last executing test programs:

3.14360011s ago: executing program 0 (id=5380):
r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4068, 0xfe4}, {&(0x7f00000012c0)=""/181, 0xb5}], 0x2}, 0x5}], 0x1, 0x12000, 0x0) (async)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) (async)
sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) (async)
setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x0)
unshare(0x28040680) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4)
sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3e45802fc7635a87f1f517727d304a277fdae9db7199cbe757", @ANYRES16=r5, @ANYBLOB="110226bd7000fddbdf251f0000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x4885}, 0x40000) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x81, 0x80, 0xd0f3, 0xe5d5, 0x9}, 0x0, 0x0, &(0x7f0000000200)) (async)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x2) (async)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x40, 0xb, 0x6, 0x11, 0x10, 0xa, 0x1, 0x3, 0x5, 0x1, 0x5, 0xf, 0x9}, 0xe)

2.979501201s ago: executing program 0 (id=5383):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f00000045c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0)
vmsplice(r4, &(0x7f00000007c0)=[{&(0x7f0000001a00)="ce", 0x1}, {&(0x7f0000001a40)="fa", 0x1}], 0x2, 0x1)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x0)
splice(r3, 0x0, r8, 0x0, 0x66, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x64, r1, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf9b}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000010)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x118, 0x2e, 0x701, 0x0, 0x0, {0x20}, [@generic="38915939aff3516af35abc5c77b27e58513b848705b42a08c42eb0dc13b0318a2fed40c2ec832e83d7ae36374b594302ed37fd90c823c8ac8bccf8f0533deeed8b3188ff0aede2e264a3833693d10fc1378c1bdb906f47e03e0b5ab650e4bbb0cf1ceb8945fdac53fe6356fc7a778d267edf4087fbe029ef91ffce3981bdb04140549e5e0fa13777409a3e1cf0c4a93f27056a719242b2d651e18c3903a3feac277e5b77bd48b150f6133b9e102c0d9efd31126bc32f941aabe32d274088a745fdf2fa3b851724268a97e0d9b20b18a61a8e2ffbccfc2e54324789b68b2122299a7a40cd8f1657d11ff81f33bbaa5cbb04321175abd7a2e5049938", @typed={0x8, 0x46, 0x0, 0x0, @u32=0xfffffffc}]}, 0x118}}, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

2.910753205s ago: executing program 2 (id=5384):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0x108}, {&(0x7f00000007c0)="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", 0xffffff50}], 0x4}}], 0x1, 0x4044805)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe64, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
syz_emit_ethernet(0x11, &(0x7f0000001b00)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf0, "c1"}}}}}, 0x0)
splice(r0, 0x0, r3, 0x0, 0x8000000000025a5, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

2.420164639s ago: executing program 1 (id=5394):
r0 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e75a4c00006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

2.075736551s ago: executing program 1 (id=5396):
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x80000)
setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
recvmmsg(r6, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff12, &(0x7f0000000080)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x1, 0x7800, 0x7, 0x7, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}}}}})
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28)

2.075387046s ago: executing program 0 (id=5397):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r3, 0x54d2b226a8e856d5, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[], 0x5c}}, 0x4000)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
readv(r6, &(0x7f0000000780)=[{&(0x7f0000000540)=""/240, 0xf0}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001300))
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'})

2.034982624s ago: executing program 3 (id=5398):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40)

1.978961349s ago: executing program 2 (id=5399):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.827770558s ago: executing program 3 (id=5400):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003308fd906b771ab5030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112", 0xb8)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x6, 0x80, 0x5, 0x0, 0x0, @empty, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x3c20, 0x2f00, 0xfffffffe, 0xb}})

1.827475595s ago: executing program 2 (id=5401):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r1 = socket$unix(0x1, 0x2, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600c7000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64)
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async, rerun: 64)
r3 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r3, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x240040c4) (async, rerun: 64)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="c16d473d990c0180c20097d82e254811e0867b0f2456d160e6bb26009aef12706228e00695ac878f37885d3c6ba12013e8eb8c7c372d1e0cc020753c8953cc571d7339e50698d7c4b9182d628ca02fbcdca2f7057fb2b59277211ff40ed16ccbfd6694dc4855d63bf80f2c367ee764d8af54abdc32f390476736aa7c42009523315027ac7b3cabe30f8e537f6466a6ad11d70c9d7c54797dd25726a7a03617c773dfd9cfa3f2f5dc1e973532308d76dd636ea3465f67a0a268383a730642e975cac603e613efd213bd1a14a090ffd1d161a80a5a111bef9af0aabec2c7198e9f2d6020bff5882ad42412b269b8659ff938e91ef89248fb7351d30013915158bf1fa5b77a375359606b3fbf2d0fa0cb8b0e3ff19f6465fb0a2e76eca1f6c4869119430fee3f008601a9b109dc80f1a5e367404da0993c66204cfbf14f57210ffa67c01ffa04af6f93c81b0adc96918007cf1990a08955c800ab04214ed571c6cfb2f34f508d581ed502c2f0d6e3cfa3eb0032027c83da"], 0x0) (async)
syz_emit_ethernet(0x207, &(0x7f0000000800)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x8, 0x6, "ee841e", 0x1cd, 0x73, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@routing={0x0, 0xa, 0x2, 0x0, 0x0, [@mcast2, @local, @local, @private2, @local]}, @fragment={0x16, 0x0, 0x4, 0x0, 0x0, 0x8, 0x66}, @srh={0x88, 0x2, 0x4, 0x1, 0xdf, 0x0, 0x3, [@local]}, @dstopts={0x3b, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x97}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7f}, @enc_lim={0x4, 0x1, 0x1}]}, @fragment={0x87, 0x0, 0x4, 0x0, 0x0, 0x1f, 0x68}, @routing={0x3a, 0x6, 0x2, 0x71, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote]}, @fragment={0x6c, 0x0, 0xb6, 0x1, 0x0, 0x1b, 0x65}, @fragment={0x54, 0x0, 0x3, 0x1, 0x0, 0x4, 0x68}, @fragment={0x33, 0x0, 0x80, 0x0, 0x0, 0x16, 0x66}], "f8ba78043736ee5ee5f56b0a3ba2471b2d8788c7dc832d8ead4a78004ec3dda095892089f359fd5bfe2031dea0ecbdd68f49eda3a689b9c1ade4510a1aa57f5cb259c410ed02f7882653d48509858c05a4249a5d8fbcfdd7e4d3188ef52b2de66b04f4cd36bd195299d7230d815be0e4f55c21c95070966db88dfa0a2d967b175f952c5d21d90fc2a6983a75d07a2c0715869ee941e71e85ba3a8c4da7dd54be748a8c3c2369402b4bdb2335473e47907edcaa99c1a80a364a961a5ac5c39a23955f48549e90a448f13a7b361eb43f7b91e69b0dfc71bc34cf2737cf22504b14f5a6c5729a"}}}}}, 0x0)
r5 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={<r6=>r5})
bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xf}, 0x10)
bind$xdp(r6, 0x0, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x2400c011)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', r11}, 0x94) (async, rerun: 32)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d617371000000000400028060000180"], 0xdc}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, 0x0, 0x2000c050) (async)
ioctl$SIOCX25SFACILITIES(r4, 0x891b, 0x0)

1.779570791s ago: executing program 0 (id=5402):
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x4000000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080))
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)

1.659759727s ago: executing program 3 (id=5403):
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$rds(0x15, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendto$inet6(r5, &(0x7f0000000400)="25eed0aee8c79f49b53c108367401019c41e56367aa3f23916ddf42df6a5ca47adc0f14939ee362a401f6425b5933ed45ac2e4089f33e87ea4fa53cb6f37fa25746f5805cefb6f78a3d525962f72cff39e3fd9074e3260c84fdfced1c00ba3c8cfcd6220a22b568b9ea6d0e366394ae3490b19d046c22e484b0aa11954836b45d4047ab5007b7b758a16f51f05661f02e1cc365db0bf3b54c3c468a8b5462008bc5ffb9db10bed599639774620b78184ada2301d9d494c2c7622d859213c2d7cc96412661b8f8afb818669f98776b43d6f8c598c00e43ade1e0808a35608882523edf4820dc6b1de1a71cb3dcec7265acaaeab264a1082660423eaf763e3d5e6756b9d2e4115906f4284e5e11388dae00c59c49d5bdc02592fbd96f69a586c8e6f36af50d6de76993809225f4a7dfbd1e7feee4438420c40ee1587ef9279cba9847f32d185f2405d680fd8776df5edc7c149279dc808c693dab77ec90071fff6b0b63f5eaadf5e2118dbeebbeb235b90b8b1b871af2ebc579d404578310950526b7be662a9d89be66d6a02522e7352357c02c3a56f8ff816331bd070041ba511613602956381e6d78b645d02dbc77a188168b6312a0998fe17cfd2940c8e5d39e5a95c50f8b0cee4a9c145b23997f830c08fe2e8af162363f4e14d78fd1275af0192483de50d521d85ed5dd21e51e9fba69d7c208ae998c914f5a2393f0594abb1228eb6df78d022707d2e705854e20338e898482ced2d8b853d8cd972bf7d2df97c7fbc2fffb60e9ec9335bf4e98c6d53244dabe2d1d038c75476b620b9263bda96ec2c61f3306dfcfb9f023c3c9678e0ef245b8c3de356f4c4dfe2d791e213b592f8106467517bd0eb3be609108ac41507edb9029c1975fe0c08e461b66b0850a9faf160e658fd770266fa0c70deab155084869592563fe0c136728a2999c6a5d40891a0de089cec58b1ffe2d40e44513b3d51c8c34935b75a351d0d7f9049e6e488585c819437a4e7b338cd5772a744fe79a21327f919ef4bdb9936a5dccd353a45e2642b8cad7aea0152de1d15577c37eff9fc206115e1ed9612183f5aa55ba23b2e2b77432f038b3cc3f0c189414de1402b002ba4464448d74fac86d1ab674a4eb3d8b6e8af11ee37145026fdedb952097fa069ddd516a76c8a647c0faf5a47a75a7294b0eba99291457e4614f0e985bd363de3593590e6f303e511220ce37e1e66711dac26dadaa5f26ab172ef6c7a2f53ed66c0813867e1d53e769efafac557c3977836517f216c53625d8752073fed32346d274613fef1f874d71a632a48220978d6efbf4fb938a46777f05b10cc71d1996772e2536a22b171e2cabffb9099e73026e56210a6162140681048fa9e55388619d83278ea60e5421eaade222b61237aae0d6684f19e090d88da58d0f8e0b4725c41bfc94a5a066d842f768d7ecc527ae2f8ed793ef072da9258db0d11d36637c4765afed52049524efb6feaaa3239dcce104e0889fb10e6a4b7923b4932fecafb1add915f673426c5d6fe7f0290ee8df38763c3737a8bdb4e78b64dd66831440a5dc4e14ccbd14a13f1c513773b9daf0e06cab2bf564b57c8145af47cc64a539fa8326467b318b2e8df6b6cec365f53a3745f4a6cc3d5bfcbe3f11f48713a9568b0fda6f5d88c0d889862e9f36c4f2664da2341b2002d340a4ffb524fa4ae475c2de3842e9c10354a8aa5ee08dcd538ebe243cd8f502cc2fca6dfc7e84a9c844a9be36e198b78d7ab7161f2f590b61fdf175035dee46c5620c9c02ea6b2f7b5d1edee27ba642832a64f7f2dd88a80937bf92d187a4a3dda7cc981b1cbd09416c418af48af5cfef16adb3ebf966a2fe7cbfb1a42b20eeea1c5f5406e644c4561d6e7009ae32331b5c372eccd802c962a56a994c793b145523b1c52356ffc8d0eef096851598692ca35f3d458890493a9883a61501d0fbc92d4543fa753a33bc954544a128a0e02d229737ca4432f9e013b4eba209b7b043eafd698bd756bd6c931798b07b7f62852ce7b3e38c6a3e3ce45535a8f383b57d3217881e7a62aa933809a6b0934b5e63f5617337971b515ccf38208be292107c1a83af71f1d5cc93cf96c1baaae648fa360f7a1a51eace114ba9b1a05db6dedd55ffe78a0e028c42346252a4e27d659447083f30850b02acda5903ca7605fcc9f22015f4c9ea924e7055d4d983a2cbb20a53cc4124bb300bbfb2628565fd09c6702b2d6dd15cff149c0fe7404a297500c4ca3186ccf88c7f46e3d6bf138ec31ba901c42e5ad349ff36c1572df219a1fca81b2aad102c2767006dd82a741cb6024231101e52bef3c581fe339377167620a8e443fead98c800ad9a25dd40e9af5a789bbafc6d742fa9a1b18e01a87cfa2c914ae559b4e63f9ca50943cfe8143d276ca84c814a0f8e8ee2c0a34a65b09856ac5e78bf92344d9b8394a4c2a60800dae54b10caf40bb09b47526e6707141d4f0a013a6e3567daf6db158b7886d84245b865216e916584149c5b84110dd677a756dc1e76c0d2f4e29fe6a67dd4f550b64936cd642adfff786fb89146b447195162ac8ef682874e20fca482bdce967eeb8c68503ad5ce7374b57df9541e1d7a848d863a5cc6dcbeed060103352e90eed71d60cd2be1ec63d98e25d652656601fd70910491b6f2ec81bec992eed2a5e749c93026375a197d93b88b626320340bdca0061d097505bd608543a25eb455f082700ceb2a4361eed56f1d93c40f84050b91a768830f36e6c5044b0df74cccd22dee667e4c597db72e9d3b9e59684130e07699edc511934a270288d5b52b6179c5abf048ede9d5e0d2d0d845dd63962523622d0564fdfdebd4503304681ec758083c639d11b4e2d47e0e63c5f6e7e96d6f2d6c58bdd8df926879c2047794b343b9ceeefa88e96b762cfc469739c933594627bc7e547f8c3cbeb0903473e8d4b323d5021e80dc4f2b0db7ce6f3da41790a4faf682a21593dfcf2e672e471aeceac0746510485f432ef35f68b5e5b2942525ef5c915236f4893e2281f05c586220041d9685ce8c59315cd783932691ae67e1ad85814af28a253d562b00c8503a0a7bf7dd73ee66641a59606c83fc783966c54cb183a812cfd135c945dcb752c29fae0d55c5b35659361d866b790010eeb98a4909038e6870e4b79c756612761e53831186b840840558dc25361c5ccb919222a9effef676b1e68e7d06a596b712e0adcf2d1972d92d979d95ee44ace518e3f95311cd51f7e48f79775233ae1b2500ca1779ed92cd575e85391d1c7a283d19e008379e9ccd2706f9c191094d31ca0e4e8148776250302774111ef74b980613bd350f6043e8b745f6134336e615e65d491a2c552407a9b87c2aa2883c2d829441ac92ebd11b4425ced9f5d68aeb034a7e6cacb0cc22267cf8f6b3d8a49371b392b0ac9d1845ca7a3e016a3161cd0099e459fdb05719660edaab4f7f2ee5cabe8802222a3acb2551106a63a1b29d5700742619dd758476a95f5b9f98422d54b0104f01f78ca632dae4e7294a4ba6083882ca7f406d97e6049d32fed8864671fb03992e902d463175de1fc784d0b2bc14023f850a3258658755ac00daa52abc1e824527a028b9bff2abd893e58169c736c26fc16e16dfaf132ca505bb9bff4c058763f54f0f36177e510e0ec237dba1f2c5d051158872ae09e7c2177e7cd366fd706b96ad75604c0477b715871602f00e5020d2112536bd255469d94a2ecf73557aa562da2df3aa12224e2f2a1cef614c5320a72bc54c81712205613f9fbe4449722aeaf130585ee52d993b37b18946958894cf2d795770d831fc6097e5795db584dadcafd5faf9352d31d9968a1bc09b32fd126a897dfa18b07910595446c28cffc0b76c046a1db4dbe14bebf0a44d68ddb6d4c073d5e79fb2788a5fdbfa0df9d6084bca32f7bd135ac843c728c040fdf2e10d1cf691508ae64aa3c40d0a198160c3b32d1d02399b509b88c82d77ca6a2bd81adaf671efdd790741a3f67023417fdb734fc697b456af920b1831ba52df170e1c45c3149ee393972a6b9dc97dd4aca5df478c4a593c76ee67ae259fc414bcad85098692f7e9aa660bb27c3ee6e96171ee240919c636aca69d875543d04d6cf48305a785422f4b4f5a99525a0951448acf33e8fc438b32b31eae7169cc82daba924d51708fd2f64c9076cfc7ad03da98051316209d66eb752346adcbc696dfb13000a77fa3655fdfca05b41ca01247c5d8e385cda3c8e2b65f9b34679130f99c81838e3ae716ab9fc9f07f6267d0197a43ed163e5025a11cb9fc1cec83e253d3c8a2d3a8f697ceaa3772bcf37ed8f0151b47e82bf270e549fc5651541a9da77aa128b193bb98f6e023cae58237daa93ddfa781394cd4c4a2519d4a0ea8a60bef2bd0e7bcac51999e6a916ea3a5566845ae498c048a7d036b1bfb1e59ed700421b0019ff1c1aee887b90cc8e1be4669e44dadb3468593b24e4b8d2c3365b95932d00503a82ce2dba2622986a14967a16233924bbf03a33d5a018274f44ccf31959057a696f63b4d5a319b81d8674cfe615807bdad84f79a1bc3a679bfd5fd24bca93a49c355e1d0c4cf42162111413c328b6df45191d5a38ef9e6e525590332eee19e20174ec5ce53e5ff5988a1135bd49dc1ebed1004afd6c77b79c607f074e8a7bd348706921201b49f656a9218cd3073ae9dccee23d99840c18e7d9eb1c6028f94c5e234a2fa05a350ad23e10a6e6ed6a592cf48877a32dc147f32eb05817e0e438d78c8ff4d5ef22d8747f88ebe57b96ed8a4d00729dd659361bf9198477562a4daec9f60c7a73f18f537db5e43c75edd13c98d224a614fe684835bda1e84cf441fa3240eab03e241fd4f84e594cc82a6acc80ecc74e6ca93e3d9706075cda806a6da92a73a57b5af5be2d8e97500dd2c920fc36d19b4f8673b45fd13ea736aeeaaa5872f6d95ce3fd560a9377f12e0b2440ff9f2986e5c1495f66e7e45cf4822e33670dd150e184c30ee769d9df212ca8a73928188ed025759260b7bcdfe21ff326bb01641305d874316c9d28889fbbdedd1fdf2174558625b3bf161c9fd312b2e41223e03939e04ee3e9fd6779ef6155279ab275949a0e7b84e54daa6eff264e079d5e41744234b86e712f48fd56b1481ed9e7a1c074b0f1a1b3a4c5286fa8d07df3c9eb161401286d09881bd52cd5ac0dd6d84bab3fd907d0fc572c8e4e00060cf6274026e3c3568bc6df507ee2c407d6c77e8a0fca12c40a5e590d4b0ad6a534929986adf883937893fe8a61407341b314796124652d3f94962ed1b25126d1e63aebbe4d2b1c148e98c570838212e253049496da922ea734b19f27a4f17e46a70e2d5a4fa97d2b5df5e0fe0795183e1e6d9be3726909d408dbda8332e59c95180aedfdbca78843fb062f9ed25f5df9cb7635a2214e6c7471913fe8f31b4458133c3cec6d6976e837c8d3da4556b257cb016d5cd0d7a832a4741c2b5693d162ca14f697b4f490a606951b0af34a1de42008e85caeecfad118ed787dd27829fab887fb07bc096a079ac23f78cd6258849e5f30626f222de9015925e944ce7933cf580578a6e14aab46e1a23e1af9a82dfb946ecb6de82bb7843b1ff731631a9c9466bc547a32a38744934a3e88e1f761f23504375d062e9f8d921776e18b8e210aaa20f4d416f481bc497a6a47a022636ab85f91d34b94654a4b39aebc77c40c1493ee44d5ffb2039f830bebefcf5b4ac693d67cc7f9e7bbc363fc3cd888ff85e749e0415ecc5fc70297722b9005aebc", 0x1000, 0x4000, 0x0, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="a7", 0x1}], 0x1}}], 0x1, 0x10000895)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r4, 0xf6690000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000001c0)=0x40)

1.603791742s ago: executing program 2 (id=5404):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 2)

1.520567902s ago: executing program 4 (id=5405):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x48970, 0x10003}, [@IFLA_LINKMODE={0x5, 0x11, 0x40}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffc, 0x2}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000854)
r1 = socket(0x1e, 0x4, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}})

1.041285998s ago: executing program 2 (id=5406):
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000040)=0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x131080, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad6706000002000000070200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f750000000000006154000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec826da90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92ce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000000d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f638684bba17b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de683000"/1782], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @sched_cls}, 0x94)

926.421124ms ago: executing program 2 (id=5407):
unshare(0x2040400)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r1, &(0x7f00000004c0)='W', 0x1, 0x8005, &(0x7f0000000380)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0xc}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000240))
sendto$inet6(r1, &(0x7f00000007c0)="b928f10befa11d21f908763b44b2965bce9e2cb1069a2b111e50502ff22f29ebc62c43b3965e3cf5cc4ceb2f59f62a3c4dd5afb21e1ee10e647b6ad1074fefb6c07a91ec1a4cb59274b0c8a7911fe0f2a10042f911be9a1956aadc54d2107b7431b5e201d54ea7aeffe9ff22d0941f", 0x6f, 0x0, &(0x7f00000003c0)={0xa, 0x4e21, 0x5, @loopback, 0xfffff720}, 0x1c)
bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710}, 0x10)
listen(r2, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r4=>0x0})
connect$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x3, {0x0, 0xf0, 0x1}, 0xff}, 0x18)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="900000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000008000740000000003800068014000400fe88000000000000f2e9c300000000000000010c000380060002000000000014000500ff0200000000000000000000002c0bae22864238a24b85005286cac6bbc18cf4fc809499c617b79bde012cabfb5b5312ac63ad4d8cd9ce32fcb65ce4bba611fb15"], 0x90}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRESHEX=r0, @ANYBLOB="010000000000000000f502000000400001"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r8 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)="f48f2d4f6622b8e565f572dbc604f194ecf28cf95ddf9a8de9000000002bfe1393e8966273f4d669dbb59ceeda1639f705a9e1c53d4ff012ed00000000a1acad4cd99e971dbad8c12c2a272d6be5f0a1bcddcc2ebf14b078e12fcac97f4faccbaf16c4b597d21df1cd728bb23898c113e8f00e968999f29a44574e66c3189b6b6f005d4addb28e1dc020558dbe60851e58a4477ff74e04", 0x97}], 0x1}}], 0x1, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r9, 0x0, 0x20000140)
recvmsg$kcm(r8, &(0x7f0000000200), 0x0)
unshare(0x6a040000)

925.951682ms ago: executing program 4 (id=5408):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x6}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a, 0x0, 0x8}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = socket$inet6(0xa, 0x80000, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0xe, 0x4)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_perm_addr})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000900)={@remote, @dev, <r8=>0x0}, &(0x7f0000000940)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r3, 0x10, 0x5, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x4004840)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="27f670d064", 0x5}], 0x5}}], 0x1, 0x80c0)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r9, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}]}}, 0x0, 0x26, 0x0, 0x9}, 0x28)
listen(r9, 0x0)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r11 = accept4(r9, 0x0, 0x0, 0x0)
sendmmsg(r10, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000680), 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f4b", 0xa7}], 0x1}}], 0x2, 0x4008)
recvmsg$kcm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})

864.485144ms ago: executing program 0 (id=5409):
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) (async, rerun: 64)
r0 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x74, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180d7dcddf6123d6190b9c20000000026dcf6437d651d916d6eba9076f3f91d00000000007608004500002400400000007390dee5000300e0000079117a1d6e72fd7425dfd84feaa488f27533ce65a0887a211a491ee08e7bc67be2f830f42f3130b484bc5ece961e9af3a5c9bd1c4fd946f368a4ae8ded43d8f824e0de4740578e9b94338cd3c9020f249ad3ab4c6ea217997fd80dcab2ddd446dbb417070c2f23ce46959cb4813f040913b502a03d9d884a2aacde11ba91925d5a2ead9ef3fd18a879b6b033b1cadce5e69b6d0a1f813c56455fa69ae6c6b406a6ae"], 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xffff, 0xe}, {0xd, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x3, 0xfd, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000991020601010000000000010a000000000007192bff2d48724ed1d8130519f5b396bb8f0680d164702a21a6b4801b5962487f73dd70539b0f68d359415860c872b47f7614cbf70533ca349afc8efd262de5cc873aa6bb6ab5016d568321000f784097b2cc022566a6730ae882bd8521f100"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r6, @ANYRES16=r1, @ANYRESHEX=r9], 0x48}, 0x1, 0x0, 0x0, 0x20000860}, 0x4008800) (async, rerun: 64)
r12 = socket(0x840000000002, 0x3, 0xfa) (rerun: 64)
setsockopt$inet_msfilter(r12, 0x0, 0x29, 0x0, 0x20000) (async)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000000180)={0x9, [0x6, 0x800, 0x3, 0x6, 0x0, 0x101, 0x1, 0xec99, 0x9989]}, &(0x7f0000000300)=0x16)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="08002cbd7000ffdbdf2514000000080009000100010085000b0001000000c63689f62b8f6d4bc13d01f1ee090ba51f1590df9c97c71b68e2a80b28542a8252ce871652b27aab8534e128fdaca84a434d21c789bd52247913dd1f95045f24087fb82775de01bd4bfa32447358c3e68cf5c988cf6f5320f80026dcde3148208cc093a682b041a67636d4f6281386660def1c0f2f23e672c8830a4b21776dc1be275f7ddab006912cbea7344727b01a9c93610ba6d9df20f9f1b5d1cbbb85f18625bdc91e8a"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004081)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d00010026bdb51fb9cbb7834c03aff1e529bda17000fcdb7338c4190b4faffc4a6dd6d9dac5871aedb80ff1f09baee6e9ccf2da51b876a8d04bc983f876dabb04e9a3524e0a1ddc5a5efc641cd32080b16e2eb7bbfd272801077de2186773b5cee37c682419ceb815e00c8f8cc8bde08ccfaf236c39697c46fc9322495c5ccd0adf5375fbbdeec54b3d7e027175f2fa25b987dde4fc6afaab8eb18fe7118e174995ab408b9f6c7eab808fc4e7cfb82291de29b717042b57b2b580f41e3904290aa2bf1114e0be99"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r5, 0x3, {0x1, 0xf0, 0x3}, 0xfe}, 0x18) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})

651.177834ms ago: executing program 1 (id=5410):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40)

545.938627ms ago: executing program 3 (id=5411):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

467.732612ms ago: executing program 1 (id=5412):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x840)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @local, 0x9}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) (async)
r1 = socket$rxrpc(0x21, 0x2, 0xa) (async)
epoll_create1(0x0) (async, rerun: 64)
socket(0x1d, 0x2, 0x6) (rerun: 64)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async, rerun: 64)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 64)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000100)={0x20, 0x0, "6e295cd9ff5f4ccaecf24772b55a9427"})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0x32600) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) (rerun: 64)
r5 = accept4(r4, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0xffffb000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x18}, 0x2, 0x2, 0x3, 0x2, 0x0, 0x100}, 0x20)
bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (rerun: 32)

406.969312ms ago: executing program 0 (id=5413):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000180)=0x2, 0x4)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, 0xff7f}}, 0x20}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, 0x0, 0x840)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

405.327263ms ago: executing program 4 (id=5414):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000009c0)={&(0x7f0000000400), 0x0, 0x0, 0x0, 0x101, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f086dd347dc959", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_TID={0xc}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000800)

322.068308ms ago: executing program 3 (id=5415):
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006114700000000000a6000b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r4, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}})
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r9, 0x1f4d2000)
sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
close(0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbb3bbbbbbaaaaaaaaaaaa08060001080006040009aaaa9b9693aaaaaa32e00000010000000000000a010100"], 0x0)
sendmmsg$sock(r5, &(0x7f00000007c0)=[{{&(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x2, 0x1, 0x0, {0xa, 0x4e21, 0xffff91f4, @remote, 0x80}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)="643fe8e69131caa4f93b50f19eeadb606e22adf34b90cdd74217a9204678e245c23f118e8aa922536a59cdb03e74713f3d8543f90722e1de0d4808595046cc5437d33947d865e530f388b0b44c86ef1dab7cec5e515170bc71018000004a5af7c7bce049280ca00bd411a8a2e7ac465c3fe18ee4ea358002c7dc081c3e734695af01e18a44279fe204a61b5069933dfdcf61e125fb0e822b080fde493567b86836683f9994c5", 0xa6}], 0x1, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x88f}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @timestamping={{0xffffffffffffff28, 0x1, 0x25, 0xfffffffb}}, @txtime={{0x0, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0xfffffffffffffe77, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x77}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xdf}}], 0x1, 0x1)
getsockname$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev}, &(0x7f00000003c0)=0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)

321.880062ms ago: executing program 4 (id=5416):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 3)

275.394709ms ago: executing program 4 (id=5417):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) (async)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, r2, 0x829, 0x70bd2c, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x40240c4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

221.09703ms ago: executing program 1 (id=5418):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000080), 0x8, r1}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000080)="b8fca40fee95a6bebc7294b4cee32b05d0df83ca01ca99a0134c90d3aff75fee8d847f52bd", &(0x7f0000000180), &(0x7f00000001c0)="b12391d97312c3a02dde215d75bd1d34c2a7a3ec97ae8968ccd044b369809c87cdfcb72f26e8", &(0x7f0000000200)="81a47a719de688406e626481b496c2c5ad7b666616f78c18a408bafc75f6", 0x3, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
sendmmsg$sock(r0, &(0x7f0000000000)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x4)

67.874575ms ago: executing program 1 (id=5419):
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x4000000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080))
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)

67.441887ms ago: executing program 4 (id=5420):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_getnexthop={0x1c, 0x6a, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r1, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r3=>0x0})
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r6 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000))
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0xffc, @private0, 0x7, 0x83}, 0x80, 0x0}, 0x800)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="e5ef0000", @ANYRES16=r2, @ANYBLOB="00042abd7000fbdbdf250e00000008000e0004000000080001000100000008000300", @ANYRES32=r3, @ANYBLOB="0800010003000000"], 0x34}, 0x1, 0x0, 0x0, 0x48804}, 0x4000000)

0s ago: executing program 3 (id=5421):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000221000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029400000001e0a01080000000000000000070000060900020073797a31000000000900010073797a30000000001400038010000080040001800800034000000002140000001000010000000000000000000084000a"], 0xc4}}, 0x0)
ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000180))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x98, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xedb3, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9302, 0xe87c}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x98}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendto$inet6(r7, &(0x7f0000000480)="a1441319907e64f86675f4604276c8e6d402e37e2aa6834e8d8db82e7ed3e46b919cb017b6937d2ae12bc1d0cd06e441da4d08e06f4af1236c53635020fcedd45b13cf8a2ea2e6438030e3a596104d0c917d824500967ab227813e4915af18cadb89f619fc1fa21ddda61e4929775727a9f15f4beb43276c72ed2edb5541e473d59039eb09400f147d3fe39d3f3e205d524a3dc6c2c39cf9eef68915d7c365f302373dfb3eec7af5632034bedc05ea45eafbc9cab250c5dbfd740da42dc3452a101e5bd3f7b843caaff5deb965ad53291578628dc32ccdb328fa", 0xda, 0x24048840, &(0x7f00000002c0)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}}, 0x0)

kernel console output (not intermixed with test programs):

es in process `syz.2.3772'.
[  350.665340][T18448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.678497][T18448] syzkaller0: entered promiscuous mode
[  350.685703][T18448] syzkaller0: entered allmulticast mode
[  350.743519][T18448] tipc: Resetting bearer <eth:syzkaller0>
[  350.842071][T18447] tipc: Resetting bearer <eth:syzkaller0>
[  350.864056][T18447] tipc: Disabling bearer <eth:syzkaller0>
[  350.898790][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3774'.
[  350.912536][T18455] netlink: set zone limit has 4 unknown bytes
[  350.913848][T18462] netlink: del zone limit has 4 unknown bytes
[  350.935464][T18461] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3776'.
[  351.126152][T18467] lo speed is unknown, defaulting to 1000
[  351.167567][ T5978] IPVS: starting estimator thread 0...
[  351.171666][T18476] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  351.174319][T18478] netlink: 'syz.4.3781': attribute type 9 has an invalid length.
[  351.288757][T18478] batadv1: entered promiscuous mode
[  351.300870][T18482] IPVS: using max 34 ests per chain, 81600 per kthread
[  351.352555][T18488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.432717][T18491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  351.511104][T18488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.594988][T18488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.653436][T18488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.800633][   T61] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  351.863418][   T61] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  351.878618][   T61] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  351.893187][   T61] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  352.146295][T18528] sock: sock_set_timeout: `syz.4.3794' (pid 18528) tries to set negative timeout
[  352.236437][T18531] netlink: 'syz.0.3795': attribute type 10 has an invalid length.
[  352.535954][T18537] openvswitch: netlink: Flow actions attr not present in new flow.
[  352.715612][T18517] Bluetooth: hci1: Opcode 0x080f failed: -4
[  352.816867][T18543] syzkaller0: entered promiscuous mode
[  352.838862][T18543] syzkaller0: entered allmulticast mode
[  353.035662][T18560] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  353.268072][T18577] sctp: [Deprecated]: syz.4.3811 (pid 18577) Use of struct sctp_assoc_value in delayed_ack socket option.
[  353.268072][T18577] Use struct sctp_sack_info instead
[  353.301694][T18577] sctp: [Deprecated]: syz.4.3811 (pid 18577) Use of struct sctp_assoc_value in delayed_ack socket option.
[  353.301694][T18577] Use struct sctp_sack_info instead
[  353.382905][T18582] syzkaller0: entered promiscuous mode
[  353.398769][T18582] syzkaller0: entered allmulticast mode
[  353.434655][T18587] netlink: 'syz.3.3814': attribute type 13 has an invalid length.
[  353.444269][T18587] netlink: 'syz.3.3814': attribute type 17 has an invalid length.
[  353.528208][T18587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  353.567991][T18598] syzkaller0: entered promiscuous mode
[  353.575066][T18598] syzkaller0: entered allmulticast mode
[  353.643704][T18604] __nla_validate_parse: 12 callbacks suppressed
[  353.643728][T18604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3817'.
[  353.758017][T18612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3820'.
[  353.768397][T18612] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3820'.
[  353.883376][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3821'.
[  353.925467][T18615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.979638][ T5877] Bluetooth: hci1: command 0x080f tx timeout
[  354.085325][T18634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3829'.
[  354.094417][T18631] macvlan2: entered allmulticast mode
[  354.097152][T18634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3829'.
[  354.127596][T18632] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20002
[  354.131284][T18631] veth1_vlan: entered allmulticast mode
[  354.198622][T18631] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  354.273757][T18638] lo speed is unknown, defaulting to 1000
[  354.330869][T18642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3830'.
[  354.351721][T18642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3830'.
[  354.514595][T18650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  354.680687][T18650] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  354.747896][T18651] syzkaller0: entered promiscuous mode
[  354.856472][T18657] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3833'.
[  355.053906][T18649] tipc: Resetting bearer <eth:syzkaller0>
[  355.076165][T18649] tipc: Disabling bearer <eth:syzkaller0>
[  355.102537][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3837'.
[  355.113401][T18668] FAULT_INJECTION: forcing a failure.
[  355.113401][T18668] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  355.173043][T18668] CPU: 0 UID: 0 PID: 18668 Comm: syz.1.3836 Not tainted syzkaller #0 PREEMPT(full) 
[  355.173075][T18668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  355.173090][T18668] Call Trace:
[  355.173099][T18668]  <TASK>
[  355.173109][T18668]  dump_stack_lvl+0x189/0x250
[  355.173142][T18668]  ? __pfx____ratelimit+0x10/0x10
[  355.173174][T18668]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.173198][T18668]  ? __pfx__printk+0x10/0x10
[  355.173226][T18668]  ? __might_fault+0xb0/0x130
[  355.173254][T18668]  ? __pfx_get_page_from_freelist+0x10/0x10
[  355.173277][T18668]  ? rcu_is_watching+0x15/0xb0
[  355.173298][T18668]  should_fail_ex+0x414/0x560
[  355.173327][T18668]  _copy_from_iter+0x1db/0x16f0
[  355.173349][T18668]  ? unwind_next_frame+0xa5/0x2390
[  355.173374][T18668]  ? policy_nodemask+0x27c/0x720
[  355.173401][T18668]  ? __pfx__copy_from_iter+0x10/0x10
[  355.173440][T18668]  ? set_page_refcounted+0xa0/0x1e0
[  355.173469][T18668]  ? page_copy_sane+0x4e/0x280
[  355.173491][T18668]  copy_page_from_iter+0xdd/0x170
[  355.173515][T18668]  tun_get_user+0x1d7b/0x3e20
[  355.173546][T18668]  ? tun_get_user+0x6f6/0x3e20
[  355.173572][T18668]  ? aa_file_perm+0x44d/0x1550
[  355.173594][T18668]  ? __pfx_tun_get_user+0x10/0x10
[  355.173614][T18668]  ? _parse_integer_limit+0x1ae/0x1f0
[  355.173648][T18668]  ? kstrtoull+0x12f/0x1d0
[  355.173683][T18668]  ? ref_tracker_alloc+0x318/0x460
[  355.173712][T18668]  ? get_pid_task+0x20/0x1f0
[  355.173738][T18668]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  355.173770][T18668]  ? tun_get+0x1c/0x2f0
[  355.173790][T18668]  ? tun_get+0x1c/0x2f0
[  355.173809][T18668]  ? rcu_is_watching+0x15/0xb0
[  355.173828][T18668]  ? tun_get+0x1c/0x2f0
[  355.173847][T18668]  ? lock_release+0x4b/0x3e0
[  355.173878][T18668]  ? common_file_perm+0x1b5/0x230
[  355.173911][T18668]  ? tun_get+0x1c/0x2f0
[  355.173933][T18668]  tun_chr_write_iter+0x113/0x200
[  355.173955][T18668]  vfs_write+0x5c9/0xb30
[  355.173985][T18668]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  355.174006][T18668]  ? __pfx_vfs_write+0x10/0x10
[  355.174038][T18668]  ? __fget_files+0x2a/0x420
[  355.174061][T18668]  ksys_write+0x145/0x250
[  355.174090][T18668]  ? __pfx_ksys_write+0x10/0x10
[  355.174115][T18668]  ? rcu_is_watching+0x15/0xb0
[  355.174139][T18668]  ? rcu_is_watching+0x15/0xb0
[  355.174160][T18668]  do_syscall_64+0xfa/0x3b0
[  355.174181][T18668]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.174202][T18668]  ? clear_bhb_loop+0x60/0xb0
[  355.174225][T18668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.174247][T18668] RIP: 0033:0x7feac7d8d69f
[  355.174267][T18668] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  355.174288][T18668] RSP: 002b:00007feac8bd8000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  355.174311][T18668] RAX: ffffffffffffffda RBX: 00007feac7fb5fa0 RCX: 00007feac7d8d69f
[  355.174328][T18668] RDX: 0000000000000036 RSI: 0000200000001e80 RDI: 00000000000000c8
[  355.174342][T18668] RBP: 00007feac8bd8090 R08: 0000000000000000 R09: 0000000000000000
[  355.174356][T18668] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001
[  355.174369][T18668] R13: 00007feac7fb6038 R14: 00007feac7fb5fa0 R15: 00007ffcaa27f1f8
[  355.174394][T18668]  </TASK>
[  355.573613][T18673] sctp: [Deprecated]: syz.0.3840 (pid 18673) Use of int in maxseg socket option.
[  355.573613][T18673] Use struct sctp_assoc_value instead
[  355.675350][T18676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  355.690993][T18676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.732034][T18676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.747334][T18676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.774612][T18667] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.786846][T18667] batadv_slave_1: entered promiscuous mode
[  355.801717][T18689] bond0: entered promiscuous mode
[  355.807703][T18689] bond_slave_0: entered promiscuous mode
[  355.815126][T18689] bond_slave_1: entered promiscuous mode
[  355.822453][T18689] dummy0: entered promiscuous mode
[  355.832578][T18689] bond0: left promiscuous mode
[  355.837713][T18689] bond_slave_0: left promiscuous mode
[  355.844278][T18689] bond_slave_1: left promiscuous mode
[  355.851489][T18689] dummy0: left promiscuous mode
[  355.990400][T18696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  355.998457][T18696] IPv6: NLM_F_CREATE should be set when creating new route
[  356.006121][T18696] IPv6: NLM_F_CREATE should be set when creating new route
[  356.013643][T18696] IPv6: NLM_F_CREATE should be set when creating new route
[  356.066711][T18696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  356.165135][T18707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  356.272096][T18709] syz_tun: entered promiscuous mode
[  356.278880][T18709] vlan1: entered promiscuous mode
[  356.300346][   T94] block nbd2: Possible stuck request ffff8880253e5080: control (read@0,1024B). Runtime 60 seconds
[  356.312989][   T94] block nbd2: Possible stuck request ffff8880253e5240: control (read@1024,1024B). Runtime 60 seconds
[  356.325977][   T94] block nbd2: Possible stuck request ffff8880253e5400: control (read@2048,1024B). Runtime 60 seconds
[  356.338580][   T94] block nbd2: Possible stuck request ffff8880253e55c0: control (read@3072,1024B). Runtime 60 seconds
[  356.498453][T18711] netlink: 'syz.1.3848': attribute type 12 has an invalid length.
[  356.750295][T18728] tipc: Enabling of bearer <“dp:s> rejected, media not registered
[  356.898893][T18732] netem: change failed
[  357.061695][T18739] netlink: zone id is out of range
[  357.224639][T18750] netlink: 'syz.4.3860': attribute type 29 has an invalid length.
[  357.262265][T18750] netlink: 'syz.4.3860': attribute type 29 has an invalid length.
[  357.407915][T18752] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  358.494916][T18794] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10
[  358.590025][T18792] syzkaller0: entered promiscuous mode
[  358.595832][T18792] syzkaller0: entered allmulticast mode
[  358.677513][  T886] IPVS: starting estimator thread 0...
[  358.769129][T18802] IPVS: using max 33 ests per chain, 79200 per kthread
[  358.792330][T18801] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  359.004916][T18812] : entered promiscuous mode
[  359.101939][T18815] netlink: 'syz.0.3878': attribute type 1 has an invalid length.
[  359.209708][T18815] __nla_validate_parse: 5 callbacks suppressed
[  359.209729][T18815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3878'.
[  359.294346][T18826] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3881'.
[  359.340836][T18829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3882'.
[  359.496783][T18840] vlan0: entered promiscuous mode
[  359.523864][T18841] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  359.531392][T18841] IPv6: NLM_F_CREATE should be set when creating new route
[  359.538677][T18841] IPv6: NLM_F_CREATE should be set when creating new route
[  359.546327][T18841] IPv6: NLM_F_CREATE should be set when creating new route
[  359.573800][T18844] _ÐZ`Ô€@S: entered promiscuous mode
[  359.599955][T18839] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3886'.
[  359.619145][T18839] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  359.751911][T18846] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  359.762464][T18839] netlink: 'syz.1.3886': attribute type 2 has an invalid length.
[  359.795064][T18853] netlink: 'syz.4.3889': attribute type 21 has an invalid length.
[  360.000552][T18865] netlink: 'syz.2.3893': attribute type 1 has an invalid length.
[  360.093235][T18868] openvswitch: netlink: IP tunnel dst address not specified
[  360.135456][T18872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3899'.
[  360.172249][T18875] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3898'.
[  360.195839][T18878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3900'.
[  360.215926][T18873] vlan1: entered allmulticast mode
[  360.226738][T18873] bond2: entered allmulticast mode
[  360.267764][T18883] syzkaller0: entered promiscuous mode
[  360.284443][T18883] syzkaller0: entered allmulticast mode
[  360.516973][T18903] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3910'.
[  360.561800][T18903] netlink: 'syz.0.3910': attribute type 1 has an invalid length.
[  360.657651][T18913] vlan1: entered promiscuous mode
[  360.846004][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3912'.
[  360.908178][T18913] bridge_slave_1: left allmulticast mode
[  360.914962][T18913] bridge_slave_1: left promiscuous mode
[  360.937813][T18913] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.976608][T18913] ¾x9ÿ: left allmulticast mode
[  360.988614][T18913] ¾x9ÿ: left promiscuous mode
[  360.996663][T18913] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  361.077474][T18930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3917'.
[  361.245035][T18940] syzkaller0: entered promiscuous mode
[  361.264015][T18940] syzkaller0: entered allmulticast mode
[  361.406439][T18945] netlink: 'syz.2.3922': attribute type 10 has an invalid length.
[  361.441855][T18945] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  361.547103][T18946] netlink: 'syz.1.3921': attribute type 1 has an invalid length.
[  361.586093][T18953] netlink: 'syz.2.3926': attribute type 10 has an invalid length.
[  361.595556][T18953] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.603421][T18953] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.617295][T18953] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.624798][T18953] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.632565][T18953] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.639937][T18953] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.652229][T18953] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  361.725922][T18960] lo speed is unknown, defaulting to 1000
[  361.853966][T18963] lo speed is unknown, defaulting to 1000
[  362.379984][T18994] netlink: 'syz.3.3932': attribute type 13 has an invalid length.
[  362.389763][T18994] netlink: 'syz.3.3932': attribute type 17 has an invalid length.
[  362.414775][T18994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  362.464513][T19000] lo speed is unknown, defaulting to 1000
[  362.776038][T18990] lo speed is unknown, defaulting to 1000
[  362.851947][T19015] netlink: 'syz.4.3938': attribute type 13 has an invalid length.
[  362.865276][T19015] netlink: 'syz.4.3938': attribute type 17 has an invalid length.
[  362.922231][T19015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  363.332490][T19024] lo speed is unknown, defaulting to 1000
[  363.502616][   T61] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  363.526682][   T61] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  363.575512][   T61] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  363.657844][   T61] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  363.997320][T19071] lo speed is unknown, defaulting to 1000
[  364.229915][T19082] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  364.264719][T19084] netlink: 'syz.1.3954': attribute type 10 has an invalid length.
[  364.374460][T19087] syzkaller0: entered promiscuous mode
[  364.386665][T19087] syzkaller0: entered allmulticast mode
[  364.408337][T19090] __nla_validate_parse: 263 callbacks suppressed
[  364.408362][T19090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3956'.
[  364.440245][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3956'.
[  364.668125][T19091] netlink: 'syz.3.3950': attribute type 13 has an invalid length.
[  364.683745][T19096] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3959'.
[  364.699867][T19091] netlink: 'syz.3.3950': attribute type 17 has an invalid length.
[  364.720872][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3959'.
[  364.737429][T19093] netlink: 'syz.4.3957': attribute type 10 has an invalid length.
[  364.936365][T19091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  365.036570][T19099] lo speed is unknown, defaulting to 1000
[  365.618008][T19137] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  365.666888][T19139] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode
[  365.675956][T19139] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode
[  365.977505][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3971'.
[  366.178099][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3975'.
[  366.417387][T19177] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  366.469184][T19177] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  366.681689][T19197] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3984'.
[  366.715319][T19177] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  366.742851][T19177] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  366.812964][T19177] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  366.850501][T19205] syzkaller1: entered promiscuous mode
[  366.859874][T19177] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  366.873032][T19205] syzkaller1: entered allmulticast mode
[  366.960608][T19212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3989'.
[  367.035846][T19177] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  367.040825][T19211] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3990'.
[  367.056331][T19177] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  367.149002][T19219] syzkaller0: entered promiscuous mode
[  367.160704][T19219] syzkaller0: entered allmulticast mode
[  367.194042][T19212] lo speed is unknown, defaulting to 1000
[  367.300389][T19223] validate_nla: 1 callbacks suppressed
[  367.300411][T19223] netlink: 'syz.3.3993': attribute type 1 has an invalid length.
[  367.566136][T19241] netlink: 'syz.1.3998': attribute type 3 has an invalid length.
[  367.717525][T19251] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[  367.916188][T19265] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4004'.
[  368.042280][T19276] lo speed is unknown, defaulting to 1000
[  368.319322][T19277] lo speed is unknown, defaulting to 1000
[  368.391606][T19287] netlink: 'syz.3.4010': attribute type 1 has an invalid length.
[  368.918563][T19304] 8021q: VLANs not supported on ip6_vti0
[  369.313189][T19312] netlink: 'syz.4.4017': attribute type 1 has an invalid length.
[  369.774512][T19323] netlink: 'syz.1.4021': attribute type 1 has an invalid length.
[  369.808972][T19323] bond4: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  369.824625][T18117] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  369.825876][T19323] 8021q: adding VLAN 0 to HW filter on device bond4
[  369.855824][T19323] bond0: (slave dummy0): Releasing backup interface
[  369.869298][T19323] bridge_slave_0: left allmulticast mode
[  369.875633][T19323] bridge_slave_0: left promiscuous mode
[  369.882606][T19323] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.896831][T19323] bridge_slave_1: left allmulticast mode
[  369.904309][T19323] bridge_slave_1: left promiscuous mode
[  369.911441][T19323] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.927345][T19323] bond0: (slave bond_slave_0): Releasing backup interface
[  369.940732][T19323] bond0: (slave bond_slave_1): Releasing backup interface
[  369.958471][T19323] team0: Port device team_slave_0 removed
[  369.965014][   T61] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  369.980009][T19323] team0: Port device team_slave_1 removed
[  369.987521][T19323] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.996358][T19323] batman_adv: batadv0: Removing interface: batadv_slave_0
[  370.006019][T19323] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  370.014235][T19323] batman_adv: batadv0: Removing interface: batadv_slave_1
[  370.028904][T19323] bond4: (slave ip6gretap0): Removing an active aggregator
[  370.037881][T19323] bond4: (slave ip6gretap0): Releasing backup interface
[  370.197504][T19326] __nla_validate_parse: 7 callbacks suppressed
[  370.197541][T19326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4022'.
[  370.375054][T19335] netlink: 'syz.3.4025': attribute type 10 has an invalid length.
[  370.434557][T19340] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  370.517079][T19348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.618574][T19355] netlink: 360 bytes leftover after parsing attributes in process `syz.0.4031'.
[  370.685243][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4030'.
[  371.302246][T19381] bridge_slave_0: left allmulticast mode
[  371.310076][T19381] bridge_slave_0: left promiscuous mode
[  371.316715][T19381] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.327308][T19381] bridge_slave_1: left allmulticast mode
[  371.334198][T19381] bridge_slave_1: left promiscuous mode
[  371.342291][T19381] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.347822][T19382] netlink: 'syz.3.4040': attribute type 33 has an invalid length.
[  371.360808][T19382] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4040'.
[  371.376209][T19381] bond0: (slave bond_slave_0): Releasing backup interface
[  371.393101][T19381] bond0: (slave bond_slave_1): Releasing backup interface
[  371.410218][T19381] team0: Port device team_slave_0 removed
[  371.425547][T19381] team0: Port device team_slave_1 removed
[  371.434449][T19381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  371.447265][T19381] batman_adv: batadv0: Removing interface: batadv_slave_0
[  371.466467][T19381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  371.474855][T19381] batman_adv: batadv0: Removing interface: batadv_slave_1
[  371.507908][T19381] bond2: (slave veth3): Releasing active interface
[  371.540840][T19383] team0: Port device vlan0 added
[  371.547077][T19386] tipc: Enabled bearer <eth:team0>, priority 0
[  372.092713][T19428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4051'.
[  372.163750][T19432] netlink: 'syz.3.4054': attribute type 4 has an invalid length.
[  372.174300][T19432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4054'.
[  372.232271][T19435] syzkaller0: entered promiscuous mode
[  372.238755][T19435] syzkaller0: entered allmulticast mode
[  372.400834][T19445] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  372.527216][T19454] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4061'.
[  372.537971][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4061'.
[  372.554002][T19454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4061'.
[  372.685408][T19464] lo speed is unknown, defaulting to 1000
[  372.915755][T19471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4066'.
[  373.055524][T19485] syzkaller0: entered promiscuous mode
[  373.062223][T19485] syzkaller0: entered allmulticast mode
[  373.218049][T19488] sctp: [Deprecated]: syz.1.4069 (pid 19488) Use of int in max_burst socket option.
[  373.218049][T19488] Use struct sctp_assoc_value instead
[  373.224643][T19489] netlink: 'syz.3.4070': attribute type 3 has an invalid length.
[  374.251276][T19530] syzkaller0: entered promiscuous mode
[  374.264876][T19530] syzkaller0: entered allmulticast mode
[  374.446012][T19535] syzkaller0: entered promiscuous mode
[  374.452752][T19535] syzkaller0: entered allmulticast mode
[  374.846067][T19552] sctp: [Deprecated]: syz.4.4087 (pid 19552) Use of int in max_burst socket option.
[  374.846067][T19552] Use struct sctp_assoc_value instead
[  375.201714][T19572] __nla_validate_parse: 3 callbacks suppressed
[  375.201738][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4095'.
[  375.616911][T19590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4102'.
[  375.934843][T19605] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4106'.
[  375.979592][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4107'.
[  376.008461][T19607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.014668][T19605] lo speed is unknown, defaulting to 1000
[  376.245005][T19627] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4111'.
[  376.282176][T19627] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4111'.
[  376.295196][T19627] netlink: 'syz.1.4111': attribute type 5 has an invalid length.
[  376.306663][T19627] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4111'.
[  376.372787][T19636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4115'.
[  376.393749][T19636] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4115'.
[  376.427089][T19636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4115'.
[  376.514815][T19636] team0: Port device vlan0 removed
[  376.538911][T13553] tipc: Resetting bearer <eth:team0>
[  376.558980][T19637] tipc: Resetting bearer <eth:team0>
[  376.998062][T19668] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.074475][T19673] netlink: 'syz.0.4122': attribute type 5 has an invalid length.
[  377.116678][T19668] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.202047][T19668] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.274328][T19678] pimreg: entered allmulticast mode
[  377.293151][T19668] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.312624][T19678] pimreg: left allmulticast mode
[  377.384834][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  377.408052][   T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.443703][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.487009][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.557629][T19680] geneve2: entered promiscuous mode
[  377.806988][T19690] netlink: 'syz.2.4131': attribute type 10 has an invalid length.
[  377.850922][T19692] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[  377.868057][T19690] team0: Device veth0_macvtap failed to register rx_handler
[  379.309992][T19763] Bluetooth: MGMT ver 1.23
[  379.673239][T19782] netlink: 'syz.1.4157': attribute type 21 has an invalid length.
[  379.932875][T19791] netem: invalid attributes len -16
[  379.949640][T19791] netem: change failed
[  380.201719][T19809] sch_tbf: peakrate 263 is lower than or equals to rate 6829859379779001161 !
[  380.342148][T19827] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  380.452703][T19836] lo speed is unknown, defaulting to 1000
[  380.543858][T19842] __nla_validate_parse: 11 callbacks suppressed
[  380.543881][T19842] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4174'.
[  380.578544][T19847] geneve2: entered promiscuous mode
[  380.593874][T19842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4174'.
[  380.644553][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4176'.
[  381.330723][T19878] netlink: 'syz.2.4183': attribute type 1 has an invalid length.
[  381.339567][T19878] netlink: 'syz.2.4183': attribute type 1 has an invalid length.
[  381.357203][T19878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4183'.
[  381.373497][T19878] block nbd3: shutting down sockets
[  381.486563][T19887] nbd: socks must be embedded in a SOCK_ITEM attr
[  381.513902][T19887] block nbd3: shutting down sockets
[  381.624213][T19899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.664948][T19899] tipc: Disabling bearer <eth:syzkaller0>
[  381.777446][T19914] syzkaller0: entered promiscuous mode
[  381.788813][T19914] syzkaller0: entered allmulticast mode
[  381.834315][T19919] netlink: 'syz.2.4197': attribute type 46 has an invalid length.
[  382.113300][T19933] bond2 (unregistering): Released all slaves
[  382.138691][T19936] sit0: entered promiscuous mode
[  382.165059][T19936] netlink: 'syz.3.4203': attribute type 1 has an invalid length.
[  382.184191][T19936] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4203'.
[  382.329465][T19945] lo speed is unknown, defaulting to 1000
[  382.617211][T19957] syzkaller0: entered promiscuous mode
[  382.639554][T19957] syzkaller0: entered allmulticast mode
[  382.847260][T19960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4210'.
[  383.097210][T19977] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[  383.389189][T19993] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode
[  383.425196][T19993] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode
[  383.495218][T20003] lo speed is unknown, defaulting to 1000
[  383.544590][T20004] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4224'.
[  383.650312][T20011] netlink: 'syz.2.4226': attribute type 10 has an invalid length.
[  383.705262][T20011] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  383.793999][T20014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4226'.
[  383.863682][T20021] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  383.875099][T20021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4228'.
[  383.942389][   T31] audit: type=1800 audit(1755846617.137:14): pid=20021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4228" name="memory.events" dev="tmpfs" ino=1355 res=0 errno=0
[  384.057992][T20025] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.097541][T20034] netlink: 844 bytes leftover after parsing attributes in process `syz.4.4232'.
[  384.153021][T20025] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.255468][T20025] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.355943][T20025] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.478659][T20052] syzkaller1: entered promiscuous mode
[  384.486368][T20052] syzkaller1: entered allmulticast mode
[  384.544413][T18117] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.586740][T13555] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.656176][T18117] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.695963][T18117] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.592165][T20111] __nla_validate_parse: 1 callbacks suppressed
[  385.592189][T20111] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4257'.
[  385.934817][T20123] lo speed is unknown, defaulting to 1000
[  385.955817][T20127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4263'.
[  386.215360][T20146] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.238252][T20146] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.4268'.
[  386.294269][T20146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4268'.
[  386.356102][T20148] geneve3: entered allmulticast mode
[  386.385940][   T94] block nbd2: Possible stuck request ffff8880253e5080: control (read@0,1024B). Runtime 90 seconds
[  386.387839][T20153] lo speed is unknown, defaulting to 1000
[  386.404357][   T94] block nbd2: Possible stuck request ffff8880253e5240: control (read@1024,1024B). Runtime 90 seconds
[  386.427278][   T94] block nbd2: Possible stuck request ffff8880253e5400: control (read@2048,1024B). Runtime 90 seconds
[  386.443191][   T94] block nbd2: Possible stuck request ffff8880253e55c0: control (read@3072,1024B). Runtime 90 seconds
[  386.723611][T20169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4275'.
[  386.864600][T20182] siw: device registration error -23
[  387.006520][T20193] netlink: 'syz.3.4282': attribute type 83 has an invalid length.
[  387.217659][T20210] lo speed is unknown, defaulting to 1000
[  387.330810][T11070] tipc: Node number set to 2890912739
[  387.808208][T20227] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  387.827844][T20227] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  388.087813][T20241] netlink: 'syz.3.4296': attribute type 1 has an invalid length.
[  388.113066][T20245] netlink: 'syz.2.4298': attribute type 1 has an invalid length.
[  388.134033][T20238] 8021q: adding VLAN 0 to HW filter on device bond3
[  388.181090][T20245] bond1: entered promiscuous mode
[  388.189321][T20245] 8021q: adding VLAN 0 to HW filter on device bond1
[  388.264532][T20247] 8021q: adding VLAN 0 to HW filter on device bond1
[  388.281432][T20247] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[  388.294105][T20247] bond1: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  388.301503][T20253] netlink: 'syz.0.4299': attribute type 10 has an invalid length.
[  388.344478][T20253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4299'.
[  388.344879][T20247] bond1: (slave wireguard1): making interface the new active one
[  388.375182][T20247] wireguard1: entered promiscuous mode
[  388.393888][T20247] bond1: (slave wireguard1): Enslaving as an active interface with an up link
[  388.453113][T20253] dummy0: entered promiscuous mode
[  388.469901][T20253] dummy0: entered allmulticast mode
[  388.492171][T20253] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  388.658619][T20268] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  388.689813][T20264] netlink: 'syz.1.4302': attribute type 15 has an invalid length.
[  388.724541][T20267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4301'.
[  389.037931][T20291] lo speed is unknown, defaulting to 1000
[  389.051299][T20297] netlink: 'syz.0.4309': attribute type 10 has an invalid length.
[  389.175141][T20303] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  389.279964][T20306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4313'.
[  389.787621][T20330] lo speed is unknown, defaulting to 1000
[  389.815325][T20328] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4317'.
[  389.831267][T20334] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.836851][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4317'.
[  389.846527][T20334] syzkaller0: entered promiscuous mode
[  389.861322][T20334] syzkaller0: entered allmulticast mode
[  390.236994][T20332] tipc: Resetting bearer <eth:syzkaller0>
[  390.268513][T20332] tipc: Disabling bearer <eth:syzkaller0>
[  390.525887][T20354] lo speed is unknown, defaulting to 1000
[  391.166224][T20368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4328'.
[  391.589664][T20394] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[  391.598319][T20394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4335'.
[  391.617712][T20394] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  391.750497][T20395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4335'.
[  391.766254][T20395] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  392.036983][T20416] syzkaller0: entered promiscuous mode
[  392.064856][T20416] syzkaller0: entered allmulticast mode
[  392.250930][T20427] dvmrp1: entered allmulticast mode
[  392.275031][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4347'.
[  392.305194][T20429] macsec1: entered promiscuous mode
[  392.318387][T20429] bond0: entered promiscuous mode
[  392.348424][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4348'.
[  392.379780][T20429] bond0: left promiscuous mode
[  392.406770][T20431] dvmrp1: left allmulticast mode
[  392.537908][T20438] lo speed is unknown, defaulting to 1000
[  392.584927][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4353'.
[  392.632538][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4353'.
[  392.696311][T20447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4352'.
[  392.718928][T20448] netlink: 'syz.2.4353': attribute type 29 has an invalid length.
[  392.804243][T20452] netlink: 'syz.1.4355': attribute type 17 has an invalid length.
[  392.885737][T20452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  392.922958][T20460] netlink: 'syz.0.4357': attribute type 322 has an invalid length.
[  393.477316][T20491] wg1 speed is unknown, defaulting to 1000
[  393.496518][T20491] wg1 speed is unknown, defaulting to 1000
[  393.507025][T20491] wg1 speed is unknown, defaulting to 1000
[  393.545332][T20491] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  393.690896][T20491] wg1 speed is unknown, defaulting to 1000
[  393.706209][T20491] wg1 speed is unknown, defaulting to 1000
[  393.749770][T20491] wg1 speed is unknown, defaulting to 1000
[  393.757259][T20491] wg1 speed is unknown, defaulting to 1000
[  393.765870][T20491] wg1 speed is unknown, defaulting to 1000
[  393.773848][T20491] wg1 speed is unknown, defaulting to 1000
[  393.781291][T20491] wg1 speed is unknown, defaulting to 1000
[  393.789291][T20491] wg1 speed is unknown, defaulting to 1000
[  393.797463][T20491] wg1 speed is unknown, defaulting to 1000
[  393.928180][T20511] netlink: 'syz.3.4372': attribute type 39 has an invalid length.
[  394.856359][T20550] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4384'.
[  395.744190][T20588] openvswitch: netlink: IP tunnel dst address not specified
[  396.155371][T20609] lo speed is unknown, defaulting to 1000
[  396.173771][T20614] netlink: 'syz.0.4401': attribute type 13 has an invalid length.
[  396.183756][T20614] netlink: 'syz.0.4401': attribute type 17 has an invalid length.
[  396.214533][T20615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4403'.
[  396.406191][T20614] dummy0: left promiscuous mode
[  396.450417][T20614] dummy0: left allmulticast mode
[  396.500821][T20614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  396.727045][T20609] wg1 speed is unknown, defaulting to 1000
[  396.790251][T20632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4407'.
[  396.853174][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4408'.
[  396.973069][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4408'.
[  396.997703][T20641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4408'.
[  397.016356][T20635] netlink: 'syz.2.4408': attribute type 21 has an invalid length.
[  397.034019][T20643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4409'.
[  397.057434][T20635] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4408'.
[  397.068040][T20635] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4408'.
[  397.080631][T20641] netlink: 'syz.2.4408': attribute type 21 has an invalid length.
[  397.090862][T20641] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4408'.
[  397.144756][T20641] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4408'.
[  397.587565][T20669] syzkaller0: entered promiscuous mode
[  397.622480][T20669] syzkaller0: entered allmulticast mode
[  397.995065][T20697] netlink: 'syz.3.4424': attribute type 1 has an invalid length.
[  398.048358][T20697] 8021q: adding VLAN 0 to HW filter on device bond4
[  398.433317][T18118] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  398.452748][T18118] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  398.464894][T18118] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  398.483292][T18118] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  398.497505][T18118] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  398.509760][T18118] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  398.523389][T18118] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  398.538302][T18118] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  398.762077][T20717] netlink: 'syz.0.4429': attribute type 12 has an invalid length.
[  398.831985][T20722] delete_channel: no stack
[  399.074018][T20733] netlink: 'syz.3.4433': attribute type 29 has an invalid length.
[  399.121099][T20733] netlink: 'syz.3.4433': attribute type 29 has an invalid length.
[  399.321660][T20751] netlink: 'syz.3.4441': attribute type 29 has an invalid length.
[  399.517668][T20759] lo speed is unknown, defaulting to 1000
[  399.575262][T20766] netlink: 'syz.2.4445': attribute type 4 has an invalid length.
[  399.755841][T20777] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  399.774573][T20777] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  399.847614][T20766] macvlan3: entered promiscuous mode
[  399.888660][T20766] macvlan3: entered allmulticast mode
[  399.913726][T20766] bond2: (slave macvlan3): Error -98 calling set_mac_address
[  399.937660][T20784] netlink: 'syz.0.4449': attribute type 1 has an invalid length.
[  399.950635][T20759] wg1 speed is unknown, defaulting to 1000
[  400.141472][T20784] bond4: entered promiscuous mode
[  400.170954][T20784] 8021q: adding VLAN 0 to HW filter on device bond4
[  400.212840][T20787] bond4: (slave bridge0): making interface the new active one
[  400.224865][T20787] bridge0: entered promiscuous mode
[  400.234660][T20787] bond4: (slave bridge0): Enslaving as an active interface with an up link
[  400.246038][T20798] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.627131][T20821] netlink: 'syz.2.4459': attribute type 11 has an invalid length.
[  400.657050][T20821] netlink: 'syz.2.4459': attribute type 11 has an invalid length.
[  400.675836][T20828] macsec2: entered promiscuous mode
[  400.703721][T20828] bond0: entered promiscuous mode
[  400.749720][T20828] bond0: left promiscuous mode
[  400.807858][T20830] macsec1: entered promiscuous mode
[  400.818103][T20830] bond0: entered promiscuous mode
[  400.827717][T20830] bond0: left promiscuous mode
[  401.041090][T20853] netlink: 'syz.3.4466': attribute type 10 has an invalid length.
[  401.066812][T20853] tipc: Resetting bearer <eth:team0>
[  401.091678][T20853] tipc: Resetting bearer <eth:team0>
[  401.101456][T20853] 8021q: adding VLAN 0 to HW filter on device team0
[  401.112666][T20853] bond0: (slave team0): Enslaving as an active interface with an up link
[  401.157085][T20844] bond4: (slave bridge0): Releasing backup interface
[  401.193452][T20844] bridge0 (unregistering): left promiscuous mode
[  401.360267][ T5978] tipc: Node number set to 1495184573
[  401.506829][T20876] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.773641][T20891] __nla_validate_parse: 55 callbacks suppressed
[  401.773667][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'.
[  401.881814][T20902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'.
[  401.897467][T20897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4482'.
[  401.926558][T20902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4481'.
[  402.154759][T20910] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.4483'.
[  402.338585][T20924] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4486'.
[  402.349599][T20924] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4486'.
[  402.370062][T20924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4486'.
[  402.607335][T20936] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4486'.
[  402.986760][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4494'.
[  403.377072][T20962] TCP: TCP_TX_DELAY enabled
[  403.530733][T20972] validate_nla: 4 callbacks suppressed
[  403.530758][T20972] netlink: 'syz.1.4503': attribute type 23 has an invalid length.
[  403.591679][T20974] geneve2: entered promiscuous mode
[  403.843371][T20997] bridge2: entered allmulticast mode
[  403.972382][T21001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  403.989645][T21001] syzkaller0: entered promiscuous mode
[  403.998614][T21001] syzkaller0: entered allmulticast mode
[  404.056011][T21001] tipc: Resetting bearer <eth:syzkaller0>
[  404.073737][T21000] tipc: Resetting bearer <eth:syzkaller0>
[  404.102160][T21000] tipc: Disabling bearer <eth:syzkaller0>
[  404.213682][T21008] bond3: option mode: unable to set because the bond device is up
[  404.574175][T21024] vxlan1: entered promiscuous mode
[  404.588920][T21024] vxlan1: entered allmulticast mode
[  404.808687][T21029] lo speed is unknown, defaulting to 1000
[  405.114903][T21039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.322680][T21029] wg1 speed is unknown, defaulting to 1000
[  405.322821][T21030] lo speed is unknown, defaulting to 1000
[  405.517484][T21030] wg1 speed is unknown, defaulting to 1000
[  405.876224][T21063] sock: sock_timestamping_bind_phc: sock not bind to device
[  406.112577][T21064] lo speed is unknown, defaulting to 1000
[  406.162484][T21069] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  406.236107][T21072] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.258422][T21064] wg1 speed is unknown, defaulting to 1000
[  406.530219][T21074] netlink: 'syz.3.4534': attribute type 11 has an invalid length.
[  406.588883][T21077] netlink: 'syz.4.4535': attribute type 13 has an invalid length.
[  406.727724][T21081] syzkaller0: entered promiscuous mode
[  406.754432][T21081] syzkaller0: entered allmulticast mode
[  406.897522][T21084] __nla_validate_parse: 28 callbacks suppressed
[  406.897562][T21084] netlink: 844 bytes leftover after parsing attributes in process `syz.4.4537'.
[  407.041442][T21087] netlink: 'syz.2.4538': attribute type 2 has an invalid length.
[  407.088161][T21087] netlink: 'syz.2.4538': attribute type 1 has an invalid length.
[  407.210257][T21094] netlink: 'syz.4.4541': attribute type 1 has an invalid length.
[  407.248818][T21094] bond2: entered promiscuous mode
[  407.258308][T21094] 8021q: adding VLAN 0 to HW filter on device bond2
[  407.332778][T21094] 8021q: adding VLAN 0 to HW filter on device bond2
[  407.353546][T21101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  407.366207][T21101] IPv6: NLM_F_CREATE should be set when creating new route
[  407.367757][T21094] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  407.377238][T21101] IPv6: NLM_F_CREATE should be set when creating new route
[  407.411975][T21094] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  407.447777][T21101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  407.452775][T21094] bond2: (slave wireguard0): making interface the new active one
[  407.473342][T21094] wireguard0: entered promiscuous mode
[  407.484902][T21094] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[  407.536639][T21101] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[  407.566723][T21111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4544'.
[  407.695740][T21101] bond2: (slave wireguard1): Enslaving as a backup interface with an up link
[  407.918535][T21120] lo speed is unknown, defaulting to 1000
[  408.077628][T21120] wg1 speed is unknown, defaulting to 1000
[  408.570613][T21152] 8021q: adding VLAN 0 to HW filter on device bond5
[  408.883383][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4560'.
[  408.923913][T21173] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4560'.
[  409.551785][T21207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4567'.
[  410.154802][T21214] syz_tun: entered allmulticast mode
[  410.194286][T21214] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  410.283594][T21214] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4570'.
[  410.415362][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4580'.
[  410.430692][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4580'.
[  410.440605][T21247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4580'.
[  410.468290][T21242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.487284][T21242] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4578'.
[  410.731997][T21263] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  410.811332][T21263] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  411.726290][T21313] syzkaller0: entered promiscuous mode
[  411.743292][T21313] syzkaller0: entered allmulticast mode
[  411.798451][T21317] syzkaller1: entered promiscuous mode
[  411.805784][T21317] syzkaller1: entered allmulticast mode
[  412.586325][T21350] __nla_validate_parse: 9 callbacks suppressed
[  412.586347][T21350] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4607'.
[  413.264989][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4612'.
[  413.534617][T21380] syz_tun: entered promiscuous mode
[  413.544189][T21385] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4618'.
[  413.557009][T21380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4614'.
[  413.600581][T21381] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.671192][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4619'.
[  413.687413][T21393] netlink: 'syz.2.4619': attribute type 5 has an invalid length.
[  413.830793][T21404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.831970][T21406] netlink: 'syz.0.4621': attribute type 12 has an invalid length.
[  414.345751][T21419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4626'.
[  414.365989][T21419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4626'.
[  414.383179][T21419] pim6reg: entered allmulticast mode
[  414.392330][T21419] pim6reg: left allmulticast mode
[  414.697081][T21434] batadv_slave_1: entered promiscuous mode
[  414.737250][T21434] batadv_slave_1: left promiscuous mode
[  414.906902][T21442] netlink: 'syz.0.4634': attribute type 13 has an invalid length.
[  415.095529][T21450] lo speed is unknown, defaulting to 1000
[  415.162122][T21455] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4636'.
[  415.217180][T21455] pim6reg9: entered allmulticast mode
[  415.442741][T21450] wg1 speed is unknown, defaulting to 1000
[  415.476280][T21460] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4638'.
[  415.488610][T21464] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4640'.
[  415.732020][T21480] Bluetooth: MGMT ver 1.23
[  415.768275][T13555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.784929][T13555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.822980][T21476] lo speed is unknown, defaulting to 1000
[  415.846538][T21489] macsec2: entered promiscuous mode
[  415.855014][T21489] bond0: entered promiscuous mode
[  416.055301][T21476] wg1 speed is unknown, defaulting to 1000
[  416.107753][T21496] lo speed is unknown, defaulting to 1000
[  416.459799][   T94] block nbd2: Possible stuck request ffff8880253e5080: control (read@0,1024B). Runtime 120 seconds
[  416.473198][   T94] block nbd2: Possible stuck request ffff8880253e5240: control (read@1024,1024B). Runtime 120 seconds
[  416.487975][   T94] block nbd2: Possible stuck request ffff8880253e5400: control (read@2048,1024B). Runtime 120 seconds
[  416.502208][   T94] block nbd2: Possible stuck request ffff8880253e55c0: control (read@3072,1024B). Runtime 120 seconds
[  416.682061][T21496] wg1 speed is unknown, defaulting to 1000
[  416.908813][T21518] netlink: 'syz.2.4658': attribute type 11 has an invalid length.
[  416.994373][T21520] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  417.086081][T21522] ipvlan1: mtu less than device minimum
[  417.569598][T21541] lo speed is unknown, defaulting to 1000
[  417.611408][T21548] bond0: (slave rose0): Enslaving as an active interface with an up link
[  417.624856][T21548] __nla_validate_parse: 4 callbacks suppressed
[  417.624878][T21548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4670'.
[  417.808732][T21558] macsec1: entered promiscuous mode
[  417.844735][T21558] bond0: entered promiscuous mode
[  417.878097][T21541] wg1 speed is unknown, defaulting to 1000
[  417.968053][T21562] syzkaller1: entered promiscuous mode
[  417.978495][T21562] syzkaller1: entered allmulticast mode
[  417.995980][T21564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4676'.
[  418.341826][T21580] !
: entered allmulticast mode
[  418.595144][T21584] lo speed is unknown, defaulting to 1000
[  418.877624][T21584] wg1 speed is unknown, defaulting to 1000
[  419.167867][T21607] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4687'.
[  419.349856][T21617] netlink: 'syz.2.4689': attribute type 1 has an invalid length.
[  419.363878][T21619] netlink: 'syz.4.4692': attribute type 1 has an invalid length.
[  419.389801][T21619] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  419.564947][T21632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4694'.
[  419.574158][T21622] lo speed is unknown, defaulting to 1000
[  419.635382][T21632] nbd: must specify at least one socket
[  419.759377][T21642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4696'.
[  419.770605][T21640] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  419.783537][T21642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4696'.
[  419.920747][T21644] netlink: 'syz.2.4697': attribute type 4 has an invalid length.
[  419.991584][T21622] wg1 speed is unknown, defaulting to 1000
[  420.283672][T21671] netlink: 'syz.4.4705': attribute type 10 has an invalid length.
[  420.363227][T21671] vlan0: (slave team0): Releasing backup interface
[  420.393048][T21671] team0: Cannot enslave team device to itself
[  420.453529][T21673] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  420.505204][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4704'.
[  420.515393][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4704'.
[  420.574730][T13555] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  420.574832][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4704'.
[  420.597749][ T7957] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  420.615971][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4704'.
[  420.623093][ T7957] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  420.641099][ T7957] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  420.789691][T21695] netlink: 'syz.1.4709': attribute type 1 has an invalid length.
[  420.807790][T21695] batadv1: entered promiscuous mode
[  420.814408][T21695] batadv1: entered allmulticast mode
[  421.077341][T21709] netlink: 'syz.0.4713': attribute type 1 has an invalid length.
[  421.234923][T21710] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  421.256297][T21710] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  421.277376][T21711] gretap1: entered promiscuous mode
[  421.285996][T21711] bond5: (slave gretap1): making interface the new active one
[  421.294784][T21711] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  421.513224][T21723] lo speed is unknown, defaulting to 1000
[  421.700827][T21736] netlink: 'syz.4.4718': attribute type 3 has an invalid length.
[  421.955898][T21742] lo speed is unknown, defaulting to 1000
[  421.970350][T21723] wg1 speed is unknown, defaulting to 1000
[  422.282041][T21742] wg1 speed is unknown, defaulting to 1000
[  422.301491][T21750] pim6reg: entered allmulticast mode
[  422.366314][T21755] pim6reg: left allmulticast mode
[  422.434209][T21750] syzkaller0: entered promiscuous mode
[  422.444539][T21750] syzkaller0: entered allmulticast mode
[  422.530326][T21753] lo speed is unknown, defaulting to 1000
[  422.632457][T21761] FAULT_INJECTION: forcing a failure.
[  422.632457][T21761] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  422.696873][T21761] CPU: 1 UID: 0 PID: 21761 Comm: syz.3.4726 Not tainted syzkaller #0 PREEMPT(full) 
[  422.696907][T21761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  422.696926][T21761] Call Trace:
[  422.696937][T21761]  <TASK>
[  422.696947][T21761]  dump_stack_lvl+0x189/0x250
[  422.697098][T21761]  ? __pfx____ratelimit+0x10/0x10
[  422.697132][T21761]  ? __pfx_dump_stack_lvl+0x10/0x10
[  422.697158][T21761]  ? __pfx__printk+0x10/0x10
[  422.697457][T21761]  ? __might_fault+0xb0/0x130
[  422.697494][T21761]  ? rcu_is_watching+0x15/0xb0
[  422.697519][T21761]  should_fail_ex+0x414/0x560
[  422.697551][T21761]  _copy_from_user+0x2d/0xb0
[  422.697575][T21761]  ___sys_sendmsg+0x158/0x2a0
[  422.697600][T21761]  ? __pfx____sys_sendmsg+0x10/0x10
[  422.697642][T21761]  ? __fget_files+0x2a/0x420
[  422.697658][T21761]  ? __fget_files+0x3a0/0x420
[  422.697681][T21761]  __x64_sys_sendmsg+0x19b/0x260
[  422.697706][T21761]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  422.697735][T21761]  ? __pfx_ksys_write+0x10/0x10
[  422.697762][T21761]  ? rcu_is_watching+0x15/0xb0
[  422.697785][T21761]  ? rcu_is_watching+0x15/0xb0
[  422.697808][T21761]  do_syscall_64+0xfa/0x3b0
[  422.697829][T21761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.697851][T21761]  ? clear_bhb_loop+0x60/0xb0
[  422.697880][T21761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.697913][T21761] RIP: 0033:0x7fc10158ebe9
[  422.697931][T21761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  422.697951][T21761] RSP: 002b:00007fc10238f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  422.697975][T21761] RAX: ffffffffffffffda RBX: 00007fc1017b5fa0 RCX: 00007fc10158ebe9
[  422.697991][T21761] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000004
[  422.698006][T21761] RBP: 00007fc10238f090 R08: 0000000000000000 R09: 0000000000000000
[  422.698020][T21761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  422.698034][T21761] R13: 00007fc1017b6038 R14: 00007fc1017b5fa0 R15: 00007ffd58a374e8
[  422.698279][T21761]  </TASK>
[  422.995252][T21753] wg1 speed is unknown, defaulting to 1000
[  422.996899][T21763] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001
[  423.096609][T21766] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  423.105890][T21766] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  423.118115][T21766] __nla_validate_parse: 7 callbacks suppressed
[  423.118139][T21766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4729'.
[  423.139217][T21766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4729'.
[  423.673785][T21781] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  423.776020][   T31] audit: type=1800 audit(1755846656.967:15): pid=21787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4733" name="@" dev="tmpfs" ino=1622 res=0 errno=0
[  423.901102][T21791] lo speed is unknown, defaulting to 1000
[  424.163181][T21791] wg1 speed is unknown, defaulting to 1000
[  424.587823][T21811] FAULT_INJECTION: forcing a failure.
[  424.587823][T21811] name failslab, interval 1, probability 0, space 0, times 0
[  424.625840][T21814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4743'.
[  424.656290][T21811] CPU: 1 UID: 0 PID: 21811 Comm: syz.2.4740 Not tainted syzkaller #0 PREEMPT(full) 
[  424.656323][T21811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  424.656338][T21811] Call Trace:
[  424.656347][T21811]  <TASK>
[  424.656356][T21811]  dump_stack_lvl+0x189/0x250
[  424.656393][T21811]  ? __pfx____ratelimit+0x10/0x10
[  424.656424][T21811]  ? __pfx_dump_stack_lvl+0x10/0x10
[  424.656450][T21811]  ? __pfx__printk+0x10/0x10
[  424.656481][T21811]  ? fs_reclaim_acquire+0x7d/0x100
[  424.656515][T21811]  ? rcu_is_watching+0x15/0xb0
[  424.656537][T21811]  ? __pfx___might_resched+0x10/0x10
[  424.656557][T21811]  ? lock_acquire+0x5f/0x360
[  424.656591][T21811]  should_fail_ex+0x414/0x560
[  424.656622][T21811]  should_failslab+0xa8/0x100
[  424.656654][T21811]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  424.656684][T21811]  ? __alloc_skb+0x112/0x2d0
[  424.656705][T21811]  __alloc_skb+0x112/0x2d0
[  424.656727][T21811]  netlink_sendmsg+0x5c6/0xb30
[  424.656766][T21811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.656802][T21811]  ? aa_sock_msg_perm+0xf1/0x1d0
[  424.656823][T21811]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  424.656846][T21811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.656891][T21811]  __sock_sendmsg+0x219/0x270
[  424.656921][T21811]  ____sys_sendmsg+0x505/0x830
[  424.656947][T21811]  ? __pfx_____sys_sendmsg+0x10/0x10
[  424.656975][T21811]  ? import_iovec+0x74/0xa0
[  424.657003][T21811]  ___sys_sendmsg+0x21f/0x2a0
[  424.657026][T21811]  ? __pfx____sys_sendmsg+0x10/0x10
[  424.657066][T21811]  ? __fget_files+0x2a/0x420
[  424.657085][T21811]  ? __fget_files+0x3a0/0x420
[  424.657108][T21811]  __x64_sys_sendmsg+0x19b/0x260
[  424.657132][T21811]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  424.657159][T21811]  ? __pfx_ksys_write+0x10/0x10
[  424.657187][T21811]  ? rcu_is_watching+0x15/0xb0
[  424.657209][T21811]  ? rcu_is_watching+0x15/0xb0
[  424.657232][T21811]  do_syscall_64+0xfa/0x3b0
[  424.657253][T21811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.657273][T21811]  ? clear_bhb_loop+0x60/0xb0
[  424.657297][T21811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.657319][T21811] RIP: 0033:0x7f4302d8ebe9
[  424.657338][T21811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  424.657357][T21811] RSP: 002b:00007f4303b82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.657380][T21811] RAX: ffffffffffffffda RBX: 00007f4302fb5fa0 RCX: 00007f4302d8ebe9
[  424.657396][T21811] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000004
[  424.657411][T21811] RBP: 00007f4303b82090 R08: 0000000000000000 R09: 0000000000000000
[  424.657436][T21811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  424.657453][T21811] R13: 00007f4302fb6038 R14: 00007f4302fb5fa0 R15: 00007fffba2648e8
[  424.657479][T21811]  </TASK>
[  424.677738][T21815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4743'.
[  424.795306][T21819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4746'.
[  424.840372][T21815] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4743'.
[  424.941390][T21819] bond_slave_0: entered promiscuous mode
[  425.021734][T21827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4744'.
[  425.024736][T21819] bridge0: entered promiscuous mode
[  425.058189][T21819] dummy0: entered promiscuous mode
[  425.071484][T21819] macsec2: entered promiscuous mode
[  425.084280][T21819] bond0: entered promiscuous mode
[  425.108553][T21819] macvlan2: entered promiscuous mode
[  425.124021][T21819] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode
[  425.137414][T21819] bond0: left promiscuous mode
[  425.143325][T21819] macvlan2: left promiscuous mode
[  425.150305][T21819] mac80211_hwsim hwsim29 wlan1: left promiscuous mode
[  425.158231][T21819] bond_slave_0: left promiscuous mode
[  425.164727][T21819] bridge0: left promiscuous mode
[  425.171401][T21819] dummy0: left promiscuous mode
[  425.200519][T21815] gretap0: entered promiscuous mode
[  425.211674][T21827] ip6_vti0: entered promiscuous mode
[  425.218479][T21827] ip6_vti0: entered allmulticast mode
[  425.232441][T21833] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  425.275210][T21824] lo speed is unknown, defaulting to 1000
[  425.409447][T21837] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.4749'.
[  425.437198][T21839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4750'.
[  425.618211][T21824] wg1 speed is unknown, defaulting to 1000
[  425.735303][T21850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4753'.
[  426.064418][T21856] netlink: 'syz.0.4756': attribute type 1 has an invalid length.
[  426.154513][T21859] rdma_rxe: rxe_newlink: failed to add lo
[  426.211685][T21856] 8021q: adding VLAN 0 to HW filter on device bond6
[  426.235801][T21859] 8021q: adding VLAN 0 to HW filter on device team0
[  426.252922][T21859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  426.283673][T21860] vlan2: entered promiscuous mode
[  426.316893][T21860] bond6: entered promiscuous mode
[  426.323210][T21860] vlan2: entered allmulticast mode
[  426.329429][T21860] bond6: entered allmulticast mode
[  426.458544][T21856] bond6: (slave gretap2): making interface the new active one
[  426.503696][T21856] gretap2: entered promiscuous mode
[  426.515226][T21856] gretap2: entered allmulticast mode
[  426.524544][T21856] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  426.588125][T21869] vlan0: (slave 
c
@ÿ): Releasing backup interface
[  426.611018][T21869] vlan0: (slave bond_slave_1): Releasing backup interface
[  426.641054][T21869] team0: Port device team_slave_0 removed
[  426.676661][T21869] team0: Port device team_slave_1 removed
[  426.693307][T21869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.712635][T21869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.722379][T21869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.743741][T21869] bond2: (slave wireguard0): Releasing backup interface
[  426.753409][T21869] wireguard0: left promiscuous mode
[  426.761294][T21869] bond2: (slave wireguard1): making interface the new active one
[  426.770133][T21869] wireguard1: entered promiscuous mode
[  426.786722][T21869] bond2: (slave wireguard1): Releasing backup interface
[  426.800570][T21869] wireguard1: left promiscuous mode
[  426.844903][T21874] vlan0: entered promiscuous mode
[  426.858844][T21874] 8021q: adding VLAN 0 to HW filter on device vlan0
[  426.872618][T21874] team0: Port device vlan0 added
[  426.891717][T21879] macsec0: entered allmulticast mode
[  426.906790][T21879] veth1_macvtap: entered allmulticast mode
[  426.919960][T21879] macsec0: left allmulticast mode
[  426.925693][T21879] veth1_macvtap: left allmulticast mode
[  426.956677][T21881] netlink: 'syz.4.4764': attribute type 3 has an invalid length.
[  427.382915][T21896] tipc: Resetting bearer <eth:team0>
[  427.759184][T21934] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  428.116997][T21903] lo speed is unknown, defaulting to 1000
[  428.119313][T21915] team0: Mode changed to "activebackup"
[  428.130031][T21918] wg1 speed is unknown, defaulting to 1000
[  428.136421][   T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.146600][T21918] syz0: Port: 1 Link DOWN
[  428.156494][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  428.199681][   T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.244294][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  428.263821][   T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.300111][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  428.326390][   T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.336253][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  428.411201][T21954] __nla_validate_parse: 7 callbacks suppressed
[  428.411224][T21954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4777'.
[  428.464796][T21954] macsec2: entered promiscuous mode
[  428.476768][T21954] bond0: entered promiscuous mode
[  428.502879][T21954] bond0: left promiscuous mode
[  428.546849][T21903] wg1 speed is unknown, defaulting to 1000
[  428.762429][T21971] netlink: 'syz.3.4783': attribute type 1 has an invalid length.
[  428.773670][T21967] netlink: 'syz.1.4782': attribute type 9 has an invalid length.
[  428.821760][T21967] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4782'.
[  428.826901][T21976] netlink: 'syz.1.4782': attribute type 1 has an invalid length.
[  428.939332][T21970] lo speed is unknown, defaulting to 1000
[  428.997109][T21983] netpci0: tun_chr_ioctl cmd 1074025681
[  429.147127][T21970] wg1 speed is unknown, defaulting to 1000
[  429.172860][T21993] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4790'.
[  429.208175][T21996] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4791'.
[  429.330597][T21998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4792'.
[  429.347606][T21998] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001
[  429.420325][T22008] lo speed is unknown, defaulting to 1000
[  429.775710][T22011] lo speed is unknown, defaulting to 1000
[  429.776284][T22008] wg1 speed is unknown, defaulting to 1000
[  429.926684][T22011] wg1 speed is unknown, defaulting to 1000
[  430.126828][T22037] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4801'.
[  430.561633][T22055] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  430.585885][T22058] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  430.733268][T22066] C: renamed from lo (while UP)
[  430.747688][T22066] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  430.895061][T22073] lo speed is unknown, defaulting to 1000
[  430.921087][T22069] bond0: Error: Cannot enslave bond to itself.
[  431.047075][T22078] netlink: 'syz.1.4810': attribute type 1 has an invalid length.
[  431.087141][T22078] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4810'.
[  431.113061][T22083] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4812'.
[  431.146267][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4810'.
[  431.419947][T22094] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  431.449811][T22073] wg1 speed is unknown, defaulting to 1000
[  431.470072][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4816'.
[  432.035294][T22108] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  432.167048][T22108] IPv6: sit1: Disabled Multicast RS
[  432.180390][T22108] sit1: entered allmulticast mode
[  432.443529][T22123] macsec1: entered promiscuous mode
[  432.463882][T22123] bond0: entered promiscuous mode
[  432.473999][T22123] team0: entered promiscuous mode
[  432.493641][T22123] bond0: left promiscuous mode
[  432.503312][T22123] team0: left promiscuous mode
[  432.546105][T22125] lo speed is unknown, defaulting to 1000
[  432.687594][T22130] syzkaller0: entered promiscuous mode
[  432.715487][T22130] syzkaller0: entered allmulticast mode
[  432.875026][T22125] wg1 speed is unknown, defaulting to 1000
[  433.006453][T22136] pimreg: entered allmulticast mode
[  433.322807][T22147] lo speed is unknown, defaulting to 1000
[  433.534247][T22151] __nla_validate_parse: 4 callbacks suppressed
[  433.534273][T22151] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4831'.
[  433.578940][T22151] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4831'.
[  433.600549][T22151] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4831'.
[  433.614907][T22151] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4831'.
[  433.680843][T22151] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4831'.
[  433.894509][T22152] lo speed is unknown, defaulting to 1000
[  433.894509][T22147] wg1 speed is unknown, defaulting to 1000
[  434.033390][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4835'.
[  434.043028][T22175] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4838'.
[  434.197312][T22152] wg1 speed is unknown, defaulting to 1000
[  434.851629][T22198] lo speed is unknown, defaulting to 1000
[  435.258861][T22235] sctp: [Deprecated]: syz.4.4853 (pid 22235) Use of int in max_burst socket option.
[  435.258861][T22235] Use struct sctp_assoc_value instead
[  435.342769][T22238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4851'.
[  435.346391][T22221] netlink: 'syz.3.4850': attribute type 10 has an invalid length.
[  435.460007][T22248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4855'.
[  435.480274][T22248] netlink: 'syz.4.4855': attribute type 12 has an invalid length.
[  435.493538][T22248] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.4855'.
[  435.681674][T22232] bond0: (slave team0): Releasing backup interface
[  435.718016][T22232] tipc: Resetting bearer <eth:team0>
[  435.776818][T22238] bond0: invalid ARP target 0.0.0.0 specified for addition
[  435.788439][T22238] bond0: option arp_ip_target: invalid value (0)
[  435.811580][T22198] wg1 speed is unknown, defaulting to 1000
[  436.183269][T22274] macsec2: entered promiscuous mode
[  436.195640][T22274] macvlan1: entered promiscuous mode
[  436.237940][T22274] macvlan1: left promiscuous mode
[  436.302655][T22276] macsec2: entered promiscuous mode
[  436.314134][T22276] macvlan1: entered promiscuous mode
[  436.370093][T22276] macvlan1: left promiscuous mode
[  436.754575][T22275] netlink: 'syz.1.4861': attribute type 1 has an invalid length.
[  436.755589][T22296] netlink: 'syz.4.4867': attribute type 21 has an invalid length.
[  437.032209][T22301] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1
[  437.081973][T22305] veth2: entered promiscuous mode
[  437.088492][T22305] veth2: entered allmulticast mode
[  437.445061][T22308] netlink: 'syz.3.4872': attribute type 10 has an invalid length.
[  437.493635][T22321] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  437.951341][T22338] netlink: 'syz.0.4880': attribute type 4 has an invalid length.
[  437.971516][T22338] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.029774][T22338] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.138350][T22338] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.170782][T22338] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.199974][T22359] netlink: 'syz.4.4885': attribute type 3 has an invalid length.
[  438.230298][T22363] netlink: 'syz.4.4885': attribute type 3 has an invalid length.
[  438.302574][T22338] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.352323][T22338] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.366561][T22368] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  438.422033][T22365] lo speed is unknown, defaulting to 1000
[  438.441005][T22373] netlink: 'syz.2.4890': attribute type 16 has an invalid length.
[  438.460593][T22338] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.477625][T22338] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.583874][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  438.595480][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.613861][T22365] wg1 speed is unknown, defaulting to 1000
[  438.614588][T22377] __nla_validate_parse: 21 callbacks suppressed
[  438.614611][T22377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4892'.
[  438.660869][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  438.672008][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.690452][ T5975] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  438.704540][ T5975] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.864357][ T5975] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  438.875342][ T5975] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  439.157914][T22395] netlink: zone id is out of range
[  439.163621][T22395] netlink: zone id is out of range
[  439.168918][T22395] netlink: zone id is out of range
[  439.174645][T22395] netlink: zone id is out of range
[  439.181652][T22395] netlink: zone id is out of range
[  439.190637][T22395] netlink: zone id is out of range
[  439.196483][T22395] netlink: zone id is out of range
[  439.202550][T22395] netlink: zone id is out of range
[  439.208077][T22395] netlink: zone id is out of range
[  439.306282][T22399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4898'.
[  439.318084][T22399] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4898'.
[  439.330388][T22399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4898'.
[  439.342445][T22400] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µ
â侦¸ÑKc'A¥»–
[  439.800596][T22430] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  439.844256][T22430] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode
[  439.874408][T22430] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode
[  439.888780][T22430] tipc: Resetting bearer <eth:syzkaller0>
[  439.998353][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  440.164536][T22450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4910'.
[  440.184421][T22450] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  440.245571][T22457] netlink: 'syz.3.4911': attribute type 13 has an invalid length.
[  440.289860][T22457] sit0: left promiscuous mode
[  440.330178][T22461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4913'.
[  440.351892][T22457] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.364260][T22457] 8021q: adding VLAN 0 to HW filter on device team0
[  440.373880][T22457] tipc: Resetting bearer <eth:team0>
[  440.381041][T22457] tipc: Resetting bearer <eth:team0>
[  440.475170][T22466] lo speed is unknown, defaulting to 1000
[  440.511472][T22471] IPVS: length: 209 != 24
[  440.518132][T22472] IPVS: length: 209 != 24
[  440.541731][T22480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4917'.
[  440.655474][T22478] bridge0: port 1(erspan0) entered blocking state
[  440.663292][T22478] bridge0: port 1(erspan0) entered disabled state
[  440.672152][T22478] erspan0: entered allmulticast mode
[  440.709744][T22478] erspan0: left allmulticast mode
[  440.725217][T22466] wg1 speed is unknown, defaulting to 1000
[  440.870645][T21941] tipc: Node number set to 3580484371
[  441.211681][T22514] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.233004][T22518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4924'.
[  441.254299][T22518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4924'.
[  441.279777][T22523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4926'.
[  441.375032][T22518] bridge0: port 1(vlan3) entered blocking state
[  441.400892][T22518] bridge0: port 1(vlan3) entered disabled state
[  441.407733][T22518] vlan3: entered allmulticast mode
[  441.417830][T22518] bridge0: entered allmulticast mode
[  441.436973][T22518] vlan3: left allmulticast mode
[  441.443633][T22518] bridge0: left allmulticast mode
[  441.468274][T22514] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.516297][T22536] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  441.625688][T22514] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.696537][T22514] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.821386][T22554] pimreg: left allmulticast mode
[  441.918869][T13552] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.966626][T13552] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.981907][T13552] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.016275][T13552] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.166757][T22584] validate_nla: 1 callbacks suppressed
[  442.166779][T22584] netlink: 'syz.4.4946': attribute type 1 has an invalid length.
[  442.185769][T22576] dvmrp0: entered allmulticast mode
[  442.263226][T22588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  442.488480][T22610] lo speed is unknown, defaulting to 1000
[  442.503863][T22615] dvmrp8: entered allmulticast mode
[  442.662714][T22610] wg1 speed is unknown, defaulting to 1000
[  442.664061][T22615] lo speed is unknown, defaulting to 1000
[  442.838168][T22615] wg1 speed is unknown, defaulting to 1000
[  443.141829][T22623] netlink: 'syz.2.4952': attribute type 23 has an invalid length.
[  443.223781][T22614] dvmrp8: left allmulticast mode
[  443.309930][T22634] netlink: 'syz.3.4955': attribute type 11 has an invalid length.
[  443.479931][T22647] lo speed is unknown, defaulting to 1000
[  443.673421][T22668] __nla_validate_parse: 9 callbacks suppressed
[  443.673443][T22668] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4965'.
[  443.703230][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4965'.
[  443.714122][T22668] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4965'.
[  443.745777][T22662] netlink: 'syz.4.4965': attribute type 9 has an invalid length.
[  443.763446][T22662] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4965'.
[  443.882629][T22657] lo speed is unknown, defaulting to 1000
[  443.943758][T22662] netlink: 'syz.4.4965': attribute type 1 has an invalid length.
[  443.970529][T22678] vlan3: entered promiscuous mode
[  443.988540][T22678] macvtap0: entered promiscuous mode
[  443.994390][T22680] netlink: 'syz.0.4968': attribute type 4 has an invalid length.
[  443.994427][T22681] netlink: 'syz.0.4968': attribute type 4 has an invalid length.
[  444.064987][T22689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4972'.
[  444.112777][T22678] tipc: New replicast peer: 0.0.0.0
[  444.118753][T22678] tipc: Enabled bearer <udp:syz2>, priority 10
[  444.143201][T22678] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  444.164201][T22678] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4970'.
[  444.234266][T22697] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.244706][T22700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4972'.
[  444.277964][T22698] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.392990][T22693] lo speed is unknown, defaulting to 1000
[  444.412476][T22647] wg1 speed is unknown, defaulting to 1000
[  444.516597][T22693] wg1 speed is unknown, defaulting to 1000
[  444.527263][T22657] wg1 speed is unknown, defaulting to 1000
[  445.061313][T22731] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4983'.
[  445.229584][ T2151] tipc: Node number set to 2913784156
[  445.666967][T22771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4990'.
[  445.696987][T22773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4992'.
[  445.768680][T22773] macsec2: entered promiscuous mode
[  445.795871][T22773] bond0: entered promiscuous mode
[  445.852257][T22773] bond0: left promiscuous mode
[  445.917650][T22782] net_ratelimit: 12 callbacks suppressed
[  445.917672][T22782] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  445.941422][T22781] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  446.244755][T22810] netlink: 'syz.0.5004': attribute type 13 has an invalid length.
[  446.553410][   T94] block nbd2: Possible stuck request ffff8880253e5080: control (read@0,1024B). Runtime 150 seconds
[  446.564533][   T94] block nbd2: Possible stuck request ffff8880253e5240: control (read@1024,1024B). Runtime 150 seconds
[  446.578285][   T94] block nbd2: Possible stuck request ffff8880253e5400: control (read@2048,1024B). Runtime 150 seconds
[  446.590362][   T94] block nbd2: Possible stuck request ffff8880253e55c0: control (read@3072,1024B). Runtime 150 seconds
[  446.645645][T22830] lo speed is unknown, defaulting to 1000
[  446.825110][T22830] wg1 speed is unknown, defaulting to 1000
[  447.217570][T22855] netlink: zone id is out of range
[  447.232047][T22855] netlink: zone id is out of range
[  447.237577][T22855] netlink: zone id is out of range
[  447.243369][T22855] netlink: zone id is out of range
[  447.252110][T22855] netlink: zone id is out of range
[  447.257634][T22855] netlink: zone id is out of range
[  447.265445][T22855] netlink: zone id is out of range
[  447.275013][T22855] netlink: zone id is out of range
[  447.383251][T22869] netlink: 'syz.1.5025': attribute type 21 has an invalid length.
[  447.395657][T22869] IPv6: NLM_F_CREATE should be specified when creating new route
[  447.421788][T22869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  447.429996][T22869] IPv6: NLM_F_CREATE should be set when creating new route
[  447.438826][T22869] IPv6: NLM_F_CREATE should be set when creating new route
[  447.447133][T22869] IPv6: NLM_F_CREATE should be set when creating new route
[  447.673984][T22883] pim6reg: entered allmulticast mode
[  447.807334][T22894] veth5: entered promiscuous mode
[  447.880886][T22905] xt_socket: unknown flags 0xd0
[  447.923772][   T31] audit: type=1800 audit(1755846681.117:16): pid=22899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5031" name="memory.events" dev="tmpfs" ino=1893 res=0 errno=0
[  447.928850][T22909] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  448.293047][T22937] lo speed is unknown, defaulting to 1000
[  448.436311][T22937] wg1 speed is unknown, defaulting to 1000
[  448.511108][T22957] netlink: 'syz.0.5048': attribute type 5 has an invalid length.
[  448.716894][T22964] lo speed is unknown, defaulting to 1000
[  448.743528][T22962] __nla_validate_parse: 15 callbacks suppressed
[  448.743552][T22962] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5049'.
[  448.773288][T22970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5050'.
[  448.944386][T22964] wg1 speed is unknown, defaulting to 1000
[  449.146891][T22978] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5052'.
[  449.161903][T22976] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5052'.
[  449.334530][T22985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5054'.
[  449.357729][T22988] netlink: 'syz.0.5056': attribute type 21 has an invalid length.
[  449.369894][T22985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5054'.
[  449.383360][T22985] tipc: Invalid UDP bearer configuration
[  449.383425][T22985] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  449.404548][T22988] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5056'.
[  450.017751][T23024] syzkaller1: entered promiscuous mode
[  450.026907][T23024] syzkaller1: entered allmulticast mode
[  450.253873][T23032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5070'.
[  450.263929][T23032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5070'.
[  450.830717][T23058] tipc: Resetting bearer <eth:syzkaller0>
[  450.848082][T23058] tipc: Resetting bearer <eth:syzkaller0>
[  450.912649][T23058] tipc: Resetting bearer <eth:syzkaller0>
[  451.365381][T23090] netlink: 'syz.4.5081': attribute type 10 has an invalid length.
[  451.415237][T23094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5081'.
[  452.887024][T23160] lo speed is unknown, defaulting to 1000
[  453.105495][T23163] netlink: 'syz.1.5103': attribute type 10 has an invalid length.
[  453.188477][T23163] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  453.276347][T23160] wg1 speed is unknown, defaulting to 1000
[  453.377766][T23172] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  453.449641][T23172] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µ
â侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!'
[  453.485888][T23172] CPU: 1 UID: 0 PID: 23172 Comm: syz.0.5104 Not tainted syzkaller #0 PREEMPT(full) 
[  453.485921][T23172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  453.485935][T23172] Call Trace:
[  453.485943][T23172]  <TASK>
[  453.485953][T23172]  dump_stack_lvl+0x189/0x250
[  453.485986][T23172]  ? __pfx_dump_stack_lvl+0x10/0x10
[  453.486014][T23172]  ? __pfx__printk+0x10/0x10
[  453.486043][T23172]  ? kernfs_root+0x1c/0x230
[  453.486071][T23172]  ? kernfs_path_from_node+0x2f/0x290
[  453.486095][T23172]  ? kernfs_path_from_node+0x250/0x290
[  453.486118][T23172]  ? kernfs_path_from_node+0x2f/0x290
[  453.486146][T23172]  sysfs_warn_dup+0x8e/0xa0
[  453.486168][T23172]  sysfs_do_create_link_sd+0xc0/0x110
[  453.486194][T23172]  device_add_class_symlinks+0x1cf/0x240
[  453.486219][T23172]  device_add+0x475/0xb50
[  453.486241][T23172]  wiphy_register+0x1ba6/0x28d0
[  453.486278][T23172]  ? __pfx_wiphy_register+0x10/0x10
[  453.486315][T23172]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  453.486340][T23172]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  453.486366][T23172]  ieee80211_register_hw+0x3425/0x4080
[  453.486401][T23172]  ? ieee80211_register_hw+0x14d1/0x4080
[  453.486429][T23172]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  453.486453][T23172]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  453.486484][T23172]  ? __hrtimer_setup+0x187/0x210
[  453.486501][T23172]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  453.486531][T23172]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  453.486572][T23172]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  453.486597][T23172]  ? trace_kmalloc+0x1f/0xd0
[  453.486624][T23172]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  453.486652][T23172]  ? kstrndup+0xbf/0x160
[  453.486680][T23172]  hwsim_new_radio_nl+0xea4/0x1b10
[  453.486708][T23172]  ? __pfx___nla_validate_parse+0x10/0x10
[  453.486745][T23172]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  453.486777][T23172]  ? __nla_parse+0x40/0x60
[  453.486807][T23172]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  453.486838][T23172]  genl_family_rcv_msg_doit+0x212/0x300
[  453.486867][T23172]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  453.486899][T23172]  ? bpf_lsm_capable+0x9/0x20
[  453.486926][T23172]  ? security_capable+0x7e/0x2e0
[  453.486957][T23172]  genl_rcv_msg+0x60e/0x790
[  453.486982][T23172]  ? __pfx_genl_rcv_msg+0x10/0x10
[  453.487002][T23172]  ? __kasan_slab_alloc+0x6c/0x80
[  453.487028][T23172]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  453.487055][T23172]  ? __netlink_lookup+0xbd/0x810
[  453.487071][T23172]  ? rcu_is_watching+0x15/0xb0
[  453.487094][T23172]  netlink_rcv_skb+0x208/0x470
[  453.487123][T23172]  ? __pfx_genl_rcv_msg+0x10/0x10
[  453.487146][T23172]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  453.487180][T23172]  ? lock_release+0x4b/0x3e0
[  453.487210][T23172]  ? down_read+0x1ad/0x2e0
[  453.487230][T23172]  genl_rcv+0x28/0x40
[  453.487249][T23172]  netlink_unicast+0x82f/0x9e0
[  453.487279][T23172]  ? __pfx_netlink_unicast+0x10/0x10
[  453.487349][T23172]  ? netlink_sendmsg+0x642/0xb30
[  453.487380][T23172]  ? skb_put+0x11b/0x210
[  453.487400][T23172]  netlink_sendmsg+0x805/0xb30
[  453.487437][T23172]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.487470][T23172]  ? aa_sock_msg_perm+0xf1/0x1d0
[  453.487489][T23172]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  453.487510][T23172]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.487540][T23172]  __sock_sendmsg+0x219/0x270
[  453.487568][T23172]  ____sys_sendmsg+0x505/0x830
[  453.487591][T23172]  ? __pfx_____sys_sendmsg+0x10/0x10
[  453.487616][T23172]  ? import_iovec+0x74/0xa0
[  453.487639][T23172]  ___sys_sendmsg+0x21f/0x2a0
[  453.487660][T23172]  ? __pfx____sys_sendmsg+0x10/0x10
[  453.487683][T23172]  ? futex_wake+0x4b2/0x560
[  453.487724][T23172]  ? __fget_files+0x2a/0x420
[  453.487740][T23172]  ? __fget_files+0x3a0/0x420
[  453.487761][T23172]  __x64_sys_sendmsg+0x19b/0x260
[  453.487808][T23172]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  453.487835][T23172]  ? rcu_is_watching+0x15/0xb0
[  453.487857][T23172]  ? rcu_is_watching+0x15/0xb0
[  453.487877][T23172]  do_syscall_64+0xfa/0x3b0
[  453.487896][T23172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.487915][T23172]  ? clear_bhb_loop+0x60/0xb0
[  453.487938][T23172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.487957][T23172] RIP: 0033:0x7fab0438ebe9
[  453.487975][T23172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  453.487993][T23172] RSP: 002b:00007fab051d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  453.488015][T23172] RAX: ffffffffffffffda RBX: 00007fab045b5fa0 RCX: 00007fab0438ebe9
[  453.488030][T23172] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  453.488044][T23172] RBP: 00007fab04411e19 R08: 0000000000000000 R09: 0000000000000000
[  453.488057][T23172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  453.488068][T23172] R13: 00007fab045b6038 R14: 00007fab045b5fa0 R15: 00007ffdd3cc71d8
[  453.488091][T23172]  </TASK>
[  454.005027][T23177] lo speed is unknown, defaulting to 1000
[  454.173731][T23177] wg1 speed is unknown, defaulting to 1000
[  454.193361][T23189] __nla_validate_parse: 4 callbacks suppressed
[  454.193384][T23189] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5110'.
[  454.238906][T23189] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5110'.
[  454.290921][T23191] netlink: 'syz.2.5110': attribute type 5 has an invalid length.
[  454.735632][T23198] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5111'.
[  454.854700][T23215] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5116'.
[  454.988554][T23222] siw: device registration error -23
[  455.061845][T23219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5117'.
[  455.079795][T23226] sctp: [Deprecated]: syz.3.5118 (pid 23226) Use of struct sctp_assoc_value in delayed_ack socket option.
[  455.079795][T23226] Use struct sctp_sack_info instead
[  455.108646][T23219] netlink: 'syz.1.5117': attribute type 4 has an invalid length.
[  455.139742][T23225] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5118'.
[  455.147586][T23219] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5117'.
[  455.387227][T23231] lo speed is unknown, defaulting to 1000
[  455.425861][T23238] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5121'.
[  455.455825][T23238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5121'.
[  455.710584][T23231] wg1 speed is unknown, defaulting to 1000
[  455.807020][T23251] netlink: 'syz.4.5124': attribute type 1 has an invalid length.
[  455.820539][T23251] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5124'.
[  455.842343][T23254] netlink: 'syz.4.5124': attribute type 1 has an invalid length.
[  456.693976][T23290] netlink: 'syz.1.5135': attribute type 10 has an invalid length.
[  456.709879][T23290] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.724526][T23290] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  456.917532][T23296] dvmrp1: tun_chr_ioctl cmd 1074025677
[  456.924130][T23296] dvmrp1: linktype set to 773
[  457.092183][T23301] team0: Port device vlan0 removed
[  457.104629][T23301] vlan0 (unregistering): Released all slaves
[  457.213858][T23308] pim6reg: entered allmulticast mode
[  457.455091][T23334] bridge4: entered promiscuous mode
[  457.525164][T23343] net_ratelimit: 12 callbacks suppressed
[  457.525187][T23343] openvswitch: netlink: Message has 8 unknown bytes.
[  457.553122][T23343] sctp: [Deprecated]: syz.3.5150 (pid 23343) Use of struct sctp_assoc_value in delayed_ack socket option.
[  457.553122][T23343] Use struct sctp_sack_info instead
[  457.599972][T23343] sctp: [Deprecated]: syz.3.5150 (pid 23343) Use of struct sctp_assoc_value in delayed_ack socket option.
[  457.599972][T23343] Use struct sctp_sack_info instead
[  457.627596][T23350] FAULT_INJECTION: forcing a failure.
[  457.627596][T23350] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  457.659373][T23350] CPU: 1 UID: 0 PID: 23350 Comm: syz.1.5152 Not tainted syzkaller #0 PREEMPT(full) 
[  457.659406][T23350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  457.659421][T23350] Call Trace:
[  457.659429][T23350]  <TASK>
[  457.659438][T23350]  dump_stack_lvl+0x189/0x250
[  457.659470][T23350]  ? __pfx____ratelimit+0x10/0x10
[  457.659500][T23350]  ? __pfx_dump_stack_lvl+0x10/0x10
[  457.659526][T23350]  ? __pfx__printk+0x10/0x10
[  457.659553][T23350]  ? __might_fault+0xb0/0x130
[  457.659588][T23350]  ? rcu_is_watching+0x15/0xb0
[  457.659611][T23350]  should_fail_ex+0x414/0x560
[  457.659642][T23350]  _copy_from_user+0x2d/0xb0
[  457.659668][T23350]  kstrtouint_from_user+0xc4/0x170
[  457.659701][T23350]  ? __might_fault+0xb0/0x130
[  457.659729][T23350]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  457.659777][T23350]  ? vfs_write+0x211/0xb30
[  457.659803][T23350]  ? rcu_is_watching+0x15/0xb0
[  457.659826][T23350]  proc_fail_nth_write+0x88/0x200
[  457.659851][T23350]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  457.659876][T23350]  ? security_file_permission+0x75/0x290
[  457.659904][T23350]  ? preempt_count_add+0x91/0x1a0
[  457.659937][T23350]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  457.659962][T23350]  vfs_write+0x27e/0xb30
[  457.659994][T23350]  ? __pfx_vfs_write+0x10/0x10
[  457.660027][T23350]  ? __fget_files+0x3a0/0x420
[  457.660045][T23350]  ? __fget_files+0x2a/0x420
[  457.660068][T23350]  ksys_write+0x145/0x250
[  457.660098][T23350]  ? __pfx_ksys_write+0x10/0x10
[  457.660124][T23350]  ? rcu_is_watching+0x15/0xb0
[  457.660148][T23350]  ? rcu_is_watching+0x15/0xb0
[  457.660171][T23350]  do_syscall_64+0xfa/0x3b0
[  457.660191][T23350]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.660213][T23350]  ? clear_bhb_loop+0x60/0xb0
[  457.660238][T23350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.660259][T23350] RIP: 0033:0x7feac7d8d69f
[  457.660278][T23350] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  457.660298][T23350] RSP: 002b:00007feac8bd8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  457.660322][T23350] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feac7d8d69f
[  457.660338][T23350] RDX: 0000000000000001 RSI: 00007feac8bd80a0 RDI: 0000000000000005
[  457.660353][T23350] RBP: 00007feac8bd8090 R08: 0000000000000000 R09: 0000000000000000
[  457.660367][T23350] R10: 0000000004000000 R11: 0000000000000293 R12: 0000000000000001
[  457.660381][T23350] R13: 00007feac7fb6038 R14: 00007feac7fb5fa0 R15: 00007ffcaa27f1f8
[  457.660406][T23350]  </TASK>
[  458.100382][T23360] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  458.111959][T23360] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.172438][T23360] syzkaller0: entered promiscuous mode
[  458.188578][T23360] syzkaller0: entered allmulticast mode
[  458.212508][T23360] tipc: Resetting bearer <eth:syzkaller0>
[  458.243520][T23358] tipc: Resetting bearer <eth:syzkaller0>
[  458.275613][T23358] tipc: Disabling bearer <eth:syzkaller0>
[  458.337005][T23375] team0: Mode changed to "activebackup"
[  458.347912][T23375] team0: Port device vlan0 added
[  458.451619][T23379] lo speed is unknown, defaulting to 1000
[  458.631600][T23379] wg1 speed is unknown, defaulting to 1000
[  459.015871][T23407] netlink: 'syz.1.5169': attribute type 1 has an invalid length.
[  459.024143][T23407] netlink: 'syz.1.5169': attribute type 1 has an invalid length.
[  459.033205][T23407] netlink: 'syz.1.5169': attribute type 2 has an invalid length.
[  459.053880][T23407] netlink: 'syz.1.5169': attribute type 1 has an invalid length.
[  459.066256][T23407] netlink: 'syz.1.5169': attribute type 2 has an invalid length.
[  459.089376][T23407] netlink: 'syz.1.5169': attribute type 2 has an invalid length.
[  459.365166][T23422] __nla_validate_parse: 8 callbacks suppressed
[  459.365189][T23422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5172'.
[  459.691608][T23435] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001
[  459.706088][T23434] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  459.858757][T23449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5180'.
[  459.901495][T23453] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5182'.
[  460.112244][T23467] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  460.231312][T23477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5188'.
[  460.283168][T23481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  460.496770][T23474] lo speed is unknown, defaulting to 1000
[  460.602251][T23474] wg1 speed is unknown, defaulting to 1000
[  460.664931][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5193'.
[  461.385857][T23528] FAULT_INJECTION: forcing a failure.
[  461.385857][T23528] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  461.422063][T23528] CPU: 1 UID: 0 PID: 23528 Comm: syz.0.5203 Not tainted syzkaller #0 PREEMPT(full) 
[  461.422093][T23528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  461.422107][T23528] Call Trace:
[  461.422117][T23528]  <TASK>
[  461.422126][T23528]  dump_stack_lvl+0x189/0x250
[  461.422159][T23528]  ? __pfx____ratelimit+0x10/0x10
[  461.422190][T23528]  ? __pfx_dump_stack_lvl+0x10/0x10
[  461.422216][T23528]  ? __pfx__printk+0x10/0x10
[  461.422243][T23528]  ? __might_fault+0xb0/0x130
[  461.422278][T23528]  ? rcu_is_watching+0x15/0xb0
[  461.422302][T23528]  should_fail_ex+0x414/0x560
[  461.422335][T23528]  _copy_from_user+0x2d/0xb0
[  461.422361][T23528]  do_sock_getsockopt+0x17d/0x450
[  461.422386][T23528]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  461.422419][T23528]  ? rcu_needs_cpu+0xa0/0xb0
[  461.422441][T23528]  ? ksys_write+0x1e1/0x250
[  461.422483][T23528]  __x64_sys_getsockopt+0x1a5/0x250
[  461.422505][T23528]  ? rcu_needs_cpu+0xa0/0xb0
[  461.422527][T23528]  ? rcu_needs_cpu+0xa0/0xb0
[  461.422549][T23528]  do_syscall_64+0xfa/0x3b0
[  461.422571][T23528]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.422592][T23528]  ? clear_bhb_loop+0x60/0xb0
[  461.422616][T23528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.422637][T23528] RIP: 0033:0x7fab0438ebe9
[  461.422657][T23528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  461.422677][T23528] RSP: 002b:00007fab051d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  461.422701][T23528] RAX: ffffffffffffffda RBX: 00007fab045b5fa0 RCX: 00007fab0438ebe9
[  461.422718][T23528] RDX: 0000000000000003 RSI: 0000000000000113 RDI: 0000000000000003
[  461.422732][T23528] RBP: 00007fab051d5090 R08: 0000000000000000 R09: 0000000000000000
[  461.422746][T23528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  461.422759][T23528] R13: 00007fab045b6038 R14: 00007fab045b5fa0 R15: 00007ffdd3cc71d8
[  461.422785][T23528]  </TASK>
[  461.926505][T23551] lo speed is unknown, defaulting to 1000
[  462.128946][T23557] ip6erspan0: refused to change device tx_queue_len
[  462.175422][T23551] wg1 speed is unknown, defaulting to 1000
[  462.218390][T23559] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  462.398799][T23573] FAULT_INJECTION: forcing a failure.
[  462.398799][T23573] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  462.413684][T23573] CPU: 1 UID: 0 PID: 23573 Comm: syz.2.5217 Not tainted syzkaller #0 PREEMPT(full) 
[  462.413714][T23573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  462.413737][T23573] Call Trace:
[  462.413746][T23573]  <TASK>
[  462.413755][T23573]  dump_stack_lvl+0x189/0x250
[  462.413788][T23573]  ? __pfx____ratelimit+0x10/0x10
[  462.413819][T23573]  ? __pfx_dump_stack_lvl+0x10/0x10
[  462.413844][T23573]  ? __pfx__printk+0x10/0x10
[  462.413877][T23573]  ? rcu_is_watching+0x15/0xb0
[  462.413900][T23573]  should_fail_ex+0x414/0x560
[  462.413930][T23573]  _copy_to_user+0x31/0xb0
[  462.413955][T23573]  simple_read_from_buffer+0xe1/0x170
[  462.413989][T23573]  proc_fail_nth_read+0x1b3/0x220
[  462.414015][T23573]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  462.414040][T23573]  ? rw_verify_area+0x2a6/0x4d0
[  462.414067][T23573]  ? irqentry_exit+0x74/0x90
[  462.414096][T23573]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  462.414121][T23573]  vfs_read+0x1fd/0xa30
[  462.414150][T23573]  ? __pfx_pep_getsockopt+0x10/0x10
[  462.414182][T23573]  ? __pfx_vfs_read+0x10/0x10
[  462.414208][T23573]  ? __get_user_nocheck_8+0x20/0x20
[  462.414237][T23573]  ? pep_getsockopt+0x75/0x2e0
[  462.414264][T23573]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  462.414316][T23573]  ? do_sock_getsockopt+0x372/0x450
[  462.414336][T23573]  ? fdget_pos+0x54/0x320
[  462.414361][T23573]  ksys_read+0x145/0x250
[  462.414389][T23573]  ? __pfx_ksys_read+0x10/0x10
[  462.414417][T23573]  ? __x64_sys_getsockopt+0x1a5/0x250
[  462.414441][T23573]  ? rcu_is_watching+0x15/0xb0
[  462.414463][T23573]  do_syscall_64+0xfa/0x3b0
[  462.414481][T23573]  ? rcu_is_watching+0x15/0xb0
[  462.414502][T23573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.414523][T23573]  ? clear_bhb_loop+0x60/0xb0
[  462.414548][T23573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.414569][T23573] RIP: 0033:0x7f4302d8d5fc
[  462.414588][T23573] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  462.414620][T23573] RSP: 002b:00007f4303b82030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  462.414643][T23573] RAX: ffffffffffffffda RBX: 00007f4302fb5fa0 RCX: 00007f4302d8d5fc
[  462.414659][T23573] RDX: 000000000000000f RSI: 00007f4303b820a0 RDI: 0000000000000004
[  462.414679][T23573] RBP: 00007f4303b82090 R08: 0000000000000000 R09: 0000000000000000
[  462.414698][T23573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.414712][T23573] R13: 00007f4302fb6038 R14: 00007f4302fb5fa0 R15: 00007fffba2648e8
[  462.414740][T23573]  </TASK>
[  462.429117][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5218'.
[  462.519828][T23575] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  462.783216][T23576] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  462.973739][T23590] macsec2: entered promiscuous mode
[  463.000999][T23590] macsec2: entered allmulticast mode
[  463.007318][T23590] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode
[  463.263719][T23613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5229'.
[  463.284031][T23612] netlink: 'syz.4.5228': attribute type 1 has an invalid length.
[  463.330231][T23612] 8021q: adding VLAN 0 to HW filter on device bond3
[  463.348780][T23618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5228'.
[  463.431281][T23616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5231'.
[  463.442561][T23616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5231'.
[  464.107470][T23667] IPVS: Unknown mcast interface: pim6reg1
[  464.202798][T23669] sctp: [Deprecated]: syz.1.5249 (pid 23669) Use of int in max_burst socket option.
[  464.202798][T23669] Use struct sctp_assoc_value instead
[  464.366771][T23684] netlink: 'syz.1.5251': attribute type 1 has an invalid length.
[  464.400091][T23685] lo speed is unknown, defaulting to 1000
[  464.633906][T23685] wg1 speed is unknown, defaulting to 1000
[  464.837960][T23702] lo speed is unknown, defaulting to 1000
[  465.156981][T23720] __nla_validate_parse: 6 callbacks suppressed
[  465.157004][T23720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5261'.
[  465.205675][T23702] wg1 speed is unknown, defaulting to 1000
[  465.891107][T23751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5268'.
[  466.237669][T23778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5272'.
[  466.272444][T23775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5277'.
[  466.530245][T23785] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  466.560277][T11070] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  466.620192][T21941] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  466.973986][T23808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5286'.
[  467.121922][T23808] syzkaller1: entered promiscuous mode
[  467.127673][T23808] syzkaller1: entered allmulticast mode
[  467.327089][T23824] lo speed is unknown, defaulting to 1000
[  467.392611][T23827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5294'.
[  467.403023][T23827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5294'.
[  467.416121][T23827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5294'.
[  467.434565][T23827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5294'.
[  467.457123][T23827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5294'.
[  467.560371][T23824] wg1 speed is unknown, defaulting to 1000
[  467.707635][T23850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.734601][T23851] lo speed is unknown, defaulting to 1000
[  467.741290][T23850] syzkaller0: entered promiscuous mode
[  467.751870][T23850] syzkaller0: entered allmulticast mode
[  467.783892][T23850] tipc: Resetting bearer <eth:syzkaller0>
[  467.797540][T23849] tipc: Resetting bearer <eth:syzkaller0>
[  467.805163][T23849] tipc: Disabling bearer <eth:syzkaller0>
[  467.873822][T23851] wg1 speed is unknown, defaulting to 1000
[  468.026915][T23861] syzkaller0: entered promiscuous mode
[  468.047926][T23861] syzkaller0: entered allmulticast mode
[  468.207250][T23869] lo speed is unknown, defaulting to 1000
[  468.299152][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  468.525124][T23882] kthread_run failed with err -4
[  468.534569][T23889] netlink: 'syz.0.5316': attribute type 10 has an invalid length.
[  468.559452][T23869] wg1 speed is unknown, defaulting to 1000
[  468.601033][T23889] batadv_slave_0: entered promiscuous mode
[  468.738055][T23889] lo speed is unknown, defaulting to 1000
[  469.176508][T23893] lo speed is unknown, defaulting to 1000
[  469.191799][T23910] macsec1: entered promiscuous mode
[  469.197895][T23910] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode
[  469.208411][T23889] wg1 speed is unknown, defaulting to 1000
[  469.221693][T23910] macsec1: entered allmulticast mode
[  469.227747][T23910] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode
[  469.302440][T23915] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.398795][T23915] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.483248][T23915] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.502686][T23893] wg1 speed is unknown, defaulting to 1000
[  469.575513][T23915] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.771440][T13552] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.834991][T13552] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.916212][   T61] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.951950][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.179910][T23943] __nla_validate_parse: 13 callbacks suppressed
[  470.179934][T23943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5331'.
[  470.215424][T23943] pim6reg: entered allmulticast mode
[  470.224837][T23944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5332'.
[  470.245285][T23943] pim6reg: left allmulticast mode
[  470.253195][T23944] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5332'.
[  470.442903][T23953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5336'.
[  470.473584][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5336'.
[  470.498609][T23953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.531898][T23954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.571449][T23961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5338'.
[  470.834190][T23973] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5342'.
[  470.905605][T23978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5345'.
[  470.928022][T23978] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5345'.
[  471.000859][T23978] lo speed is unknown, defaulting to 1000
[  471.041850][T23984] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5346'.
[  471.076386][T23984] netlink: 'syz.1.5346': attribute type 13 has an invalid length.
[  471.089422][T23986] netlink: 'syz.1.5346': attribute type 13 has an invalid length.
[  471.100545][T23984] netlink: 'syz.1.5346': attribute type 17 has an invalid length.
[  471.111209][T23986] netlink: 'syz.1.5346': attribute type 17 has an invalid length.
[  471.216303][T23984] ip6_vti0: left promiscuous mode
[  471.228671][T23984] ip6_vti0: left allmulticast mode
[  471.320047][T23984] 8021q: adding VLAN 0 to HW filter on device bond0
[  471.344985][T23984] 8021q: adding VLAN 0 to HW filter on device team0
[  471.363176][T23984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  471.412071][T23986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  471.447756][T23995] vlan0: entered promiscuous mode
[  471.458309][T23995] vlan0: entered allmulticast mode
[  471.473383][T23995] bond0: entered allmulticast mode
[  471.482197][T23983] lo speed is unknown, defaulting to 1000
[  471.492766][T23978] wg1 speed is unknown, defaulting to 1000
[  471.844546][T23983] wg1 speed is unknown, defaulting to 1000
[  471.914438][T24011] can: request_module (can-proto-0) failed.
[  471.975657][T24011] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  472.322556][T24034] tc_dump_action: action bad kind
[  472.456638][T24037] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  472.492258][T24048] netlink: 'syz.3.5366': attribute type 1 has an invalid length.
[  472.556114][T24045] lo speed is unknown, defaulting to 1000
[  472.732373][T24054] IPVS: Scheduler module ip_vs_sip not found
[  473.222093][T24045] wg1 speed is unknown, defaulting to 1000
[  473.574327][T24100] openvswitch: netlink: IPv4 tun info is not correct
[  473.930495][   T31] audit: type=1800 audit(1755846707.117:17): pid=24122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5392" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2142 res=0 errno=0
[  473.998167][T24128] FAULT_INJECTION: forcing a failure.
[  473.998167][T24128] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  474.023716][T24128] CPU: 1 UID: 0 PID: 24128 Comm: syz.1.5393 Not tainted syzkaller #0 PREEMPT(full) 
[  474.023751][T24128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  474.023766][T24128] Call Trace:
[  474.023776][T24128]  <TASK>
[  474.023785][T24128]  dump_stack_lvl+0x189/0x250
[  474.023820][T24128]  ? __pfx____ratelimit+0x10/0x10
[  474.023863][T24128]  ? __pfx_dump_stack_lvl+0x10/0x10
[  474.023901][T24128]  ? __pfx__printk+0x10/0x10
[  474.023929][T24128]  ? __might_fault+0xb0/0x130
[  474.023963][T24128]  ? rcu_is_watching+0x15/0xb0
[  474.023987][T24128]  should_fail_ex+0x414/0x560
[  474.024019][T24128]  _copy_from_user+0x2d/0xb0
[  474.024048][T24128]  ___sys_sendmsg+0x158/0x2a0
[  474.024074][T24128]  ? __pfx____sys_sendmsg+0x10/0x10
[  474.024114][T24128]  ? __fget_files+0x2a/0x420
[  474.024132][T24128]  ? __fget_files+0x3a0/0x420
[  474.024156][T24128]  __x64_sys_sendmsg+0x19b/0x260
[  474.024180][T24128]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  474.024210][T24128]  ? rcu_is_watching+0x15/0xb0
[  474.024234][T24128]  ? rcu_is_watching+0x15/0xb0
[  474.024257][T24128]  do_syscall_64+0xfa/0x3b0
[  474.024278][T24128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.024301][T24128]  ? clear_bhb_loop+0x60/0xb0
[  474.024326][T24128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.024348][T24128] RIP: 0033:0x7feac7d8ebe9
[  474.024369][T24128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  474.024390][T24128] RSP: 002b:00007feac8bd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  474.024415][T24128] RAX: ffffffffffffffda RBX: 00007feac7fb5fa0 RCX: 00007feac7d8ebe9
[  474.024434][T24128] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003
[  474.024448][T24128] RBP: 00007feac8bd8090 R08: 0000000000000000 R09: 0000000000000000
[  474.024462][T24128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.024476][T24128] R13: 00007feac7fb6038 R14: 00007feac7fb5fa0 R15: 00007ffcaa27f1f8
[  474.024501][T24128]  </TASK>
[  474.030959][T24129] netlink: 'syz.4.5391': attribute type 21 has an invalid length.
[  474.287538][T24129] netlink: 'syz.4.5391': attribute type 4 has an invalid length.
[  474.297348][T24129] netlink: 'syz.4.5391': attribute type 3 has an invalid length.
[  474.492637][T24142] vlan3: entered promiscuous mode
[  474.498057][T24142] bridge0: entered promiscuous mode
[  474.734596][T24157] netlink: 'syz.2.5401': attribute type 21 has an invalid length.
[  474.796203][T24157] netlink: 'syz.2.5401': attribute type 5 has an invalid length.
[  474.873250][T24152] lo speed is unknown, defaulting to 1000
[  474.962169][T24167] FAULT_INJECTION: forcing a failure.
[  474.962169][T24167] name failslab, interval 1, probability 0, space 0, times 0
[  475.038623][T24167] CPU: 0 UID: 0 PID: 24167 Comm: syz.2.5404 Not tainted syzkaller #0 PREEMPT(full) 
[  475.038651][T24167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  475.038663][T24167] Call Trace:
[  475.038671][T24167]  <TASK>
[  475.038681][T24167]  dump_stack_lvl+0x189/0x250
[  475.038713][T24167]  ? __pfx____ratelimit+0x10/0x10
[  475.038745][T24167]  ? __pfx_dump_stack_lvl+0x10/0x10
[  475.038771][T24167]  ? __pfx__printk+0x10/0x10
[  475.038803][T24167]  ? fs_reclaim_acquire+0x7d/0x100
[  475.038849][T24167]  ? rcu_is_watching+0x15/0xb0
[  475.038871][T24167]  ? __pfx___might_resched+0x10/0x10
[  475.038891][T24167]  ? lock_acquire+0x5f/0x360
[  475.038924][T24167]  should_fail_ex+0x414/0x560
[  475.038957][T24167]  should_failslab+0xa8/0x100
[  475.038991][T24167]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  475.039023][T24167]  ? __alloc_skb+0x112/0x2d0
[  475.039043][T24167]  __alloc_skb+0x112/0x2d0
[  475.039070][T24167]  netlink_sendmsg+0x5c6/0xb30
[  475.039110][T24167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  475.039145][T24167]  ? aa_sock_msg_perm+0xf1/0x1d0
[  475.039167][T24167]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  475.039190][T24167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  475.039222][T24167]  __sock_sendmsg+0x219/0x270
[  475.039252][T24167]  ____sys_sendmsg+0x505/0x830
[  475.039278][T24167]  ? __pfx_____sys_sendmsg+0x10/0x10
[  475.039307][T24167]  ? import_iovec+0x74/0xa0
[  475.039333][T24167]  ___sys_sendmsg+0x21f/0x2a0
[  475.039356][T24167]  ? __pfx____sys_sendmsg+0x10/0x10
[  475.039397][T24167]  ? __fget_files+0x2a/0x420
[  475.039416][T24167]  ? __fget_files+0x3a0/0x420
[  475.039440][T24167]  __x64_sys_sendmsg+0x19b/0x260
[  475.039465][T24167]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  475.039494][T24167]  ? __pfx_ksys_write+0x10/0x10
[  475.039521][T24167]  ? rcu_is_watching+0x15/0xb0
[  475.039545][T24167]  ? rcu_is_watching+0x15/0xb0
[  475.039569][T24167]  do_syscall_64+0xfa/0x3b0
[  475.039590][T24167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.039612][T24167]  ? clear_bhb_loop+0x60/0xb0
[  475.039637][T24167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.039659][T24167] RIP: 0033:0x7f4302d8ebe9
[  475.039679][T24167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  475.039701][T24167] RSP: 002b:00007f4303b82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  475.039725][T24167] RAX: ffffffffffffffda RBX: 00007f4302fb5fa0 RCX: 00007f4302d8ebe9
[  475.039742][T24167] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003
[  475.039757][T24167] RBP: 00007f4303b82090 R08: 0000000000000000 R09: 0000000000000000
[  475.039772][T24167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.039786][T24167] R13: 00007f4302fb6038 R14: 00007f4302fb5fa0 R15: 00007fffba2648e8
[  475.039813][T24167]  </TASK>
[  475.344865][T24152] wg1 speed is unknown, defaulting to 1000
[  475.484949][T24174] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  475.880884][T24182] lo speed is unknown, defaulting to 1000
[  476.121367][T24182] wg1 speed is unknown, defaulting to 1000
[  476.125123][T24208] netlink: 'syz.0.5413': attribute type 1 has an invalid length.
[  476.136424][T24204] sock: sock_set_timeout: `syz.1.5412' (pid 24204) tries to set negative timeout
[  476.197737][T24212] bond7: entered promiscuous mode
[  476.215930][T24212] bond7: entered allmulticast mode
[  476.240241][T24212] 8021q: adding VLAN 0 to HW filter on device bond7
[  476.305800][T24208] bridge5: entered promiscuous mode
[  476.312544][   T12] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  476.364200][T24208] bridge5: entered allmulticast mode
[  476.394973][T24208] bond7: (slave bridge5): Enslaving as an active interface with an up link
[  476.451206][   T12] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  476.504075][T24212] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI
[  476.516392][T24212] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67]
[  476.526235][T24212] CPU: 0 UID: 0 PID: 24212 Comm: syz.0.5413 Not tainted syzkaller #0 PREEMPT(full) 
[  476.535856][T24212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  476.546577][T24212] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690
[  476.552539][T24212] Code: 19 25 bb f7 c6 05 d8 d5 88 05 01 48 c7 c7 00 a1 9e 8c be 97 05 00 00 48 c7 c2 80 a1 9e 8c e8 6a ff 98 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 34 8e 1e f8 4d 8b 2c 24 4d 39 f5
[  476.573483][T24212] RSP: 0018:ffffc9000f47e8f8 EFLAGS: 00010206
[  476.579972][T24212] RAX: ffffffff8a0485e5 RBX: 000000001fffe1ac RCX: 0000000000080000
[  476.588240][T24212] RDX: ffffc9002218a000 RSI: 000000000000e46d RDI: 000000000000e46e
[  476.596776][T24212] RBP: ffff888058b9b420 R08: ffffffff8f5381e7 R09: 1ffffffff1ea703c
[  476.605299][T24212] R10: dffffc0000000000 R11: fffffbfff1ea703d R12: 00000000ffff0d60
[  476.613559][T24212] R13: dffffc0000000000 R14: ffff88803155ee00 R15: 1ffff1100b173684
[  476.622087][T24212] FS:  00007fab051b46c0(0000) GS:ffff888125c1a000(0000) knlGS:0000000000000000
[  476.631270][T24212] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  476.638020][T24212] CR2: 00007ffd58a35fc8 CR3: 000000004cbb4000 CR4: 00000000003526f0
[  476.646540][T24212] Call Trace:
[  476.649943][T24212]  <TASK>
[  476.653191][T24212]  inetdev_event+0x2a7/0x15b0
[  476.658081][T24212]  ? __pfx_inetdev_event+0x10/0x10
[  476.663691][T24212]  notifier_call_chain+0x1b3/0x3e0
[  476.669098][T24212]  __dev_notify_flags+0x18d/0x2e0
[  476.674246][T24212]  ? __pfx___dev_notify_flags+0x10/0x10
[  476.679992][T24212]  ? __dev_change_flags+0x4cc/0x6d0
[  476.685563][T24212]  ? __pfx___dev_change_flags+0x10/0x10
[  476.691510][T24212]  ? netif_state_change+0x256/0x3a0
[  476.696943][T24212]  ? __pfx_netif_state_change+0x10/0x10
[  476.702571][T24212]  netif_change_flags+0xe8/0x1a0
[  476.707730][T24212]  do_setlink+0xc55/0x41c0
[  476.712225][T24212]  ? rcu_is_watching+0x15/0xb0
[  476.717554][T24212]  ? __schedule+0x17ae/0x4cc0
[  476.722459][T24212]  ? __pfx_do_setlink+0x10/0x10
[  476.727667][T24212]  ? do_raw_spin_lock+0x121/0x290
[  476.733240][T24212]  ? rcu_is_watching+0x15/0xb0
[  476.738158][T24212]  ? rcu_is_watching+0x15/0xb0
[  476.743377][T24212]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  476.749681][T24212]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  476.756480][T24212]  ? rcu_is_watching+0x15/0xb0
[  476.761887][T24212]  ? __mutex_lock+0xd3b/0x1350
[  476.766767][T24212]  ? __mutex_lock+0x5bb/0x1350
[  476.771651][T24212]  ? rtnl_newlink+0x8db/0x1c70
[  476.776711][T24212]  ? __pfx___mutex_lock+0x10/0x10
[  476.781855][T24212]  ? ns_capable+0x8a/0xf0
[  476.786208][T24212]  ? rtnl_link_get_net_capable+0x16a/0x350
[  476.792205][T24212]  rtnl_newlink+0x149f/0x1c70
[  476.797095][T24212]  ? netlink_sendmsg+0x805/0xb30
[  476.802062][T24212]  ? __pfx_rtnl_newlink+0x10/0x10
[  476.807141][T24212]  ? rcu_is_watching+0x15/0xb0
[  476.811933][T24212]  ? nlmon_xmit+0xb0/0x100
[  476.816963][T24212]  ? kmem_cache_free+0x18f/0x400
[  476.822016][T24212]  ? rcu_is_watching+0x15/0xb0
[  476.826915][T24212]  ? __dev_queue_xmit+0x27b/0x3b50
[  476.832048][T24212]  ? __local_bh_enable_ip+0x12d/0x1c0
[  476.837666][T24212]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  476.843598][T24212]  ? __dev_queue_xmit+0x27b/0x3b50
[  476.849557][T24212]  ? lock_release+0x4b/0x3e0
[  476.854388][T24212]  ? __dev_queue_xmit+0x27b/0x3b50
[  476.859888][T24212]  ? __dev_queue_xmit+0x27b/0x3b50
[  476.866388][T24212]  ? __dev_queue_xmit+0x1d79/0x3b50
[  476.871823][T24212]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  476.876979][T24212]  ? rcu_is_watching+0x15/0xb0
[  476.882293][T24212]  ? lock_release+0x4b/0x3e0
[  476.887270][T24212]  ? bpf_lsm_capable+0x9/0x20
[  476.892270][T24212]  ? security_capable+0x7e/0x2e0
[  476.897503][T24212]  ? __pfx_rtnl_newlink+0x10/0x10
[  476.902843][T24212]  rtnetlink_rcv_msg+0x7cc/0xb70
[  476.908256][T24212]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  476.914279][T24212]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  476.920179][T24212]  ? ref_tracker_free+0x63a/0x7d0
[  476.925944][T24212]  ? __asan_memcpy+0x40/0x70
[  476.931273][T24212]  ? __pfx_ref_tracker_free+0x10/0x10
[  476.937862][T24212]  netlink_rcv_skb+0x208/0x470
[  476.943329][T24212]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  476.949411][T24212]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  476.955225][T24212]  netlink_unicast+0x82f/0x9e0
[  476.960614][T24212]  ? __pfx_netlink_unicast+0x10/0x10
[  476.966222][T24212]  ? netlink_sendmsg+0x642/0xb30
[  476.971806][T24212]  ? skb_put+0x11b/0x210
[  476.976525][T24212]  netlink_sendmsg+0x805/0xb30
[  476.981870][T24212]  ? __pfx_netlink_sendmsg+0x10/0x10
[  476.987658][T24212]  ? aa_sock_msg_perm+0xf1/0x1d0
[  476.992831][T24212]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  476.998512][T24212]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.004036][T24212]  __sock_sendmsg+0x219/0x270
[  477.009277][T24212]  ____sys_sendmsg+0x505/0x830
[  477.014454][T24212]  ? __pfx_____sys_sendmsg+0x10/0x10
[  477.020033][T24212]  ? import_iovec+0x74/0xa0
[  477.024822][T24212]  ___sys_sendmsg+0x21f/0x2a0
[  477.030001][T24212]  ? __pfx____sys_sendmsg+0x10/0x10
[  477.035331][T24212]  ? __fget_files+0x2a/0x420
[  477.040383][T24212]  ? __fget_files+0x3a0/0x420
[  477.045412][T24212]  __x64_sys_sendmsg+0x19b/0x260
[  477.050512][T24212]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  477.056433][T24212]  ? rcu_is_watching+0x15/0xb0
[  477.061240][T24212]  ? trace_sys_enter+0x25/0x100
[  477.066137][T24212]  do_syscall_64+0xfa/0x3b0
[  477.071207][T24212]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.077492][T24212]  ? clear_bhb_loop+0x60/0xb0
[  477.082470][T24212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.088754][T24212] RIP: 0033:0x7fab0438ebe9
[  477.093274][T24212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  477.113611][T24212] RSP: 002b:00007fab051b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.122483][T24212] RAX: ffffffffffffffda RBX: 00007fab045b6090 RCX: 00007fab0438ebe9
[  477.131108][T24212] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  477.139897][T24212] RBP: 00007fab04411e19 R08: 0000000000000000 R09: 0000000000000000
[  477.150584][T24212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  477.160256][T24212] R13: 00007fab045b6128 R14: 00007fab045b6090 R15: 00007ffdd3cc71d8
[  477.169430][T24212]  </TASK>
[  477.172573][T24212] Modules linked in:
[  477.180042][T24212] ---[ end trace 0000000000000000 ]---
[  477.194991][T24233] netlink: 'syz.3.5421': attribute type 1 has an invalid length.
[  477.199302][   T94] block nbd2: Possible stuck request ffff8880253e5080: control (read@0,1024B). Runtime 180 seconds
[  477.214627][   T94] block nbd2: Possible stuck request ffff8880253e5240: control (read@1024,1024B). Runtime 180 seconds
[  477.226369][   T94] block nbd2: Possible stuck request ffff8880253e5400: control (read@2048,1024B). Runtime 180 seconds
[  477.227601][T24212] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690
[  477.238166][   T94] block nbd2: Possible stuck request ffff8880253e55c0: control (read@3072,1024B). Runtime 180 seconds
[  477.258933][T24212] Code: 19 25 bb f7 c6 05 d8 d5 88 05 01 48 c7 c7 00 a1 9e 8c be 97 05 00 00 48 c7 c2 80 a1 9e 8c e8 6a ff 98 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 34 8e 1e f8 4d 8b 2c 24 4d 39 f5
[  477.286348][T24212] RSP: 0018:ffffc9000f47e8f8 EFLAGS: 00010206
[  477.292947][T24212] RAX: ffffffff8a0485e5 RBX: 000000001fffe1ac RCX: 0000000000080000
[  477.301780][T24212] RDX: ffffc9002218a000 RSI: 000000000000e46d RDI: 000000000000e46e
[  477.310916][T24212] RBP: ffff888058b9b420 R08: ffffffff8f5381e7 R09: 1ffffffff1ea703c
[  477.322552][T24212] R10: dffffc0000000000 R11: fffffbfff1ea703d R12: 00000000ffff0d60
[  477.330985][T24212] R13: dffffc0000000000 R14: ffff88803155ee00 R15: 1ffff1100b173684
[  477.340187][T24212] FS:  00007fab051b46c0(0000) GS:ffff888125c1a000(0000) knlGS:0000000000000000
[  477.350533][T24212] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  477.357643][T24212] CR2: 0000001b337feff8 CR3: 000000004cbb4000 CR4: 00000000003526f0
[  477.366558][T24212] Kernel panic - not syncing: Fatal exception
[  477.374058][T24212] Kernel Offset: disabled
[  477.378509][T24212] Rebooting in 86400 seconds..