last executing test programs:

2.23875499s ago: executing program 1 (id=7097):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket(0x10, 0x3, 0x0) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000010000000000000000008500000054000000850000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f880000004d000f"], 0x90}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

2.109151899s ago: executing program 2 (id=7099):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="666b668238d3752a4b17a4919feda8860b4b5594", @ANYRES16=r2, @ANYBLOB="0700020000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400050004000100"], 0x38}}, 0x4814)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10)
sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
bind$packet(r4, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r7, &(0x7f00000000c0)={@val={0x8, 0xf5}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast}, {{0x4e20, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x38, r9, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b00ce1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c6d83af}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004020}, 0x20000010)

1.969483323s ago: executing program 1 (id=7101):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
connect$inet6(r0, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0)

1.740008321s ago: executing program 1 (id=7104):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e00010000000000000000000700ffff", @ANYRES32, @ANYBLOB="000004000a0002"], 0x28}}, 0x40000)

1.676963982s ago: executing program 3 (id=7105):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0xfffffffe, 0x4)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x25}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x32}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff8001}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40005)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x0, 0x1ff, 0x27c0, <r2=>0x0}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)={r2, 0xc97, 0x1, [0x3]}, 0xa)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40040)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x1000, 0x6, 0x401, 0x2447b84a, 0x81, 0xc9fa, 0x3}, 0x9c)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000540), 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'caif0\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000000)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000006c0)={r2, 0x5}, 0x8)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000700)={0x0, @local, @local}, &(0x7f0000000740)=0xc)
r8 = socket(0x2c, 0x5, 0x6)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000780)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e23, 0x1f06, @local, 0x3}], 0xa0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000840)={0x2, [0x0, <r9=>0x0]}, &(0x7f0000000880)=0xc)
syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r0)
sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x144, r11, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c1c04d0670da0323c88be5411bed8ab7bffd18869a0f5f6675801dc952e65383786f60"}}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x401, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7ff}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x52}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x81}, 0x7e0214fb5b677c73)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000b80)={<r12=>r9, 0xda, "4355a95ab7c281e225e1f1bb9f484daa7121bb4d3b58348ddda04efd8904a8fee86a1e5b130b2ba0c56f1cc2c09b4bf0f7e8c11a43ac3c63e0fa1b682540cbf86ef7ce2b64c308584d08a9a52dd9a3d1ffdba47fcc8bf409e1c38063a83d4c5449a89975c77fed0b4bd762c1f363edbe3e92960d6dc433632b4eaf2761b3bdc7b68cfa43ae39e259f66720110a8e1cebd3d380ea6317b9b4b2d6fc4fd408884bba140ca43af1dc262edd3809e977c35e8aa68331b466e818f0b7a4578dbc245d9a046fe8236844f743ebcdf2b6cfeb5fc689394d867535ee0515"}, &(0x7f0000000c80)=0xe2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000cc0)={r12, @in={{0x2, 0x4e24, @multicast1}}, [0x1ff, 0x6d, 0x80000000, 0x0, 0x9, 0x7, 0x9, 0x0, 0xe73, 0x4, 0xfffffffffffffff9, 0x8, 0xffffffff, 0xff, 0xfffffffffffffffe]}, &(0x7f0000000dc0)=0x100)
r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e40), r3)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r13, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)

1.541862896s ago: executing program 1 (id=7107):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000140), 0x2)
syz_emit_ethernet(0x27c, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x246, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5"}, {0x0, 0x1, "0000000500000000260004"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0xb, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {}, {0x0, 0x4, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e"}]}}}}}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r1])
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x81}]}}}]}, 0x44}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x61d8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

1.485333156s ago: executing program 3 (id=7108):
syz_emit_ethernet(0x14, &(0x7f0000002e00)={@random="25f0504a4e97", @local, @void, {@llc={0x4, {@llc={0x0, 0xf4, "bf", "cd7015"}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000)

1.289198466s ago: executing program 2 (id=7111):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={<r2=>0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x9}]}, &(0x7f0000000040)=0x10)
shutdown(r1, 0x2)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0xdb9, 0x7}, &(0x7f0000000180)=0x10)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000b0000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000001c0)={"c4d50000404d81b39d2a5d5a0000f600", <r7=>0x0, 0x0, {0x9, 0x3}, {0x8}, 0xa303, [0x4, 0x6, 0x9, 0x3, 0x4, 0xc, 0x77e2a6d4, 0x7fffffffffffffff, 0xa, 0x0, 0x0, 0x6, 0x10000, 0x204, 0x7, 0xb]})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc}]}], {0x14}}, 0x70}}, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000b40)={{r4}, r7, 0x6, @unused=[0x40, 0x19, 0x8000000000000000], @name="c46619a673fc35e8c653d252231ba6322cce5c0f19ebf965e5f7e520b79a993946c9fa42d25159477fd345aec3c06cd865dd66b4f8539e8b03acf1fdb5b800b1177f72608bc827bc7a06041b33303401ef267c02e604e95413b7c5ef4ea9e40442a03b8ff670eaba921e8d484489964e17d5f8e7388fb4e081f4964266ffe63d44d045fc787a854d81a3ceee399b077b69f49d4028ff1e07b43889e6d8de45330365508640523e6ff93aeee171f4ffd7586546f89d3cdbb1fcbfc06d6b642d550193c5f22cecf0514c0211c3be6bf57ac1c0932cc496a2abf6d41c6cb8cffe319fd0b92ba23068b050baef7acbdd258bfe59d5921e9ebc2cf074be0f96f24876466b6af6e3d50e0eeb09da2d82a9b545b339c9ddf35dd10057ab4a066223667d7036f7d2ccd49e1c40056c2a833b8b34a921b239075f5cec41dd0860beb8c8bf0aa9a49894e60798f56a8539e12e52fd88a372d728e5790eeaf56b1c5d58174ec57b7bf62e0739dda749c46c2e47055e9199ff84bd34e829053799e48d85eb74bb89fc6dc09103912a2cbcec2912cc1cc455978a4dddeab1dbad7a675faaa1b8bccd83d9afd185274a69bc58c66c6c824dcf3dc80be5243b8245986a471b785df75ca5a2a10e2cf09bc0947111044dca9329449801608857bb70739ac19979471b118e05bdae797e42ec8329b0df73a946727f79543249f49b87f11309f01909c8905a18337d3aab0efd827869b144142ce4ce97a54095643ec1dd5e19033e3fb720198589dd858427f104aea52f1f559bacbfb0fe86c19895023325963ed52688639a15a166a7ab475f8f5c5e0849cbc685f93be88aa8d2dc735090e0b7061664a149e6d45dce4062bc488e38038b431c218b94e2286c1fd58c697c07c8814c278cdcd2d5167c68fd4be65ca5f95d5052213ef4c15f1c063d1c2972a429c3e39c36b52252759965b8dfc9ad9893ab90de39d06ade992599df0f580a01ab70af23895f3439f6a0b659108eddf3dd6a8f33f044dd3156efade53103fb71f741919ad826bc1286ad0afa895ead35c914e33bb952b704dcb62eb6cbd35b07f513760e97f9c0cb92a1422f8a68630808c7726f0f88f7540e2f366acf6beddd960746a8f1d7fb839591e2664f859bca0e7effff4a4cdd1b2c897c58445ebc7ea361be2554d861e067371253857cff02bbc9d37f5df5b9b35d939720066e264ea67e9036307bdc10f69893dbb6a1d33a96fcb9502d7e3d43a65d25ebadc3aab29e81fc7a14f458698144ad2541b7ecb892fc2a6ddac6e4313102be4605aba4156db967faf6bad2dbc8f71170c3550ba1f6274b860e0ede08cb83845a23fc2706b0e1710c5930ff711776cce2a47c865207090249230d1c69211fa6edf3f41b62de5226182f5d056e34e71ad9a21e2c0d3d1406e63163749afd3888b874f1bd57d681d1b0bf9301888a03009773239ac8747861464b5f05a6f0ce2487c7f4af7f8066bfcf14b12a0680ffcaf7ff417cf12b609a70ed89d85b0cec4d53daea4635445699108e50098c95aacb69dc6e0e9bf14ca831a5ce2d93295cd399449885ef1cc59264da762837ee09a195a27fd8d893bbaa7505c8201ca65ad755b915bad779d5b3d969b2081bc92a8517ef5b69dad1f31ca839c4f3de2b1adab058674d2b8db8848e08ef674bd9dd4a1ed66209ac5f397fecf332a25c849bd385c15436c2a70d8bedd0f5e33cd70ce641a2b2342b91f4fe9398ee1227de364b594c20834ed353308e26f5e232e68a1df1d34f9915c02fa44856241f648b3b25360315c255d021b03d9c54b5e93462f068812289510367600a802a719aae23e210ef7d254538249ceaa58098fb46a6283415a4e78cea0f99af13f1e380f62ee5fcfafab27433bdfa7397aa9c5f0917e7d6b187200f49279153624554e642c361963c387604ae685a3f2a669ac0346c8b5d01a8a08eb78f34a1edd2ca3766257371008f5c6edfda639c4c004cb5ae89c127da54dfc95578d5fe2547ce34a44582c975abd90c3b901971809ba45a153d6d5f2c576909f56138e284c1a3c5de70fe508dfcb0b02aef70b068cf4399f517778a26948eccbf615db96c0e38899afcf793054d64d3ac8d6f1287f057946c8c5b8d1039d8164bfec10a540a271435a4d1239d786507ce27299b0228ffe85c9cabe98c0eb6b97c1ca8bf4b7b5c816db8bd1364a9293a337574ba3a7f9c88117b06868d76cf2c4e3b6ebff7c1e9ba1bec941b283107c6df1028c80d186017681008881a2608f08839a32cd60b44999892cf5cc76fdff7911bd751e764cedee9435bd4b9d700eb7d10aea69e2f0c8a8e58f35351b12721f4765e485317d84b37311d73b27d8188cf7a4b5126255c59a2fbdc9b112189241fef89644f2fd363df6faf5f378447cb59e3c1bf3fae2eceb6e9d7b2f7b24786ce87c51359adf892ce8006a0cf65d4446bd564767988eceaf3cc6d309fe16b08a2733ac76b742902b31f13e6ee6e2736c7c836a9d67ace83ae463cb4f45e6465cfcf8cc9fabb5500f27fc2a785a724c4414d141ccea585838330216c3dc2d15ec6080979b42fb7338d53f960c699d4ba2e31080ca84da77bbf5cd452a710c5a3807fc994b4daf4cf4539de686bc246c7f584587eec2d7deb538e460b9ddc7cd812387640808cf578fc88fa517e51c1e35ff126587c58ff7c02cc534b52de1c390f19fa5426372b5331b78c09f8393e11308e26713a3698ce7a1c2d176e65f1b445caeee2fcc385657089d28e223231d34bb142eca9a31516274105ec97ae89f633b423eb25da6e623a4246d95a9840fe150229b2e524e45fb842f107302bd4b41fcf72b177c53e9b73b4f348847fabc1807772600e3aa9ce4836e98992c87a63c6e13ab7447bd5e4c01ba6690c5e6759c707b2108b9d813371f0cf50a436574fb4b1fe7cec113f7b9bfaba4801cc8e90bf24c17588edb8513085e6fead2a6c80489d438ffc00e213071be9e58b7f2710a1418a1d9fdbef2974165c7be0d0c914ee1f205ba7ec15d988fe78d21a5396f9f4baf8c2bbdd0e6231b99c5ffaa88cf458d3ab61d818e110f80952e0c1220b6b747ed8f21610f2473fc6d3b53bffff1d225956348a9b4e01df82a4483d76557aeee9f6c5ee405c1df73fe59afe0229c3ef230329507882ff598216bfc397990606e25bc21b3164fdbb2e96988a82b93575734b7dcabe6f1c90d5b5a384b1b3a32e6a2199d7d31ee0975050056a0ea3cab00adbc18fe29d893df795210ed993d44788a07a65724a8cce98ce9d1b53e436e18c1b0bbe842f4fb377919eb5797ac32519277704d9fb3347082a5a2a6dd43104faeb2deab1ef6b71446cd56cd56134497e461a0acb83905944d0de44f0e5f6e02e0b84d9f5dbe1a937bde12205950a62033cee012d6f980aa96bb695ebb25d01fe33acf173119bb62b1962f9ce62ba2560df54af7f93a16ccd5bfaf187c58cea3d128dcd0ae037801e2e3f7781c6f5a17bd743610787a190258e4125ba4e68b364297751e4b959a6f29164ebbfe588b4167b7f8250f485cbadcd689edfd0a820013682f9478496b448388ed2c894eac39ce586b3638dea38beec24097666f96e1c4d1d5c5d398f6a69de73379be2ee7bf3f78565a5f8c4ca43e32ccf97d0c7886a73c654d3d584ce157128365c51fa390a3f002fa2e3e892a57ec1ca892d9a9398ca9e3d43746ee83b51afd9d52e55a9765afa67948037a25acefe9de738271584368a95dfb044acffaedc3cac49acfe933f96225a284dd2788762177a5549bc617f28ff40a80b93c5f26c82247c7181c374bc9aa9c441209d29c78d664fab5869f0dc5491929bbd56b2e77a189767cd755ab268bc34544ddc990f0f4196b514c1d67f3076e10fa008f8a895bbb34322ab27e5545f47eb1343528b0c77b33d5b607753976460ec8e1e8e8f8aaa4b4427f9f34c92eb8fc45c88fd738dd1e5b6431ad0702102646c6cdd062a9a5ff054e264e23c5eb97a31ce4f03dc75615ed2127f1c48fde8a45247e003a6c4689ed6a9e42c8ff7b9d090b364adfbaaf092c76e848809bf9fbe74bd484903727e2d5c04b431a2725c240bbe3840bbbe7c9fde608538eadc051dbd2f377bdcd831bb7fafb6fe9bfddf6b7edc7a9dca2f21e22b39199ffd1b52a9dcc463173ddb923d7a62e3d98401fa73f014bd1f1cd95755806b6cf05e6d891536868c72969cee9a992a9f83faa8d822ece08d35f7d85f0e7895d9fa33a7449edd8c0bbebc15a54cf9b851afd7ad9f0febb90bbe8e944718b5425658185966fbfd162ca64b5a6f32d99e3bb526d22b05cdb9ea1880164f3636823a86c15673220fe28bc775f554c786311b5e3278a8a3f592fb1f2be4e8c7a4b80cdb33201712212360b4ef9b5bea13e88dfe9f98f26d70001449a2869411bed7df6626d77c4f85d9ebf380c33fdb5563530b3b6c4c8af732a96c5279d9789b7852d18dffabeb8e759dab7857a16b1bd1570a9d8fd5c9e80112644a73a8f844ea237c536fd2643a934da3d426811b1b36781acea0fe3a3b814325e2c6082cd0122d8216c776695b2c656df9f108adfef7c66758f3eec1b790548b107dd416b01d602a19da581ccfeb8e6971a3220c0c0bd56f1c8dd0917056136dd5376aee085b377aae1755aba2b0ab7841b210b99978b612f2c21ea81c9a3ff333b1a91a8b438e1809b865c7c2246cd29298adb604abdcecee7d8bc770ec7c9bd7b68c09dc48089b8ea959b843fe8ba3b5e6982cea4fe0f230936703256476ebc1674f9946745fe19603f8dffc8e8fa4d34cd1d938b8cb2bf8116641ac0ed65f8051a8f51f7034c42c3dd1b9f7d539d406b16a2d5a005b8e2f477adcbade787921dab6737d9aee9f0885332810c904b928b3117ea12916b3740c4063189f41484ec4b94989a0be82d96e5f73f784ca469761f364318544cff472eb8227936d212b7591e70d832fb0435d10abf1ef0c3063413954c6661bfc27f946d7f84a89589992864d4626aad38a6f37ad56d46e50486775e551ec34bc7ca98b46bf60d0c85299089125066915807cd8542ea90dd68f224c43452ac788c0e1db51a7505964aaf2a7254cdda51093331b68547baa39b07c0286c22df7df482eb845714fbd1938fcfe4d6f40a7f84b968f6519520ac14530992937812986b4c208c599e7a70fba2283075b723e8c826b34752437d54c54d5192f273ace663cd5e1c64bf2f464b8ef780fe666db8eaf47599b001a9267157cc4c95c0b998e37faf3a4282512a63fbdc4d056818f3c8af15cc63d0392c10c8da00facddabf9ee26f856a6a1f01dc071d98fdd8356d1cf9f5e79f7c53fe578cde1acb8648ecd3f1927f9ad035457a40c3a7e3eeae36f6cfa5e806a45ed5e7f1baea183bf40797389a9732f99f95017509446f77e6e4a83f212e67225cdc9ba5a460789eb6dc1086e3d90e482341e546438fc60a554e06319feaa3d36baca07cdffb431224dc29e64c58cbf67e880701a6b0be1faa7a6f79ed95af61dc7fecc48b698c5255399bb693eab0059463e73ef4b246dc59a333f1a89cbe906b93aa868d987b2385f2d0a0e33a462a1d2ac02e1dff5772fd65c0f968d24c5d795aa4a501c625ec6590c22164a7f00760554ce65160a3ebbed2f912fdaef33b8c9e5f31197fd8822ad884ef13208d414631313b583bf7fe0a1d737c0dfef2bdf75f6"})
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)

1.165202257s ago: executing program 3 (id=7112):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt(r0, 0x1, 0x1e, 0x0, &(0x7f00000004c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000380), 0x4)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x577801, 0x100408)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x0, 0x8001, {{0x6, 0x4, 0x1, 0x11, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, {[@lsrr={0x83, 0x3, 0xfc}]}}}}})
ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0x0, 0x4, 0xfa, 0xffff}, {0x7f, 0x3, 0x5, 0x5}, {0x7f, 0x80, 0xf8, 0x7}, {0x87ea, 0x6, 0x4, 0x7f}, {0x8, 0xa4, 0x8, 0x2}, {0x7, 0x0, 0x4, 0x3a}, {0xd, 0x1, 0x81, 0x8001}]})

1.153475688s ago: executing program 4 (id=7113):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x1aa8}, @val={0x2, 0x1, 0x6, 0xffff, 0x7fff, 0x406}, @arp=@generic={0x325, 0x6007, 0x6, 0x6, 0x9, @local, "9224220b5c2a", @empty, "7d852d7c6eaf4acf4b96abc58681"}}, 0x36)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000009"], 0x108}}, 0x0)

1.102512862s ago: executing program 0 (id=7114):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0xfffffe70}, 0x90) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800030000001917feaf9800000000000000000000028e4800", @ANYRES32=0x0], 0x18}}, 0x0) (async, rerun: 64)
socket$kcm(0xa, 0x922000000003, 0x11) (async, rerun: 64)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r4], 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, 0x0, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES16=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}}, 0x10) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xffffffffffffff09, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async)
r9 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r9, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r9) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100008018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850003000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r8}, 0xc)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
getpeername(r10, &(0x7f0000000200)=@l2tp6, &(0x7f0000000280)=0x80)

897.389374ms ago: executing program 2 (id=7115):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffe}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '('}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x84}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5949da15}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20004010)

825.372951ms ago: executing program 0 (id=7116):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r1=>0x0})
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES8=r0], 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0xef9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e21, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10}, @in={0x2, 0x4e21, @private=0xa010102}], 0x48)

822.483748ms ago: executing program 4 (id=7117):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e00010000000000000000000700ffff", @ANYRES32, @ANYBLOB="000004000a0002"], 0x28}}, 0x40000)

739.610359ms ago: executing program 2 (id=7118):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x66, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x44}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0xf, 0x2)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x66, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x44}}, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async)
sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async)
recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0xf, 0x2) (async)

654.767351ms ago: executing program 0 (id=7119):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000340)={@remote}, 0x14) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, 0x0) (async)
sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="017030aa336ae35c9a0002000000", @ANYRES64=r5, @ANYRES64=r6], 0x14}}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000580)={'team0\x00', <r7=>0x0})
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x38f7}, [@exit, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2aa, 0x6a, &(0x7f0000000280)=""/106, 0x41100, 0xb, '\x00', r7, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x3, 0x4, 0x2}, 0x10, 0x3, 0xffffffffffffffff, 0x6, &(0x7f0000000380)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x7, 0x2, 0x0, 0xa}, {0x1, 0x3, 0x3, 0x8}, {0x4, 0x2, 0x4, 0x7}, {0x5, 0x4, 0x10, 0x5}, {0x0, 0x1, 0x4, 0xb}, {0x4, 0x2, 0x9, 0x1}], 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94)

605.345725ms ago: executing program 4 (id=7120):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', <r1=>0x0}) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000040)) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @broadcast}, 0x10)

600.22674ms ago: executing program 3 (id=7121):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="666b668238d3752a4b17a4919feda8860b4b5594", @ANYRES16=r2, @ANYBLOB="0700020000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400050004000100"], 0x38}}, 0x4814)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10)
sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
bind$packet(r4, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r7, &(0x7f00000000c0)={@val={0x8, 0xf5}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast}, {{0x4e20, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x38, r9, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b00ce1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c6d83af}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004020}, 0x20000010)

474.64909ms ago: executing program 4 (id=7122):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000010000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10)

459.77933ms ago: executing program 0 (id=7123):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002200)=@delchain={0x43c, 0x65, 0x400, 0x70bd2d, 0x447, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x10, 0xc}, {0xe, 0x1}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xcebe, 0x5, 0x0, 0x8001, 0x5, 0x5, 0x6, 0x4, 0xfffffff9, 0x9, 0xffffffa9, 0xf, 0x10000, 0xfffffff7, 0x1, 0x5, 0x9, 0x7f, 0x3, 0x3, 0x5, 0xfffffff7, 0x40000000, 0x9, 0xbd9, 0xd93, 0x3, 0x10000, 0x1, 0x200, 0x401, 0x4, 0x6, 0xef6, 0x9, 0x0, 0x2, 0x15, 0x5, 0x4, 0xffff, 0xb33, 0x3, 0x1, 0xd944, 0x8, 0x6, 0x1000, 0xffffbf05, 0x6, 0x7, 0x7ff, 0xe000000, 0xaba, 0x2, 0xfc000000, 0xfffff001, 0xd, 0xee, 0x6f, 0x87, 0x847, 0x0, 0xfffffff9, 0x0, 0x9, 0x3, 0x3, 0xc, 0x7ff, 0x0, 0x7f, 0x4, 0x2, 0x0, 0x69, 0x6, 0x1, 0x8, 0x9, 0x8000, 0x2, 0x8, 0xf31a, 0x0, 0x7, 0x800, 0x6, 0xc, 0x88, 0x26a7, 0x400, 0x1, 0x0, 0xb905, 0x0, 0x40, 0xe1, 0x80000001, 0x8, 0xe4, 0x3, 0x9f33, 0x9, 0x2, 0xb, 0x3, 0x7, 0x9, 0x4, 0x7, 0x10, 0x3, 0x8, 0x7, 0x559c, 0x8, 0x9, 0x200, 0x7, 0xc99, 0x7, 0x200, 0x3, 0x29, 0xc7d, 0x9, 0xff, 0x5, 0x81, 0xffffffff, 0x8, 0x10001, 0x1, 0x0, 0x2, 0x8, 0x8, 0x6, 0x9, 0xfffff36f, 0x81, 0x0, 0x9, 0x6, 0x1000, 0x2497410, 0x5, 0x0, 0x4, 0x4ec, 0x5, 0x8, 0xb3e, 0x9, 0x9, 0x9, 0xd2e, 0x4, 0xfffff001, 0x6, 0x2, 0xff, 0x7, 0x7, 0x7, 0x9, 0x5, 0x5, 0x2, 0x2, 0xb01, 0x3ff, 0x7f, 0xa8c, 0x1, 0x40, 0x7, 0x0, 0x3, 0x1, 0x3, 0x6, 0x1, 0x81, 0x1, 0x6, 0x7, 0x2, 0x6, 0x6, 0x4, 0x0, 0xffffffed, 0x5, 0x5, 0x80, 0x0, 0x4, 0x8, 0x4, 0xffffffff, 0x200, 0x3ff, 0x1, 0xfffffff7, 0x3, 0x61, 0x1ff, 0x9, 0x101, 0x5, 0x5, 0xad, 0xee, 0x6, 0x1, 0x4, 0x4, 0x8000, 0x3, 0x0, 0xd6cdc0a, 0x6, 0x1, 0x2, 0xffffffff, 0x5, 0x7, 0x3, 0x6, 0x9, 0xd896, 0x9, 0x1, 0x2, 0xea4, 0xffff, 0x5, 0xffffff18, 0xffff0dab, 0x5637, 0x3, 0x3, 0x2a, 0xc0000000, 0x7, 0x3ff, 0x8c34, 0x5, 0x5, 0x7, 0x6, 0x5, 0x6]}]}]}}]}, 0x43c}}, 0x0)
recvmmsg(r5, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004d492714c8", @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001003500000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff0f0000360000000800050007000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x0)

311.844881ms ago: executing program 2 (id=7124):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendto$rxrpc(r1, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800d00000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="12cdde26e7c496e99a9cf8625ec9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

289.061498ms ago: executing program 1 (id=7125):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
connect$inet6(r0, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0)

260.189441ms ago: executing program 0 (id=7126):
syz_emit_ethernet(0x1e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@can={0xc, {{0x4}, 0x5, 0x1, 0x0, 0x0, "8184c4a28b64d029"}}}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async, rerun: 32)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) (async, rerun: 32)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3f096d47}, 0x1c)
close(r1)
socket$alg(0x26, 0x5, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
syz_emit_ethernet(0x32, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'veth0\x00', @remote})
writev(r1, &(0x7f0000000180)=[{&(0x7f00000006c0)="39be9058a38bd31e1bf8999c159479bf2cee814999e6601bc0a49bfcbdbc0c292a36cb6320c3408eb9df60188b5a7a9c189eb08f41726b2c8d25a789f199c47deaf0e5d90c0c0be83e648703c902ed8fcde4f88b650dfc318bc9438067189ee18fa1b92a4e06938b46ec51eedf1c3337634020cdbb4d988a3480ec600a560b754832d35008baf0af512a3d6a8734db4230cc42371274984bcf1520a57199304d91229699bb39d46604c3f80aade6494483bfaaa0cc09f7b866b4208eeb5dfa9ea0b7df4070331ad85f70a1724119ffbbf27cad7ae13dc1f6862172d1200b", 0xde}, {&(0x7f00000007c0)="7d6248c2e57b6fab8d62360838ac8fbbecdb0b9358a8fddcfe818943bf50804b3ef8c327b96b069251f4990a016dec503c2f8cf75496f8582a2c54f95cf1d68b3a722709b600b98c7fcbfab497da4bafc39b9249f28bf7ec89f463fe76d85ecb4138364f7e253c854cede81917791d3af2bdd8ef2f8465b120923b03c2a15f1c1a8f549895ca2f00a7d6b30893f12aecbfc5357353f50095c7a3b6870a9d7f367c03a8de8a1576dba9a199c846d943f9d21ee2be6138d6a163b304d7ef00e4686938b39b4eacb62094bf58146d8feb87e40ffb37021867013d2a5e5b5e6bb6375abbaad61564861b8ceb77c7b85c2e465c597ce4edb0d72e82fa127f680eb03413f71d3aae7588501168d40131e942252f03165ebc3508edb087be3f150b680e259733e3893955b5311d8af9523cccb2e46b5938f5bf344a0351c033715fcb93ec5e987cc0d61abdfbb5902522de6bd5978097b000b4703057e38ed2438e09178685d8fcb7ac4ff5d3c5d0c3d25fb82bf9b66a232b68e52e580acd947cf6b2dbcb4a6163c34d9f5e4bbda7cf7d82ce4d9e64293bf9b08ad39ba3937014bc1c60b723e5f9b4e1afdff6df2f1101a7b51ee70c451a4ab6a39c823293328cc3c333deac2beec949763b28677d06c47ecdc960f59ec0977f388064152771b34f1f8c400e5e02cb8e5f54532c0a7b8e96cff6572776f76ea0990607edf5ced22ea46019ac6237d49d01016ced81475aaa3e7c774a0a92d2fa449d71b7d96d327e7a65bcc8bf4f32233acbe6ba35a4885a8e27b9c6643cda419f09d5bf08e7f3f1dd849125dc8d53ce1fa4ec7592da322c5247416740d63eb75c3c2fccd69bd9370de937e0427c2c705ffd938debc77fd24af6f2921830a4b4894d775d09901352abf624bddd238f31fb3622f214cf026847ef0a5741b5f9bca5c98a9fb604c1530d09c0c56ddf3bb33d0a9f96572a4b606cdffc4a6cd884accd38d459dda6e96072f7561d5bc43f863bf0896b4cababaafeb5f0b79c5a722efb97cd646b40a8239be858b58d338ac77fdf57181dba62dd3bde517582b1f7cb2427f80ab414190ecc4cfaff06000de57b42a8a1b53ba71627777ffb6bc36fab3f65b570c571473e13a7b52ae6593e891ad95cc9cb47fc1d055e74b7ffc2689a2477f64516930f3f91e8e2639c79a0605d2bf44c87c144223739dd0e0aca3d2bfda19ffff5fbe8e261653f5ea1ee4cc6076ea403ce08841b5c3cec4d3ffeb1345d108551cc01d3e7e16f8e2675a169f96abb6b01575bcce00490627ef5d3e3c37cfe88e226852ecdfc334da3d4018c1479a17f1ac4d9e22c28a58957766d93abe394ed2e699ab95478f264d4462485d3a2a1fea51cb005a28b6badc041872d25b594fa5700c8a25e85c9ff511b5fa7128c46557433e8c27671394c82f086e4159a1b83ea8831777e3ef202376e3792a6ab1a06271bb5bcce2cb358401a50b6b181fe753cd342ff6a490623aaea350de5e667cc327789ef1507739d54eb7ed977097fee833a7e961caa466dd3b9cb50c8ef78a400c0a529df35e810585a0b1a39676419ea1a5aefe88250e63f45df673f2c698f21464fa5265fd8b04af073e8906378257e710187fe811804ac9c7221eb0043cbbaf5555b620e9a35f26250e30902407b74e94b4ca96496b53f0b49a1026868741abc58b280143d9a8e7a12b8e950a96e56b69d10ef155f86ccd3a2ddf3a97621d9f5e86d034b6b857c05ead90f2119ff07363003b099b0298be4d0b9285bd7860e260231e94d90204007141c4ddc17e60b79f53bcf7f31feb9612b39222039b2db15d392e35e3a3c6e0ff3e360df8073e4ce05152ec682d1b4045ad6f2a10a69c1e77fecfd1f3abdbf055d63087db3cb37731fad8bfe60292a877545585761970c3e9d5cd1fbfbbbf084b19775efe7825815dab3f62b2fe8165968f0967c1006ce26c1701660024c5103b48aa6a4e1da54928e8eb8ce150297a32ffc036abf42f0c66e1e8d5df6d0046e050c4663f788e14e0594ec4af1fdd26c03b14035f78d02352d6d83e341a4c00948749ea407676915a43b13e6549c3b7cc6d8c057f5ad3c5e3bb96d2c02adc5ca85d73b032fc8eddac9cf4e72d991fa1d6fe443ca8c1b566302100840fb2e1f5ec7943526e3baac9455cf2e1d9b33f542932996ee5c32aae55c22637509887527f5d71db60d671b76ce280ad6c20f829395c78502dd268f94d3a7a19a7443123b317f8c869b62698a89de72c61e8cd81fad70f04fd228ff1f35951ec44ae219b16c8be074db4b203eb51c9ac4fd332a271758438ff50f9d0ed1a9dfaa846f036610197294f14cd911252cba1d83ac3786109a700e711451de82a3962c6b69ed157ca7068359437d6f5c8ac8d3cbc98ad0becdfbbe08f8498678e4c9d55b4958dd863d19a44ee1a75d2416f0d4c981e9a07187a1083329adb8bbcb9bec979e8caf65573c397c741e3de63a3a8631ae4937ec71d87fcfeabd43352bdee9a7ccf34b0179e683450005a2b0ac749ef63a3a6800cafc9d9afe770546d5e46bb829ad07fb7c7a3f5cb2e848f64c38c3fbd55c1705e88194d8e75d04e4d174765b3e146d6ca4e89f01e45cc098844151c3ff28e3f55adb640da9886cbb732c02e75f94ed3cfa4c0835dea2f55b051550c3044445eb8eab1a26b661f4d0987bd5006c431e0b7837c303dadda323006f627c38745d3d02ba7cfeb23459fe224bf4da43b195ea191724daa987708b0da1f75596f1635ad5fe671b65821bcb2e85c48fbb4d3b6734bce340600e24396f0ff8be71a3c1cd1cb92aaa1d0869cd3b76f2211b849e2a182c83e288bb3b46749ab0ee2e42bcac69c2fc7c6c3a8c5c73983057361c4f4432d4cf08b038c3d72276cfe77938f6fc41afde104835330f3490b643b74482dd9f6e040503141c415abc3807f4a673e0bbd370ec9911240263783a70c0a0e1ef41ecb05cc6c127d433444d07565c8451b06f75ba58485fd0a0c53c80e25def772a80bf1eb93ddd3bea90c735dca12817d2e9a83ae0c3fe17be7a1fd8382c391c0945b982422d301cdb6f3de483ffd8e5917a14ea926fb14ac59ae3a68f74a6ddc98956de683dbd3870e96a81b3625e05db68ea4cdac9bd06aad1ecda6f475dee3b4ad9b33ba4383866f282f7b9e26593aac3b2f2de6edfcd19199468c1d8b3da3fb1aa76842f2d958758fa9f59a294389b269e9734663edfdda1051adc43be63b3ec1b40f9dc9717254663fae106db1c40f1dcc85237b1a7a0f8d1193f57bf3416e5fdc0b8a55a49ff0859372d57b50a7ea7a22db2bccfe8dc4653d694a30cca1cf550e50bd7f75e3ceaaae9baf78c52c7c0bb9a1a09f752b21cec19faa15dfd3833b576bffaf80b453fbc77ba4b5eba73c71bbd96bf84b31f5549f1e3e49da59111465b2229ba4a4f8176f4355031229d9d1da0df4611029051ca7cf9f06b7dce307cf9465307368b165ee2ce726900b92e960067d4f9316472d0ca15a09e5952e39ec8efcf24c21cfa95f11eb433ec99557090152f74d1b33bf3ee3bd8eeddca6ec68cd08192e03c7c96ccdc1f15b695bcaf5dabde2d50e17c333d51ee8dae50bf01471fa4f24b81d4f69b0b409e94621a0781c215a7c69cead51e471c6d0fd923323dd6767120b799b643bc0025dced40901bc8227395c0f22a75bccb82cd37018a2be9ee0244828d3581185150758c1871bd2097346bf66d41e006093bbf2797c96cd3dde01ac881036652f19e9eac1644fdacf20a2c9cfb8273bc3d29fd2978cc1ed1b300de6f575d3d9856c5587901fee06d472b1ec38af13694163f720e4efae362071a4446de5820d97e411bec43ead441a623a7fbc8974140beea9480784c503d440fe3c22ca8ad6b3db77043fb1d7f8cede7e23d3bd3cd1d58d03c3152d7b2bd464c5040f02077ee13bd7f58df5859fb81cc577a1f22254182fddf3fec9b189a69179d3a4cfde6a0b0f468173a0cdc10dcab9c1d6dae65e3692ed9de3cce4225fa4d0eb81fe28f00adb018d38c1610acb6438a3a4b02781b70db648d98b7154af6b8faeebb91841850041df4d599be9127cee0e587a711c5d7b40361a8596b99b7af59b2596722e6e2257bb0045f1ba3858581129a9b43bd1125b484aad6fda3063c0a35f533afcb7148a7a4cba57fdaa19bdd24c32ef2e1a421e24ec9e609b865a568086d74ac2e20690633cae915ed5a59cc6033f853c2377b7a4fa1b9a9cf39b169e7b840528c9e785e5b9b35e30fc2f82f380b1e8b9209e349828a5640a846383764b32f081d4f7a6eda4ef3b7f9ce48dca10a6d1a6759908cafd4d89fac03b7586ed802f098ab83b60dd6ec03ec949a7b100b1613873e0a464cb503fbac349fc797b25ecd1a1755c82f4ecce4729acb004aac0e1d68ef8a7b869918e6923e967f06d018de98312671213df562f478479a7722f8e273a5ff54ddf51db96384734fb4dc23b351646b171e692a1b80417d4b448778af3f54f2ff9fe241369115a63d1bc8dd5743e2ed13f415c69f20179cfcfc606bef7a4d3f7fa92ef78e6edde51d6a5a4547433119aefbbf8606a1ecd09cd64a4e7bb56ae0909efc37bdf2cd74224e64994a4560d62890949f669cd9654d64692cfd8fb59ca1d628ba07960fa168869648b6e257625c4b806bc387d464fcc256eac41e5dc289bcd43255be14128fbbfa2b4698a9757dcf99a91945d0abb321051943ae823f032e5a262947fc775ca8b8b982513faf4d416a358fe99317dd036a807c25ea53861b0601892abeeb0cf16a23fc31256ee25adef314675e96119f29f65a619511665dbd5590cb0b1582e675089893670e168fe9d22d950e2091bd6242071c803e4953ecac5016ce4f366b2617795df06cc58bb5f3eeecd4a0e0891d41f8c71f477babab2b1195d8118bb78ee484407f6a335543ed89b63dbdcba5126b0b1ef8347b57542a1fbe504682f63e6d345ddbe69094fe17db42784f86bceaa7565c6b155ad36792436cd8e39a439819f76ed85d416d7ca895a931ecc52bb5882a5a0439b025328a23282d3c6d6a370218e58864f554a5e91faf17e173c2b34eed7d1423c51f89437853f739926b6258a6e227e19b9f643e35ec3f2bb068c6444b8b348832d898abddd621cb7c9133739ecba0592ed40ebdfb58739b8d165e858b56c2b21db7337da0181fb704e9a2198e05e44b1e3c49c042246687258dfc8890d79dae5bcb92e57e6235d6b8441c2f5c1e71486d981fd11eeae2cf99e379437f68e86bf35fa49c862d8354a6b1a2fcd929ee9069b8a10e1f89dd7289adb07057293fd4472972fc500d2a8c71a7c8c6bd6f8a0f52e5816fab603c9c8a0a6eeead884fda8573d634a9f0e8b56b4f9a41ea38497f0a709906b25a09d5e0faaf879444ae580770650a17728f4f571f71fccc5b74b33470ac392b0ff9ca12b7b8b2b882c51802f28b63dced243a2fd75bfe944e533db459beefe052b9449efb985fe75c7ec9b7c35a6bd4448da7b246b17d26a2ed90d3b3445c33b23a1e8dd37bf792fb8d2a150206647b0f6a03578741a41e35cb3f81b7604dc270c3d3d80a03e5c81044e87a796273083e9cc330de467fd9cf87ebf0c50122ce117912d922c498554672f764739aa9fbddd5eec004067674a5d6cbc6d252b904e4c394f4cfa7fc5d6e3b54ee260e32d92b9f5f59feb64804bf38556331fba0925f2ebb4ad4e9d0e23daed4623f91d28679b07307b022e74b9df515663b67c4217e90c93f899092090a80c42ab69cab9c8a6c948d6edf33c8", 0x1000}, {&(0x7f00000017c0)="ad4a5deec154305af46a8b7c1bc48ff00a889acbf77b557bc15025ec0f936855ac000a66a5553caaf7197eb25aff63ae101beb015cb836538836148fcebfb9bf37336cef15063153d367cfdbd82bdb9eb6063d678561eea888c4d594dc1a5f837ebbec251493f0dec60bd62f223258905e0bfbd8a0baaa553e3a62aac7f0f1e088deb8975f48694c2bf622910a0e57b9c38871dff8f0dcf6a30c956264f59fa0cc733196016f7962041f8a91cc3657f482fa50f2d1239cc77e97e9350142ba5a9038e7505740b2c4ec56864620a16e9321f6177902c735e600660445ef54861b6d82", 0xe2}, {&(0x7f00000022c0)="6848495681f4a24f3309e8740ad7edf1a4d2377ae18569bcf89be97dccc4bc347afdf5423ddf375d08e7f70b2047adfbebe1a201bd3149eba6d3e2d58cf8462c3417e0862f3ed2755f6eeec98335b3578e0ba8f9915b69eba47e6d1eaa229d5c658e164e38bea8d47c18c12f9c3e8362a455897344649b364dde100e623f69777e2b016040778d17a13262760a1fc91338ce20b521096a7d75700dea1dfbdb2b5afe4851d7994a0646b9a9a3e24a8cdcedf01b92dd744934f89f2b6c08e5a491330e6ac91f04275ef11fb5a3d3d7ada56c72d0ea46c4a8c69776d9abe247136394f674d2827cb246462a35d3f3abef8ef303e2a333d56015a78c5f592219e58b7cda0f08c4ff598c614cea8f082b0c8d9256084e5df7684726fed0bac7c3dbd1b439c70721dde3d8f74c890f8bfe9ee7d3d957f4f886e3f7965e4b2907c0d90c29a72b77eb8d14869a7a3621665e7ebfdca81f90a8178a706a74d42930475732e7574a318a2465736b69a923bb55bf28c8fa1b842e6c87bc845ec50c8c8a00d893ff4af4fec07f60c63de999a92e37e4cdfaec52852c872180f7df638070c41f50e2c53a33d4646ae0238129d51f589461ad877f6666670ac005f0dd10d260930e40c38362b84c7510965531aa6f6a057fdb962f9eb3e042bd759e7190f9eb41964a38dbc175e6db1f28d4e5a6bbe8cd0dea35ae342c44a23826b2148b8b0b37f83f2ed9c6c5e06f6d6050e8ca0111d668727e1c9e27634f2c02185dc19e2d7b06f55b28d8efc49f9f1a80ca0bba94ff6d7cb85ef057df269352ddc2f7dc55de9a98c6ad7b3ea78465297f424081c3a14210a8927b307d680db5e8b832161be60726fea0844a67bd7953e9de011d38fc041ed22cb7f4e15e0f54e675e8778a3a26be3c596465ca8fa37b6ae6533a86ecb93500072548ac2534a9137691ef5b6bfcad801c9158a2e68f6ec0629834c8532af8dc57969dbf08e94e422b4c737bbd2278fcc03e0f3be42281348d1b943404e997b308e7feef995320a4b87013e6e830813cd7a62cca82741feba9905a0c240fb6005ae52bf35c4b2d12f2e182e642cc563c0c487f328a5ce1ca955e1867f82814d20c4d10f9d90e99cd58cd6f9344e5d33c9d20c685556fe1a5ec356e4399edd7e0a1ed81b55c1579c563121e1d29f6e24e3adba29d2650c925d06de66b49e17d3cfa83db544e10c483a25b260d407b52196d92d4bcdfb4f845f0e43ea4ae3c10755b98ed928dbc490eb0a2dcefed35cc25f4099bcdd9aa99647274865f5d137db234e0475c60edefa572a72c47af93e5aceb9539cf46a06acb7ad40fae38131b3e28331bc80d5b6397f0aaef66afab742a677bfc112a719272fd810b9c44b83efd2a2dc5cbbf43e88dc1171b6cc703338cb2c9675eb6d73db94ee6a7f8b3e31dd3c2042d4d4a7954826b1955795c07d5f1342e4996d47fcc56e811391648f054d5a373b089f38f4cbedb67bfac7638eb9834c49a85096f63cb77c7377413207b02db50010843ca0d5336e521b0dae425b2a117d35cd584ea5f6c1efbeb2b142c9183661f45d54d03ddb15b781e6488105702bf634ac2af61ad4ea46dfc75b2f96eb794f524e8e1cd56068e11b9aaa498394e4a5c8d32a73d14196a37dc5c69ed2a164be9c2602b885b5b4fca65f9f6da2b2d7387cbc28a6d31e5f46ace89c03c78271c12a2dcfc8822fd91f0f6b55f12bcc2739bd842604542990de2eb6bce7da0e25b5d5a207f58085a750b45c202f4976190f7546f3badcee1fb9d0725fd043bb2fa758d925febb34b3d4213f461633a641aa614ddb839b61ba0e2a9a355e32c87d1ed517f22c2f8a25c8df738c1ed1414b2af94ab75c4dada6f9cc3950eecf37f32b434d92a141c3c8aae20a5945c53a9071b837d63b5b6e490f145c090e57f98cd0b2fa80297dd40ee053eb7815038d90299aaa1b718993ccac37146785a1ca512b93d595b7cb97abd37b1e149ee978f7e1a4a93ca87b98b75d2aba781853a26cf00b8a2ab6da026378861d23fb82706b8e91013295159c842ba13467632d5ae09c8d6dc870e108d0b01aa49dbd9a90afcd9f256d54179073c359f33c6d46e54b00528958b6ef5e475fcd02137f371aa7e283605b9e3cb7de1d4695940b42978a8ec57425fe020750e434d9b0baaf0d1ebc9bc2dfc2a65885beb7a27109f8c6e7fe2b36f40502a600b069154187f4aa883e318c31295c07aaef8d1af76be1842d97e6ed8930286f1f5db64c7c99a9ebde7906a0b16e46203e4836204c3671e57d75566fcd1e621d0390a4e4c958119aee163dfaf755880ee79054e2f0b57f3ac8a8c8c3aee75f300fb7639aa32108fe13f97c3adbc27f481b2314ad25d4bcae890875e14a11ebd9ead25ac90cd342652f92bd63c8d0ad9bf2222b375fed03b8e26fdbe5e160702b441611e9b57cd349412538a853d345cb4fa08775d434a903dff20c2d3242b480718f6e043cbff22b9b03d37d0d2a088601c52593a0f6209bd944089628d153f1a4746cd60346be19d0074afe2af90c614dfdccc0dd783d10ce38da6b9b61f28f77951a1d939cc62ff09582414b483e93843f7725fd1b962a605dd03971b1bf03586f4bad3a40e1fa8392deeaa8662e4828ffd0161cb044c99327423c9f6ca30a045f777c367fdcc39fdeb321e368801c1b2e2ada330c209eb9b32e302716dfbdc7c703d0f1c206ba65b1f3702ffc84f629cbf0c47962690c1957370edc2d9637f30d3d7df2fb0f5d1031304c1ca58024e90f2e63d754cccf45d29d4d8d46a4bc8c560da35c637aa3e28d09f7676af43cd78b3a897f67473474e4fade602f7af1aecace9c04cdbd90f584ab48c5addb7bddac39d61c80525f1b968e0e33d72c7bfe97d2599f23669c2a6a553b3b3e6de81d55a8d44920919ea65d65137f0bf1ed1158a26a8e6808dcee6d5e47bfa2f26642c188468aea720120531edb083aa685f341318aa534364e0ce3ce2bd7ae798d109ef4dfb88ce87c895916f4d8ba6d7f2c5dd990c0bbcd53862efa21ff45c528b8bbf1e8762f36b4c1cb15b736f60e90cc84437c5237a6a8cceb4f6f59731e8a9d44e20b4cd34624425caf7cb0485b9453e0086d6e135e37752007f87d224dc470292d79a474e07cc276910d6a7eb293c58df3f7cbf8ffaae583cd949315459c4cd138fe68db9e435cab50a8deb6ab03e44b15ddba88556b2df11fc690ef679614b377e470c16c36996b65f55ab187c64e386546a96ef571f1d90a56dee1732e9e29cf223692ec58fc065036abab69b20e3f3f6e512c79e2b3ef05c8f6b4c7418da8ce76af277be8defa8a909a642373f5a0d5c5067d060d0503d01bf510b0b84b18e4d270c5d00f821579e70d3ba02df18d7508266696c873c45731fde51bab7ce92ea7190ddc9b9c609a8593f1c54ccdc2d995854c4f374a540c510f759982c043aa3097f8520706ad24b121188676e9d8f22c5c3eddd9c7213747d2ee90749433f6252da2ece16ec75ca755102c5213f79563e97138705b85a88465ea9acdc1f06826f3ec87a96e13b3f4bb72d30d5350b23ac06f8603f5402b709553bcc4cfd50f9f4013847ec254ffebe437175a9342316aef801e8c77d9b7829aead670d57c9c3c9b763e4b549f16879d739dff74abdd2b85b146ced5f5fdb791afe8313d38b8aec59850eec7bebd75e861a6661c4c44d3345cc8717d7a33504e65e001103f86f25558dc21a3830203e3218cbf402d727405e761fa79e750a5157b13cd739a51be28b7f54d15e8e7c64defc23d041f53ad1f11dacaf8faa84a389668081e4619547ff74d7f8a592f148bb5fb9cd401ce4f74ce366efac4d90c6f9a959705eeb8aaa934ab6722de260002305dbcd26dd4c6d0eb06631068f95bed2a48d50e15e01b8320260a3b714cef8a647b5742056cba6eaa955494ad731d77d9fd6042456c0f1e1693d850a4ccebc8f0f810b4d8426db29e5b099eca5d7d1e31fb9773b0bbd5efc00ce0f308d711f15d7eabfec96458259b2113cf1233a9acd31fead0bdaa35f723f4937a36aedc7e4ca3cc7c531663372af38edfd7755e555ff7cb298430b594a08361dce36f9e01d63c2e39757630515adace0aadd9d0f566402ae91f4fb916e2405e00ca1dfc508f2d11fca308a2daa2aab93c2ba1de8b15314fd5d295f2d49b0aa9b5739b32be6c0a5db8e41b1fc1860442735a7524254c7e36b5c8e44f1544ddb87474abe6380fb887247ae6df014ffd2f3b7a1013f51debdaa5f114edc4bd76a2c3bafe8d4da27706a7e7bb6567d267705e47c25c5513f74b9afc45f4a2c0b19bf1c96e9425fe40d7394461b83dfbe05b0987fc9fca59758c54bafd60109f8fc9d0eb61a28d3a841f8f1914a55718306876ab9d4cfc8c1b309c66f05844ad449f378316ef2c7fd0734b92f86aa58d37f9e395a744203b1173a18be25686bb99b5e3dfc369857caa9b0d6aff1035b32cfb3b84660a78e847119ad5b211a69f962f6d213567549365c4c6b64ad56a6db126540e71bfac38b06a4ab551de4b3b916267f9a19a30317b4d8c1aa5da4fad0c7823f8d3d9a89e7d1a9d3fd660789db7b7d5756e6855b1fbbe64283cfa36773f479fd529c1514bcd3c2176390f97069d130813406e03b74afff9f9ae33ffaf787fad7bf52713b5ba855cb13c3b6ca541e1d98d5c5e0240b0cb5d693bbac2e92fac60dac5ce3ecb9556b5f1ef0aece95313393f97fed0280647fa2971de5b2702a022ca375edcd60f92256f34a7d58d227bd9b38b17a177e36d4609115f02da01d94caaa08ec919e022b8a7920671396588aea0816035285bc65bf3f994f4e1c52880315cd1ab81042e5bc930ded04294200412a66757f78445db0f3de7acd7b3654190dae24a747e368260ec32096ef12b5cf2dafffc50053cbd511888f94eba7149ed47f6ea37fca4d1bcd04a7ad30ee96b8396d5afe4ccb690037037cb436bc265bf5663cea5dcd4dda3d153dc76c54011bdc17a407e6dc9ef2a2913a231cfc94eb9e1cb7344f710d28fec72cf0a593df338bea3931e03736967d10dc160f7b54c4ea1819a7087668441b8510f9091a4111cb0fdddf742b9c19cc0f05aea188e9d59538d0ccc02ac391f07468bc1d9c65b1147850143dca779e0c49c8a3cfd70b39c0fe03ba8c38e699bfdc41fb475f392ab4ed67d19e129771a5fdff261847f109b405bc9aab4a07159541a3484bba613f1d3ea0c2f908347707e87f700ab1adb915fa2f3733820acdb677294e166eaf8588ff7522ae7c9d97adb81cf3168e4c0f446fb2b0dc3b6c8afb7af4492f49e410d56dd6394d30a0fc0cd05fda7ce4a7dc19e1fcdf6f6678c521526c76162c8e39b26baf7246aa39b18894bb19d9d194e836d6da300d8b87f3108744f33a437b2e05421fcee82832b886a3c2fdb827d26c71257420038a0a33fd8499b7928dd3abaa70743963eeb8ec13beec83ee831793ade02499b23742ffaac6806e80d1091ddb7674447cbfca5d74306e60441774250486b3abbc92968a61c2141cc2ec70e1fea1230ec6410f79556c0ad4f60d6de68798d920260971b66254cc95574cdaeb88a2073cff2aec9f337af413724de604b40b0b01bc1c5f27c184415198c74de56b9011ae6e07e29ce2a6a5c96cab395a8e74901325d90617b814ccb24ca078552648c1376c42faac234ac9119cb84cfadeef25e77c32ec340afad5891c7d25d1438e607523cd166ca39c1fe7ad6a459be7d612f756afd14875a92aab2c8fa1c198369bdb83d961987c9f1b", 0x1000}, {&(0x7f0000000040)="e250ad74e69e993644ffbc2e50f2eb4ee00cdacb24c0eb6d8a42367938d074b8e8c911e75ad106b1c9f602518658d8ef9ff4ab52e80a75502ae590e5ea9c6b14bda83a92aac4b689e7c825a12113f3", 0x4f}], 0x5) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)

173.213421ms ago: executing program 2 (id=7127):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf250100000014000200776731000000000000000000000000007400088070"], 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611087000000000063013800000000009500098300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f000000f780)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000240)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x44040)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x60}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000800)

171.799985ms ago: executing program 4 (id=7128):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5461d2ba, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500080000", @ANYRES32, @ANYRESHEX=r0], 0xe8}}, 0x0)

124.96291ms ago: executing program 3 (id=7129):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)

115.59817ms ago: executing program 1 (id=7130):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendto$inet(r0, &(0x7f0000000440)="cb4ca11a", 0x4, 0x1, 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'gre0\x00', <r4=>r3, 0x40, 0x7800, 0xfffffff8, 0x1, {{0x10, 0x4, 0x3, 0x37, 0x40, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010102, {[@timestamp_addr={0x44, 0x2c, 0x94, 0x1, 0x2, [{@multicast1, 0x7fff}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}]}]}}}}})
sendmmsg$inet(r0, &(0x7f0000000f00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="b48ed028749aa110410ccefef6c4e0e70f680d591b6f402e222ec4fb0dc3fb6f045b53d1df4d04206a54da0cb98456731444ddd75eb7a38966b7f1a977f510f905b2f67ad8f464980ca533020c58f54f06011c42df4ecedd7f1706d52f39406e035efbef97a9ac1e0ea1270c8b741f06a75953ee230db77954051d259e19aa97e34d0fc749459a0191aff1bed1ebf347f692bd4a63e68f42171638f154ee48b82212fe9f33abc7194964993bb28cffa560e1bd", 0xb3}, {&(0x7f00000002c0)="a4f821a85f104867e880183f9303d2d21a4c932368c2ebfcd2d239ecbc3017b73681323e035b86887c586c1844ddb9f3ecaec8833816d3cf7aba32627f40806829650ad033b6b75aa012ee895f42dec7f4fb8af7854f23b2c284853566a4dc3151b4a904d4b9673e15ef4b35d7945c2e0dfd8dd27b76035f7711ab78c2321501e6e8e488ebb1d68d0f583a88c507eaed3b9cce7501", 0x95}, {&(0x7f0000000480)="c2e5a8a4bb129e79db3d2ea0cd44c84026d81eb3ed4ed12cd7d0b223c804adad3ae4a00b11937cf7054fff3a8cadb85e4429ae73492d911b8d7b3d82264935f45986993555df46266a86e4e83afc3fb25f93c02cdd24717897f5821a24805c642424c5bcb8b973c26eff28d3a132d171475160d39482f906547c9373e9f0bda4bae40bebc1eeeff3c208a6265a7fc1e07502594845c3108237d417bdccc31684903e86b96b2745e8c1c2a99bdd8f13e36eb7928e39fcb5f3209181e36af4ba5c5a83f1dec0081e2af4afeb2e63f96921358a23881575d295cd22ed4508f92a5f095a8a7ac32db33d05069d7a2d6872f351", 0xf1}, {&(0x7f0000000140)="88b10c384619c31d577599384bbf80543206f88f77b70ef181e14a69a4777378cd30ac3f8a1d49fd9ec408a927", 0x2d}, {&(0x7f0000000180)="0d09be125bfaff761ed5c8a91c3e40f3dcf1e1801770a3d94645310fd1596d8b4ba7e434a5f3332e2b9d3f", 0x2b}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x14, 0xa3, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x93c2}, {@loopback, 0x9}]}, @timestamp_prespec={0x44, 0x34, 0xf9, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x5}, {@rand_addr=0x64010100, 0x3290c799}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2fa7}, {@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}]}, @rr={0x7, 0x1f, 0x60, [@local, @multicast1, @rand_addr=0x64010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010101]}, @noop]}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@cipso={0x86, 0x68, 0x1, [{0x1, 0xc, "63fc71c0be2476c0155a"}, {0x1, 0xf, "64a901d7aa88f867a241943d93"}, {0x6, 0x6, "075084df"}, {0x6, 0xe, "cd867df137dd47bc2a00e9fb"}, {0x5, 0xb, "31a2b9c1f8d2910ced"}, {0x6, 0x8, "887e777e9af8"}, {0x3, 0x12, "62cd1c67bd8ab572ef3ecf8fbb4ca469"}, {0x5, 0xe, '\x00'/12}]}]}}}], 0x160}}, {{&(0x7f0000000400)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000700)="5c37cecc3524be2e3f02bb2890f05ee5ac27bb0880189b9295bec6a79da6516a5045aa2635d6762901b7d59f598988c52c4e1c378e418a6d14e6253d45243155b4bf1461bc0caebeeb3ccb0416956cde01bf0b708f07a1372a06ed8019ba1b3784da8efa43d85a38ae17b832706bcbc15d24b6f740", 0x75}, {&(0x7f0000000780)="68fed06b3598e74b3a4abafa831312d1a115a77e8ca44dbe43595700b0bcf41d4fb577fb89b496afbb1134508da41772171e982c4d0e8709fcd3ee3e7634b483eb", 0x41}, {&(0x7f0000000800)="9bf35afc42389c4a5fbf1ec85e418ad1afd498f3e78c0d5cfec86d0f7507275ce4b7f9ee7c0582d749020f28b6040ee0cc0668f7df7ae566f8d4a968098eb68af1154db7f70e27b8389289039a8d1eedc161fab0", 0x54}, {&(0x7f0000000880)="2b7013fa084375ffa0f4758be4e1ce3a47932235790ddfb0ec781dda88fd85369d04985423898c0233bddabc46179b4ca9c31135c9082c531e2d8e727005da2a3ff242c60b", 0x45}, {&(0x7f0000000900)="5e3e834ff95e63f6b18a03a24d2b04f02d85701307549a91937d16bc27bf8f09235d80bdc89eda49f2", 0x29}, {&(0x7f0000000940)="5cb664e8f6bb3993614abdf566ea4bdfe5ab9855b227adc0e7a9e90f4bb70f23", 0x20}, {&(0x7f0000000980)="3bfe98f3967dab90aa68c90a6f2dd6148f59", 0x12}, {&(0x7f00000009c0)="481e57c84f5b5b0d83474f9d792c467c5364e4793187f32ff1d4cd8b3d08b7251cd280059c4e100ce0dcfc851993c1ffb5197cef7de69c0010f68abe3f8385c860ca7086d2a4b29d7773b46e3f096994e8b08779ddf570d6663670f8796f6bc2c292b87bb1ab96108a66f38fe702c292f2a16c83ac37d1f1c5355a831a5edb3e78111155", 0x84}], 0x8, &(0x7f0000000b00)=[@ip_retopts={{0x40, 0x0, 0x7, {[@rr={0x7, 0x23, 0x28, [@multicast1, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @local, @empty, @multicast1]}, @timestamp_addr={0x44, 0xc, 0xca, 0x1, 0x1, [{@empty, 0x7}]}]}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b80)="4dfec1c669f43fbedf942e63ade646ea16ba12d83320853443dca22e1aed8f47215e1eb272980aca22779d6b48938bc2a7b5599e5358464e021d9255b9b42a1b58398bee4124431e448e4600c4b533e26cd54e095da79c758218bad2121392b69d1edf", 0x63}, {&(0x7f0000000c00)="c4d1067c4c18e1567569762a81b659432d5c9654f80fcd2a71bbc74ecd7c22fd0f182e8fb60c4d0b8ec534b8affd065835896aeb090a336466d6204dd1d99d143935a8c041a74e085eaa4e9f15797a19a686928e4f739ffcb10ff82443cdae46f9a8c9433b4f21c6d21ef2f7774def681b62fb33869c783446b27b5c2905fd6ea88b39796ea3f9d7480831ed0018735db9b47b0c19cd30da81", 0x99}], 0x2, &(0x7f0000000dc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_retopts={{0x48, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0x97, [@dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010101, @remote, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @multicast1]}, @generic={0x83, 0xa, "ccbc7eb6e9cd0805"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}, @ip_retopts={{0x10}}], 0xc0}}], 0x4, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

17.326075ms ago: executing program 0 (id=7131):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r1, &(0x7f0000000100)=@abs={0x27}, 0x6e) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a400000001c0a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003"], 0x68}}, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)={0x14, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)

9.473011ms ago: executing program 3 (id=7132):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x1a}, 0x20)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000000, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0xe, @in={0x2, 0x4e20, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xfc, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0)
r2 = socket(0x27, 0x5, 0x1ff)
setsockopt$RDS_GET_MR(r2, 0x114, 0x2, 0x0, 0x0)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x8, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x14, 0x22, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x800)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1e, 0x5, @local, 0x6}, 0x1c)

0s ago: executing program 4 (id=7133):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES16=r0, @ANYRES16=r1], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x4}, 0x20048058)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000000000), 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

kernel console output (not intermixed with test programs):

lticast mode
[  649.738012][ T5873] Bluetooth: hci0: command tx timeout
[  649.907051][T21970] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  649.931600][T13619] team0 (unregistering): Port device team_slave_1 removed
[  650.003646][T13619] team0 (unregistering): Port device team_slave_0 removed
[  650.522871][T21792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  650.530732][T21792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  650.556741][T21792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  650.791421][T21792] hsr_slave_0: entered promiscuous mode
[  650.804192][T21792] hsr_slave_1: entered promiscuous mode
[  650.811838][T21792] debugfs: 'hsr0' already exists in 'hsr'
[  650.817614][T21792] Cannot create hsr debugfs directory
[  651.200679][T21996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5933'.
[  651.235010][T21996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  651.290194][T21996] batman_adv: batadv0: Removing interface: batadv_slave_1
[  651.555982][T22008] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  651.808264][ T5873] Bluetooth: hci0: command tx timeout
[  651.913642][T22024] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767)
[  651.932084][T22024] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  652.016380][T22027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5942'.
[  652.046899][T21792] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  652.066095][T22027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5942'.
[  652.089974][T22027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5942'.
[  652.091153][T21792] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  652.105999][T22027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5942'.
[  652.116279][T22027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5942'.
[  652.134917][T21792] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  652.136144][T22027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5942'.
[  652.157405][T21792] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  652.183887][T22027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5942'.
[  652.201685][T22027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5942'.
[  652.306298][T22041] dvmrp0: entered allmulticast mode
[  652.318587][T22041] dvmrp0: left allmulticast mode
[  652.541144][T21792] 8021q: adding VLAN 0 to HW filter on device bond0
[  652.643961][T21792] 8021q: adding VLAN 0 to HW filter on device team0
[  652.682322][T13619] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.689674][T13619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.752172][T13619] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.759413][T13619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.342249][T22083] __nla_validate_parse: 61 callbacks suppressed
[  653.342272][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5959'.
[  653.557066][T21792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  653.739476][T21792] veth0_vlan: entered promiscuous mode
[  653.781148][T21792] veth1_vlan: entered promiscuous mode
[  653.876346][T21792] veth0_macvtap: entered promiscuous mode
[  653.945710][T21792] veth1_macvtap: entered promiscuous mode
[  654.067460][T21792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  654.102996][T21792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  654.137669][  T997] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  654.153920][T22118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5971'.
[  654.205925][  T997] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  654.221499][T22120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5972'.
[  654.253692][  T997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  654.272226][  T997] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  654.402240][T22125] siw: device registration error -23
[  654.447200][T22131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5973'.
[  654.508871][T13619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.529028][T13619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.537355][T22122] lo speed is unknown, defaulting to 1000
[  654.650406][ T3019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.673595][ T3019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.678265][T22136] Bluetooth: MGMT ver 1.23
[  654.889512][T22140] netlink: 'syz.2.5979': attribute type 1 has an invalid length.
[  654.898364][T22140] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5979'.
[  655.291530][T22151] netlink: 'syz.1.5982': attribute type 2 has an invalid length.
[  655.338823][T22151] netlink: 'syz.1.5982': attribute type 10 has an invalid length.
[  655.365066][T22151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5982'.
[  655.432920][T22151] team0: Port device geneve0 added
[  655.564835][T22162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5984'.
[  655.587884][T22162] tc_dump_action: action bad kind
[  655.595987][T22163] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5986'.
[  655.616687][T22122] lo speed is unknown, defaulting to 1000
[  655.736347][T22168] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5988'.
[  655.840142][T22173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5990'.
[  656.201915][T22191] netlink: 'syz.3.5996': attribute type 18 has an invalid length.
[  656.279864][T22193] netlink: 'syz.3.5996': attribute type 18 has an invalid length.
[  656.366207][T22196] netlink: 'syz.0.5997': attribute type 21 has an invalid length.
[  656.445293][   T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  656.490598][T13617] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  656.564755][T22201] FAULT_INJECTION: forcing a failure.
[  656.564755][T22201] name failslab, interval 1, probability 0, space 0, times 0
[  656.608949][T22201] CPU: 1 UID: 0 PID: 22201 Comm: syz.3.5999 Not tainted syzkaller #0 PREEMPT(full) 
[  656.608981][T22201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  656.608993][T22201] Call Trace:
[  656.609002][T22201]  <TASK>
[  656.609012][T22201]  dump_stack_lvl+0x189/0x250
[  656.609042][T22201]  ? __pfx____ratelimit+0x10/0x10
[  656.609068][T22201]  ? __pfx_dump_stack_lvl+0x10/0x10
[  656.609091][T22201]  ? __pfx__printk+0x10/0x10
[  656.609137][T22201]  should_fail_ex+0x414/0x560
[  656.609170][T22201]  should_failslab+0xa8/0x100
[  656.609202][T22201]  __kmalloc_cache_noprof+0x70/0x3d0
[  656.609229][T22201]  ? sctp_add_bind_addr+0x8c/0x370
[  656.609260][T22201]  sctp_add_bind_addr+0x8c/0x370
[  656.609291][T22201]  sctp_copy_local_addr_list+0x30b/0x4e0
[  656.609321][T22201]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  656.609345][T22201]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  656.609373][T22201]  ? sctp_v6_is_any+0x64/0x80
[  656.609402][T22201]  ? sctp_copy_one_addr+0x93/0x360
[  656.609431][T22201]  sctp_bind_addr_copy+0xb3/0x3c0
[  656.609458][T22201]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  656.609484][T22201]  sctp_connect_new_asoc+0x2e0/0x690
[  656.609519][T22201]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  656.609547][T22201]  ? __local_bh_enable_ip+0x12d/0x1c0
[  656.609587][T22201]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  656.609612][T22201]  ? security_sctp_bind_connect+0x7e/0x2e0
[  656.609643][T22201]  sctp_sendmsg+0x155c/0x2810
[  656.609689][T22201]  ? __pfx_sctp_sendmsg+0x10/0x10
[  656.609723][T22201]  ? aa_sk_perm+0x81e/0x950
[  656.609759][T22201]  ? __pfx_aa_sk_perm+0x10/0x10
[  656.609793][T22201]  ? sock_rps_record_flow+0x19/0x410
[  656.609821][T22201]  ? inet_sendmsg+0x2f4/0x370
[  656.609849][T22201]  __sock_sendmsg+0x19c/0x270
[  656.609879][T22201]  __sys_sendto+0x3bd/0x520
[  656.609912][T22201]  ? __pfx___sys_sendto+0x10/0x10
[  656.609936][T22201]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  656.609980][T22201]  ? __fget_files+0x3a0/0x420
[  656.610024][T22201]  ? ksys_write+0x22a/0x250
[  656.610054][T22201]  ? __pfx_ksys_write+0x10/0x10
[  656.610087][T22201]  __x64_sys_sendto+0xde/0x100
[  656.610122][T22201]  do_syscall_64+0xfa/0x3b0
[  656.610148][T22201]  ? lockdep_hardirqs_on+0x9c/0x150
[  656.610174][T22201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.610194][T22201]  ? clear_bhb_loop+0x60/0xb0
[  656.610219][T22201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.610238][T22201] RIP: 0033:0x7ff78918ebe9
[  656.610258][T22201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  656.610298][T22201] RSP: 002b:00007ff78a05d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  656.610322][T22201] RAX: ffffffffffffffda RBX: 00007ff7893b5fa0 RCX: 00007ff78918ebe9
[  656.610337][T22201] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  656.610350][T22201] RBP: 00007ff78a05d090 R08: 0000200000000080 R09: 000000000000001c
[  656.610363][T22201] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002
[  656.610376][T22201] R13: 00007ff7893b6038 R14: 00007ff7893b5fa0 R15: 00007fff3e711f68
[  656.610412][T22201]  </TASK>
[  657.165577][T13617] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  657.197156][T22217] IPVS: persistence engine module ip_vs_pe_À
 not found
[  657.376844][T22216] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[  657.414716][T13617] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  657.512549][T22228] siw: device registration error -23
[  657.735329][T22240] netlink: 'syz.4.6012': attribute type 1 has an invalid length.
[  657.926337][T22247] bond3: (slave bridge3): making interface the new active one
[  657.942455][T22247] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  658.312448][T22279] netlink: 'syz.1.6024': attribute type 3 has an invalid length.
[  658.349493][T22279] netlink: 'syz.1.6024': attribute type 3 has an invalid length.
[  658.362758][T22285] __nla_validate_parse: 13 callbacks suppressed
[  658.362782][T22285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6026'.
[  658.367041][T22288] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6026'.
[  658.388389][T22285] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6026'.
[  658.513351][T22285] gretap2: entered promiscuous mode
[  658.523403][T22285] gretap2: entered allmulticast mode
[  658.636886][T22297] vlan3: entered promiscuous mode
[  658.642176][T22297] bridge0: entered promiscuous mode
[  658.714714][T22305] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  658.741750][T22311] netlink: 'syz.1.6034': attribute type 5 has an invalid length.
[  658.762337][T22311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6034'.
[  659.267607][T22336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6042'.
[  659.339660][T13617] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0
[  659.339798][T22336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6042'.
[  659.368456][  T997] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  659.379246][  T997] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  659.404112][  T997] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  659.591866][T22347] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6047'.
[  659.906953][T22363] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6053'.
[  660.098638][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6058'.
[  660.140975][T22379] validate_nla: 2 callbacks suppressed
[  660.140996][T22379] netlink: 'syz.1.6057': attribute type 10 has an invalid length.
[  660.273687][T22379] geneve1: entered allmulticast mode
[  660.320232][T22379] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  660.355683][T22390] netlink: 'syz.3.6061': attribute type 1 has an invalid length.
[  660.385093][T22390] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6061'.
[  660.835439][T22415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  661.348887][T22434] netlink: 'syz.0.6077': attribute type 10 has an invalid length.
[  661.386750][T22434] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  661.956255][T22472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  662.124000][T22479] tipc: Started in network mode
[  662.133331][T22479] tipc: Node identity ee46d53eab04, cluster identity 4711
[  662.145359][T22479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  662.183403][T22479] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  662.224968][T22479] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  662.355796][T22479] tipc: Resetting bearer <eth:syzkaller0>
[  662.549810][T22497] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  662.654967][T22478] tipc: Disabling bearer <eth:syzkaller0>
[  662.816912][T22511] openvswitch: netlink: Message has 44 unknown bytes.
[  663.347572][T22539] 8021q: adding VLAN 0 to HW filter on device ipvlan5
[  663.514704][T22550] __nla_validate_parse: 44 callbacks suppressed
[  663.514724][T22550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6122'.
[  663.534630][T22551] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6122'.
[  663.608310][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6125'.
[  663.630148][T22555] netlink: 'syz.2.6124': attribute type 1 has an invalid length.
[  663.726805][T22564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6124'.
[  663.729686][T22555] 8021q: adding VLAN 0 to HW filter on device bond4
[  663.779767][T22569] netlink: 'syz.3.6126': attribute type 32 has an invalid length.
[  663.789679][T22569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6126'.
[  663.799924][T22569] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52)
[  663.826712][T22565] netlink: 212308 bytes leftover after parsing attributes in process `syz.1.6128'.
[  664.024009][T22581] IPVS: set_ctl: invalid protocol: 59 172.20.20.19:20003
[  664.397440][T22602] netlink: 'syz.1.6141': attribute type 10 has an invalid length.
[  664.568997][T22610] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6143'.
[  664.887304][T22630] netlink: 'syz.0.6152': attribute type 1 has an invalid length.
[  665.105059][T22638] netlink: 'syz.2.6154': attribute type 10 has an invalid length.
[  665.236131][T22638] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  665.414104][T22655] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  665.637076][T22667] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0
[  665.637798][T22665] IPVS: stopping master sync thread 22667 ...
[  665.770833][T22673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6165'.
[  665.901666][T22683] siw: device registration error -23
[  665.923026][T22685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6166'.
[  666.155981][T22695] netlink: 'syz.1.6170': attribute type 10 has an invalid length.
[  666.263863][T22699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6172'.
[  666.356898][T22704] FAULT_INJECTION: forcing a failure.
[  666.356898][T22704] name failslab, interval 1, probability 0, space 0, times 0
[  666.374210][T22704] CPU: 1 UID: 0 PID: 22704 Comm: syz.3.6174 Not tainted syzkaller #0 PREEMPT(full) 
[  666.374249][T22704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  666.374263][T22704] Call Trace:
[  666.374271][T22704]  <TASK>
[  666.374281][T22704]  dump_stack_lvl+0x189/0x250
[  666.374313][T22704]  ? __pfx____ratelimit+0x10/0x10
[  666.374341][T22704]  ? __pfx_dump_stack_lvl+0x10/0x10
[  666.374366][T22704]  ? __pfx__printk+0x10/0x10
[  666.374412][T22704]  should_fail_ex+0x414/0x560
[  666.374447][T22704]  should_failslab+0xa8/0x100
[  666.374477][T22704]  __kmalloc_cache_noprof+0x70/0x3d0
[  666.374504][T22704]  ? sctp_add_bind_addr+0x8c/0x370
[  666.374536][T22704]  sctp_add_bind_addr+0x8c/0x370
[  666.374568][T22704]  sctp_copy_local_addr_list+0x30b/0x4e0
[  666.374598][T22704]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  666.374624][T22704]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  666.374652][T22704]  ? sctp_v6_is_any+0x64/0x80
[  666.374682][T22704]  ? sctp_copy_one_addr+0x93/0x360
[  666.374713][T22704]  sctp_bind_addr_copy+0xb3/0x3c0
[  666.374740][T22704]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  666.374769][T22704]  sctp_connect_new_asoc+0x2e0/0x690
[  666.374801][T22704]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  666.374829][T22704]  ? __local_bh_enable_ip+0x12d/0x1c0
[  666.374859][T22704]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  666.374882][T22704]  ? security_sctp_bind_connect+0x7e/0x2e0
[  666.374912][T22704]  sctp_sendmsg+0x155c/0x2810
[  666.374959][T22704]  ? __pfx_sctp_sendmsg+0x10/0x10
[  666.374995][T22704]  ? aa_sk_perm+0x81e/0x950
[  666.375031][T22704]  ? __pfx_aa_sk_perm+0x10/0x10
[  666.375064][T22704]  ? sock_rps_record_flow+0x19/0x410
[  666.375093][T22704]  ? inet_sendmsg+0x2f4/0x370
[  666.375123][T22704]  __sock_sendmsg+0x19c/0x270
[  666.375154][T22704]  __sys_sendto+0x3bd/0x520
[  666.375188][T22704]  ? __pfx___sys_sendto+0x10/0x10
[  666.375214][T22704]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  666.375268][T22704]  ? __fget_files+0x3a0/0x420
[  666.375313][T22704]  ? ksys_write+0x22a/0x250
[  666.375344][T22704]  ? __pfx_ksys_write+0x10/0x10
[  666.375367][T22704]  ? rcu_is_watching+0x15/0xb0
[  666.375395][T22704]  __x64_sys_sendto+0xde/0x100
[  666.375430][T22704]  do_syscall_64+0xfa/0x3b0
[  666.375457][T22704]  ? lockdep_hardirqs_on+0x9c/0x150
[  666.375482][T22704]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.375504][T22704]  ? clear_bhb_loop+0x60/0xb0
[  666.375530][T22704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.375550][T22704] RIP: 0033:0x7ff78918ebe9
[  666.375569][T22704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  666.375587][T22704] RSP: 002b:00007ff78a05d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  666.375611][T22704] RAX: ffffffffffffffda RBX: 00007ff7893b5fa0 RCX: 00007ff78918ebe9
[  666.375627][T22704] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  666.375641][T22704] RBP: 00007ff78a05d090 R08: 0000200000000080 R09: 000000000000001c
[  666.375654][T22704] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002
[  666.375668][T22704] R13: 00007ff7893b6038 R14: 00007ff7893b5fa0 R15: 00007fff3e711f68
[  666.375703][T22704]  </TASK>
[  666.895775][T22712] siw: device registration error -23
[  667.298794][T22737] pim6reg1: entered promiscuous mode
[  667.304160][T22737] pim6reg1: entered allmulticast mode
[  667.320762][T22742] FAULT_INJECTION: forcing a failure.
[  667.320762][T22742] name failslab, interval 1, probability 0, space 0, times 0
[  667.334744][T22742] CPU: 0 UID: 0 PID: 22742 Comm: syz.2.6188 Not tainted syzkaller #0 PREEMPT(full) 
[  667.334778][T22742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  667.334791][T22742] Call Trace:
[  667.334802][T22742]  <TASK>
[  667.334813][T22742]  dump_stack_lvl+0x189/0x250
[  667.334845][T22742]  ? __pfx____ratelimit+0x10/0x10
[  667.334876][T22742]  ? __pfx_dump_stack_lvl+0x10/0x10
[  667.334902][T22742]  ? __pfx__printk+0x10/0x10
[  667.334950][T22742]  should_fail_ex+0x414/0x560
[  667.334985][T22742]  should_failslab+0xa8/0x100
[  667.335018][T22742]  __kmalloc_cache_noprof+0x70/0x3d0
[  667.335046][T22742]  ? sctp_add_bind_addr+0x8c/0x370
[  667.335080][T22742]  sctp_add_bind_addr+0x8c/0x370
[  667.335113][T22742]  sctp_copy_local_addr_list+0x30b/0x4e0
[  667.335147][T22742]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  667.335173][T22742]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  667.335204][T22742]  ? sctp_v6_is_any+0x64/0x80
[  667.335235][T22742]  ? sctp_copy_one_addr+0x93/0x360
[  667.335267][T22742]  sctp_bind_addr_copy+0xb3/0x3c0
[  667.335296][T22742]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  667.335326][T22742]  sctp_connect_new_asoc+0x2e0/0x690
[  667.335363][T22742]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  667.335392][T22742]  ? __local_bh_enable_ip+0x12d/0x1c0
[  667.335433][T22742]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  667.335459][T22742]  ? security_sctp_bind_connect+0x7e/0x2e0
[  667.335491][T22742]  sctp_sendmsg+0x155c/0x2810
[  667.335539][T22742]  ? __pfx_sctp_sendmsg+0x10/0x10
[  667.335576][T22742]  ? aa_sk_perm+0x81e/0x950
[  667.335613][T22742]  ? __pfx_aa_sk_perm+0x10/0x10
[  667.335649][T22742]  ? sock_rps_record_flow+0x19/0x410
[  667.335680][T22742]  ? inet_sendmsg+0x2f4/0x370
[  667.335717][T22742]  __sock_sendmsg+0x19c/0x270
[  667.335749][T22742]  __sys_sendto+0x3bd/0x520
[  667.335785][T22742]  ? __pfx___sys_sendto+0x10/0x10
[  667.335813][T22742]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  667.335861][T22742]  ? __fget_files+0x3a0/0x420
[  667.335907][T22742]  ? ksys_write+0x22a/0x250
[  667.335939][T22742]  ? __pfx_ksys_write+0x10/0x10
[  667.335964][T22742]  ? rcu_is_watching+0x15/0xb0
[  667.335994][T22742]  __x64_sys_sendto+0xde/0x100
[  667.336030][T22742]  do_syscall_64+0xfa/0x3b0
[  667.336059][T22742]  ? lockdep_hardirqs_on+0x9c/0x150
[  667.336088][T22742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.336109][T22742]  ? clear_bhb_loop+0x60/0xb0
[  667.336137][T22742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.336158][T22742] RIP: 0033:0x7f9eff98ebe9
[  667.336178][T22742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  667.336196][T22742] RSP: 002b:00007f9f0073d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  667.336222][T22742] RAX: ffffffffffffffda RBX: 00007f9effbb5fa0 RCX: 00007f9eff98ebe9
[  667.336239][T22742] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  667.336254][T22742] RBP: 00007f9f0073d090 R08: 0000200000000080 R09: 000000000000001c
[  667.336270][T22742] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002
[  667.336284][T22742] R13: 00007f9effbb6038 R14: 00007f9effbb5fa0 R15: 00007ffe5fed79c8
[  667.336323][T22742]  </TASK>
[  668.023734][T22759] team0: Device vti1 is of different type
[  668.155679][T22757] tls_set_device_offload_rx: netdev not found
[  668.181173][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  668.255513][T22771] netem: change failed
[  668.639040][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  668.681828][T22791] __nla_validate_parse: 5 callbacks suppressed
[  668.681853][T22791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6206'.
[  668.836158][T22799] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  668.983512][T22804] netlink: 'syz.4.6212': attribute type 6 has an invalid length.
[  669.391940][T22809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6215'.
[  669.418474][T22809] siw: device registration error -23
[  669.503409][T22815] FAULT_INJECTION: forcing a failure.
[  669.503409][T22815] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  669.527125][T22815] CPU: 1 UID: 0 PID: 22815 Comm: syz.4.6218 Not tainted syzkaller #0 PREEMPT(full) 
[  669.527157][T22815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  669.527171][T22815] Call Trace:
[  669.527180][T22815]  <TASK>
[  669.527190][T22815]  dump_stack_lvl+0x189/0x250
[  669.527233][T22815]  ? __pfx____ratelimit+0x10/0x10
[  669.527262][T22815]  ? __pfx_dump_stack_lvl+0x10/0x10
[  669.527288][T22815]  ? __pfx__printk+0x10/0x10
[  669.527317][T22815]  ? __might_fault+0xb0/0x130
[  669.527359][T22815]  should_fail_ex+0x414/0x560
[  669.527393][T22815]  _copy_from_user+0x2d/0xb0
[  669.527417][T22815]  do_bnep_sock_ioctl+0x19c/0x640
[  669.527446][T22815]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[  669.527484][T22815]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  669.527542][T22815]  sock_do_ioctl+0xd9/0x300
[  669.527581][T22815]  ? __pfx_sock_do_ioctl+0x10/0x10
[  669.527603][T22815]  ? __lock_acquire+0xab9/0xd20
[  669.527653][T22815]  sock_ioctl+0x576/0x790
[  669.527680][T22815]  ? __pfx_sock_ioctl+0x10/0x10
[  669.527704][T22815]  ? __fget_files+0x2a/0x420
[  669.527732][T22815]  ? __fget_files+0x3a0/0x420
[  669.527760][T22815]  ? __fget_files+0x2a/0x420
[  669.527792][T22815]  ? bpf_lsm_file_ioctl+0x9/0x20
[  669.527818][T22815]  ? __pfx_sock_ioctl+0x10/0x10
[  669.527842][T22815]  __se_sys_ioctl+0xfc/0x170
[  669.527871][T22815]  do_syscall_64+0xfa/0x3b0
[  669.527898][T22815]  ? lockdep_hardirqs_on+0x9c/0x150
[  669.527925][T22815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.527945][T22815]  ? clear_bhb_loop+0x60/0xb0
[  669.527970][T22815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.527990][T22815] RIP: 0033:0x7fcb8f78ebe9
[  669.528010][T22815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  669.528028][T22815] RSP: 002b:00007fcb9051c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  669.528052][T22815] RAX: ffffffffffffffda RBX: 00007fcb8f9b5fa0 RCX: 00007fcb8f78ebe9
[  669.528067][T22815] RDX: 0000200000000040 RSI: 00000000400442c9 RDI: 0000000000000004
[  669.528082][T22815] RBP: 00007fcb9051c090 R08: 0000000000000000 R09: 0000000000000000
[  669.528095][T22815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  669.528108][T22815] R13: 00007fcb8f9b6038 R14: 00007fcb8f9b5fa0 R15: 00007ffedf8fe018
[  669.528143][T22815]  </TASK>
[  670.334053][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  670.348843][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  670.360870][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  670.372819][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  670.386020][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  670.437447][T22841] netlink: 'syz.1.6226': attribute type 1 has an invalid length.
[  670.463093][T22837] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  670.480044][T22841] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  670.651577][T22834] lo speed is unknown, defaulting to 1000
[  670.818525][T22845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6227'.
[  671.180779][T22856] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  671.307555][T22858] netlink: 'syz.1.6232': attribute type 10 has an invalid length.
[  671.675752][   T12] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  671.712200][   T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.814210][T22887] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  671.907426][   T12] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  671.937820][   T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.953445][T22898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6246'.
[  672.063536][   T12] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  672.077776][   T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.181162][   T12] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  672.216154][   T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.245456][T22902] netlink: 'syz.1.6246': attribute type 32 has an invalid length.
[  672.305331][T22902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6246'.
[  672.352246][T22834] lo speed is unknown, defaulting to 1000
[  672.359559][T22902] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  672.449078][ T5873] Bluetooth: hci1: command tx timeout
[  672.476759][T22910] netlink: 'syz.4.6248': attribute type 10 has an invalid length.
[  672.533753][T22910] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  672.544896][ T3019] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  672.564142][T22913] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6249'.
[  672.572507][ T3019] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  672.669383][T22919] netlink: 'syz.3.6251': attribute type 23 has an invalid length.
[  672.701065][T22921] FAULT_INJECTION: forcing a failure.
[  672.701065][T22921] name failslab, interval 1, probability 0, space 0, times 0
[  672.733354][ T3019] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  672.733395][T22921] CPU: 1 UID: 0 PID: 22921 Comm: syz.0.6252 Not tainted syzkaller #0 PREEMPT(full) 
[  672.733419][T22921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  672.733431][T22921] Call Trace:
[  672.733439][T22921]  <TASK>
[  672.733447][T22921]  dump_stack_lvl+0x189/0x250
[  672.733476][T22921]  ? __pfx____ratelimit+0x10/0x10
[  672.733501][T22921]  ? __pfx_dump_stack_lvl+0x10/0x10
[  672.733523][T22921]  ? __pfx__printk+0x10/0x10
[  672.733564][T22921]  should_fail_ex+0x414/0x560
[  672.733594][T22921]  should_failslab+0xa8/0x100
[  672.733623][T22921]  __kmalloc_cache_noprof+0x70/0x3d0
[  672.733648][T22921]  ? sctp_add_bind_addr+0x8c/0x370
[  672.733676][T22921]  sctp_add_bind_addr+0x8c/0x370
[  672.733704][T22921]  sctp_copy_local_addr_list+0x30b/0x4e0
[  672.733732][T22921]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  672.733756][T22921]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  672.733781][T22921]  ? sctp_v6_is_any+0x64/0x80
[  672.733808][T22921]  ? sctp_copy_one_addr+0x93/0x360
[  672.733835][T22921]  sctp_bind_addr_copy+0xb3/0x3c0
[  672.733859][T22921]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  672.733885][T22921]  sctp_connect_new_asoc+0x2e0/0x690
[  672.733916][T22921]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  672.733942][T22921]  ? __local_bh_enable_ip+0x12d/0x1c0
[  672.733969][T22921]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  672.733990][T22921]  ? security_sctp_bind_connect+0x7e/0x2e0
[  672.734017][T22921]  sctp_sendmsg+0x155c/0x2810
[  672.734058][T22921]  ? __pfx_sctp_sendmsg+0x10/0x10
[  672.734089][T22921]  ? aa_sk_perm+0x81e/0x950
[  672.734121][T22921]  ? __pfx_aa_sk_perm+0x10/0x10
[  672.734151][T22921]  ? sock_rps_record_flow+0x19/0x410
[  672.734178][T22921]  ? inet_sendmsg+0x2f4/0x370
[  672.734214][T22921]  __sock_sendmsg+0x19c/0x270
[  672.734247][T22921]  __sys_sendto+0x3bd/0x520
[  672.734278][T22921]  ? __pfx___sys_sendto+0x10/0x10
[  672.734301][T22921]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  672.734342][T22921]  ? __fget_files+0x3a0/0x420
[  672.734382][T22921]  ? ksys_write+0x22a/0x250
[  672.734409][T22921]  ? __pfx_ksys_write+0x10/0x10
[  672.734430][T22921]  ? rcu_is_watching+0x15/0xb0
[  672.734455][T22921]  __x64_sys_sendto+0xde/0x100
[  672.734485][T22921]  do_syscall_64+0xfa/0x3b0
[  672.734509][T22921]  ? lockdep_hardirqs_on+0x9c/0x150
[  672.734533][T22921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.734551][T22921]  ? clear_bhb_loop+0x60/0xb0
[  672.734575][T22921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.734592][T22921] RIP: 0033:0x7f2ad8f8ebe9
[  672.734610][T22921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  672.734626][T22921] RSP: 002b:00007f2ad9d6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  672.734647][T22921] RAX: ffffffffffffffda RBX: 00007f2ad91b5fa0 RCX: 00007f2ad8f8ebe9
[  672.734661][T22921] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  672.734673][T22921] RBP: 00007f2ad9d6e090 R08: 0000200000000080 R09: 000000000000001c
[  672.734686][T22921] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002
[  672.734698][T22921] R13: 00007f2ad91b6038 R14: 00007f2ad91b5fa0 R15: 00007fff70ce6ce8
[  672.734729][T22921]  </TASK>
[  672.907292][T22929] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002
[  672.913180][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6251'.
[  673.132302][ T3019] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  673.256704][   T12] bridge_slave_1: left allmulticast mode
[  673.296258][   T12] bridge_slave_1: left promiscuous mode
[  673.330942][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.363508][   T12] bridge_slave_0: left allmulticast mode
[  673.371251][   T12] bridge_slave_0: left promiscuous mode
[  673.377095][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.563482][T22953] netlink: zone id is out of range
[  673.572451][T22953] netlink: zone id is out of range
[  673.577909][T22953] netlink: zone id is out of range
[  673.583352][T22953] netlink: zone id is out of range
[  673.593459][T22953] netlink: zone id is out of range
[  673.609970][T22953] netlink: zone id is out of range
[  673.744934][   T12] bond0 (unregistering): (slave geneve1): Releasing backup interface
[  674.106099][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  674.121037][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  674.131857][   T12] bond0 (unregistering): Released all slaves
[  674.154010][   T12] bond1 (unregistering): Released all slaves
[  674.284332][   T12] bond2 (unregistering): (slave veth3): Releasing active interface
[  674.295288][   T12] bond2 (unregistering): Released all slaves
[  674.412785][   T12] bond3 (unregistering): Released all slaves
[  674.529022][ T5873] Bluetooth: hci1: command tx timeout
[  674.529613][   T12] bond4 (unregistering): Released all slaves
[  674.779072][T22963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6263'.
[  675.022826][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6268'.
[  675.043139][T22977] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  675.072099][T22977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  675.119219][T22970] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  675.444852][T22834] chnl_net:caif_netlink_parms(): no params data found
[  675.457666][T22993] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6275'.
[  675.506523][T22991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6273'.
[  675.541901][T22994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6275'.
[  675.559490][T22994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6275'.
[  675.665341][T22993] netlink: 'syz.1.6275': attribute type 4 has an invalid length.
[  675.909238][T23015] netlink: 'syz.0.6278': attribute type 1 has an invalid length.
[  676.004717][T23010] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  676.205467][T22834] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.234647][T23025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6283'.
[  676.234741][T22834] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.281804][T22834] bridge_slave_0: entered allmulticast mode
[  676.321907][T22834] bridge_slave_0: entered promiscuous mode
[  676.458855][T22834] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.487248][T22834] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.521443][T22834] bridge_slave_1: entered allmulticast mode
[  676.597008][T22834] bridge_slave_1: entered promiscuous mode
[  676.614037][ T5873] Bluetooth: hci1: command tx timeout
[  676.665544][T23037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6286'.
[  676.732214][   T12] hsr_slave_0: left promiscuous mode
[  676.734704][T23042] openvswitch: netlink: Missing key (keys=40, expected=80)
[  676.745996][   T12] hsr_slave_1: left promiscuous mode
[  676.763289][   T12] veth1_vlan: left promiscuous mode
[  676.767943][T23044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6286'.
[  676.771598][   T12] veth0_vlan: left promiscuous mode
[  677.553354][   T12] team0 (unregistering): Port device team_slave_1 removed
[  677.601326][   T12] team0 (unregistering): Port device team_slave_0 removed
[  678.071937][T22834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  678.313390][T22834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  678.460305][T23067] netlink: 'syz.4.6294': attribute type 3 has an invalid length.
[  678.487917][T23074] netlink: 'syz.1.6297': attribute type 4 has an invalid length.
[  678.501614][T23065] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6296'.
[  678.601551][T22834] team0: Port device team_slave_0 added
[  678.637312][T22834] team0: Port device team_slave_1 added
[  678.691937][ T5873] Bluetooth: hci1: command tx timeout
[  678.712971][T23081] 
: renamed from bridge_slave_0
[  678.807950][ T5948] IPVS: starting estimator thread 0...
[  678.819901][T22834] batman_adv: batadv0: Adding interface: batadv_slave_0
[  678.841758][T22834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  678.880397][T22834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  678.928646][T23086] IPVS: using max 25 ests per chain, 60000 per kthread
[  678.986362][T22834] batman_adv: batadv0: Adding interface: batadv_slave_1
[  679.019681][T22834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  679.103075][T22834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  679.251838][   T12] IPVS: stop unused estimator thread 0...
[  679.392172][T23105] veth3: entered allmulticast mode
[  679.451825][T22834] hsr_slave_0: entered promiscuous mode
[  679.480868][T22834] hsr_slave_1: entered promiscuous mode
[  679.500222][T22834] debugfs: 'hsr0' already exists in 'hsr'
[  679.515123][T22834] Cannot create hsr debugfs directory
[  679.846945][T23135] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  680.260459][T23149] __nla_validate_parse: 2 callbacks suppressed
[  680.260476][T23149] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6319'.
[  680.476707][T22834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  680.571281][T22834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  680.625405][T22834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  680.672883][T22834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  680.720295][T23160] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  680.792491][T23168] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6326'.
[  681.078866][T23187] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6329'.
[  681.112333][T23188] FAULT_INJECTION: forcing a failure.
[  681.112333][T23188] name failslab, interval 1, probability 0, space 0, times 0
[  681.139988][T23190] netlink: 'syz.3.6331': attribute type 10 has an invalid length.
[  681.148791][T23188] CPU: 1 UID: 0 PID: 23188 Comm: syz.4.6330 Not tainted syzkaller #0 PREEMPT(full) 
[  681.148820][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  681.148834][T23188] Call Trace:
[  681.148843][T23188]  <TASK>
[  681.148853][T23188]  dump_stack_lvl+0x189/0x250
[  681.148885][T23188]  ? __pfx____ratelimit+0x10/0x10
[  681.148914][T23188]  ? __pfx_dump_stack_lvl+0x10/0x10
[  681.148939][T23188]  ? __pfx__printk+0x10/0x10
[  681.148986][T23188]  should_fail_ex+0x414/0x560
[  681.149019][T23188]  should_failslab+0xa8/0x100
[  681.149052][T23188]  __kmalloc_noprof+0xcb/0x4f0
[  681.149079][T23188]  ? sctp_bind_addrs_to_raw+0xff/0x360
[  681.149111][T23188]  sctp_bind_addrs_to_raw+0xff/0x360
[  681.149146][T23188]  ? __pfx_sctp_bind_addrs_to_raw+0x10/0x10
[  681.149190][T23188]  sctp_make_init+0x150/0xd30
[  681.149219][T23188]  ? is_bpf_text_address+0x292/0x2b0
[  681.149248][T23188]  ? is_bpf_text_address+0x26/0x2b0
[  681.149281][T23188]  ? kernel_text_address+0xa5/0xe0
[  681.149311][T23188]  ? __pfx_sctp_make_init+0x10/0x10
[  681.149337][T23188]  ? arch_stack_walk+0xfc/0x150
[  681.149396][T23188]  ? stack_trace_save+0x9c/0xe0
[  681.149424][T23188]  sctp_sf_do_prm_asoc+0xd2/0x3f0
[  681.149451][T23188]  sctp_do_sm+0x1e7/0x5a20
[  681.149474][T23188]  ? __pfx_sctp_pname+0x10/0x10
[  681.149499][T23188]  ? kasan_save_track+0x3e/0x80
[  681.149524][T23188]  ? sctp_stream_init_ext+0x57/0x180
[  681.149546][T23188]  ? sctp_sendmsg_to_asoc+0x12fd/0x1810
[  681.149575][T23188]  ? sctp_sendmsg+0x1941/0x2810
[  681.149602][T23188]  ? __sock_sendmsg+0x19c/0x270
[  681.149626][T23188]  ? __sys_sendto+0x3bd/0x520
[  681.149654][T23188]  ? do_syscall_64+0xfa/0x3b0
[  681.149681][T23188]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.149706][T23188]  ? __pfx_sctp_do_sm+0x10/0x10
[  681.149779][T23188]  ? __sk_mem_raise_allocated+0xaa9/0x1240
[  681.149816][T23188]  sctp_primitive_ASSOCIATE+0x95/0xc0
[  681.149854][T23188]  sctp_sendmsg_to_asoc+0x102d/0x1810
[  681.149882][T23188]  ? __asan_memcpy+0x40/0x70
[  681.149914][T23188]  ? sctp_assoc_add_peer+0xcfa/0x13b0
[  681.149952][T23188]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  681.149983][T23188]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  681.150012][T23188]  ? __local_bh_enable_ip+0x12d/0x1c0
[  681.150062][T23188]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  681.150086][T23188]  ? security_sctp_bind_connect+0x7e/0x2e0
[  681.150116][T23188]  sctp_sendmsg+0x1941/0x2810
[  681.150162][T23188]  ? __pfx_sctp_sendmsg+0x10/0x10
[  681.150196][T23188]  ? aa_sk_perm+0x81e/0x950
[  681.150233][T23188]  ? __pfx_aa_sk_perm+0x10/0x10
[  681.150266][T23188]  ? sock_rps_record_flow+0x19/0x410
[  681.150295][T23188]  ? inet_sendmsg+0x2f4/0x370
[  681.150323][T23188]  __sock_sendmsg+0x19c/0x270
[  681.150360][T23188]  __sys_sendto+0x3bd/0x520
[  681.150394][T23188]  ? __pfx___sys_sendto+0x10/0x10
[  681.150420][T23188]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  681.150465][T23188]  ? __fget_files+0x3a0/0x420
[  681.150508][T23188]  ? ksys_write+0x22a/0x250
[  681.150538][T23188]  ? __pfx_ksys_write+0x10/0x10
[  681.150562][T23188]  ? rcu_is_watching+0x15/0xb0
[  681.150590][T23188]  __x64_sys_sendto+0xde/0x100
[  681.150624][T23188]  do_syscall_64+0xfa/0x3b0
[  681.150652][T23188]  ? lockdep_hardirqs_on+0x9c/0x150
[  681.150678][T23188]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.150699][T23188]  ? clear_bhb_loop+0x60/0xb0
[  681.150724][T23188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.150744][T23188] RIP: 0033:0x7fcb8f78ebe9
[  681.150765][T23188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  681.150782][T23188] RSP: 002b:00007fcb9051c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  681.150806][T23188] RAX: ffffffffffffffda RBX: 00007fcb8f9b5fa0 RCX: 00007fcb8f78ebe9
[  681.150821][T23188] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  681.150835][T23188] RBP: 00007fcb9051c090 R08: 0000200000000080 R09: 000000000000001c
[  681.150849][T23188] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002
[  681.150863][T23188] R13: 00007fcb8f9b6038 R14: 00007fcb8f9b5fa0 R15: 00007ffedf8fe018
[  681.150899][T23188]  </TASK>
[  681.742951][T22834] 8021q: adding VLAN 0 to HW filter on device bond0
[  681.804709][T23195] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  681.855489][T23195] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  681.898243][T22834] 8021q: adding VLAN 0 to HW filter on device team0
[  681.914092][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.921293][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state
[  681.928371][T23195] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  681.982611][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.989884][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  682.046986][T23201] netlink: 'syz.3.6334': attribute type 1 has an invalid length.
[  682.461210][T23216] netlink: 'syz.3.6337': attribute type 4 has an invalid length.
[  682.810453][T22834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  682.975171][T23234] 8021q: adding VLAN 0 to HW filter on device ipvlan5
[  683.041562][T22834] veth0_vlan: entered promiscuous mode
[  683.086792][T22834] veth1_vlan: entered promiscuous mode
[  683.334672][T22834] veth0_macvtap: entered promiscuous mode
[  683.528280][T22834] veth1_macvtap: entered promiscuous mode
[  683.591861][T22834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  683.633219][T22834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  683.681233][ T3019] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  683.705529][ T3019] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  683.717248][ T3019] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  683.739591][ T3019] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  683.762441][T23263] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6354'.
[  683.924198][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  683.945205][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  684.023540][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  684.056553][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  684.106767][T23277] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6359'.
[  684.516344][T23291] siw: device registration error -23
[  684.769462][T23298] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6367'.
[  685.370518][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  685.381792][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  685.392756][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  685.403213][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  685.425614][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  685.548726][T23323] lo speed is unknown, defaulting to 1000
[  686.073230][T23344] netlink: 'syz.3.6380': attribute type 10 has an invalid length.
[  686.095690][T23344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6380'.
[  686.138137][T23347] FAULT_INJECTION: forcing a failure.
[  686.138137][T23347] name failslab, interval 1, probability 0, space 0, times 0
[  686.165571][T23344] team0: Port device geneve0 added
[  686.178332][T23347] CPU: 0 UID: 0 PID: 23347 Comm: syz.1.6381 Not tainted syzkaller #0 PREEMPT(full) 
[  686.178364][T23347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  686.178377][T23347] Call Trace:
[  686.178386][T23347]  <TASK>
[  686.178396][T23347]  dump_stack_lvl+0x189/0x250
[  686.178426][T23347]  ? __pfx____ratelimit+0x10/0x10
[  686.178455][T23347]  ? __pfx_dump_stack_lvl+0x10/0x10
[  686.178479][T23347]  ? __pfx__printk+0x10/0x10
[  686.178511][T23347]  ? __pfx___might_resched+0x10/0x10
[  686.178531][T23347]  ? fs_reclaim_acquire+0x7d/0x100
[  686.178568][T23347]  should_fail_ex+0x414/0x560
[  686.178603][T23347]  should_failslab+0xa8/0x100
[  686.178636][T23347]  __kmalloc_noprof+0xcb/0x4f0
[  686.178663][T23347]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  686.178695][T23347]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  686.178729][T23347]  genl_family_rcv_msg_doit+0xb8/0x300
[  686.178763][T23347]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  686.178787][T23347]  ? __pfx___mutex_lock+0x10/0x10
[  686.178818][T23347]  ? __pfx_genl_get_cmd+0x10/0x10
[  686.178838][T23347]  ? __pfx_smc_pnet_get+0x10/0x10
[  686.178858][T23347]  ? __pfx_smc_pnet_dump_start+0x10/0x10
[  686.178886][T23347]  ? __pfx_smc_pnet_dump+0x10/0x10
[  686.178913][T23347]  ? stack_trace_save+0x9c/0xe0
[  686.178946][T23347]  genl_rcv_msg+0x60e/0x790
[  686.178979][T23347]  ? __pfx_genl_rcv_msg+0x10/0x10
[  686.179000][T23347]  ? __pfx_smc_pnet_get+0x10/0x10
[  686.179040][T23347]  netlink_rcv_skb+0x205/0x470
[  686.179065][T23347]  ? __lock_acquire+0xab9/0xd20
[  686.179097][T23347]  ? __pfx_genl_rcv_msg+0x10/0x10
[  686.179121][T23347]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  686.179175][T23347]  ? down_read+0x1ad/0x2e0
[  686.179209][T23347]  genl_rcv+0x28/0x40
[  686.179230][T23347]  netlink_unicast+0x82c/0x9e0
[  686.179269][T23347]  ? __pfx_netlink_unicast+0x10/0x10
[  686.179307][T23347]  ? netlink_sendmsg+0x642/0xb30
[  686.179333][T23347]  ? skb_put+0x11b/0x210
[  686.179370][T23347]  netlink_sendmsg+0x805/0xb30
[  686.179411][T23347]  ? __pfx_netlink_sendmsg+0x10/0x10
[  686.179446][T23347]  ? aa_sock_msg_perm+0xf1/0x1d0
[  686.179480][T23347]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  686.179504][T23347]  ? __pfx_netlink_sendmsg+0x10/0x10
[  686.179535][T23347]  __sock_sendmsg+0x219/0x270
[  686.179563][T23347]  ____sys_sendmsg+0x505/0x830
[  686.179592][T23347]  ? __pfx_____sys_sendmsg+0x10/0x10
[  686.179624][T23347]  ? import_iovec+0x74/0xa0
[  686.179652][T23347]  ___sys_sendmsg+0x21f/0x2a0
[  686.179675][T23347]  ? __pfx____sys_sendmsg+0x10/0x10
[  686.179743][T23347]  ? __fget_files+0x2a/0x420
[  686.179772][T23347]  ? __fget_files+0x3a0/0x420
[  686.179815][T23347]  __x64_sys_sendmsg+0x19b/0x260
[  686.179839][T23347]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  686.179873][T23347]  ? __pfx_ksys_write+0x10/0x10
[  686.179896][T23347]  ? rcu_is_watching+0x15/0xb0
[  686.179924][T23347]  ? do_syscall_64+0xbe/0x3b0
[  686.179957][T23347]  do_syscall_64+0xfa/0x3b0
[  686.179983][T23347]  ? lockdep_hardirqs_on+0x9c/0x150
[  686.180009][T23347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.180029][T23347]  ? clear_bhb_loop+0x60/0xb0
[  686.180053][T23347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.180071][T23347] RIP: 0033:0x7f8786d8ebe9
[  686.180090][T23347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  686.180108][T23347] RSP: 002b:00007f8787b1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  686.180131][T23347] RAX: ffffffffffffffda RBX: 00007f8786fb5fa0 RCX: 00007f8786d8ebe9
[  686.180146][T23347] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  686.180159][T23347] RBP: 00007f8787b1d090 R08: 0000000000000000 R09: 0000000000000000
[  686.180171][T23347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  686.180184][T23347] R13: 00007f8786fb6038 R14: 00007f8786fb5fa0 R15: 00007ffff9169628
[  686.180219][T23347]  </TASK>
[  686.867480][T23323] lo speed is unknown, defaulting to 1000
[  686.970604][T17801] IPVS: starting estimator thread 0...
[  687.109402][T23361] IPVS: using max 26 ests per chain, 62400 per kthread
[  687.132426][T23365] Bluetooth: MGMT ver 1.23
[  687.151816][T23373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6387'.
[  687.205578][T23364] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6386'.
[  687.334094][T23323] chnl_net:caif_netlink_parms(): no params data found
[  687.476661][T23386] FAULT_INJECTION: forcing a failure.
[  687.476661][T23386] name failslab, interval 1, probability 0, space 0, times 0
[  687.498464][   T51] Bluetooth: hci2: command tx timeout
[  687.517993][T23388] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6391'.
[  687.529823][T23386] CPU: 1 UID: 0 PID: 23386 Comm: syz.0.6390 Not tainted syzkaller #0 PREEMPT(full) 
[  687.529854][T23386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  687.529867][T23386] Call Trace:
[  687.529876][T23386]  <TASK>
[  687.529886][T23386]  dump_stack_lvl+0x189/0x250
[  687.529919][T23386]  ? __pfx____ratelimit+0x10/0x10
[  687.529948][T23386]  ? __pfx_dump_stack_lvl+0x10/0x10
[  687.529994][T23386]  ? __pfx__printk+0x10/0x10
[  687.530050][T23386]  should_fail_ex+0x414/0x560
[  687.530083][T23386]  should_failslab+0xa8/0x100
[  687.530114][T23386]  __kmalloc_cache_noprof+0x70/0x3d0
[  687.530141][T23386]  ? sctp_add_bind_addr+0x8c/0x370
[  687.530172][T23386]  sctp_add_bind_addr+0x8c/0x370
[  687.530204][T23386]  sctp_copy_local_addr_list+0x30b/0x4e0
[  687.530235][T23386]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  687.530261][T23386]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  687.530289][T23386]  ? sctp_v6_is_any+0x64/0x80
[  687.530317][T23386]  ? sctp_copy_one_addr+0x93/0x360
[  687.530347][T23386]  sctp_bind_addr_copy+0xb3/0x3c0
[  687.530375][T23386]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  687.530403][T23386]  sctp_connect_new_asoc+0x2e0/0x690
[  687.530438][T23386]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  687.530465][T23386]  ? __local_bh_enable_ip+0x12d/0x1c0
[  687.530497][T23386]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  687.530522][T23386]  ? security_sctp_bind_connect+0x7e/0x2e0
[  687.530552][T23386]  sctp_sendmsg+0x155c/0x2810
[  687.530599][T23386]  ? __pfx_sctp_sendmsg+0x10/0x10
[  687.530633][T23386]  ? aa_sk_perm+0x81e/0x950
[  687.530670][T23386]  ? __pfx_aa_sk_perm+0x10/0x10
[  687.530703][T23386]  ? sock_rps_record_flow+0x19/0x410
[  687.530732][T23386]  ? inet_sendmsg+0x2f4/0x370
[  687.530761][T23386]  __sock_sendmsg+0x19c/0x270
[  687.530792][T23386]  __sys_sendto+0x3bd/0x520
[  687.530825][T23386]  ? __pfx___sys_sendto+0x10/0x10
[  687.530858][T23386]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  687.530903][T23386]  ? __fget_files+0x3a0/0x420
[  687.530948][T23386]  ? ksys_write+0x22a/0x250
[  687.530979][T23386]  ? __pfx_ksys_write+0x10/0x10
[  687.531012][T23386]  ? rcu_is_watching+0x15/0xb0
[  687.531042][T23386]  __x64_sys_sendto+0xde/0x100
[  687.531077][T23386]  do_syscall_64+0xfa/0x3b0
[  687.531105][T23386]  ? lockdep_hardirqs_on+0x9c/0x150
[  687.531130][T23386]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.531149][T23386]  ? clear_bhb_loop+0x60/0xb0
[  687.531175][T23386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.531194][T23386] RIP: 0033:0x7f2ad8f8ebe9
[  687.531213][T23386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  687.531231][T23386] RSP: 002b:00007f2ad9d6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  687.531255][T23386] RAX: ffffffffffffffda RBX: 00007f2ad91b5fa0 RCX: 00007f2ad8f8ebe9
[  687.531269][T23386] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  687.531282][T23386] RBP: 00007f2ad9d6e090 R08: 0000200000000080 R09: 000000000000001c
[  687.531294][T23386] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002
[  687.531306][T23386] R13: 00007f2ad91b6038 R14: 00007f2ad91b5fa0 R15: 00007fff70ce6ce8
[  687.531340][T23386]  </TASK>
[  688.009004][T23396] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6395'.
[  688.038618][T23396] FAULT_INJECTION: forcing a failure.
[  688.038618][T23396] name failslab, interval 1, probability 0, space 0, times 0
[  688.053373][T23396] CPU: 1 UID: 0 PID: 23396 Comm: syz.0.6395 Not tainted syzkaller #0 PREEMPT(full) 
[  688.053400][T23396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  688.053412][T23396] Call Trace:
[  688.053421][T23396]  <TASK>
[  688.053431][T23396]  dump_stack_lvl+0x189/0x250
[  688.053461][T23396]  ? __pfx____ratelimit+0x10/0x10
[  688.053490][T23396]  ? __pfx_dump_stack_lvl+0x10/0x10
[  688.053513][T23396]  ? __pfx__printk+0x10/0x10
[  688.053549][T23396]  ? __pfx___might_resched+0x10/0x10
[  688.053569][T23396]  ? fs_reclaim_acquire+0x7d/0x100
[  688.053606][T23396]  should_fail_ex+0x414/0x560
[  688.053638][T23396]  should_failslab+0xa8/0x100
[  688.053669][T23396]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  688.053697][T23396]  ? __alloc_skb+0x112/0x2d0
[  688.053731][T23396]  __alloc_skb+0x112/0x2d0
[  688.053766][T23396]  smc_pnet_get+0xa9/0x410
[  688.053788][T23396]  ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0
[  688.053821][T23396]  genl_family_rcv_msg_doit+0x215/0x300
[  688.053853][T23396]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  688.053894][T23396]  ? stack_trace_save+0x9c/0xe0
[  688.053926][T23396]  genl_rcv_msg+0x60e/0x790
[  688.053957][T23396]  ? __pfx_genl_rcv_msg+0x10/0x10
[  688.053979][T23396]  ? __pfx_smc_pnet_get+0x10/0x10
[  688.054013][T23396]  netlink_rcv_skb+0x205/0x470
[  688.054038][T23396]  ? __lock_acquire+0xab9/0xd20
[  688.054068][T23396]  ? __pfx_genl_rcv_msg+0x10/0x10
[  688.054091][T23396]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  688.054143][T23396]  ? down_read+0x1ad/0x2e0
[  688.054176][T23396]  genl_rcv+0x28/0x40
[  688.054196][T23396]  netlink_unicast+0x82c/0x9e0
[  688.054234][T23396]  ? __pfx_netlink_unicast+0x10/0x10
[  688.054276][T23396]  ? netlink_sendmsg+0x642/0xb30
[  688.054301][T23396]  ? skb_put+0x11b/0x210
[  688.054336][T23396]  netlink_sendmsg+0x805/0xb30
[  688.054376][T23396]  ? __pfx_netlink_sendmsg+0x10/0x10
[  688.054410][T23396]  ? aa_sock_msg_perm+0xf1/0x1d0
[  688.054444][T23396]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  688.054466][T23396]  ? __pfx_netlink_sendmsg+0x10/0x10
[  688.054497][T23396]  __sock_sendmsg+0x219/0x270
[  688.054527][T23396]  ____sys_sendmsg+0x505/0x830
[  688.054556][T23396]  ? __pfx_____sys_sendmsg+0x10/0x10
[  688.054589][T23396]  ? import_iovec+0x74/0xa0
[  688.054619][T23396]  ___sys_sendmsg+0x21f/0x2a0
[  688.054643][T23396]  ? __pfx____sys_sendmsg+0x10/0x10
[  688.054710][T23396]  ? __fget_files+0x2a/0x420
[  688.054740][T23396]  ? __fget_files+0x3a0/0x420
[  688.054783][T23396]  __x64_sys_sendmsg+0x19b/0x260
[  688.054809][T23396]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  688.054844][T23396]  ? __pfx_ksys_write+0x10/0x10
[  688.054868][T23396]  ? rcu_is_watching+0x15/0xb0
[  688.054896][T23396]  ? do_syscall_64+0xbe/0x3b0
[  688.054930][T23396]  do_syscall_64+0xfa/0x3b0
[  688.054955][T23396]  ? lockdep_hardirqs_on+0x9c/0x150
[  688.054982][T23396]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.055003][T23396]  ? clear_bhb_loop+0x60/0xb0
[  688.055028][T23396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.055049][T23396] RIP: 0033:0x7f2ad8f8ebe9
[  688.055069][T23396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  688.055088][T23396] RSP: 002b:00007f2ad9d6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  688.055112][T23396] RAX: ffffffffffffffda RBX: 00007f2ad91b5fa0 RCX: 00007f2ad8f8ebe9
[  688.055129][T23396] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  688.055142][T23396] RBP: 00007f2ad9d6e090 R08: 0000000000000000 R09: 0000000000000000
[  688.055156][T23396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  688.055169][T23396] R13: 00007f2ad91b6038 R14: 00007f2ad91b5fa0 R15: 00007fff70ce6ce8
[  688.055204][T23396]  </TASK>
[  688.503132][T23323] bridge0: port 1(bridge_slave_0) entered blocking state
[  688.512514][T23323] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.520674][T23323] bridge_slave_0: entered allmulticast mode
[  688.531405][T23323] bridge_slave_0: entered promiscuous mode
[  688.541124][T23323] bridge0: port 2(bridge_slave_1) entered blocking state
[  688.549180][T23323] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.556474][T23323] bridge_slave_1: entered allmulticast mode
[  688.565129][T23323] bridge_slave_1: entered promiscuous mode
[  688.584175][T23401] 8021q: adding VLAN 0 to HW filter on device ipvlan5
[  688.626543][T23405] geneve2: entered promiscuous mode
[  688.650289][T23405] geneve2: entered allmulticast mode
[  688.765982][ T1111] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  688.797294][ T1111] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  688.834148][T23323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  688.849247][T23323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  688.860468][ T1111] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  688.974985][ T1111] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  688.985007][T23421] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.993011][T23421] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.026786][T23323] team0: Port device team_slave_0 added
[  689.059606][T23323] team0: Port device team_slave_1 added
[  689.212486][T23323] batman_adv: batadv0: Adding interface: batadv_slave_0
[  689.233000][T23323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  689.273448][T23323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  689.306272][T23323] batman_adv: batadv0: Adding interface: batadv_slave_1
[  689.326625][T23323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  689.354521][T23323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  689.382541][T23440] FAULT_INJECTION: forcing a failure.
[  689.382541][T23440] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  689.406376][T23440] CPU: 1 UID: 0 PID: 23440 Comm: syz.0.6412 Not tainted syzkaller #0 PREEMPT(full) 
[  689.406406][T23440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  689.406419][T23440] Call Trace:
[  689.406428][T23440]  <TASK>
[  689.406437][T23440]  dump_stack_lvl+0x189/0x250
[  689.406466][T23440]  ? __pfx____ratelimit+0x10/0x10
[  689.406494][T23440]  ? __pfx_dump_stack_lvl+0x10/0x10
[  689.406517][T23440]  ? __pfx__printk+0x10/0x10
[  689.406546][T23440]  ? __might_fault+0xb0/0x130
[  689.406585][T23440]  should_fail_ex+0x414/0x560
[  689.406617][T23440]  _copy_from_user+0x2d/0xb0
[  689.406643][T23440]  ___sys_sendmsg+0x158/0x2a0
[  689.406669][T23440]  ? __pfx____sys_sendmsg+0x10/0x10
[  689.406732][T23440]  ? __fget_files+0x2a/0x420
[  689.406762][T23440]  ? __fget_files+0x3a0/0x420
[  689.406805][T23440]  __x64_sys_sendmsg+0x19b/0x260
[  689.406830][T23440]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  689.406863][T23440]  ? __pfx_ksys_write+0x10/0x10
[  689.406888][T23440]  ? rcu_is_watching+0x15/0xb0
[  689.406915][T23440]  ? do_syscall_64+0xbe/0x3b0
[  689.406949][T23440]  do_syscall_64+0xfa/0x3b0
[  689.406974][T23440]  ? lockdep_hardirqs_on+0x9c/0x150
[  689.407001][T23440]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.407020][T23440]  ? clear_bhb_loop+0x60/0xb0
[  689.407043][T23440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.407062][T23440] RIP: 0033:0x7f2ad8f8ebe9
[  689.407081][T23440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  689.407100][T23440] RSP: 002b:00007f2ad9d6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  689.407124][T23440] RAX: ffffffffffffffda RBX: 00007f2ad91b5fa0 RCX: 00007f2ad8f8ebe9
[  689.407139][T23440] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003
[  689.407151][T23440] RBP: 00007f2ad9d6e090 R08: 0000000000000000 R09: 0000000000000000
[  689.407164][T23440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  689.407175][T23440] R13: 00007f2ad91b6038 R14: 00007f2ad91b5fa0 R15: 00007fff70ce6ce8
[  689.407206][T23440]  </TASK>
[  689.648668][   T51] Bluetooth: hci2: command tx timeout
[  689.760665][T23323] hsr_slave_0: entered promiscuous mode
[  689.768483][T23323] hsr_slave_1: entered promiscuous mode
[  689.774988][T23323] debugfs: 'hsr0' already exists in 'hsr'
[  689.781335][T23323] Cannot create hsr debugfs directory
[  689.818292][T23444] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6414'.
[  690.218457][T23460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6419'.
[  690.479592][T23471] FAULT_INJECTION: forcing a failure.
[  690.479592][T23471] name failslab, interval 1, probability 0, space 0, times 0
[  690.525640][T23323] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  690.535838][T23471] CPU: 1 UID: 0 PID: 23471 Comm: syz.3.6422 Not tainted syzkaller #0 PREEMPT(full) 
[  690.535869][T23471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  690.535881][T23471] Call Trace:
[  690.535891][T23471]  <TASK>
[  690.535899][T23471]  dump_stack_lvl+0x189/0x250
[  690.535928][T23471]  ? __pfx____ratelimit+0x10/0x10
[  690.535954][T23471]  ? __pfx_dump_stack_lvl+0x10/0x10
[  690.535976][T23471]  ? __pfx__printk+0x10/0x10
[  690.536007][T23471]  ? __pfx___might_resched+0x10/0x10
[  690.536031][T23471]  should_fail_ex+0x414/0x560
[  690.536060][T23471]  should_failslab+0xa8/0x100
[  690.536089][T23471]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  690.536115][T23471]  ? __alloc_skb+0x112/0x2d0
[  690.536147][T23471]  __alloc_skb+0x112/0x2d0
[  690.536178][T23471]  netlink_sendmsg+0x5c6/0xb30
[  690.536216][T23471]  ? __pfx_netlink_sendmsg+0x10/0x10
[  690.536246][T23471]  ? aa_sock_msg_perm+0xf1/0x1d0
[  690.536275][T23471]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  690.536296][T23471]  ? __pfx_netlink_sendmsg+0x10/0x10
[  690.536332][T23471]  __sock_sendmsg+0x219/0x270
[  690.536360][T23471]  ____sys_sendmsg+0x505/0x830
[  690.536386][T23471]  ? __pfx_____sys_sendmsg+0x10/0x10
[  690.536415][T23471]  ? import_iovec+0x74/0xa0
[  690.536440][T23471]  ___sys_sendmsg+0x21f/0x2a0
[  690.536461][T23471]  ? __pfx____sys_sendmsg+0x10/0x10
[  690.536518][T23471]  ? __fget_files+0x2a/0x420
[  690.536549][T23471]  ? __fget_files+0x3a0/0x420
[  690.536587][T23471]  __x64_sys_sendmsg+0x19b/0x260
[  690.536609][T23471]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  690.536638][T23471]  ? __pfx_ksys_write+0x10/0x10
[  690.536661][T23471]  ? rcu_is_watching+0x15/0xb0
[  690.536685][T23471]  ? do_syscall_64+0xbe/0x3b0
[  690.536715][T23471]  do_syscall_64+0xfa/0x3b0
[  690.536739][T23471]  ? lockdep_hardirqs_on+0x9c/0x150
[  690.536763][T23471]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.536782][T23471]  ? clear_bhb_loop+0x60/0xb0
[  690.536805][T23471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.536823][T23471] RIP: 0033:0x7ff78918ebe9
[  690.536841][T23471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  690.536857][T23471] RSP: 002b:00007ff78a05d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  690.536878][T23471] RAX: ffffffffffffffda RBX: 00007ff7893b5fa0 RCX: 00007ff78918ebe9
[  690.536892][T23471] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003
[  690.536904][T23471] RBP: 00007ff78a05d090 R08: 0000000000000000 R09: 0000000000000000
[  690.536916][T23471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  690.536928][T23471] R13: 00007ff7893b6038 R14: 00007ff7893b5fa0 R15: 00007fff3e711f68
[  690.536958][T23471]  </TASK>
[  690.828498][T23323] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.930772][T23323] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  690.977815][T23323] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.084437][T23490] 8021q: adding VLAN 0 to HW filter on device ipvlan6
[  691.127558][T23323] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  691.149319][T23323] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.293879][T23323] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  691.324559][T23323] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.728497][   T51] Bluetooth: hci2: command tx timeout
[  691.758072][T23323] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  691.790130][T23323] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  691.842921][T23323] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  691.901986][T23323] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  692.272149][T23323] 8021q: adding VLAN 0 to HW filter on device bond0
[  692.543474][T23323] 8021q: adding VLAN 0 to HW filter on device team0
[  693.250239][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  693.808674][ T5873] Bluetooth: hci2: command tx timeout
[  694.975363][T23625] netlink: 25 bytes leftover after parsing attributes in process `syz.3.6490'.
[  696.071878][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.079148][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  696.121875][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.129125][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  696.466959][T23645] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6499'.
[  696.964196][T23323] 8021q: adding VLAN 0 to HW filter on device batadv0
[  697.892767][T23701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6523'.
[  697.904845][T23701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6523'.
[  698.553552][T23323] veth0_vlan: entered promiscuous mode
[  698.596833][T23323] veth1_vlan: entered promiscuous mode
[  698.730002][T23323] veth0_macvtap: entered promiscuous mode
[  698.763031][T23323] veth1_macvtap: entered promiscuous mode
[  698.880226][T23323] batman_adv: batadv0: Interface activated: batadv_slave_0
[  698.905963][T23323] batman_adv: batadv0: Interface activated: batadv_slave_1
[  698.970202][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  698.998835][T13619] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  699.032914][T13619] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  699.058821][T13619] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  699.272059][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.289924][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.385585][T13619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.428642][T13619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.464163][T23761] siw: device registration error -23
[  699.670169][T23768] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6361'.
[  699.689205][T23768] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.697953][T23768] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.969813][T23775] lo: entered promiscuous mode
[  699.989959][T23775] tunl0: entered promiscuous mode
[  700.031903][T23775] gre0: entered promiscuous mode
[  700.072134][T23784] netlink: 'syz.3.6553': attribute type 13 has an invalid length.
[  700.083277][T23775] gretap0: entered promiscuous mode
[  700.144402][T23775] erspan0: entered promiscuous mode
[  700.193319][T23775] ip_vti0: entered promiscuous mode
[  700.225829][T23775] ip6_vti0: entered promiscuous mode
[  700.296688][T23775] sit0: entered promiscuous mode
[  700.352625][T23775] ip6tnl0: entered promiscuous mode
[  700.372674][T23775] ip6gre0: entered promiscuous mode
[  700.424314][T23775] syz_tun: entered promiscuous mode
[  700.437263][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  700.448045][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  700.461642][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  700.461967][T23775] ip6gretap0: entered promiscuous mode
[  700.470193][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  700.482924][T23775] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.484428][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  700.490821][T23775] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.516392][T23775] bridge0: entered promiscuous mode
[  700.526498][T23775] vcan0: entered promiscuous mode
[  700.537272][T23775] bond0: entered promiscuous mode
[  700.543068][T23775] bond_slave_0: entered promiscuous mode
[  700.549022][T23775] bond_slave_1: entered promiscuous mode
[  700.554935][T23775] geneve1: entered promiscuous mode
[  700.572017][T23775] team0: entered promiscuous mode
[  700.577255][T23775] team_slave_0: entered promiscuous mode
[  700.583345][T23775] team_slave_1: entered promiscuous mode
[  700.594825][T23775] dummy0: entered promiscuous mode
[  700.605384][T23775] nlmon0: entered promiscuous mode
[  700.613780][T23775] caif0: entered promiscuous mode
[  700.619686][T23775] batadv0: entered promiscuous mode
[  700.629573][T23775] vxcan0: entered promiscuous mode
[  700.635880][T23775] vxcan1: entered promiscuous mode
[  700.642625][T23775] veth0: entered promiscuous mode
[  700.653249][T23775] veth1: entered promiscuous mode
[  700.664941][T23775] wg0: entered promiscuous mode
[  700.673961][T23775] wg1: entered promiscuous mode
[  700.682281][T23775] wg2: entered promiscuous mode
[  700.691083][T23775] veth0_to_bridge: entered promiscuous mode
[  700.703981][T23775] veth1_to_bridge: entered promiscuous mode
[  700.719614][T23775] veth0_to_bond: entered promiscuous mode
[  700.733659][T23775] veth1_to_bond: entered promiscuous mode
[  700.748593][T23775] veth0_to_team: entered promiscuous mode
[  700.761133][T23775] veth1_to_team: entered promiscuous mode
[  700.779128][T23775] veth0_to_batadv: entered promiscuous mode
[  700.792771][T23775] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  700.801392][T23775] batadv_slave_0: entered promiscuous mode
[  700.812735][T23775] veth1_to_batadv: entered promiscuous mode
[  700.822607][T23775] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  700.831433][T23775] batadv_slave_1: entered promiscuous mode
[  700.843039][T23775] xfrm0: entered promiscuous mode
[  700.852853][T23775] veth0_to_hsr: entered promiscuous mode
[  700.865900][T23775] veth1_to_hsr: entered promiscuous mode
[  700.878692][T23775] hsr0: entered promiscuous mode
[  700.886254][T23775] veth1_virt_wifi: entered promiscuous mode
[  700.895787][T23775] veth0_virt_wifi: entered promiscuous mode
[  700.907093][T23775] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  700.936676][T23775] vlan0: entered promiscuous mode
[  700.943322][T23775] vlan1: entered promiscuous mode
[  700.950644][T23775] macvlan0: entered promiscuous mode
[  700.962467][T23775] macvlan1: entered promiscuous mode
[  700.974761][T23775] ipvlan0: entered promiscuous mode
[  700.980969][T23775] ipvlan1: entered promiscuous mode
[  700.996287][T23775] macvtap0: entered promiscuous mode
[  701.005391][T23775] macsec0: entered promiscuous mode
[  701.016974][T23775] geneve0: entered promiscuous mode
[  701.027273][T23775] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  701.040788][T23775] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  701.052585][T23775] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  701.064608][T23775] netdevsim netdevsim0 netdevsim3: entered promiscuous mode
[  701.086785][T23775] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode
[  701.098555][T23775] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode
[  701.105880][T23775] mac80211_hwsim hwsim34 wlan1: left allmulticast mode
[  701.113519][T23775] @: entered promiscuous mode
[  701.119238][T23775] wireguard0: entered promiscuous mode
[  701.125380][T23775] sit1: entered promiscuous mode
[  701.229654][T23784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  701.372671][T23796] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6556'.
[  701.377595][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  701.414713][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  701.498014][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  701.542736][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  701.612746][T23805] netlink: 'syz.3.6560': attribute type 17 has an invalid length.
[  701.623967][T23805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6560'.
[  701.635244][T23805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6560'.
[  701.714767][T23807] netlink: 'syz.4.6561': attribute type 10 has an invalid length.
[  701.766657][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  701.781116][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.795462][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  701.830305][T23793] lo speed is unknown, defaulting to 1000
[  701.855119][T23805] erspan0: entered promiscuous mode
[  701.924319][T23805] erspan0: left promiscuous mode
[  702.001294][T23807] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  702.528827][   T51] Bluetooth: hci5: command tx timeout
[  702.661898][T23793] lo speed is unknown, defaulting to 1000
[  702.664441][T23829] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6568'.
[  702.668742][T23803] siw: device registration error -23
[  702.756298][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  702.785435][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.804780][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  702.957929][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  702.968675][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.979577][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  703.241222][   T13] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  703.258300][   T13] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.275590][   T13] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  703.366073][T23849] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.6576'.
[  703.376674][T23852] siw: device registration error -23
[  703.378138][T23793] chnl_net:caif_netlink_parms(): no params data found
[  703.489772][T23856] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6579'.
[  703.702861][T23849] !
: renamed from dummy0 (while UP)
[  703.920564][T23876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6586'.
[  704.017525][T23793] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.042611][T23793] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.064484][T23793] bridge_slave_0: entered allmulticast mode
[  704.076688][T23793] bridge_slave_0: entered promiscuous mode
[  704.095484][T23793] bridge0: port 2(bridge_slave_1) entered blocking state
[  704.115947][T23793] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.126042][T23793] bridge_slave_1: entered allmulticast mode
[  704.164315][T23793] bridge_slave_1: entered promiscuous mode
[  704.309753][T23793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  704.410787][T23793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  704.454151][T23893] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6591'.
[  704.526943][   T13] bridge_slave_1: left allmulticast mode
[  704.571275][   T13] bridge_slave_1: left promiscuous mode
[  704.596068][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.618487][   T51] Bluetooth: hci5: command tx timeout
[  704.640909][   T13] bridge_slave_0: left allmulticast mode
[  704.664306][   T13] bridge_slave_0: left promiscuous mode
[  704.692104][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.219912][   T13] bond4 (unregistering): (slave geneve2): Releasing backup interface
[  705.260330][   T13] bond0 (unregistering): (slave geneve1): Releasing backup interface
[  705.271035][   T13] geneve1 (unregistering): left allmulticast mode
[  705.301895][   T13] team0: Port device geneve0 removed
[  705.401343][T23912] netlink: 'syz.0.6598': attribute type 10 has an invalid length.
[  705.724066][   T60] smc: removing ib device syz1
[  705.731305][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  705.742473][   T13] bond_slave_0: left allmulticast mode
[  705.750605][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  705.760172][   T13] bond_slave_1: left allmulticast mode
[  705.767367][   T13] bond0 (unregistering): Released all slaves
[  705.785174][   T13] bond1 (unregistering): Released all slaves
[  705.802513][   T13] bond2 (unregistering): Released all slaves
[  705.822545][   T13] bond3 (unregistering): Released all slaves
[  705.843001][   T13] bond4 (unregistering): Released all slaves
[  705.863232][   T13] bond5 (unregistering): Released all slaves
[  705.882883][   T13] bond6 (unregistering): Released all slaves
[  705.903606][   T13] bond7 (unregistering): Released all slaves
[  705.923277][   T13] bond8 (unregistering): Released all slaves
[  705.979027][T23793] team0: Port device team_slave_0 added
[  706.077523][T23793] team0: Port device team_slave_1 added
[  706.370076][T23925] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6602'.
[  706.470074][T23793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  706.495119][T23793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  706.578877][T23793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  706.650884][T23793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  706.669073][T23793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  706.705013][ T5873] Bluetooth: hci5: command tx timeout
[  706.705190][T23935] netlink: 'syz.4.6601': attribute type 1 has an invalid length.
[  706.733118][T23793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  706.735852][T23935] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6601'.
[  706.836394][T23935] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  706.868977][T23935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6601'.
[  707.149552][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6608'.
[  707.360442][T23793] hsr_slave_0: entered promiscuous mode
[  707.385649][T23793] hsr_slave_1: entered promiscuous mode
[  707.405635][T23793] debugfs: 'hsr0' already exists in 'hsr'
[  707.429448][T23793] Cannot create hsr debugfs directory
[  707.722898][T23962] FAULT_INJECTION: forcing a failure.
[  707.722898][T23962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  707.775442][T23962] CPU: 1 UID: 0 PID: 23962 Comm: syz.3.6614 Not tainted syzkaller #0 PREEMPT(full) 
[  707.775473][T23962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  707.775486][T23962] Call Trace:
[  707.775494][T23962]  <TASK>
[  707.775505][T23962]  dump_stack_lvl+0x189/0x250
[  707.775539][T23962]  ? __pfx____ratelimit+0x10/0x10
[  707.775570][T23962]  ? __pfx_dump_stack_lvl+0x10/0x10
[  707.775596][T23962]  ? __pfx__printk+0x10/0x10
[  707.775642][T23962]  should_fail_ex+0x414/0x560
[  707.775676][T23962]  _copy_to_user+0x31/0xb0
[  707.775704][T23962]  simple_read_from_buffer+0xe1/0x170
[  707.775740][T23962]  proc_fail_nth_read+0x1b3/0x220
[  707.775769][T23962]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  707.775796][T23962]  ? rw_verify_area+0x2a6/0x4d0
[  707.775821][T23962]  ? __lock_acquire+0xab9/0xd20
[  707.775858][T23962]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  707.775883][T23962]  vfs_read+0x200/0xa30
[  707.775909][T23962]  ? fdget_pos+0x247/0x320
[  707.775934][T23962]  ? __pfx___mutex_lock+0x10/0x10
[  707.775965][T23962]  ? __pfx_vfs_read+0x10/0x10
[  707.775994][T23962]  ? __fget_files+0x2a/0x420
[  707.776030][T23962]  ? __fget_files+0x3a0/0x420
[  707.776058][T23962]  ? __fget_files+0x2a/0x420
[  707.776098][T23962]  ksys_read+0x145/0x250
[  707.776128][T23962]  ? __pfx_ksys_read+0x10/0x10
[  707.776151][T23962]  ? rcu_is_watching+0x15/0xb0
[  707.776184][T23962]  ? do_syscall_64+0xbe/0x3b0
[  707.776218][T23962]  do_syscall_64+0xfa/0x3b0
[  707.776245][T23962]  ? lockdep_hardirqs_on+0x9c/0x150
[  707.776271][T23962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.776292][T23962]  ? clear_bhb_loop+0x60/0xb0
[  707.776318][T23962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.776337][T23962] RIP: 0033:0x7ff78918d5fc
[  707.776356][T23962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  707.776374][T23962] RSP: 002b:00007ff78a05d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  707.776397][T23962] RAX: ffffffffffffffda RBX: 00007ff7893b5fa0 RCX: 00007ff78918d5fc
[  707.776413][T23962] RDX: 000000000000000f RSI: 00007ff78a05d0a0 RDI: 0000000000000004
[  707.776427][T23962] RBP: 00007ff78a05d090 R08: 0000000000000000 R09: 0000000000000000
[  707.776440][T23962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  707.776454][T23962] R13: 00007ff7893b6038 R14: 00007ff7893b5fa0 R15: 00007fff3e711f68
[  707.776490][T23962]  </TASK>
[  708.334973][T23971] netlink: 'syz.3.6617': attribute type 12 has an invalid length.
[  708.618040][ T5873] Bluetooth: hci4: command 0x0406 tx timeout
[  708.772360][   T51] Bluetooth: hci5: command tx timeout
[  709.006548][T24005] blkio.reset_stats is deprecated
[  709.369853][T24016] netlink: 'syz.2.6629': attribute type 10 has an invalid length.
[  709.414569][T24016] batman_adv: batadv0: Adding interface: team0
[  709.426505][T24016] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  709.508224][T24016] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  709.881564][T24031] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6634'.
[  710.067254][   T13] tipc: Left network mode
[  710.178649][   T13] IPVS: stopping backup sync thread 21452 ...
[  710.216771][T24039] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  710.441814][T24045] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6641'.
[  710.603771][T24050] IPVS: Error connecting to the multicast addr
[  710.951202][T23793] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  711.001985][T23793] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  711.106748][T24072] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  711.135975][T23793] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  711.241787][T23793] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  711.302135][   T13] hsr_slave_0: left promiscuous mode
[  711.316088][   T13] hsr_slave_1: left promiscuous mode
[  711.362297][   T13] veth1_macvtap: left promiscuous mode
[  711.370490][   T13] veth0_macvtap: left promiscuous mode
[  711.376223][   T13] veth1_vlan: left promiscuous mode
[  711.387515][   T13] veth0_vlan: left promiscuous mode
[  711.936444][   T13] vlan1 (unregistering): left allmulticast mode
[  712.262609][   T13] team0 (unregistering): Port device team_slave_1 removed
[  712.316641][   T13] team0 (unregistering): Port device team_slave_0 removed
[  712.803883][T24087] netlink: 'syz.2.6656': attribute type 3 has an invalid length.
[  712.813846][T24087] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.6656'.
[  712.826651][T24093] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6657'.
[  713.086266][T24112] netlink: 'syz.4.6661': attribute type 1 has an invalid length.
[  713.094223][T24112] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6661'.
[  713.110249][T24112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6661'.
[  713.326840][T24127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6663'.
[  713.326840][T24128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6663'.
[  713.442154][T24127] macvtap1: entered promiscuous mode
[  713.447531][T24127] vlan0: entered promiscuous mode
[  713.453742][T24127] macvtap1: entered allmulticast mode
[  713.459677][T24127] vlan0: entered allmulticast mode
[  713.466265][T24127] veth0_vlan: entered allmulticast mode
[  713.514311][T24128] macvtap2: entered promiscuous mode
[  713.520925][T24128] macvtap2: entered allmulticast mode
[  713.613077][T23793] 8021q: adding VLAN 0 to HW filter on device bond0
[  713.626538][   T13] IPVS: stop unused estimator thread 0...
[  713.671478][T23793] 8021q: adding VLAN 0 to HW filter on device team0
[  713.693612][T13625] bridge0: port 1(bridge_slave_0) entered blocking state
[  713.700962][T13625] bridge0: port 1(bridge_slave_0) entered forwarding state
[  713.724825][T13617] bridge0: port 2(bridge_slave_1) entered blocking state
[  713.732049][T13617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  713.823345][T23793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  714.617345][T23793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  714.763228][T23793] veth0_vlan: entered promiscuous mode
[  714.801120][T23793] veth1_vlan: entered promiscuous mode
[  714.966865][T23793] veth0_macvtap: entered promiscuous mode
[  714.973538][T24179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6680'.
[  714.981063][T23793] veth1_macvtap: entered promiscuous mode
[  714.984895][T24179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6680'.
[  715.041293][T24181] xt_time: invalid argument - start or stop time greater than 23:59:59
[  715.044352][T24179] gretap0: entered promiscuous mode
[  715.094143][T24185] netlink: 'syz.0.6682': attribute type 83 has an invalid length.
[  715.104727][T24179] batadv_slave_1: entered promiscuous mode
[  715.321345][T23793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  715.364356][T23793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  715.393683][  T997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  715.412989][T13617] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  715.453133][T24195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6687'.
[  715.475083][T24195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6687'.
[  715.504389][T13617] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  715.535333][T13617] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  715.747239][T13617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.773817][T13617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.886042][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.897099][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.437320][T24242] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  716.448963][T24242] batman_adv: batadv0: Removing interface: batadv_slave_0
[  716.464494][T24242] FAULT_INJECTION: forcing a failure.
[  716.464494][T24242] name failslab, interval 1, probability 0, space 0, times 0
[  716.478481][T24242] CPU: 1 UID: 0 PID: 24242 Comm: syz.2.6702 Not tainted syzkaller #0 PREEMPT(full) 
[  716.478511][T24242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  716.478524][T24242] Call Trace:
[  716.478533][T24242]  <TASK>
[  716.478542][T24242]  dump_stack_lvl+0x189/0x250
[  716.478572][T24242]  ? __pfx____ratelimit+0x10/0x10
[  716.478600][T24242]  ? __pfx_dump_stack_lvl+0x10/0x10
[  716.478623][T24242]  ? __pfx__printk+0x10/0x10
[  716.478663][T24242]  should_fail_ex+0x414/0x560
[  716.478697][T24242]  should_failslab+0xa8/0x100
[  716.478727][T24242]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  716.478755][T24242]  ? __alloc_skb+0x112/0x2d0
[  716.478789][T24242]  __alloc_skb+0x112/0x2d0
[  716.478821][T24242]  arp_create+0x189/0x990
[  716.478857][T24242]  ? __pfx_arp_create+0x10/0x10
[  716.478878][T24242]  ? batadv_primary_if_get_selected+0x7a/0x410
[  716.478917][T24242]  ? batadv_bla_send_claim+0xd0/0xc50
[  716.478943][T24242]  batadv_bla_send_claim+0x16a/0xc50
[  716.478975][T24242]  ? lockdep_hardirqs_on+0x9c/0x150
[  716.479002][T24242]  ? __pfx_batadv_bla_send_claim+0x10/0x10
[  716.479022][T24242]  ? batadv_bla_update_orig_address+0x534/0x880
[  716.479054][T24242]  batadv_bla_update_orig_address+0x56c/0x880
[  716.479085][T24242]  ? batadv_bla_update_orig_address+0x24e/0x880
[  716.479116][T24242]  ? __pfx_batadv_bla_update_orig_address+0x10/0x10
[  716.479140][T24242]  ? batadv_primary_if_get_selected+0x7a/0x410
[  716.479164][T24242]  ? __pfx_batadv_primary_if_get_selected+0x10/0x10
[  716.479198][T24242]  batadv_primary_if_update_addr+0x1ee/0x400
[  716.479226][T24242]  batadv_primary_if_select+0x191/0x2d0
[  716.479253][T24242]  batadv_hardif_disable_interface+0x754/0xf20
[  716.479283][T24242]  ? batadv_hardif_disable_interface+0x40d/0xf20
[  716.479306][T24242]  ? __pfx_batadv_hardif_disable_interface+0x10/0x10
[  716.479329][T24242]  ? kasan_save_track+0x4f/0x80
[  716.479352][T24242]  ? dev_hard_start_xmit+0x2d4/0x830
[  716.479370][T24242]  ? netlink_deliver_tap+0x19c/0x1b0
[  716.479391][T24242]  ? netlink_unicast+0x7fa/0x9e0
[  716.479414][T24242]  ? do_syscall_64+0xfa/0x3b0
[  716.479441][T24242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.479461][T24242]  batadv_meshif_destroy_netlink+0x68/0x250
[  716.479490][T24242]  ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10
[  716.479514][T24242]  rtnl_dellink+0x477/0x710
[  716.479544][T24242]  ? __pfx_rtnl_dellink+0x10/0x10
[  716.479578][T24242]  ? kasan_quarantine_put+0xdd/0x220
[  716.479598][T24242]  ? lockdep_hardirqs_on+0x9c/0x150
[  716.479692][T24242]  ? __pfx_rtnl_dellink+0x10/0x10
[  716.479715][T24242]  rtnetlink_rcv_msg+0x7cc/0xb70
[  716.479742][T24242]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  716.479764][T24242]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  716.479785][T24242]  ? ref_tracker_free+0x63a/0x7d0
[  716.479808][T24242]  ? __asan_memcpy+0x40/0x70
[  716.479826][T24242]  ? __pfx_ref_tracker_free+0x10/0x10
[  716.479858][T24242]  netlink_rcv_skb+0x205/0x470
[  716.479883][T24242]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  716.479908][T24242]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  716.479942][T24242]  ? netlink_deliver_tap+0x2e/0x1b0
[  716.479979][T24242]  netlink_unicast+0x82c/0x9e0
[  716.480009][T24242]  ? __pfx_netlink_unicast+0x10/0x10
[  716.480031][T24242]  ? netlink_sendmsg+0x642/0xb30
[  716.480053][T24242]  ? skb_put+0x11b/0x210
[  716.480081][T24242]  netlink_sendmsg+0x805/0xb30
[  716.480114][T24242]  ? __pfx_netlink_sendmsg+0x10/0x10
[  716.480140][T24242]  ? aa_sock_msg_perm+0xf1/0x1d0
[  716.480167][T24242]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  716.480185][T24242]  ? __pfx_netlink_sendmsg+0x10/0x10
[  716.480209][T24242]  __sock_sendmsg+0x219/0x270
[  716.480234][T24242]  ____sys_sendmsg+0x505/0x830
[  716.480256][T24242]  ? __pfx_____sys_sendmsg+0x10/0x10
[  716.480282][T24242]  ? import_iovec+0x74/0xa0
[  716.480305][T24242]  ___sys_sendmsg+0x21f/0x2a0
[  716.480324][T24242]  ? __pfx____sys_sendmsg+0x10/0x10
[  716.480376][T24242]  ? __fget_files+0x2a/0x420
[  716.480399][T24242]  ? __fget_files+0x3a0/0x420
[  716.480434][T24242]  __x64_sys_sendmsg+0x19b/0x260
[  716.480453][T24242]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  716.480480][T24242]  ? __pfx_ksys_write+0x10/0x10
[  716.480499][T24242]  ? rcu_is_watching+0x15/0xb0
[  716.480521][T24242]  ? do_syscall_64+0xbe/0x3b0
[  716.480548][T24242]  do_syscall_64+0xfa/0x3b0
[  716.480569][T24242]  ? lockdep_hardirqs_on+0x9c/0x150
[  716.480590][T24242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.480606][T24242]  ? clear_bhb_loop+0x60/0xb0
[  716.480627][T24242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.480643][T24242] RIP: 0033:0x7f19cf18ebe9
[  716.480659][T24242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  716.480675][T24242] RSP: 002b:00007f19cff5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  716.480694][T24242] RAX: ffffffffffffffda RBX: 00007f19cf3b5fa0 RCX: 00007f19cf18ebe9
[  716.480707][T24242] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003
[  716.480718][T24242] RBP: 00007f19cff5f090 R08: 0000000000000000 R09: 0000000000000000
[  716.480729][T24242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  716.480739][T24242] R13: 00007f19cf3b6038 R14: 00007f19cf3b5fa0 R15: 00007ffc38dd4988
[  716.480766][T24242]  </TASK>
[  716.486321][T24242] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  716.780769][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  717.060118][T24242] batman_adv: batadv0: Removing interface: batadv_slave_1
[  717.077497][T24242] batman_adv: batadv0: Removing interface: team0
[  717.143925][T24249] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  717.180195][T24249] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  717.271616][   T13] bridge_slave_1: left allmulticast mode
[  717.289280][   T13] bridge_slave_1: left promiscuous mode
[  717.304190][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.366855][   T13] bridge_slave_0: left allmulticast mode
[  717.397187][   T13] bridge_slave_0: left promiscuous mode
[  717.425359][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.924878][   T13] dvmrp0 (unregistering): left allmulticast mode
[  718.326905][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  718.340310][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  718.353345][   T13] bond0 (unregistering): Released all slaves
[  718.471653][   T13] bond1 (unregistering): Released all slaves
[  718.596991][   T13] bond2 (unregistering): Released all slaves
[  718.726581][   T13] bond3 (unregistering): (slave veth5): Releasing active interface
[  718.736234][   T13] bond3 (unregistering): Released all slaves
[  718.752189][   T13] bond4 (unregistering): Released all slaves
[  719.092502][   T13] tipc: Left network mode
[  719.466219][T24312] __nla_validate_parse: 3 callbacks suppressed
[  719.466247][T24312] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6722'.
[  719.675366][T24314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6723'.
[  720.259961][   T13] hsr_slave_0: left promiscuous mode
[  720.279651][   T13] hsr_slave_1: left promiscuous mode
[  720.311621][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  720.329191][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  720.349141][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  720.362147][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  720.423712][   T13] veth1_macvtap: left promiscuous mode
[  720.435957][   T13] veth0_macvtap: left promiscuous mode
[  720.444468][   T13] veth1_vlan: left promiscuous mode
[  720.446707][T24344] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6733'.
[  720.455641][   T13] veth0_vlan: left promiscuous mode
[  720.538945][T24347] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6733'.
[  720.612610][T24349] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6735'.
[  720.702045][T24351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6736'.
[  720.758492][T24353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6736'.
[  721.199661][   T13] team0 (unregistering): Port device team_slave_1 removed
[  721.256591][   T13] team0 (unregistering): Port device team_slave_0 removed
[  721.744468][   T60] smc: removing ib device syz0
[  722.247979][T24369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6741'.
[  722.296098][T24375] netlink: 'syz.4.6741': attribute type 1 has an invalid length.
[  722.353461][T24375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6741'.
[  722.424426][T24376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6743'.
[  722.617012][T24391] netlink: 'syz.0.6748': attribute type 13 has an invalid length.
[  722.647175][T24391] macvtap0: left promiscuous mode
[  722.657792][T24391] macvtap0: entered allmulticast mode
[  722.663741][T24391] macvtap0: refused to change device tx_queue_len
[  723.729476][T24428] tipc: Started in network mode
[  723.734497][T24428] tipc: Node identity ded5570dd4d1, cluster identity 4711
[  723.797023][T24428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  723.888152][T24437] syzkaller0: entered promiscuous mode
[  723.927060][T24437] syzkaller0: entered allmulticast mode
[  723.970588][T24428] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  724.187526][T24454] netlink: 'syz.3.6765': attribute type 1 has an invalid length.
[  724.315296][T24443] tipc: Resetting bearer <eth:syzkaller0>
[  724.548607][T24424] tipc: Resetting bearer <eth:syzkaller0>
[  724.738911][T24424] tipc: Disabling bearer <eth:syzkaller0>
[  725.069150][T24473] netlink: 'syz.2.6771': attribute type 1 has an invalid length.
[  725.176933][T24478] openvswitch: netlink: Missing key (keys=40, expected=80)
[  725.428444][T24488] __nla_validate_parse: 4 callbacks suppressed
[  725.428469][T24488] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6776'.
[  725.451136][T24491] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6777'.
[  725.843689][T24514] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6786'.
[  726.349192][T24541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6794'.
[  726.392402][T24541] netlink: 'syz.0.6794': attribute type 7 has an invalid length.
[  726.436301][T24541] netlink: 'syz.0.6794': attribute type 8 has an invalid length.
[  726.456685][T24541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6794'.
[  726.461198][T24537] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  726.484666][T24546] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6798'.
[  728.513456][T24563] tipc: Started in network mode
[  728.547854][T24563] tipc: Node identity de79392fb3ce, cluster identity 4711
[  728.558439][T24563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  728.596172][T24564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6800'.
[  728.625322][T24569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6803'.
[  728.798117][T24564] tipc: Disabling bearer <eth:syzkaller0>
[  728.995375][T24591] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6813'.
[  729.210748][T24606] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6816'.
[  729.683831][T24628] netlink: 'syz.2.6826': attribute type 11 has an invalid length.
[  729.697409][T24630] sctp: [Deprecated]: syz.0.6827 (pid 24630) Use of struct sctp_assoc_value in delayed_ack socket option.
[  729.697409][T24630] Use struct sctp_sack_info instead
[  729.716964][T24630] netlink: 'syz.0.6827': attribute type 7 has an invalid length.
[  729.732355][T24630] netlink: 'syz.0.6827': attribute type 8 has an invalid length.
[  730.016102][T24644] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003
[  730.404382][T24659] netlink: 'syz.3.6837': attribute type 1 has an invalid length.
[  730.441555][T24657] netlink: 'syz.0.6836': attribute type 2 has an invalid length.
[  730.457434][T24659] __nla_validate_parse: 1 callbacks suppressed
[  730.457457][T24659] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.6837'.
[  730.467005][T24657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6836'.
[  731.010573][T24696] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6850'.
[  731.026620][T24696] netlink: 'syz.4.6850': attribute type 83 has an invalid length.
[  731.210177][T24698] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.229288][T24698] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  731.263612][T24701] syz_tun: entered promiscuous mode
[  731.269938][T24701] syz_tun: entered allmulticast mode
[  731.455324][T24698] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.480985][T24698] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  731.648441][T24698] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.664880][T24698] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  731.724391][T24720] netlink: 'syz.0.6858': attribute type 25 has an invalid length.
[  731.750697][T24698] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.761578][T24698] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  731.794803][T24720] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6858'.
[  731.855388][T24720] syzkaller1: entered promiscuous mode
[  731.866092][T24720] syzkaller1: entered allmulticast mode
[  731.889852][T24720] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6858'.
[  732.005349][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  732.029081][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  732.058616][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  732.090107][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  732.117627][T13617] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  732.143022][T13617] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  732.167090][T13617] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  732.184578][T13617] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  732.238106][T24732] nbd2: detected capacity change from 0 to 127
[  732.246844][   T51] block nbd2: Receive control failed (result -32)
[  732.357131][T24748] team0: Device vti0 is of different type
[  732.370352][T24747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6865'.
[  732.619375][T24758] pim6reg1: entered promiscuous mode
[  732.639612][T24760] netlink: 'syz.0.6872': attribute type 10 has an invalid length.
[  732.667511][T24758] pim6reg1: entered allmulticast mode
[  732.695132][T24766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6870'.
[  732.764422][T24757] veth0_to_bridge: entered promiscuous mode
[  732.772497][T24757] veth0_to_bridge: left promiscuous mode
[  732.797018][T24766] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  732.805920][T24766] batman_adv: batadv0: Removing interface: batadv_slave_0
[  732.831459][T24766] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  732.844009][T24766] batman_adv: batadv0: Removing interface: batadv_slave_1
[  732.874347][T24777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6876'.
[  732.884961][T24777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6876'.
[  732.895569][T24771] batman_adv: batadv0: Adding interface: dummy0
[  732.902236][T24778] netlink: 'syz.3.6874': attribute type 1 has an invalid length.
[  732.932720][T24771] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  732.999525][T24771] batman_adv: batadv0: Interface activated: dummy0
[  733.034060][T24772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6875'.
[  733.097443][T24765] batadv0: mtu less than device minimum
[  733.106357][T24765] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  733.119071][T24765] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  733.131369][T24765] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  733.143588][T24765] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  733.155758][T24765] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  733.167950][T24765] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  733.180046][T24765] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  733.192246][T24765] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  733.204551][T24765] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  733.629092][T24807] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  733.784180][T24819] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  733.866418][T24819] bond1: entered promiscuous mode
[  733.883887][T24819] bond1: entered allmulticast mode
[  733.891618][T24819] 8021q: adding VLAN 0 to HW filter on device bond1
[  734.193098][T24839] netlink: 'syz.1.6898': attribute type 12 has an invalid length.
[  734.212670][T24839] netlink: 'syz.1.6898': attribute type 29 has an invalid length.
[  734.317050][T24846] FAULT_INJECTION: forcing a failure.
[  734.317050][T24846] name failslab, interval 1, probability 0, space 0, times 0
[  734.350752][T24846] CPU: 0 UID: 0 PID: 24846 Comm: syz.4.6902 Not tainted syzkaller #0 PREEMPT(full) 
[  734.350783][T24846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  734.350802][T24846] Call Trace:
[  734.350810][T24846]  <TASK>
[  734.350820][T24846]  dump_stack_lvl+0x189/0x250
[  734.350851][T24846]  ? __pfx____ratelimit+0x10/0x10
[  734.350890][T24846]  ? __pfx_dump_stack_lvl+0x10/0x10
[  734.350915][T24846]  ? __pfx__printk+0x10/0x10
[  734.350964][T24846]  should_fail_ex+0x414/0x560
[  734.350998][T24846]  should_failslab+0xa8/0x100
[  734.351030][T24846]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  734.351057][T24846]  ? __alloc_skb+0x112/0x2d0
[  734.351093][T24846]  __alloc_skb+0x112/0x2d0
[  734.351127][T24846]  create_monitor_ctrl_event+0x38/0x480
[  734.351165][T24846]  mgmt_cmd_complete+0x20f/0x590
[  734.351206][T24846]  start_discovery_internal+0x289/0x5c0
[  734.351238][T24846]  hci_mgmt_cmd+0x9c9/0xef0
[  734.351275][T24846]  hci_sock_sendmsg+0x6ca/0xef0
[  734.351315][T24846]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  734.351346][T24846]  ? aa_sock_msg_perm+0xf1/0x1d0
[  734.351381][T24846]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  734.351403][T24846]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  734.351435][T24846]  __sock_sendmsg+0x219/0x270
[  734.351467][T24846]  sock_write_iter+0x258/0x330
[  734.351497][T24846]  ? __pfx_sock_write_iter+0x10/0x10
[  734.351536][T24846]  ? bpf_lsm_file_permission+0x9/0x20
[  734.351560][T24846]  ? security_file_permission+0x75/0x290
[  734.351598][T24846]  vfs_write+0x5c9/0xb30
[  734.351632][T24846]  ? __pfx_sock_write_iter+0x10/0x10
[  734.351658][T24846]  ? __pfx_vfs_write+0x10/0x10
[  734.351700][T24846]  ? __fget_files+0x2a/0x420
[  734.351743][T24846]  ksys_write+0x145/0x250
[  734.351774][T24846]  ? __pfx_ksys_write+0x10/0x10
[  734.351798][T24846]  ? rcu_is_watching+0x15/0xb0
[  734.351827][T24846]  ? do_syscall_64+0xbe/0x3b0
[  734.351869][T24846]  do_syscall_64+0xfa/0x3b0
[  734.351896][T24846]  ? lockdep_hardirqs_on+0x9c/0x150
[  734.351923][T24846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.351944][T24846]  ? clear_bhb_loop+0x60/0xb0
[  734.351971][T24846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.351991][T24846] RIP: 0033:0x7f1a5298ebe9
[  734.352011][T24846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  734.352029][T24846] RSP: 002b:00007f1a537d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  734.352052][T24846] RAX: ffffffffffffffda RBX: 00007f1a52bb5fa0 RCX: 00007f1a5298ebe9
[  734.352067][T24846] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004
[  734.352081][T24846] RBP: 00007f1a537d3090 R08: 0000000000000000 R09: 0000000000000000
[  734.352094][T24846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  734.352107][T24846] R13: 00007f1a52bb6038 R14: 00007f1a52bb5fa0 R15: 00007ffd4988a2e8
[  734.352142][T24846]  </TASK>
[  735.058524][T17791] IPVS: starting estimator thread 0...
[  735.148424][T24885] IPVS: using max 28 ests per chain, 67200 per kthread
[  735.411365][T24905] netdevsim netdevsim0 : renamed from netdevsim0
[  735.422810][T24905] netdevsim netdevsim0 : left promiscuous mode
[  735.461186][T24909] netlink: 'syz.1.6923': attribute type 11 has an invalid length.
[  735.474966][T24909] __nla_validate_parse: 9 callbacks suppressed
[  735.474988][T24909] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6923'.
[  735.765894][T24923] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  735.883315][T24930] netlink: 'syz.3.6931': attribute type 11 has an invalid length.
[  736.277254][T24925] syz.1.6930 uses old SIOCAX25GETINFO
[  736.441286][T24952] FAULT_INJECTION: forcing a failure.
[  736.441286][T24952] name failslab, interval 1, probability 0, space 0, times 0
[  736.454403][T24952] CPU: 1 UID: 0 PID: 24952 Comm: syz.4.6939 Not tainted syzkaller #0 PREEMPT(full) 
[  736.454432][T24952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  736.454444][T24952] Call Trace:
[  736.454453][T24952]  <TASK>
[  736.454462][T24952]  dump_stack_lvl+0x189/0x250
[  736.454492][T24952]  ? __pfx____ratelimit+0x10/0x10
[  736.454520][T24952]  ? __pfx_dump_stack_lvl+0x10/0x10
[  736.454543][T24952]  ? __pfx__printk+0x10/0x10
[  736.454583][T24952]  ? __lock_acquire+0xab9/0xd20
[  736.454622][T24952]  should_fail_ex+0x414/0x560
[  736.454655][T24952]  should_failslab+0xa8/0x100
[  736.454687][T24952]  kmem_cache_alloc_noprof+0x73/0x3c0
[  736.454714][T24952]  ? __inet_hash_connect+0xdcc/0x2310
[  736.454750][T24952]  __inet_hash_connect+0xdcc/0x2310
[  736.454784][T24952]  ? __pfx___inet6_check_established+0x10/0x10
[  736.454816][T24952]  ? __inet_hash_connect+0x4fa/0x2310
[  736.454855][T24952]  ? __pfx___inet_hash_connect+0x10/0x10
[  736.454884][T24952]  ? sk_setup_caps+0x850/0xac0
[  736.454910][T24952]  ? inet6_hash_connect+0xd8/0x170
[  736.454934][T24952]  tcp_v6_connect+0xf24/0x1870
[  736.454972][T24952]  ? __pfx_tcp_v6_connect+0x10/0x10
[  736.454994][T24952]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  736.455054][T24952]  __inet_stream_connect+0x2ae/0xe80
[  736.455092][T24952]  ? __local_bh_enable_ip+0x12d/0x1c0
[  736.455114][T24952]  ? __pfx___inet_stream_connect+0x10/0x10
[  736.455139][T24952]  ? __local_bh_enable_ip+0x12d/0x1c0
[  736.455160][T24952]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  736.455195][T24952]  inet_stream_connect+0x66/0xa0
[  736.455224][T24952]  __sys_connect+0x313/0x440
[  736.455253][T24952]  ? __fget_files+0x3a0/0x420
[  736.455284][T24952]  ? __pfx___sys_connect+0x10/0x10
[  736.455330][T24952]  ? __pfx_ksys_write+0x10/0x10
[  736.455354][T24952]  ? rcu_is_watching+0x15/0xb0
[  736.455383][T24952]  __x64_sys_connect+0x7a/0x90
[  736.455414][T24952]  do_syscall_64+0xfa/0x3b0
[  736.455441][T24952]  ? lockdep_hardirqs_on+0x9c/0x150
[  736.455467][T24952]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.455485][T24952]  ? clear_bhb_loop+0x60/0xb0
[  736.455509][T24952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.455527][T24952] RIP: 0033:0x7f1a5298ebe9
[  736.455548][T24952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  736.455566][T24952] RSP: 002b:00007f1a537d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  736.455599][T24952] RAX: ffffffffffffffda RBX: 00007f1a52bb5fa0 RCX: 00007f1a5298ebe9
[  736.455614][T24952] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003
[  736.455627][T24952] RBP: 00007f1a537d3090 R08: 0000000000000000 R09: 0000000000000000
[  736.455641][T24952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  736.455653][T24952] R13: 00007f1a52bb6038 R14: 00007f1a52bb5fa0 R15: 00007ffd4988a2e8
[  736.455688][T24952]  </TASK>
[  736.776860][T24956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6941'.
[  736.849317][T24960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6941'.
[  736.866734][T24960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6941'.
[  737.008388][   T51] Bluetooth: hci5: command 0x0405 tx timeout
[  737.139100][T24968] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  737.323463][T24981] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6947'.
[  737.334447][T24981] tc_dump_action: action bad kind
[  737.393761][T24983] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6946'.
[  737.403437][T24980] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6945'.
[  737.509433][T24990] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6949'.
[  738.005481][T25014] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6960'.
[  738.041694][T25016] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6961'.
[  738.264416][T25032] netlink: 'syz.0.6968': attribute type 3 has an invalid length.
[  738.424777][T25039] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  738.444632][T25040] syzkaller0: entered promiscuous mode
[  738.453659][T25040] syzkaller0: entered allmulticast mode
[  739.201788][T25074] bond0: entered allmulticast mode
[  739.206977][T25074] bond_slave_0: entered allmulticast mode
[  739.213324][T25074] bond_slave_1: entered allmulticast mode
[  739.241168][T25074] geneve1: entered allmulticast mode
[  739.261237][T25074] 8021q: adding VLAN 0 to HW filter on device bond0
[  739.343184][T25078] veth3: entered allmulticast mode
[  739.994453][T25099] netlink: 'syz.4.6990': attribute type 1 has an invalid length.
[  740.218453][T25116] netlink: 'syz.1.6996': attribute type 5 has an invalid length.
[  740.239371][T25116] geneve2: entered promiscuous mode
[  740.248004][T25116] geneve2: entered allmulticast mode
[  740.255149][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  740.285685][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  740.305537][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  740.338419][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  740.600299][T25132] net_ratelimit: 14 callbacks suppressed
[  740.600321][T25132] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  740.616726][T25136] __nla_validate_parse: 18 callbacks suppressed
[  740.616756][T25136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7006'.
[  740.680905][T25134] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7005'.
[  740.788459][T25142] netlink: 'syz.2.7008': attribute type 10 has an invalid length.
[  740.812903][T25142] bridge0: port 2(bridge_slave_1) entered disabled state
[  740.820831][T25142] bridge0: port 1(bridge_slave_0) entered disabled state
[  740.840445][T25142] bridge0: port 2(bridge_slave_1) entered blocking state
[  740.847790][T25142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  740.855505][T25142] bridge0: port 1(bridge_slave_0) entered blocking state
[  740.862826][T25142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  740.885227][T25142] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  741.027042][T25161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7015'.
[  741.059096][T25163] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7014'.
[  741.075402][T25161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7015'.
[  741.175895][T25167] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8
[  741.394673][T25179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7021'.
[  741.596768][T25187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7024'.
[  741.688356][T25195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7028'.
[  741.698703][T25196] netlink: 'syz.0.7024': attribute type 4 has an invalid length.
[  741.714440][T25195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7028'.
[  741.792142][T25201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7030'.
[  741.874669][T25205] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.956167][T25205] bridge_slave_1 (unregistering): left allmulticast mode
[  741.967241][T25205] bridge_slave_1 (unregistering): left promiscuous mode
[  741.983872][T25205] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.736891][T25254] netlink: 'syz.1.7051': attribute type 13 has an invalid length.
[  742.781537][T25254] veth0_macvtap: left promiscuous mode
[  742.806062][T25254] macvtap0: entered allmulticast mode
[  742.826666][T25254] macvtap0: refused to change device tx_queue_len
[  742.831422][T25258] netlink: 'syz.1.7051': attribute type 8 has an invalid length.
[  742.860349][T25259] team0: Device vti0 is of different type
[  743.943510][T25306] only policy match revision 0 supported
[  743.943536][T25306] unable to load match
[  744.269994][T25322] netlink: 'syz.0.7074': attribute type 1 has an invalid length.
[  744.675230][T25349] netlink: 'syz.1.7084': attribute type 25 has an invalid length.
[  744.690929][T25348] net veth1_virt_wifi .: renamed from virt_wifi0
[  744.720139][T25349] syzkaller1: entered promiscuous mode
[  744.725826][T25349] syzkaller1: entered allmulticast mode
[  744.993965][T25361] netlink: 'syz.3.7088': attribute type 1 has an invalid length.
[  745.782803][T25403] __nla_validate_parse: 14 callbacks suppressed
[  745.782827][T25403] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7098'.
[  745.825782][T25404] netlink: 'syz.2.7099': attribute type 25 has an invalid length.
[  745.975695][T25404] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7099'.
[  746.243815][T25413] syzkaller1: entered promiscuous mode
[  746.258118][T25413] syzkaller1: entered allmulticast mode
[  746.346174][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7103'.
[  746.369771][T25430] netlink: 'syz.0.7106': attribute type 1 has an invalid length.
[  746.377564][T25430] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7106'.
[  746.736870][T25448] netlink: 'syz.2.7111': attribute type 21 has an invalid length.
[  746.770172][T25448] netlink: 'syz.2.7111': attribute type 1 has an invalid length.
[  747.178984][T25470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7118'.
[  747.334459][T25481] netlink: 'syz.3.7121': attribute type 25 has an invalid length.
[  747.379060][T25481] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7121'.
[  747.409959][T25481] syzkaller1: entered promiscuous mode
[  747.432527][T25481] syzkaller1: entered allmulticast mode
[  747.545559][T25488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7122'.
[  747.701078][T25496] netlink: 200 bytes leftover after parsing attributes in process `syz.4.7128'.
[  747.784527][T25501] netlink: 'syz.2.7127': attribute type 14 has an invalid length.
[  747.817896][T25501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7127'.
[  747.872026][T13617] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  747.913900][T13617] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  747.951570][T13617] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  747.981787][T13617] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  748.014657][T25515] 
[  748.017239][T25515] ======================================================
[  748.024367][T25515] WARNING: possible circular locking dependency detected
[  748.031513][T25515] syzkaller #0 Not tainted
[  748.035955][T25515] ------------------------------------------------------
[  748.042996][T25515] syz.4.7133/25515 is trying to acquire lock:
[  748.049176][T25515] ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  748.058725][T25515] 
[  748.058725][T25515] but task is already holding lock:
[  748.066109][T25515] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  748.075794][T25515] 
[  748.075794][T25515] which lock already depends on the new lock.
[  748.075794][T25515] 
[  748.086203][T25515] 
[  748.086203][T25515] the existing dependency chain (in reverse order) is:
[  748.095229][T25515] 
[  748.095229][T25515] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  748.103157][T25515]        lock_acquire+0x120/0x360
[  748.108198][T25515]        _raw_spin_lock_bh+0x36/0x50
[  748.113571][T25515]        nr_rt_ioctl+0x390/0xd50
[  748.118774][T25515]        sock_do_ioctl+0xd9/0x300
[  748.123806][T25515]        sock_ioctl+0x576/0x790
[  748.128658][T25515]        __se_sys_ioctl+0xfc/0x170
[  748.133869][T25515]        do_syscall_64+0xfa/0x3b0
[  748.139247][T25515]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.145663][T25515] 
[  748.145663][T25515] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  748.153762][T25515]        lock_acquire+0x120/0x360
[  748.159063][T25515]        _raw_spin_lock_bh+0x36/0x50
[  748.164441][T25515]        nr_rt_ioctl+0x193/0xd50
[  748.169575][T25515]        sock_do_ioctl+0xd9/0x300
[  748.174625][T25515]        sock_ioctl+0x576/0x790
[  748.179517][T25515]        __se_sys_ioctl+0xfc/0x170
[  748.184645][T25515]        do_syscall_64+0xfa/0x3b0
[  748.189678][T25515]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.196099][T25515] 
[  748.196099][T25515] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  748.204625][T25515]        validate_chain+0xb9b/0x2140
[  748.209915][T25515]        __lock_acquire+0xab9/0xd20
[  748.215125][T25515]        lock_acquire+0x120/0x360
[  748.220155][T25515]        _raw_spin_lock_bh+0x36/0x50
[  748.225441][T25515]        nr_rt_device_down+0xa9/0x720
[  748.230817][T25515]        nr_device_event+0x137/0x150
[  748.236101][T25515]        notifier_call_chain+0x1b3/0x3e0
[  748.241738][T25515]        netif_close_many+0x29c/0x410
[  748.247113][T25515]        netif_close+0x158/0x210
[  748.252054][T25515]        dev_close+0x10a/0x220
[  748.256823][T25515]        bpq_device_event+0x377/0x6a0
[  748.262205][T25515]        notifier_call_chain+0x1b3/0x3e0
[  748.267837][T25515]        netif_close_many+0x29c/0x410
[  748.273210][T25515]        netif_close+0x158/0x210
[  748.278155][T25515]        dev_close+0x10a/0x220
[  748.282941][T25515]        bond_setup_by_slave+0x5f/0x3f0
[  748.288493][T25515]        bond_enslave+0x7a0/0x3a20
[  748.293624][T25515]        bond_do_ioctl+0x635/0x9b0
[  748.298742][T25515]        bond_siocdevprivate+0x17e/0x350
[  748.304378][T25515]        dev_ifsioc+0xb57/0xf00
[  748.309233][T25515]        dev_ioctl+0x84c/0x1150
[  748.314089][T25515]        sock_ioctl+0x719/0x790
[  748.318939][T25515]        __se_sys_ioctl+0xfc/0x170
[  748.324050][T25515]        do_syscall_64+0xfa/0x3b0
[  748.329080][T25515]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.336089][T25515] 
[  748.336089][T25515] other info that might help us debug this:
[  748.336089][T25515] 
[  748.346330][T25515] Chain exists of:
[  748.346330][T25515]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  748.346330][T25515] 
[  748.360171][T25515]  Possible unsafe locking scenario:
[  748.360171][T25515] 
[  748.367716][T25515]        CPU0                    CPU1
[  748.373087][T25515]        ----                    ----
[  748.378451][T25515]   lock(nr_neigh_list_lock);
[  748.383133][T25515]                                lock(&nr_node->node_lock);
[  748.390506][T25515]                                lock(nr_neigh_list_lock);
[  748.397721][T25515]   lock(nr_node_list_lock);
[  748.402347][T25515] 
[  748.402347][T25515]  *** DEADLOCK ***
[  748.402347][T25515] 
[  748.410543][T25515] 2 locks held by syz.4.7133/25515:
[  748.415760][T25515]  #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150
[  748.424659][T25515]  #1: ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  748.434702][T25515] 
[  748.434702][T25515] stack backtrace:
[  748.440617][T25515] CPU: 0 UID: 0 PID: 25515 Comm: syz.4.7133 Not tainted syzkaller #0 PREEMPT(full) 
[  748.440640][T25515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  748.440651][T25515] Call Trace:
[  748.440667][T25515]  <TASK>
[  748.440676][T25515]  dump_stack_lvl+0x189/0x250
[  748.440702][T25515]  ? __pfx_dump_stack_lvl+0x10/0x10
[  748.440721][T25515]  ? __pfx__printk+0x10/0x10
[  748.440745][T25515]  ? print_lock_name+0xde/0x100
[  748.440768][T25515]  print_circular_bug+0x2ee/0x310
[  748.440787][T25515]  check_noncircular+0x134/0x160
[  748.440807][T25515]  validate_chain+0xb9b/0x2140
[  748.440825][T25515]  ? rt6_disable_ip+0x6b3/0x720
[  748.440849][T25515]  ? __lock_acquire+0xab9/0xd20
[  748.440873][T25515]  __lock_acquire+0xab9/0xd20
[  748.440898][T25515]  ? nr_rt_device_down+0xa9/0x720
[  748.440917][T25515]  lock_acquire+0x120/0x360
[  748.440939][T25515]  ? nr_rt_device_down+0xa9/0x720
[  748.440960][T25515]  ? nr_rt_device_down+0xa9/0x720
[  748.440978][T25515]  _raw_spin_lock_bh+0x36/0x50
[  748.440997][T25515]  ? nr_rt_device_down+0xa9/0x720
[  748.441015][T25515]  nr_rt_device_down+0xa9/0x720
[  748.441034][T25515]  ? do_raw_spin_unlock+0x122/0x240
[  748.441055][T25515]  nr_device_event+0x137/0x150
[  748.441072][T25515]  notifier_call_chain+0x1b3/0x3e0
[  748.441092][T25515]  netif_close_many+0x29c/0x410
[  748.441116][T25515]  ? __pfx_netif_close_many+0x10/0x10
[  748.441139][T25515]  ? bond_netdev_event+0x227/0xe80
[  748.441157][T25515]  netif_close+0x158/0x210
[  748.441178][T25515]  ? __pfx_netif_close+0x10/0x10
[  748.441199][T25515]  ? tun_device_event+0x77/0x1020
[  748.441223][T25515]  ? __pfx___neigh_ifdown+0x10/0x10
[  748.441243][T25515]  ? macsec_notify+0x104/0x660
[  748.441262][T25515]  dev_close+0x10a/0x220
[  748.441287][T25515]  bpq_device_event+0x377/0x6a0
[  748.441311][T25515]  notifier_call_chain+0x1b3/0x3e0
[  748.441329][T25515]  netif_close_many+0x29c/0x410
[  748.441353][T25515]  ? __pfx_netif_close_many+0x10/0x10
[  748.441378][T25515]  netif_close+0x158/0x210
[  748.441399][T25515]  ? __pfx_netif_close+0x10/0x10
[  748.441420][T25515]  ? do_raw_spin_lock+0x121/0x290
[  748.441440][T25515]  ? __local_bh_enable_ip+0x12d/0x1c0
[  748.441456][T25515]  ? lockdep_hardirqs_on+0x9c/0x150
[  748.441479][T25515]  dev_close+0x10a/0x220
[  748.441503][T25515]  bond_setup_by_slave+0x5f/0x3f0
[  748.441525][T25515]  bond_enslave+0x7a0/0x3a20
[  748.441551][T25515]  ? finish_task_switch+0x266/0x950
[  748.441575][T25515]  ? __pfx_bond_enslave+0x10/0x10
[  748.441598][T25515]  ? apparmor_capable+0x137/0x1b0
[  748.441617][T25515]  ? full_name_hash+0x92/0xe0
[  748.441634][T25515]  ? netdev_name_node_lookup+0xdf/0x120
[  748.441654][T25515]  bond_do_ioctl+0x635/0x9b0
[  748.441687][T25515]  ? __pfx_bond_do_ioctl+0x10/0x10
[  748.441712][T25515]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  748.441734][T25515]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  748.441755][T25515]  ? rcu_is_watching+0x15/0xb0
[  748.441773][T25515]  bond_siocdevprivate+0x17e/0x350
[  748.441798][T25515]  ? __pfx_bond_siocdevprivate+0x10/0x10
[  748.441824][T25515]  ? full_name_hash+0x92/0xe0
[  748.441841][T25515]  ? netdev_name_node_lookup+0xdf/0x120
[  748.441860][T25515]  dev_ifsioc+0xb57/0xf00
[  748.441885][T25515]  dev_ioctl+0x84c/0x1150
[  748.441908][T25515]  sock_ioctl+0x719/0x790
[  748.441927][T25515]  ? __pfx_sock_ioctl+0x10/0x10
[  748.441946][T25515]  ? __fget_files+0x3a0/0x420
[  748.441970][T25515]  ? __fget_files+0x2a/0x420
[  748.441994][T25515]  ? bpf_lsm_file_ioctl+0x9/0x20
[  748.442014][T25515]  ? __pfx_sock_ioctl+0x10/0x10
[  748.442032][T25515]  __se_sys_ioctl+0xfc/0x170
[  748.442052][T25515]  do_syscall_64+0xfa/0x3b0
[  748.442075][T25515]  ? lockdep_hardirqs_on+0x9c/0x150
[  748.442096][T25515]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.442113][T25515]  ? clear_bhb_loop+0x60/0xb0
[  748.442130][T25515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.442146][T25515] RIP: 0033:0x7f1a5298ebe9
[  748.442162][T25515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  748.442176][T25515] RSP: 002b:00007f1a537d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  748.442196][T25515] RAX: ffffffffffffffda RBX: 00007f1a52bb5fa0 RCX: 00007f1a5298ebe9
[  748.442209][T25515] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000007
[  748.442220][T25515] RBP: 00007f1a52a11e19 R08: 0000000000000000 R09: 0000000000000000
[  748.442231][T25515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  748.442241][T25515] R13: 00007f1a52bb6038 R14: 00007f1a52bb5fa0 R15: 00007ffd4988a2e8
[  748.442259][T25515]  </TASK>
[  748.921696][T25515] 8021q: adding VLAN 0 to HW filter on device bond0
[  748.942058][T25515] bond0: (slave rose0): Enslaving as an active interface with an up link
[  749.064684][T25526] netlink: 'syz.2.7134': attribute type 1 has an invalid length.
[  749.073321][T25526] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7134'.