_from_iter+0x10/0x10
[  344.455909][T14798]  alloc_pages_mpol+0x232/0x4a0
[  344.455936][T14798]  alloc_pages_noprof+0xa9/0x190
[  344.455960][T14798]  af_alg_sendmsg+0x1445/0x2440
[  344.456010][T14798]  ? __pfx_af_alg_sendmsg+0x10/0x10
[  344.456036][T14798]  ? __pfx_aa_sk_perm+0x10/0x10
[  344.456063][T14798]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  344.456102][T14798]  ? aa_sock_msg_perm+0xf1/0x1d0
[  344.456133][T14798]  ? skcipher_sendmsg+0x26/0xf0
[  344.456160][T14798]  ? __pfx_skcipher_sendmsg+0x10/0x10
[  344.456188][T14798]  __sock_sendmsg+0x21c/0x270
[  344.456221][T14798]  ____sys_sendmsg+0x52d/0x830
[  344.456251][T14798]  ? __pfx_____sys_sendmsg+0x10/0x10
[  344.456285][T14798]  ? import_iovec+0x74/0xa0
[  344.456316][T14798]  ___sys_sendmsg+0x21f/0x2a0
[  344.456344][T14798]  ? __pfx____sys_sendmsg+0x10/0x10
[  344.456415][T14798]  ? __fget_files+0x2a/0x420
[  344.456434][T14798]  ? __fget_files+0x3a0/0x420
[  344.456467][T14798]  __sys_sendmmsg+0x227/0x430
[  344.456496][T14798]  ? __pfx___sys_sendmmsg+0x10/0x10
[  344.456531][T14798]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  344.456574][T14798]  ? ksys_write+0x22a/0x250
[  344.456611][T14798]  ? __pfx_ksys_write+0x10/0x10
[  344.456642][T14798]  __x64_sys_sendmmsg+0xa0/0xc0
[  344.456670][T14798]  do_syscall_64+0xfa/0xfa0
[  344.456688][T14798]  ? lockdep_hardirqs_on+0x9c/0x150
[  344.456707][T14798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.456728][T14798]  ? clear_bhb_loop+0x60/0xb0
[  344.456754][T14798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.456774][T14798] RIP: 0033:0x7f175378f6c9
[  344.456793][T14798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.456811][T14798] RSP: 002b:00007f17545ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  344.456834][T14798] RAX: ffffffffffffffda RBX: 00007f17539e5fa0 RCX: 00007f175378f6c9
[  344.456849][T14798] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004
[  344.456862][T14798] RBP: 00007f17545ee090 R08: 0000000000000000 R09: 0000000000000000
[  344.456875][T14798] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002
[  344.456888][T14798] R13: 00007f17539e6038 R14: 00007f17539e5fa0 R15: 00007ffc54489d28
[  344.456924][T14798]  </TASK>
[  344.593079][  T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.772292][  T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.891749][T14806] netlink: 'syz.2.2935': attribute type 55 has an invalid length.
[  344.910943][  T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.918834][  T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.205019][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2937'.
[  345.243886][T14824] netlink: 'syz.3.2939': attribute type 1 has an invalid length.
[  345.328435][T14818] hsr0: left allmulticast mode
[  345.350501][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2939'.
[  345.365786][T14818] macvlan0: left allmulticast mode
[  345.388465][T14818] batadv0: left allmulticast mode
[  345.449422][T14818] geneve3: left promiscuous mode
[  345.454554][T14818] geneve3: left allmulticast mode
[  345.586190][T14824] 8021q: adding VLAN 0 to HW filter on device bond2
[  345.673545][T14828] bond2: (slave gretap1): making interface the new active one
[  345.697676][T14828] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  345.880033][T14830] bond2 (unregistering): (slave gretap1): Releasing active interface
[  345.900855][T14830] bond2 (unregistering): Released all slaves
[  345.936685][ T6068] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6144 - 0
[  345.945490][ T6068] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6144 - 0
[  345.978288][T14837] IPVS: Error connecting to the multicast addr
[  346.057509][ T6068] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6144 - 0
[  346.127745][ T6068] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6144 - 0
[  346.352240][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2948'.
[  346.576787][T14872] lo speed is unknown, defaulting to 1000
[  346.659465][T14872] lo speed is unknown, defaulting to 1000
[  346.864953][T14879] netlink: 'syz.0.2951': attribute type 26 has an invalid length.
[  346.945593][T14881] syzkaller1: entered promiscuous mode
[  346.969396][T14881] syzkaller1: entered allmulticast mode
[  347.395527][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  347.421040][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  347.430295][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  347.449434][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  347.458334][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  347.577081][T14890] lo speed is unknown, defaulting to 1000
[  347.693988][T14890] lo speed is unknown, defaulting to 1000
[  347.782525][T14904] __nla_validate_parse: 3 callbacks suppressed
[  347.782546][T14904] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2961'.
[  348.100023][T14915] syzkaller0: entered promiscuous mode
[  348.112063][T14915] syzkaller0: entered allmulticast mode
[  348.363639][T14922] syzkaller0: entered promiscuous mode
[  348.399206][T14922] syzkaller0: entered allmulticast mode
[  348.420814][T14928] netlink: 'syz.4.2971': attribute type 10 has an invalid length.
[  348.499536][T14933] netlink: 'syz.4.2971': attribute type 10 has an invalid length.
[  348.548547][T14928] bond0: (slave dummy0): Releasing backup interface
[  348.575717][T14928] team0: Port device dummy0 added
[  348.647410][T14933] team0: Port device dummy0 removed
[  348.671173][T14933] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  348.791838][T14942] netlink: 'syz.4.2976': attribute type 29 has an invalid length.
[  348.825929][T14942] netlink: 'syz.4.2976': attribute type 29 has an invalid length.
[  348.854933][T14942] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2976'.
[  348.936934][T14890] chnl_net:caif_netlink_parms(): no params data found
[  349.180560][T14890] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.188714][T14890] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.196718][T14890] bridge_slave_0: entered allmulticast mode
[  349.205516][T14890] bridge_slave_0: entered promiscuous mode
[  349.292326][T14890] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.309635][T14890] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.318404][T14890] bridge_slave_1: entered allmulticast mode
[  349.327825][T14890] bridge_slave_1: entered promiscuous mode
[  349.376620][T14958] lo speed is unknown, defaulting to 1000
[  349.419977][T14957] lo speed is unknown, defaulting to 1000
[  349.420759][T14958] lo speed is unknown, defaulting to 1000
[  349.450554][T14890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.494551][T14968] FAULT_INJECTION: forcing a failure.
[  349.494551][T14968] name failslab, interval 1, probability 0, space 0, times 0
[  349.514024][ T5828] Bluetooth: hci4: command tx timeout
[  349.534125][T14968] CPU: 0 UID: 0 PID: 14968 Comm: syz.4.2983 Not tainted syzkaller #0 PREEMPT(full) 
[  349.534155][T14968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  349.534167][T14968] Call Trace:
[  349.534176][T14968]  <TASK>
[  349.534185][T14968]  dump_stack_lvl+0x189/0x250
[  349.534221][T14968]  ? __pfx____ratelimit+0x10/0x10
[  349.534252][T14968]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.534279][T14968]  ? __pfx__printk+0x10/0x10
[  349.534307][T14968]  ? __pfx___might_resched+0x10/0x10
[  349.534327][T14968]  ? fs_reclaim_acquire+0x7d/0x100
[  349.534353][T14968]  should_fail_ex+0x414/0x560
[  349.534392][T14968]  should_failslab+0xa8/0x100
[  349.534415][T14968]  __kmalloc_noprof+0xcb/0x7f0
[  349.534445][T14968]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  349.534480][T14968]  ? rcu_is_watching+0x15/0xb0
[  349.534511][T14968]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  349.534549][T14968]  genl_family_rcv_msg_doit+0xb8/0x300
[  349.534587][T14968]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  349.534626][T14968]  ? apparmor_capable+0x137/0x1b0
[  349.534653][T14968]  ? bpf_lsm_capable+0x9/0x20
[  349.534679][T14968]  ? security_capable+0x7e/0x2e0
[  349.534716][T14968]  genl_rcv_msg+0x60e/0x790
[  349.534752][T14968]  ? __pfx_genl_rcv_msg+0x10/0x10
[  349.534781][T14968]  ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10
[  349.534817][T14968]  ? __asan_memcpy+0x40/0x70
[  349.534845][T14968]  ? __pfx_ref_tracker_free+0x10/0x10
[  349.534876][T14968]  netlink_rcv_skb+0x208/0x470
[  349.534897][T14968]  ? __lock_acquire+0xab9/0xd20
[  349.534920][T14968]  ? __pfx_genl_rcv_msg+0x10/0x10
[  349.534950][T14968]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  349.534996][T14968]  ? down_read+0x1ad/0x2e0
[  349.535024][T14968]  genl_rcv+0x28/0x40
[  349.535050][T14968]  netlink_unicast+0x82f/0x9e0
[  349.535101][T14968]  ? __pfx_netlink_unicast+0x10/0x10
[  349.535136][T14968]  ? netlink_sendmsg+0x642/0xb30
[  349.535157][T14968]  ? skb_put+0x11b/0x210
[  349.535183][T14968]  netlink_sendmsg+0x805/0xb30
[  349.535218][T14968]  ? __pfx_netlink_sendmsg+0x10/0x10
[  349.535246][T14968]  ? aa_sock_msg_perm+0xf1/0x1d0
[  349.535278][T14968]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  349.535297][T14968]  ? __pfx_netlink_sendmsg+0x10/0x10
[  349.535320][T14968]  __sock_sendmsg+0x21c/0x270
[  349.535353][T14968]  ____sys_sendmsg+0x505/0x830
[  349.535382][T14968]  ? __pfx_____sys_sendmsg+0x10/0x10
[  349.535416][T14968]  ? import_iovec+0x74/0xa0
[  349.535447][T14968]  ___sys_sendmsg+0x21f/0x2a0
[  349.535473][T14968]  ? __pfx____sys_sendmsg+0x10/0x10
[  349.535538][T14968]  ? __fget_files+0x2a/0x420
[  349.535556][T14968]  ? __fget_files+0x3a0/0x420
[  349.535586][T14968]  __x64_sys_sendmsg+0x19b/0x260
[  349.535616][T14968]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  349.535652][T14968]  ? __pfx_ksys_write+0x10/0x10
[  349.535688][T14968]  ? do_syscall_64+0xbe/0xfa0
[  349.535713][T14968]  do_syscall_64+0xfa/0xfa0
[  349.535733][T14968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.535752][T14968]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  349.535773][T14968]  ? clear_bhb_loop+0x60/0xb0
[  349.535799][T14968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.535818][T14968] RIP: 0033:0x7fe8c9f8f6c9
[  349.535838][T14968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.535856][T14968] RSP: 002b:00007fe8caf05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  349.535879][T14968] RAX: ffffffffffffffda RBX: 00007fe8ca1e5fa0 RCX: 00007fe8c9f8f6c9
[  349.535895][T14968] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000009
[  349.535908][T14968] RBP: 00007fe8caf05090 R08: 0000000000000000 R09: 0000000000000000
[  349.535921][T14968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  349.535933][T14968] R13: 00007fe8ca1e6038 R14: 00007fe8ca1e5fa0 R15: 00007ffe59fc3d68
[  349.535971][T14968]  </TASK>
[  349.943321][T14890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  350.146580][T14890] team0: Port device team_slave_0 added
[  350.175758][T14890] team0: Port device team_slave_1 added
[  350.288819][T14957] lo speed is unknown, defaulting to 1000
[  350.308047][T14890] batman_adv: batadv0: Adding interface: batadv_slave_0
[  350.325969][T14890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  350.359534][T14890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  350.384743][T14976] netlink: 'syz.0.2987': attribute type 10 has an invalid length.
[  350.421736][T14890] batman_adv: batadv0: Adding interface: batadv_slave_1
[  350.428747][T14890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  350.453826][T14979] netlink: 'syz.0.2987': attribute type 10 has an invalid length.
[  350.471978][T14890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  350.491858][T14976] team0: Port device dummy0 added
[  350.511302][T14979] team0: Port device dummy0 removed
[  350.522733][T14979] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  350.664956][T14890] hsr_slave_0: entered promiscuous mode
[  350.668513][T14983] netlink: 'syz.4.2989': attribute type 2 has an invalid length.
[  350.672485][T14890] hsr_slave_1: entered promiscuous mode
[  350.685271][T14890] debugfs: 'hsr0' already exists in 'hsr'
[  350.691462][T14890] Cannot create hsr debugfs directory
[  351.168843][T14993] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.368275][T14993] lo speed is unknown, defaulting to 1000
[  351.410025][T14993] lo speed is unknown, defaulting to 1000
[  351.590714][ T5828] Bluetooth: hci4: command tx timeout
[  351.661431][T14997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.739767][T15001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2995'.
[  351.757632][T14997] lo speed is unknown, defaulting to 1000
[  351.760775][T15001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2995'.
[  351.911464][T15004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2996'.
[  351.939977][T14890] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  351.944417][T15004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2996'.
[  351.974032][T14890] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  352.033480][T14890] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  352.104274][T14890] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  352.155449][T15008] syz_tun: entered allmulticast mode
[  352.179056][T15008] dvmrp6: entered allmulticast mode
[  352.193396][T15018] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3000'.
[  352.204868][T15007] syz_tun: left allmulticast mode
[  352.208321][T15018] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3000'.
[  352.359357][T14997] lo speed is unknown, defaulting to 1000
[  352.427802][T15023] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3002'.
[  352.742640][T14890] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.810712][T14890] 8021q: adding VLAN 0 to HW filter on device team0
[  352.843515][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.850812][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.881927][  T196] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.889270][  T196] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.910690][T15037] xt_hashlimit: max too large, truncated to 1048576
[  353.471431][T15050] netlink: 'syz.3.3011': attribute type 29 has an invalid length.
[  353.495142][T15050] netlink: 'syz.3.3011': attribute type 29 has an invalid length.
[  353.520271][T15050] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3011'.
[  353.671768][ T5828] Bluetooth: hci4: command tx timeout
[  353.869085][T14890] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.997809][T14890] veth0_vlan: entered promiscuous mode
[  354.048746][T14890] veth1_vlan: entered promiscuous mode
[  354.092362][T15071] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3018'.
[  354.116508][T15071] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3018'.
[  354.130607][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3016'.
[  354.164873][T14890] veth0_macvtap: entered promiscuous mode
[  354.217641][T14890] veth1_macvtap: entered promiscuous mode
[  354.276023][T14890] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.306010][T15077] FAULT_INJECTION: forcing a failure.
[  354.306010][T15077] name failslab, interval 1, probability 0, space 0, times 0
[  354.312637][T14890] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.349516][T15077] CPU: 1 UID: 0 PID: 15077 Comm: syz.3.3019 Not tainted syzkaller #0 PREEMPT(full) 
[  354.349545][T15077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  354.349558][T15077] Call Trace:
[  354.349566][T15077]  <TASK>
[  354.349576][T15077]  dump_stack_lvl+0x189/0x250
[  354.349610][T15077]  ? __pfx____ratelimit+0x10/0x10
[  354.349643][T15077]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.349672][T15077]  ? __pfx__printk+0x10/0x10
[  354.349700][T15077]  ? __pfx___might_resched+0x10/0x10
[  354.349722][T15077]  ? fs_reclaim_acquire+0x7d/0x100
[  354.349749][T15077]  should_fail_ex+0x414/0x560
[  354.349788][T15077]  should_failslab+0xa8/0x100
[  354.349817][T15077]  __kmalloc_noprof+0xcb/0x7f0
[  354.349846][T15077]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  354.349877][T15077]  ? rcu_is_watching+0x15/0xb0
[  354.349907][T15077]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  354.349947][T15077]  genl_family_rcv_msg_doit+0xb8/0x300
[  354.349984][T15077]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  354.350023][T15077]  ? apparmor_capable+0x137/0x1b0
[  354.350050][T15077]  ? bpf_lsm_capable+0x9/0x20
[  354.350075][T15077]  ? security_capable+0x7e/0x2e0
[  354.350112][T15077]  genl_rcv_msg+0x60e/0x790
[  354.350149][T15077]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.350176][T15077]  ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10
[  354.350211][T15077]  ? __asan_memcpy+0x40/0x70
[  354.350236][T15077]  ? __pfx_ref_tracker_free+0x10/0x10
[  354.350265][T15077]  netlink_rcv_skb+0x208/0x470
[  354.350285][T15077]  ? __lock_acquire+0xab9/0xd20
[  354.350306][T15077]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.350334][T15077]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.350378][T15077]  ? down_read+0x1ad/0x2e0
[  354.350405][T15077]  genl_rcv+0x28/0x40
[  354.350430][T15077]  netlink_unicast+0x82f/0x9e0
[  354.350480][T15077]  ? __pfx_netlink_unicast+0x10/0x10
[  354.350513][T15077]  ? netlink_sendmsg+0x642/0xb30
[  354.350532][T15077]  ? skb_put+0x11b/0x210
[  354.350558][T15077]  netlink_sendmsg+0x805/0xb30
[  354.350592][T15077]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.350619][T15077]  ? aa_sock_msg_perm+0xf1/0x1d0
[  354.350655][T15077]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  354.350675][T15077]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.350698][T15077]  __sock_sendmsg+0x21c/0x270
[  354.350729][T15077]  ____sys_sendmsg+0x505/0x830
[  354.350758][T15077]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.350792][T15077]  ? import_iovec+0x74/0xa0
[  354.350820][T15077]  ___sys_sendmsg+0x21f/0x2a0
[  354.350844][T15077]  ? __pfx____sys_sendmsg+0x10/0x10
[  354.350902][T15077]  ? __fget_files+0x2a/0x420
[  354.350921][T15077]  ? __fget_files+0x3a0/0x420
[  354.350953][T15077]  __x64_sys_sendmsg+0x19b/0x260
[  354.350980][T15077]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  354.351015][T15077]  ? __pfx_ksys_write+0x10/0x10
[  354.351047][T15077]  ? do_syscall_64+0xbe/0xfa0
[  354.351072][T15077]  do_syscall_64+0xfa/0xfa0
[  354.351089][T15077]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.351110][T15077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.351129][T15077]  ? clear_bhb_loop+0x60/0xb0
[  354.351155][T15077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.351175][T15077] RIP: 0033:0x7f57e8b8f6c9
[  354.351194][T15077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.351212][T15077] RSP: 002b:00007f57e9a5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.351234][T15077] RAX: ffffffffffffffda RBX: 00007f57e8de6090 RCX: 00007f57e8b8f6c9
[  354.351249][T15077] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000009
[  354.351262][T15077] RBP: 00007f57e9a5e090 R08: 0000000000000000 R09: 0000000000000000
[  354.351274][T15077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.351285][T15077] R13: 00007f57e8de6128 R14: 00007f57e8de6090 R15: 00007ffcfa4ba238
[  354.351321][T15077]  </TASK>
[  354.366859][  T196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.582643][T15081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3023'.
[  354.699781][  T196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.780696][  T196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.821729][  T196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.953429][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.970568][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.092667][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.110219][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.317052][T15105] netlink: 'syz.2.2949': attribute type 11 has an invalid length.
[  355.326147][T15105] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2949'.
[  355.412652][T15107] syzkaller1: entered promiscuous mode
[  355.418204][T15107] syzkaller1: entered allmulticast mode
[  355.466137][T15115] syzkaller1: entered promiscuous mode
[  355.477208][T15115] syzkaller1: entered allmulticast mode
[  355.685473][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3034'.
[  355.707141][T15125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3036'.
[  355.728106][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3037'.
[  355.739425][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'.
[  355.749688][ T5828] Bluetooth: hci4: command tx timeout
[  355.779028][T15127] macvlan0: entered promiscuous mode
[  355.791463][T15127] batadv0: entered promiscuous mode
[  355.798021][T15127] debugfs: 'hsr1' already exists in 'hsr'
[  355.807010][T15127] Cannot create hsr debugfs directory
[  355.813379][T15127] hsr1: entered allmulticast mode
[  355.818690][T15127] macvlan0: entered allmulticast mode
[  355.825562][T15127] veth1_vlan: entered allmulticast mode
[  355.834253][T15127] batadv0: entered allmulticast mode
[  355.977728][T15138] syzkaller1: entered promiscuous mode
[  356.027438][T15138] syzkaller1: entered allmulticast mode
[  356.716152][T15160] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  356.733384][T15160] bond1 (unregistering): Released all slaves
[  356.800416][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  356.811189][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  356.821213][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  356.832321][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  356.842357][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  356.930767][T15172] netlink: 'syz.0.3051': attribute type 1 has an invalid length.
[  356.946148][T15163] lo speed is unknown, defaulting to 1000
[  356.963240][T15163] lo speed is unknown, defaulting to 1000
[  356.993440][T15174] xt_hashlimit: max too large, truncated to 1048576
[  357.017948][T15167] lo speed is unknown, defaulting to 1000
[  357.235686][T15178] syzkaller1: entered promiscuous mode
[  357.251886][T15178] syzkaller1: entered allmulticast mode
[  357.283793][T15167] lo speed is unknown, defaulting to 1000
[  357.383079][T15182] netlink: 'syz.1.3056': attribute type 29 has an invalid length.
[  357.410464][T15182] netlink: 'syz.1.3056': attribute type 29 has an invalid length.
[  357.561145][T15185] lo speed is unknown, defaulting to 1000
[  357.578708][T15188] atomic_op ffff888026fb8198 conn xmit_atomic 0000000000000000
[  357.806012][T15185] lo speed is unknown, defaulting to 1000
[  358.042772][T15201] dummy0: entered allmulticast mode
[  358.064713][T15200] dummy0: left allmulticast mode
[  358.280508][T15167] chnl_net:caif_netlink_parms(): no params data found
[  358.802798][T15167] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.820368][T15167] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.838834][T15167] bridge_slave_0: entered allmulticast mode
[  358.872383][T15167] bridge_slave_0: entered promiscuous mode
[  358.948023][T15167] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.964882][ T5841] Bluetooth: hci3: command tx timeout
[  358.972510][T15167] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.980213][T15167] bridge_slave_1: entered allmulticast mode
[  358.988196][T15167] bridge_slave_1: entered promiscuous mode
[  359.026114][T15230] Cannot find del_set index 0 as target
[  359.113475][T15167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.137321][T15167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.323531][T15167] team0: Port device team_slave_0 added
[  359.344043][T15167] team0: Port device team_slave_1 added
[  359.722865][T15167] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.745762][T15167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  359.790464][T15167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.832290][T15167] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.840558][T15167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  359.881723][T15167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.911846][T15237] lo speed is unknown, defaulting to 1000
[  359.942270][T15237] lo speed is unknown, defaulting to 1000
[  360.054802][T15167] hsr_slave_0: entered promiscuous mode
[  360.082380][T15167] hsr_slave_1: entered promiscuous mode
[  360.095227][T15261] netlink: 'syz.2.3080': attribute type 2 has an invalid length.
[  360.107419][T15167] debugfs: 'hsr0' already exists in 'hsr'
[  360.122067][T15167] Cannot create hsr debugfs directory
[  360.188058][ T8363] IPVS: starting estimator thread 0...
[  360.291712][T15270] IPVS: using max 30 ests per chain, 72000 per kthread
[  361.015917][T15284] __nla_validate_parse: 6 callbacks suppressed
[  361.015940][T15284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3087'.
[  361.030905][ T5841] Bluetooth: hci3: command tx timeout
[  361.081138][T15281] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  361.094779][T15281] bond3 (unregistering): Released all slaves
[  361.253175][T15295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3091'.
[  361.271414][T15167] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  361.353603][T15300] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3093'.
[  361.378502][T15167] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  361.416762][T15302] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3093'.
[  361.419938][T15167] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  361.447103][T15302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3093'.
[  361.485865][T15167] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  361.486623][T15300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3093'.
[  361.657302][T15167] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.722425][T15167] 8021q: adding VLAN 0 to HW filter on device team0
[  361.761097][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.768264][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.841105][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.848362][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.011158][T15328] lo speed is unknown, defaulting to 1000
[  362.037307][T15333] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3103'.
[  362.055923][T15331] syz_tun: entered allmulticast mode
[  362.064621][T15328] lo speed is unknown, defaulting to 1000
[  362.067632][T15331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3099'.
[  362.281772][T15347] Cannot find del_set index 0 as target
[  362.520730][T15167] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.598236][T15361] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3111'.
[  362.670922][T15167] veth0_vlan: entered promiscuous mode
[  362.711912][T15167] veth1_vlan: entered promiscuous mode
[  362.771920][T15325] syz_tun: left allmulticast mode
[  362.839778][T15167] veth0_macvtap: entered promiscuous mode
[  362.859670][T15167] veth1_macvtap: entered promiscuous mode
[  362.910020][T15167] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.945196][T15167] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.000941][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.026064][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.041401][T15374] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3115'.
[  363.048327][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.110041][ T5841] Bluetooth: hci3: command tx timeout
[  363.145595][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.534622][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.563696][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.628361][T15386] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1
[  363.670820][T15386] erspan1: entered allmulticast mode
[  363.795161][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.814227][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.037959][T15404] netlink: 'syz.1.3126': attribute type 10 has an invalid length.
[  364.073697][T15404] bond0: (slave dummy0): Releasing backup interface
[  364.091184][T15404] dummy0: left promiscuous mode
[  364.107919][T15407] netlink: 'syz.1.3126': attribute type 10 has an invalid length.
[  364.120276][T15404] dummy0: entered promiscuous mode
[  364.136059][T15404] team0: Port device dummy0 added
[  364.179647][T15407] dummy0: left promiscuous mode
[  364.231989][T15407] team0: Port device dummy0 removed
[  364.255467][T15407] dummy0: entered promiscuous mode
[  364.263317][T15407] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  364.557431][T15426] syzkaller1: entered promiscuous mode
[  364.569492][T15426] syzkaller1: entered allmulticast mode
[  364.581749][T15424] syzkaller1: entered promiscuous mode
[  364.587282][T15424] syzkaller1: entered allmulticast mode
[  364.680588][T15432] netlink: 'syz.1.3139': attribute type 29 has an invalid length.
[  364.694369][T15435] netlink: 'syz.1.3139': attribute type 29 has an invalid length.
[  365.008216][T15453] sctp: [Deprecated]: syz.1.3147 (pid 15453) Use of struct sctp_assoc_value in delayed_ack socket option.
[  365.008216][T15453] Use struct sctp_sack_info instead
[  365.071553][T15453] tipc: Started in network mode
[  365.088339][T15453] tipc: Node identity ac14140f, cluster identity 4711
[  365.111075][T15453] tipc: Enabled bearer <udp:syz2>, priority 10
[  365.127839][T15457] netlink: 'syz.1.3147': attribute type 11 has an invalid length.
[  365.145300][T15457] netlink: 'syz.1.3147': attribute type 11 has an invalid length.
[  365.189381][ T5841] Bluetooth: hci3: command tx timeout
[  365.240710][T15459] bridge_slave_1: left allmulticast mode
[  365.247203][T15459] bridge_slave_1: left promiscuous mode
[  365.255485][T15459] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.273956][T15459] bridge_slave_0: left allmulticast mode
[  365.287252][T15459] bridge_slave_0: left promiscuous mode
[  365.298759][T15459] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.882228][T15495] syzkaller1: entered promiscuous mode
[  365.888262][T15495] syzkaller1: entered allmulticast mode
[  366.086961][T15504] __nla_validate_parse: 10 callbacks suppressed
[  366.086984][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3165'.
[  366.151852][T15504] erspan0: entered promiscuous mode
[  366.230267][ T8344] tipc: Node number set to 2886997007
[  366.272358][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3168'.
[  366.294206][T15512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3168'.
[  366.411554][T15512] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1
[  366.455836][T15512] erspan1: entered allmulticast mode
[  366.751143][T15527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3173'.
[  366.760989][T15527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3173'.
[  367.073430][T15538] netlink: 'syz.2.3177': attribute type 4 has an invalid length.
[  367.089953][T15539] syzkaller1: entered promiscuous mode
[  367.095875][T15539] syzkaller1: entered allmulticast mode
[  367.136541][T15542] lo speed is unknown, defaulting to 1000
[  367.145569][T15542] lo speed is unknown, defaulting to 1000
[  367.213647][T15544] syz_tun: entered allmulticast mode
[  367.254664][T15544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3180'.
[  367.441756][T15549] lo speed is unknown, defaulting to 1000
[  367.645953][T15559] lo speed is unknown, defaulting to 1000
[  367.745701][T15563] netlink: 'syz.0.3184': attribute type 13 has an invalid length.
[  367.745952][T15549] lo speed is unknown, defaulting to 1000
[  367.799755][T15563] netlink: 'syz.0.3184': attribute type 17 has an invalid length.
[  368.128971][T15563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  368.252046][T15540] syz_tun: left allmulticast mode
[  368.272163][T15576] netlink: 'syz.1.3189': attribute type 10 has an invalid length.
[  368.323510][T15579] netlink: 'syz.1.3189': attribute type 10 has an invalid length.
[  368.328897][T15559] lo speed is unknown, defaulting to 1000
[  368.480234][T15576] bond0: (slave dummy0): Releasing backup interface
[  368.493339][T15576] dummy0: left promiscuous mode
[  368.520938][T15576] dummy0: entered promiscuous mode
[  368.538805][T15576] team0: Port device dummy0 added
[  368.557063][T15579] dummy0: left promiscuous mode
[  368.607132][T15579] team0: Port device dummy0 removed
[  368.618494][T15579] dummy0: entered promiscuous mode
[  368.624990][T15579] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  368.766851][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3192'.
[  369.721319][T15601] vlan2: entered promiscuous mode
[  369.727296][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3201'.
[  369.898862][T15608] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0
[  370.000076][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3204'.
[  370.059838][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'.
[  370.222944][T15617] netlink: 'syz.0.3206': attribute type 7 has an invalid length.
[  370.274378][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  370.287612][T15617] netlink: 'syz.0.3206': attribute type 7 has an invalid length.
[  370.310644][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  370.346349][T15622] macvlan0: entered promiscuous mode
[  370.380758][T15622] batadv0: entered promiscuous mode
[  370.390838][T15622] debugfs: 'hsr1' already exists in 'hsr'
[  370.407270][T15622] Cannot create hsr debugfs directory
[  370.428856][T15622] hsr1: entered allmulticast mode
[  370.437389][T15622] macvlan0: entered allmulticast mode
[  370.449771][T15622] veth1_vlan: entered allmulticast mode
[  370.459253][T15622] batadv0: entered allmulticast mode
[  370.471772][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  370.500832][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  370.565878][T15635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.574037][T15635] syzkaller0: entered promiscuous mode
[  370.579774][T15635] syzkaller0: entered allmulticast mode
[  370.617587][T15631] tipc: Resetting bearer <eth:syzkaller0>
[  370.651677][T15631] tipc: Disabling bearer <eth:syzkaller0>
[  370.925422][T15656] geneve2: entered promiscuous mode
[  370.934856][   T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  370.952116][   T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  370.989235][   T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  371.008358][   T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  371.057181][T15663] FAULT_INJECTION: forcing a failure.
[  371.057181][T15663] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  371.069185][T15665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.071680][T15663] CPU: 0 UID: 0 PID: 15663 Comm: syz.2.3222 Not tainted syzkaller #0 PREEMPT(full) 
[  371.071713][T15663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  371.071746][T15663] Call Trace:
[  371.071756][T15663]  <TASK>
[  371.071766][T15663]  dump_stack_lvl+0x189/0x250
[  371.071808][T15663]  ? __pfx____ratelimit+0x10/0x10
[  371.071847][T15663]  ? __pfx_dump_stack_lvl+0x10/0x10
[  371.071880][T15663]  ? __pfx__printk+0x10/0x10
[  371.071906][T15663]  ? __might_fault+0xb0/0x130
[  371.071963][T15663]  should_fail_ex+0x414/0x560
[  371.072004][T15663]  _copy_from_user+0x2d/0xb0
[  371.072036][T15663]  ___sys_sendmsg+0x158/0x2a0
[  371.072067][T15663]  ? __pfx____sys_sendmsg+0x10/0x10
[  371.072139][T15663]  ? __fget_files+0x2a/0x420
[  371.072161][T15663]  ? __fget_files+0x3a0/0x420
[  371.072199][T15663]  __sys_sendmmsg+0x227/0x430
[  371.072234][T15663]  ? __pfx___sys_sendmmsg+0x10/0x10
[  371.072277][T15663]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  371.072327][T15663]  ? ksys_write+0x22a/0x250
[  371.072363][T15663]  ? __pfx_ksys_write+0x10/0x10
[  371.072402][T15663]  __x64_sys_sendmmsg+0xa0/0xc0
[  371.072431][T15663]  do_syscall_64+0xfa/0xfa0
[  371.072452][T15663]  ? lockdep_hardirqs_on+0x9c/0x150
[  371.072476][T15663]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.072498][T15663]  ? clear_bhb_loop+0x60/0xb0
[  371.072527][T15663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.072549][T15663] RIP: 0033:0x7f0bc218f6c9
[  371.072571][T15663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  371.072592][T15663] RSP: 002b:00007f0bc03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  371.072624][T15663] RAX: ffffffffffffffda RBX: 00007f0bc23e5fa0 RCX: 00007f0bc218f6c9
[  371.072642][T15663] RDX: 0400000000000047 RSI: 0000200000000000 RDI: 0000000000000041
[  371.072658][T15663] RBP: 00007f0bc03f6090 R08: 0000000000000000 R09: 0000000000000000
[  371.072672][T15663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.072687][T15663] R13: 00007f0bc23e6038 R14: 00007f0bc23e5fa0 R15: 00007ffe01d1e3d8
[  371.072725][T15663]  </TASK>
[  371.259652][T15669] netlink: 'syz.2.3224': attribute type 10 has an invalid length.
[  371.306609][T15666] lo speed is unknown, defaulting to 1000
[  371.314818][T15666] lo speed is unknown, defaulting to 1000
[  371.320890][T15669] __nla_validate_parse: 3 callbacks suppressed
[  371.320908][T15669] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3224'.
[  371.352364][T15669] batadv_slave_1: entered promiscuous mode
[  371.365232][T15669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  371.379435][T15669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.814669][T15702] lo speed is unknown, defaulting to 1000
[  372.826524][T15702] lo speed is unknown, defaulting to 1000
[  373.078428][T15718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3240'.
[  373.310733][T15717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.335609][T15717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.463617][T15717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.474395][T15717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.570827][T15717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.579064][T15725] siw: device registration error -23
[  373.581868][T15717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.689096][T15729] FAULT_INJECTION: forcing a failure.
[  373.689096][T15729] name failslab, interval 1, probability 0, space 0, times 0
[  373.703636][T15729] CPU: 0 UID: 0 PID: 15729 Comm: syz.2.3243 Not tainted syzkaller #0 PREEMPT(full) 
[  373.703667][T15729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  373.703680][T15729] Call Trace:
[  373.703689][T15729]  <TASK>
[  373.703698][T15729]  dump_stack_lvl+0x189/0x250
[  373.703732][T15729]  ? __pfx____ratelimit+0x10/0x10
[  373.703765][T15729]  ? __pfx_dump_stack_lvl+0x10/0x10
[  373.703793][T15729]  ? __pfx__printk+0x10/0x10
[  373.703821][T15729]  ? __lock_acquire+0xab9/0xd20
[  373.703850][T15729]  should_fail_ex+0x414/0x560
[  373.703888][T15729]  should_failslab+0xa8/0x100
[  373.703922][T15729]  kmem_cache_alloc_noprof+0x74/0x6e0
[  373.703952][T15729]  ? skb_clone+0x212/0x3a0
[  373.703984][T15729]  skb_clone+0x212/0x3a0
[  373.704013][T15729]  __netlink_deliver_tap+0x404/0x850
[  373.704051][T15729]  ? netlink_deliver_tap+0x2e/0x1b0
[  373.704075][T15729]  netlink_deliver_tap+0x19c/0x1b0
[  373.704099][T15729]  netlink_unicast+0x7fa/0x9e0
[  373.704142][T15729]  ? __pfx_netlink_unicast+0x10/0x10
[  373.704176][T15729]  ? netlink_sendmsg+0x642/0xb30
[  373.704196][T15729]  ? skb_put+0x11b/0x210
[  373.704221][T15729]  netlink_sendmsg+0x805/0xb30
[  373.704255][T15729]  ? __pfx_netlink_sendmsg+0x10/0x10
[  373.704282][T15729]  ? aa_sock_msg_perm+0xf1/0x1d0
[  373.704315][T15729]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  373.704335][T15729]  ? __pfx_netlink_sendmsg+0x10/0x10
[  373.704359][T15729]  __sock_sendmsg+0x21c/0x270
[  373.704392][T15729]  ____sys_sendmsg+0x505/0x830
[  373.704423][T15729]  ? __pfx_____sys_sendmsg+0x10/0x10
[  373.704457][T15729]  ? import_iovec+0x74/0xa0
[  373.704489][T15729]  ___sys_sendmsg+0x21f/0x2a0
[  373.704515][T15729]  ? __pfx____sys_sendmsg+0x10/0x10
[  373.704581][T15729]  ? __fget_files+0x2a/0x420
[  373.704599][T15729]  ? __fget_files+0x3a0/0x420
[  373.704631][T15729]  __x64_sys_sendmsg+0x19b/0x260
[  373.704659][T15729]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  373.704694][T15729]  ? __pfx_ksys_write+0x10/0x10
[  373.704726][T15729]  ? do_syscall_64+0xbe/0xfa0
[  373.704751][T15729]  do_syscall_64+0xfa/0xfa0
[  373.704770][T15729]  ? lockdep_hardirqs_on+0x9c/0x150
[  373.704790][T15729]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.704810][T15729]  ? clear_bhb_loop+0x60/0xb0
[  373.704835][T15729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.704854][T15729] RIP: 0033:0x7f0bc218f6c9
[  373.704873][T15729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  373.704891][T15729] RSP: 002b:00007f0bc03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  373.704919][T15729] RAX: ffffffffffffffda RBX: 00007f0bc23e5fa0 RCX: 00007f0bc218f6c9
[  373.704934][T15729] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000008
[  373.704947][T15729] RBP: 00007f0bc03f6090 R08: 0000000000000000 R09: 0000000000000000
[  373.704960][T15729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  373.704972][T15729] R13: 00007f0bc23e6038 R14: 00007f0bc23e5fa0 R15: 00007ffe01d1e3d8
[  373.705009][T15729]  </TASK>
[  374.034077][T15717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  374.059843][T15717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.154406][T15733] FAULT_INJECTION: forcing a failure.
[  374.154406][T15733] name failslab, interval 1, probability 0, space 0, times 0
[  374.170796][T15733] CPU: 1 UID: 0 PID: 15733 Comm: syz.2.3245 Not tainted syzkaller #0 PREEMPT(full) 
[  374.170826][T15733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  374.170849][T15733] Call Trace:
[  374.170857][T15733]  <TASK>
[  374.170866][T15733]  dump_stack_lvl+0x189/0x250
[  374.170899][T15733]  ? __pfx____ratelimit+0x10/0x10
[  374.170931][T15733]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.170960][T15733]  ? __pfx__printk+0x10/0x10
[  374.170984][T15733]  ? __pfx___might_resched+0x10/0x10
[  374.171008][T15733]  ? fs_reclaim_acquire+0x7d/0x100
[  374.171033][T15733]  should_fail_ex+0x414/0x560
[  374.171070][T15733]  should_failslab+0xa8/0x100
[  374.171094][T15733]  kmem_cache_alloc_noprof+0x74/0x6e0
[  374.171123][T15733]  ? __percpu_counter_compare+0xae/0x2e0
[  374.171149][T15733]  ? ep_insert+0x272/0x19e0
[  374.171175][T15733]  ep_insert+0x272/0x19e0
[  374.171212][T15733]  ? __pfx_ep_insert+0x10/0x10
[  374.171231][T15733]  ? __pfx___mutex_lock+0x10/0x10
[  374.171262][T15733]  ? apparmor_capable+0x137/0x1b0
[  374.171288][T15733]  ? bpf_lsm_capable+0x9/0x20
[  374.171323][T15733]  do_epoll_ctl+0x7f4/0xe80
[  374.171354][T15733]  __x64_sys_epoll_ctl+0x163/0x1a0
[  374.171378][T15733]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  374.171404][T15733]  ? do_syscall_64+0xbe/0xfa0
[  374.171429][T15733]  do_syscall_64+0xfa/0xfa0
[  374.171448][T15733]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.171467][T15733]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.171487][T15733]  ? clear_bhb_loop+0x60/0xb0
[  374.171513][T15733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.171532][T15733] RIP: 0033:0x7f0bc218f6c9
[  374.171552][T15733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.171569][T15733] RSP: 002b:00007f0bc03f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  374.171591][T15733] RAX: ffffffffffffffda RBX: 00007f0bc23e5fa0 RCX: 00007f0bc218f6c9
[  374.171606][T15733] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003
[  374.171618][T15733] RBP: 00007f0bc03f6090 R08: 0000000000000000 R09: 0000000000000000
[  374.171631][T15733] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  374.171644][T15733] R13: 00007f0bc23e6038 R14: 00007f0bc23e5fa0 R15: 00007ffe01d1e3d8
[  374.171680][T15733]  </TASK>
[  374.525052][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  374.536595][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.614946][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  374.623696][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.632422][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  374.655094][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.738114][   T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  374.750377][   T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.169951][T15759] xt_l2tp: invalid flags combination: 0
[  375.440983][T15776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.543776][T15776] lo speed is unknown, defaulting to 1000
[  375.602076][T15776] lo speed is unknown, defaulting to 1000
[  375.637731][T15783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3261'.
[  375.882279][T15790] FAULT_INJECTION: forcing a failure.
[  375.882279][T15790] name failslab, interval 1, probability 0, space 0, times 0
[  375.919340][T15790] CPU: 0 UID: 0 PID: 15790 Comm: syz.0.3264 Not tainted syzkaller #0 PREEMPT(full) 
[  375.919371][T15790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  375.919384][T15790] Call Trace:
[  375.919392][T15790]  <TASK>
[  375.919402][T15790]  dump_stack_lvl+0x189/0x250
[  375.919435][T15790]  ? __pfx____ratelimit+0x10/0x10
[  375.919469][T15790]  ? __pfx_dump_stack_lvl+0x10/0x10
[  375.919498][T15790]  ? __pfx__printk+0x10/0x10
[  375.919531][T15790]  ? __pfx___might_resched+0x10/0x10
[  375.919561][T15790]  should_fail_ex+0x414/0x560
[  375.919599][T15790]  should_failslab+0xa8/0x100
[  375.919624][T15790]  __kmalloc_noprof+0xcb/0x7f0
[  375.919653][T15790]  ? kfree+0x4d/0x6d0
[  375.919676][T15790]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  375.919717][T15790]  tomoyo_realpath_from_path+0xe3/0x5d0
[  375.919762][T15790]  ? tomoyo_domain+0xd9/0x130
[  375.919789][T15790]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  375.919816][T15790]  tomoyo_path_number_perm+0x1e8/0x5a0
[  375.919847][T15790]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  375.919918][T15790]  ? __fget_files+0x2a/0x420
[  375.919946][T15790]  ? __fget_files+0x3a0/0x420
[  375.919964][T15790]  ? __fget_files+0x2a/0x420
[  375.919989][T15790]  security_file_ioctl+0xcb/0x2d0
[  375.920019][T15790]  __se_sys_ioctl+0x47/0x170
[  375.920050][T15790]  do_syscall_64+0xfa/0xfa0
[  375.920070][T15790]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.920091][T15790]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.920112][T15790]  ? clear_bhb_loop+0x60/0xb0
[  375.920138][T15790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.920158][T15790] RIP: 0033:0x7fbcf6f8f6c9
[  375.920178][T15790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.920196][T15790] RSP: 002b:00007fbcf7d9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  375.920219][T15790] RAX: ffffffffffffffda RBX: 00007fbcf71e6090 RCX: 00007fbcf6f8f6c9
[  375.920234][T15790] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000009
[  375.920248][T15790] RBP: 00007fbcf7d9a090 R08: 0000000000000000 R09: 0000000000000000
[  375.920260][T15790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.920273][T15790] R13: 00007fbcf71e6128 R14: 00007fbcf71e6090 R15: 00007ffc03ea3178
[  375.920310][T15790]  </TASK>
[  375.924556][T15790] ERROR: Out of memory at tomoyo_realpath_from_path.
[  376.290460][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'.
[  376.295880][T15798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.413930][T15798] lo speed is unknown, defaulting to 1000
[  376.708597][T15798] lo speed is unknown, defaulting to 1000
[  376.826675][T15800] tc_dump_action: action bad kind
[  377.071936][T15809] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  377.131384][T15809] bond1 (unregistering): Released all slaves
[  377.366048][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3274'.
[  377.553871][T15825] netlink: 'syz.2.3275': attribute type 3 has an invalid length.
[  377.569246][T15825] netlink: 'syz.2.3275': attribute type 1 has an invalid length.
[  377.579227][T15825] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3275'.
[  377.803789][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'.
[  377.886450][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'.
[  378.646681][T15856] Cannot find del_set index 0 as target
[  378.926517][T15870] lo speed is unknown, defaulting to 1000
[  378.961406][T15870] lo speed is unknown, defaulting to 1000
[  379.728046][T15887] lo speed is unknown, defaulting to 1000
[  379.788617][T15887] lo speed is unknown, defaulting to 1000
[  380.452857][T15908] netlink: 'syz.1.3298': attribute type 29 has an invalid length.
[  380.485353][T15908] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3298'.
[  380.563793][T15909] netlink: 'syz.1.3298': attribute type 29 has an invalid length.
[  380.714527][T15915] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3301'.
[  381.102579][T15932] netlink: 'syz.4.3307': attribute type 10 has an invalid length.
[  381.143791][T15932] bond0: (slave dummy0): Releasing backup interface
[  381.164250][T15935] netlink: 'syz.4.3307': attribute type 10 has an invalid length.
[  381.187934][T15932] team0: Port device dummy0 added
[  381.288911][T15935] team0: Port device dummy0 removed
[  381.425564][T15936] syzkaller1: entered promiscuous mode
[  381.445542][T15936] syzkaller1: entered allmulticast mode
[  381.524090][T15941] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  381.546002][T15941] bond3 (unregistering): Released all slaves
[  381.748580][T15955] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3314'.
[  381.951224][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3317'.
[  381.979282][T15961] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3317'.
[  382.005789][T15961] macvlan0: entered promiscuous mode
[  382.013190][T15961] batadv0: entered promiscuous mode
[  382.020439][T15961] debugfs: 'hsr1' already exists in 'hsr'
[  382.026383][T15961] Cannot create hsr debugfs directory
[  382.032802][T15961] hsr1: entered allmulticast mode
[  382.038082][T15961] macvlan0: entered allmulticast mode
[  382.044305][T15961] veth1_vlan: entered allmulticast mode
[  382.084755][T15961] batadv0: entered allmulticast mode
[  382.157848][T15971] Cannot find del_set index 0 as target
[  382.330428][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3325'.
[  382.363399][T15981] team0: No ports can be present during mode change
[  382.383565][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3325'.
[  382.393313][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3325'.
[  382.436378][T15984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3327'.
[  382.445934][T15980] 8021q: adding VLAN 0 to HW filter on device bond1
[  382.468148][T15982] macvlan2: entered promiscuous mode
[  382.477202][T15982] macvlan2: entered allmulticast mode
[  382.540891][T15984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3327'.
[  383.080895][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3335'.
[  383.092343][T16004] pim6reg1: entered promiscuous mode
[  383.099231][T16004] pim6reg1: entered allmulticast mode
[  383.150270][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3334'.
[  383.191124][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3336'.
[  383.493760][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  383.511388][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  383.525458][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  383.531881][T15998] delete_channel: no stack
[  383.545820][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  383.556547][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  383.702748][T16015] lo speed is unknown, defaulting to 1000
[  383.714825][T16015] lo speed is unknown, defaulting to 1000
[  383.721414][T16026] netlink: 'syz.0.3340': attribute type 83 has an invalid length.
[  384.584859][T16052] tipc: Trying to set illegal importance in message
[  384.742468][T16015] chnl_net:caif_netlink_parms(): no params data found
[  384.825967][T16057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3352'.
[  384.839327][T16057] IPv6: NLM_F_CREATE should be specified when creating new route
[  384.847498][ T5915] IPVS: starting estimator thread 0...
[  384.859417][T16062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3355'.
[  384.954453][T16060] IPVS: using max 30 ests per chain, 72000 per kthread
[  385.082976][T16015] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.099568][T16015] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.107032][T16015] bridge_slave_0: entered allmulticast mode
[  385.117086][T16015] bridge_slave_0: entered promiscuous mode
[  385.136175][T16015] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.144003][T16015] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.152356][T16015] bridge_slave_1: entered allmulticast mode
[  385.161284][T16015] bridge_slave_1: entered promiscuous mode
[  385.311677][T16015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.348916][T16015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.589466][ T5828] Bluetooth: hci1: command tx timeout
[  385.602524][T16015] team0: Port device team_slave_0 added
[  385.632664][T16015] team0: Port device team_slave_1 added
[  385.745835][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3362'.
[  385.823358][T16015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.855398][T16015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.914174][T16015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.974224][T16015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.986125][T16101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.991962][T16015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.040659][T16015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.191468][T16106] FAULT_INJECTION: forcing a failure.
[  386.191468][T16106] name failslab, interval 1, probability 0, space 0, times 0
[  386.227287][T16106] CPU: 1 UID: 0 PID: 16106 Comm: syz.0.3367 Not tainted syzkaller #0 PREEMPT(full) 
[  386.227318][T16106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  386.227333][T16106] Call Trace:
[  386.227342][T16106]  <TASK>
[  386.227351][T16106]  dump_stack_lvl+0x189/0x250
[  386.227388][T16106]  ? __pfx____ratelimit+0x10/0x10
[  386.227421][T16106]  ? __pfx_dump_stack_lvl+0x10/0x10
[  386.227450][T16106]  ? __pfx__printk+0x10/0x10
[  386.227479][T16106]  ? __lock_acquire+0xab9/0xd20
[  386.227508][T16106]  should_fail_ex+0x414/0x560
[  386.227547][T16106]  should_failslab+0xa8/0x100
[  386.227572][T16106]  kmem_cache_alloc_noprof+0x74/0x6e0
[  386.227603][T16106]  ? skb_clone+0x212/0x3a0
[  386.227635][T16106]  skb_clone+0x212/0x3a0
[  386.227665][T16106]  __netlink_deliver_tap+0x404/0x850
[  386.227703][T16106]  ? netlink_deliver_tap+0x2e/0x1b0
[  386.227728][T16106]  netlink_deliver_tap+0x19c/0x1b0
[  386.227752][T16106]  netlink_unicast+0x7fa/0x9e0
[  386.227796][T16106]  ? __pfx_netlink_unicast+0x10/0x10
[  386.227830][T16106]  ? netlink_sendmsg+0x642/0xb30
[  386.227859][T16106]  ? skb_put+0x11b/0x210
[  386.227885][T16106]  netlink_sendmsg+0x805/0xb30
[  386.227917][T16106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  386.227945][T16106]  ? aa_sock_msg_perm+0xf1/0x1d0
[  386.227978][T16106]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  386.228000][T16106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  386.228025][T16106]  __sock_sendmsg+0x21c/0x270
[  386.228059][T16106]  ____sys_sendmsg+0x505/0x830
[  386.228091][T16106]  ? __pfx_____sys_sendmsg+0x10/0x10
[  386.228126][T16106]  ? import_iovec+0x74/0xa0
[  386.228158][T16106]  ___sys_sendmsg+0x21f/0x2a0
[  386.228185][T16106]  ? __pfx____sys_sendmsg+0x10/0x10
[  386.228252][T16106]  ? __fget_files+0x2a/0x420
[  386.228272][T16106]  ? __fget_files+0x3a0/0x420
[  386.228305][T16106]  __x64_sys_sendmsg+0x19b/0x260
[  386.228334][T16106]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  386.228371][T16106]  ? __pfx_ksys_write+0x10/0x10
[  386.228406][T16106]  ? do_syscall_64+0xbe/0xfa0
[  386.228432][T16106]  do_syscall_64+0xfa/0xfa0
[  386.228452][T16106]  ? lockdep_hardirqs_on+0x9c/0x150
[  386.228473][T16106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.228494][T16106]  ? clear_bhb_loop+0x60/0xb0
[  386.228519][T16106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.228540][T16106] RIP: 0033:0x7fbcf6f8f6c9
[  386.228559][T16106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  386.228577][T16106] RSP: 002b:00007fbcf7dbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  386.228599][T16106] RAX: ffffffffffffffda RBX: 00007fbcf71e5fa0 RCX: 00007fbcf6f8f6c9
[  386.228615][T16106] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  386.228628][T16106] RBP: 00007fbcf7dbb090 R08: 0000000000000000 R09: 0000000000000000
[  386.228641][T16106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  386.228653][T16106] R13: 00007fbcf71e6038 R14: 00007fbcf71e5fa0 R15: 00007ffc03ea3178
[  386.228690][T16106]  </TASK>
[  386.610355][T16101] lo speed is unknown, defaulting to 1000
[  386.618753][T16101] lo speed is unknown, defaulting to 1000
[  386.717506][T16015] hsr_slave_0: entered promiscuous mode
[  386.776723][T16015] hsr_slave_1: entered promiscuous mode
[  386.803163][T16015] debugfs: 'hsr0' already exists in 'hsr'
[  386.808961][T16015] Cannot create hsr debugfs directory
[  387.197385][T16119] xt_CT: No such helper "syz1"
[  387.398172][T16132] __nla_validate_parse: 3 callbacks suppressed
[  387.398193][T16132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3377'.
[  387.398914][T16135] FAULT_INJECTION: forcing a failure.
[  387.398914][T16135] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  387.416937][T16132] netlink: 'syz.0.3377': attribute type 1 has an invalid length.
[  387.469364][T16135] CPU: 1 UID: 0 PID: 16135 Comm: syz.2.3375 Not tainted syzkaller #0 PREEMPT(full) 
[  387.469393][T16135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  387.469406][T16135] Call Trace:
[  387.469414][T16135]  <TASK>
[  387.469423][T16135]  dump_stack_lvl+0x189/0x250
[  387.469467][T16135]  ? __pfx____ratelimit+0x10/0x10
[  387.469500][T16135]  ? __pfx_dump_stack_lvl+0x10/0x10
[  387.469529][T16135]  ? __pfx__printk+0x10/0x10
[  387.469551][T16135]  ? __might_fault+0xb0/0x130
[  387.469594][T16135]  should_fail_ex+0x414/0x560
[  387.469630][T16135]  _copy_from_iter+0x1de/0x1790
[  387.469657][T16135]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  387.469689][T16135]  ? policy_nodemask+0x27c/0x720
[  387.469709][T16135]  ? __pfx__copy_from_iter+0x10/0x10
[  387.469739][T16135]  ? set_page_refcounted+0xa0/0x1e0
[  387.469767][T16135]  af_alg_sendmsg+0x1562/0x2440
[  387.469818][T16135]  ? __pfx_af_alg_sendmsg+0x10/0x10
[  387.469844][T16135]  ? __pfx_aa_sk_perm+0x10/0x10
[  387.469870][T16135]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  387.469910][T16135]  ? aa_sock_msg_perm+0xf1/0x1d0
[  387.469943][T16135]  ? skcipher_sendmsg+0x26/0xf0
[  387.469969][T16135]  ? __pfx_skcipher_sendmsg+0x10/0x10
[  387.469998][T16135]  __sock_sendmsg+0x21c/0x270
[  387.470032][T16135]  ____sys_sendmsg+0x52d/0x830
[  387.470063][T16135]  ? __pfx_____sys_sendmsg+0x10/0x10
[  387.470098][T16135]  ? import_iovec+0x74/0xa0
[  387.470129][T16135]  ___sys_sendmsg+0x21f/0x2a0
[  387.470156][T16135]  ? __pfx____sys_sendmsg+0x10/0x10
[  387.470223][T16135]  ? __fget_files+0x2a/0x420
[  387.470242][T16135]  ? __fget_files+0x3a0/0x420
[  387.470271][T16135]  __sys_sendmmsg+0x227/0x430
[  387.470296][T16135]  ? __pfx___sys_sendmmsg+0x10/0x10
[  387.470324][T16135]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  387.470368][T16135]  ? ksys_write+0x22a/0x250
[  387.470398][T16135]  ? __pfx_ksys_write+0x10/0x10
[  387.470438][T16135]  __x64_sys_sendmmsg+0xa0/0xc0
[  387.470465][T16135]  do_syscall_64+0xfa/0xfa0
[  387.470484][T16135]  ? lockdep_hardirqs_on+0x9c/0x150
[  387.470504][T16135]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.470525][T16135]  ? clear_bhb_loop+0x60/0xb0
[  387.470550][T16135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.470570][T16135] RIP: 0033:0x7f0bc218f6c9
[  387.470589][T16135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.470608][T16135] RSP: 002b:00007f0bc03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  387.470628][T16135] RAX: ffffffffffffffda RBX: 00007f0bc23e5fa0 RCX: 00007f0bc218f6c9
[  387.470642][T16135] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004
[  387.470654][T16135] RBP: 00007f0bc03f6090 R08: 0000000000000000 R09: 0000000000000000
[  387.470665][T16135] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002
[  387.470676][T16135] R13: 00007f0bc23e6038 R14: 00007f0bc23e5fa0 R15: 00007ffe01d1e3d8
[  387.470710][T16135]  </TASK>
[  387.590229][ T5942] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI
[  387.778684][ T5942] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267]
[  387.787118][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
[  387.796508][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  387.806589][ T5942] Workqueue: events l2cap_info_timeout
[  387.812080][ T5942] RIP: 0010:kasan_byte_accessible+0x12/0x30
[  387.817986][ T5942] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 00 45 24 09 cc 66 66 66 66 66 66 2e
[  387.837600][ T5942] RSP: 0018:ffffc90004b47788 EFLAGS: 00010202
[  387.843687][ T5942] RAX: dffffc0000000000 RBX: ffffffff891f36d8 RCX: b22f0870249c0500
[  387.851822][ T5942] RDX: 0000000000000000 RSI: ffffffff891f36d8 RDI: 000000000000004c
[  387.859815][ T5942] RBP: ffffffff8a507705 R08: 0000000000000001 R09: 0000000000000000
[  387.867804][ T5942] R10: dffffc0000000000 R11: ffffffff8a5076c0 R12: 0000000000000000
[  387.875788][ T5942] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001
[  387.883765][ T5942] FS:  0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000
[  387.892706][ T5942] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  387.899304][ T5942] CR2: 00007fbcf7d99f98 CR3: 000000004fe5c000 CR4: 00000000003526f0
[  387.907284][ T5942] Call Trace:
[  387.910570][ T5942]  <TASK>
[  387.913509][ T5942]  __kasan_check_byte+0x12/0x40
[  387.918394][ T5942]  lock_acquire+0x8d/0x360
[  387.922843][ T5942]  ? lockdep_hardirqs_on+0x9c/0x150
[  387.928057][ T5942]  ? __cancel_work+0x254/0x2e0
[  387.932839][ T5942]  lock_sock_nested+0x48/0x100
[  387.937620][ T5942]  ? l2cap_sock_ready_cb+0x45/0x140
[  387.942834][ T5942]  l2cap_sock_ready_cb+0x45/0x140
[  387.947879][ T5942]  l2cap_conn_start+0x76d/0xe50
[  387.952744][ T5942]  ? __pfx_l2cap_conn_start+0x10/0x10
[  387.958128][ T5942]  ? __lock_acquire+0xab9/0xd20
[  387.962989][ T5942]  ? __pfx___mutex_lock+0x10/0x10
[  387.968028][ T5942]  ? process_scheduled_works+0x9ef/0x17b0
[  387.973764][ T5942]  l2cap_info_timeout+0x68/0xa0
[  387.978635][ T5942]  ? process_scheduled_works+0x9ef/0x17b0
[  387.984375][ T5942]  process_scheduled_works+0xae1/0x17b0
[  387.989949][ T5942]  ? __pfx_process_scheduled_works+0x10/0x10
[  387.995952][ T5942]  worker_thread+0x8a0/0xda0
[  388.000560][ T5942]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  388.006915][ T5942]  ? __kthread_parkme+0x7b/0x200
[  388.011871][ T5942]  kthread+0x711/0x8a0
[  388.015959][ T5942]  ? __pfx_worker_thread+0x10/0x10
[  388.021082][ T5942]  ? __pfx_kthread+0x10/0x10
[  388.025687][ T5942]  ? _raw_spin_unlock_irq+0x23/0x50
[  388.030905][ T5942]  ? lockdep_hardirqs_on+0x9c/0x150
[  388.036198][ T5942]  ? __pfx_kthread+0x10/0x10
[  388.040803][ T5942]  ret_from_fork+0x4bc/0x870
[  388.045408][ T5942]  ? __pfx_ret_from_fork+0x10/0x10
[  388.050539][ T5942]  ? __switch_to_asm+0x39/0x70
[  388.055313][ T5942]  ? __switch_to_asm+0x33/0x70
[  388.060083][ T5942]  ? __pfx_kthread+0x10/0x10
[  388.064687][ T5942]  ret_from_fork_asm+0x1a/0x30
[  388.069464][ T5942]  </TASK>
[  388.072501][ T5942] Modules linked in:
[  388.077424][ T5942] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  388.152963][ T5828] Bluetooth: hci1: command tx timeout
[  388.169626][ T5942] RIP: 0010:kasan_byte_accessible+0x12/0x30
[  388.175829][ T5942] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 00 45 24 09 cc 66 66 66 66 66 66 2e
[  388.213787][ T5942] RSP: 0018:ffffc90004b47788 EFLAGS: 00010202
[  388.220000][ T5942] RAX: dffffc0000000000 RBX: ffffffff891f36d8 RCX: b22f0870249c0500
[  388.228008][ T5942] RDX: 0000000000000000 RSI: ffffffff891f36d8 RDI: 000000000000004c
[  388.236073][ T5942] RBP: ffffffff8a507705 R08: 0000000000000001 R09: 0000000000000000
[  388.246022][ T5942] R10: dffffc0000000000 R11: ffffffff8a5076c0 R12: 0000000000000000
[  388.284286][ T5942] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001
[  388.304619][ T5942] FS:  0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000
[  388.315178][ T5942] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  388.322621][ T5942] CR2: 0000001b2fa09ff8 CR3: 000000005a67a000 CR4: 00000000003526f0
[  388.353045][ T5942] Kernel panic - not syncing: Fatal exception
[  388.359490][ T5942] Kernel Offset: disabled
[  388.363827][ T5942] Rebooting in 86400 seconds..