last executing test programs:

3.162226952s ago: executing program 4 (id=3702):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000100001082cbd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="fffe610c77c5c5ed1c03001001020008001b000000000010001a0104000a800500080003000000"], 0x38}}, 0x0)

2.983712451s ago: executing program 4 (id=3703):
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) (fail_nth: 21)

2.875123206s ago: executing program 4 (id=3704):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async, rerun: 32)
r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000100), 0x9)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={0x0, 0xfff8}, 0x8) (async)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001300)={<r3=>0x0, 0x80}, &(0x7f0000001340)=0x8) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000003740)={<r4=>0x0, 0x8}, &(0x7f0000003780)=0x8) (rerun: 64)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000004080)={<r5=>0x0, 0x6}, &(0x7f00000040c0)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000004180)=[{&(0x7f0000000180)=@in6={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f00000012c0)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="52912cea655ec8aa0a212c376596589f11a4bc49fdf8c2fe6d1b7be47225a7d658e3a77364e2473b33607e095d0649999df1bb90303196751458adf9887691ad420fed9ecc11cee979731c238c3ff1724f9d9c3b83a9b69a601384c38098f2aa024724ecabb518c88c43502d0ea151a0121aeded54f1bedcf5908c19965d8e1a2171f45f602016ea628cdaec6041709468358200553e03cdd10dd4a7a9307051c849f0aed0f4ff1c073b19f73eddb6c66cf0f6d930d874ad3d7382f335a37cb60cb1548e2f8a45b6116abd249ab94441487b53fd9cc99a111fd0002eee7adfb76943735c1195ab94ad7033728c8ec9087bac", 0xf2}], 0x2, &(0x7f0000001380)=[@authinfo={0x18, 0x84, 0x6, {0xff}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @authinfo={0x18, 0x84, 0x6, {0x401}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndrcv={0x30, 0x84, 0x1, {0x1d6, 0x5, 0x0, 0x8001, 0xfffffff8, 0x0, 0x0, 0x6, r3}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x8}}], 0x108, 0x80}, {&(0x7f00000014c0)=@in6={0xa, 0x4e24, 0x1, @remote, 0x9}, 0x1c, &(0x7f00000036c0)=[{&(0x7f0000001500)="891fef88492e3c8353ec92ebeb0d45e749fa7b9d947dd2005428975a1d8a8d0462d9b98842ed17957a0dc27e9197", 0x2e}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="bd431f5f964e50b09e3c472414670f307bba644d9e5aacf9aa0edb9a89117ff41eba5cafb2b6fd7c87a32eb6a64c3445d7e779419eeab0724a6c6e3ad69de1293db054e9a5833fb46a6c2836bd99de776916c72e3538309a9854c9bd306851", 0x5f}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)="984c3009d14cc0590f79d71bb54634e3048de67dc1d7cb25502631024425ddffe5fb18c2bcab721294417586ce53ec0f0f70f2465aab63a1a05a65264e0b467105002765fec2e1cddbae757e667a4fabd28b0049bb4106a36e699c6ee6426a286a644308aab03ef1ac1748103f8d467163a7a4205c5a3036142e329abd2f56b0f6321993b77b6e19e1cd15a506b9ed3df67a1366cb39c9a94cd7c44ff5373d12c4d2da51f4068094d2beae88e647c73df334f16ee29eebeb4fef4529a8be80b2e9b7e65b1536ed235c2fb5b85c2e20ba32988eafe5f2c7567694b2956470b1daed0e86f2a58505d27807d84acb0205f3", 0xf0}], 0x5, &(0x7f00000037c0)=[@sndrcv={0x30, 0x84, 0x1, {0xf, 0xc, 0x208, 0x3, 0x62, 0x1, 0x4, 0x8, r4}}, @init={0x18, 0x84, 0x0, {0x2, 0x7, 0xfffa, 0x8000}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @init={0x18, 0x84, 0x0, {0x6, 0xd, 0x3, 0x6}}, @init={0x18, 0x84, 0x0, {0x655, 0xfe01, 0x8, 0x10}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0xe0, 0x2}, {&(0x7f00000038c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000003a40)=[{&(0x7f0000003900)="abb1be994533dae05aa87d47e71488b2fee1d3616cf63a558af6104a6f85a96ed421f3409db2f8c5d24d44a09b3b36ee1c0e39dddbbcf7e9da7ba94bde6e36d23bccad8246964931b9fad7cb51559d63d5745de44d408813ab5f5fb12482991af3b1feb84c47cdffba1c7ba6dd1bea16f5dcb01486048abad32b2cf475613af7036be23a54577f59b74c75f7b01f13f2b1f0a47aab327022c58a5eac6a6c06e051010079726646ac096643d757859fa7cb7cbb1e5203f83fc114c1e933845b40", 0xc0}, {&(0x7f00000039c0)="5f226e0bed35009d761fab15a83403a47413ddd0559d57051cea370b49a83ffd61a3725db1090daf0623ed1349b2dec2b94dc87ba5a3583d82af8294cf10c15cf894b491b588d5b0bfb356d76fe9161502a1f0e419d206bfc55826a2cf2462887781c9516a8c9f2543e52cb4ff1fcb530cd3552e67deb31b5946", 0x7a}], 0x2, &(0x7f0000003a80)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0xba}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x43}}], 0x30, 0x20000001}, {&(0x7f0000003ac0)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000004000)=[{&(0x7f0000003b00)="dc69e413627dba22174b305f394a0ad027753fc36cf752104ac0df8adad2ecd2f079682df9dd842b30534d417b2118e5eb097d44a05e1a1f95b3f9228c34921c561d76e6ff719d6e95e76b4caac1fd831aef7eabf4b3fcd7d5f8daddfd38be810b80d538525adeb1744e44d9b9cec13ecf9df220466416414973ce3e76005c334e0a67d85848f1781aea2731eec8f7b8a026f365cd2f80edb6710c96bc5394bd8a65092cb7c4412ccdf217ae7e8bf41944673627837ba6dc786a287eb5bfd15b93bfa029cf31bec02d9cc34ae8", 0xcd}, {&(0x7f0000003c00)="b0b31dc5972babf6ebe43773c607e3f4245e829cf48c5d07b56cc3039f945125a498e4baae1bf77143d2a09adde99b46742915458c85686b0f46be29843b153cc11c06970c28500766b8e66c95286719090550fcba55d1cdba969e4dc0ad0db97f72c0ff762b967f02fca5a2dfdff78d42cf56bdcdb40a7a7e47d77bbca728441b0e6abdb3fe2cbae93bc48736c0b6da332e758335ae872804ca6e3c17f53b2a6345d42db7ab122b276cfe63edab7fb2e34a4924916929a09ff6dd3b4556515e34", 0xc1}, {&(0x7f0000003d00)="1e045258bcf241acd095947473bf78f75e0df194aea0a591f1fd069837e9877837a4fa41ca4312c3c326c0f8beb87b13f8d818fee195546089fe671058f4631387813acc6f34c0b05d311f6a846a00e5403dcf04336d94ba079618a5501df3372ea91432b8741f1ada0f7d683ba639d49ec7eefe31092ac73cac0dfdceecabdf96f7120790532ceade845be090cdf05cc574060422c0fe8861b8547aa15649f7f27be7f820293172f334920d580745fc9c40f121398850dc3f4480bf369122869b41b305c92322a4bcd67505aeff", 0xce}, {&(0x7f0000003e00)="6e2143061a9bfdd24091de4f73f1e27a88bfd1e8e354480e03c72ba3cc73ce0a3cd6427f74ad7a8506916bbb608eea83ac88bf5398186970d873a8", 0x3b}, {&(0x7f0000003e40)="7c3fbc73e73f273eeb6ece18ae63f26a6caa5ae4c68d897da2c9b07e12180d22d9d216566f900e1ccb9185659096b0d9c1770e196171b0d3cb61e632b51bc0ccbb5c79f955b69665ae7955e9c09178cfce15c02b85753f03510d9b53a20a5a49aafc6fd6e125cf239da5cf28c2d071cebd4f45a367685987e0860e08a0bd6f167b1055b740a4549e14576a460b93ae938888716af1e85a34c49045ac79d924f23e844f839c64e32dd107455a36a5", 0xae}, {&(0x7f0000003f00)="1893b234f4da222ec6da8bf5e94bd7ae0c04adc34c884da7e0d1133621b4972ef48b7688fced873025395a9be4a06fac374c557a68873115f51cbd479e64cbe9faa0bcd93e24178d5a7c93d33b121d5b9e8d2607062b14d410981c8eb7e567627a6b775c2203af74ac24a94cddd976a01a3183e991fbc5949705dae157ed3bd985e5427edb8f720a76113748dadfd56b2ba1afb9584eeb1922b245667d988eebc0aed1b548f84336430dc95d80096f2ddb0755da251ad1f54f14348b8c92d2814ff6b1a1253793e7c466c8e67b4b85c795674385fcbdba11dfee1f619521839dfc4b2226746405fb4577d5ca759494d3c65775", 0xf3}], 0x6, &(0x7f0000004100)=[@sndrcv={0x30, 0x84, 0x1, {0x1, 0x5, 0x201, 0x1, 0x8, 0x6, 0x2, 0x8, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x50, 0x1}], 0x4, 0x4010) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000004280)={r5, 0x1, 0x4, 0x7}, &(0x7f00000042c0)=0x10) (async)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000004300)=0x10, 0x4) (async)
ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f0000004640)={0x4, &(0x7f00000045c0)=[{0xb29d, 0xf8, &(0x7f0000004340)="10087df3a869ca5817b360035270b85bf1955bc1112b14cea8339510dd87e4b1055cbc2c4feb761988c0cee263a3bc9ba6cd264d98ae6ba598a66542b04203246c29f65e97540dfdd5afc9b436cf881bf711a33a2161dddf17f5a1d9bdda127e512e3866424562aa94f1ddeadd63cf21d6ad4af558e0785791be7aa70b3421a3d70a477d06ac9c60a75e6dfa3dc4ff286de37496c9f7103cc45d5fb092b48cca9671474552969b99ce0ded78f37dbe062e96f38d20e46c1cb1acbbaa59d06b006aa3bece5212d778fbdc1fb7cf84bdc6315dd026153d0ba5bd4a15de7878d0b1a3bebcbf7f2508a72e4625ab6bfeee26bb0fd9e7992f7bf2", 0x1}, {0x8, 0xb4, &(0x7f0000004440)="b6e5d13566e50a166474a3dcb806c5c568e53dba672e6644c8f30e2312a6788d8f391f90b8138dfc90d6aea99906c58b914b0ba95fdd293854a180af7e3ad487f08ada2440d1234c7a36a471d13e6cc0389e8468210321e9aace3c7820d3b04d9d8de8abe9d10110568c1b8bb870b1723db1e9cc0305af581e360b38d7872b61c74e43609fdf9e1be609a0f1c3c98c7332c8ebe469b7f7d5df178c450ab74c950c87e684d41497b0d1426b3cbdd9e66a61f144ab"}, {0x7, 0x33, &(0x7f0000004500)="e7cd2e56d84c8617389bae6374927f8dc05cd671e3989a0ab7b2bb40acb1c5c9882c57eaa3fcec5561bfd29183aba2bddf6ea5", 0x1, 0x1}, {0x4f, 0x41, &(0x7f0000004540)="159f7e63bb782ee591fe38ef4e91d8b2eb591b5d2ce99d0776140eb1cedaa76968c1b6b46b4e77764421fed0b4d2fe5d48f7199d4cb29b17c9db1b5c82b3981a3a"}]}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000004740)={'tunl0\x00', &(0x7f00000046c0)={'gretap0\x00', <r7=>0x0, 0x80, 0x20, 0x401, 0x2, {{0x10, 0x4, 0x3, 0x18, 0x40, 0x66, 0x0, 0x2, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0x99, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @private=0xa010101, @remote, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x65, 0x1, 0xf, [{@empty, 0x3}, {@remote, 0x6}]}]}}}}})
sendmsg$nl_route_sched(r6, &(0x7f0000004800)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000047c0)={&(0x7f0000004780)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x2, 0xfff2}, {0xffe0, 0x7}, {0xfff1, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004880), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000048c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000049c0)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004980)={&(0x7f0000004900)={0x54, r8, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80)
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000004a00)={@rand_addr=' \x01\x00', @mcast1, @mcast2, 0x4, 0x40, 0x7a6e, 0x100, 0xfffffffffffffffe, 0xedb8f147eb8644e5, r7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004b40)={&(0x7f0000004a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004b00)={&(0x7f0000004ac0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000004c80)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x481420}, 0xc, &(0x7f0000004c40)={&(0x7f0000004bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0xd07, 0x0, 0x0, {0xa, 0x0, 0x7}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async, rerun: 32)
socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 32)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000004e40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000004cc0)=""/81, 0x51, 0x0, &(0x7f0000004d40)=""/226, 0xe2}, &(0x7f0000004e80)=0x40) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004f00), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r11, &(0x7f0000004fc0)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004f80)={&(0x7f0000004f40)={0x1c, r12, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000000) (async)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000005000)) (async)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000005040)={0x7, [0x3, 0xf86], 0x9}, 0x10)

2.731558422s ago: executing program 4 (id=3705):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000200071b48013c030000000000009500000000000000bc26000000000000bf67000000000000150200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050800000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd73"], &(0x7f0000000100)='GPL\x00'}, 0x94)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003d40)={&(0x7f0000003c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x5f, 0x0, 0x670b71ef8764820d, 0x30, 0x0, 0x2e]}}, 0x0, 0x20, 0x0, 0x1, 0x320}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000280)={'tunl0\x00', <r2=>0x0, 0x1, 0x20, 0x9, 0x6, {{0x17, 0x4, 0x3, 0x5, 0x5c, 0x66, 0x0, 0x5, 0x4, 0x0, @loopback, @local, {[@generic={0x88, 0x7, "3bbe13ba05"}, @timestamp_prespec={0x44, 0x2c, 0xbb, 0x3, 0x0, [{@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x8}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x7fff}]}, @generic={0x83, 0x9, "8927e6decd47d2"}, @rr={0x7, 0xb, 0x74, [@private=0xa010102, @multicast2]}]}}}}})
bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x8, r2, 0x1a}, 0x10)

2.708636256s ago: executing program 1 (id=3706):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0)
socket$inet6(0xa, 0x1, 0x82)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}})
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000009d00), r8)
sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000009e40)={0x0, 0x0, &(0x7f0000009e00)={&(0x7f0000009d40)={0x3c, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x7, 0xa8, @random="006f02"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
close(r6)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5)
syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000100000000000000000000000fe8000210000000000000000000000aa00000000000890780200000000000000"], 0x0)
r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000600000908000400640101ce4ead5ad5229bb32f00000000"], 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x0)

2.43911324s ago: executing program 2 (id=3708):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.405653505s ago: executing program 3 (id=3709):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
close(0x3)

2.268271143s ago: executing program 1 (id=3710):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f00000013c0)=0xc)
r3 = gettid()
sendmmsg$unix(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e1f}, 0x6e, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1cfdffffff0000000100000002000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001"], 0x38, 0x10}}], 0x1, 0x840)

2.244167828s ago: executing program 3 (id=3711):
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x7, 0x1, 0x1, 0x0, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) (fail_nth: 7)

2.132099882s ago: executing program 2 (id=3713):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029006400", @ANYRES16=r0], 0x18}, 0x40c0)

1.717781885s ago: executing program 2 (id=3714):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14070000"], 0x14}}, 0x20000000)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840)
r3 = socket(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x2, 0x1, 0x1}, 0x20)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000800000000e0fc463cd1fb569607b50a0000000c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c"], 0x250}}, 0x2000c000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, &(0x7f00000014c0)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

1.707021843s ago: executing program 1 (id=3715):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x7d1}, 0x1c)
connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbf8, 0x2000}, 0xc)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000580))
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)

1.62283606s ago: executing program 3 (id=3716):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002800500100006000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000)

1.621445737s ago: executing program 4 (id=3717):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x80}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)

1.453836443s ago: executing program 0 (id=3718):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100))

1.362308342s ago: executing program 2 (id=3719):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c9", 0x7b}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002240)="6e2ebb87dca38cb8b3378e86c02cafa0bd62c7a2cddda54f6a0a1c1b92bae9731f4063d80b5110c9d03f91a7a36de1b85a723f5902e290250ad0f1ba3a09733260816749c0336324bd84b178c88fa2d67602e2444a7e61aa569282cd7ce83e6c2faa97a4f99d042e50e79936490023788174b7af0c760ea8723eed6912bd85156d534474c9e5629951d6e4287bd996f0f801217b1567d0a160a44f5c122d4512a0c8cde478f738110e77ae94c9add0b05940b71bfecd3f0a7caa562d694634388ee577c44c873818cd358c9ce80ca10c5292a03540a6350546bfe7f8b54f57db5f2a969f2624f588643e2ad9be66d45d45354c164bb186522bf2130f43c84ad5d56f74afd23a06362f2b30dcc2ac95c3b5264aaccf66d52fc57615449e5362c1c6aea5d903a198742c9c", 0x12a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000640)="54c59afc1a5728711633d5b2966f9d91f849029f8000924638fd9dac482bc8b533ac438944ef7c56121e6711ae1cf8265f15218e28ee830030ec29e9e56c7da591bde19a38da4e324c71ad551dcffba7705ef78c1050175ef466fd78c8a0a6435db969098a48a124aae1bf861c3710577ec7e6b11070ec726bd0acafd09defad34c4c04bae1f9e34dc606660f2637234064a2ebbd283ed11bd994b40314c89b31ae74ca1b1fcdb9f5d698e3364943c89484807225e43ba4612aad5f396147cff4151b3bfb9f5bde48dd4e545444cbfd8073358822ea7ff14d3440365552f2e9628f6b254d3559d07c016250841ae4b4015c1ad", 0xf3}, {&(0x7f0000000340)="a9e7664b8115041928ef524290718ac78da582c28c965fd813c4d7f61c8f2d741f215b552c3e1ada475b8e4589c377e892822827f6ec2428853f50af8a83a4f15a99f3b6c223ef37e2074c12008772a3ae9d0ce0fbd323051c49f1e3bd7bd32894e9df6b66d0550f", 0x68}, {&(0x7f0000000740)="e1e3eefd15a4443fc8bf9101d56de607099daa3232607dd1cdf3191a5a72307380c1184136bbe2818e1cd36d", 0x2c}, {&(0x7f0000000a00)="b85d9aa3bc683bd77ce3a841b543add98d99322fac067a4a4034688ebf1e4b3b38767bdf0876cb8ac4c215bcbbbca3d210daca84b80eac976e5c1b89fa613970e0f0da8fa5d52d628195934df6f44ac85f06e1d71f91bab07c76a6ca452aa867fff5acafa171316c3855f7c7e114f8a102e763df8775c3d4e81b21b1c17b2d2a0d871406965da9", 0x87}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="04", 0x2bc, 0x10008095, 0x0, 0x0)

1.356262731s ago: executing program 2 (id=3720):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0)
socket$inet6(0xa, 0x1, 0x82)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}})
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000009d00), r8)
sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000009e40)={0x0, 0x0, &(0x7f0000009e00)={&(0x7f0000009d40)={0x3c, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x7, 0xa8, @random="006f02"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
close(r6)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5)
syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000100000000000000000000000fe8000210000000000000000000000aa00000000000890780200000000000000"], 0x0)
r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000600000908000400640101ce4ead5ad5229bb32f00000000"], 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x0)

1.302122573s ago: executing program 1 (id=3721):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$FOU_CMD_DEL(r4, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0xff}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket(0x10, 0x3, 0x6)
socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

1.219506635s ago: executing program 3 (id=3722):
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

1.123977629s ago: executing program 0 (id=3723):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup, 0xffffffffffffffff, 0x1d, 0x67726ae92d7f756f}, 0x20)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0xf}, 0x1)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000100)=0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)='%-010d \x00'}, 0x20)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@private, @remote, <r5=>0x0}, &(0x7f0000000380)=0xc)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x3, [@ptr={0xb}, @enum={0xb, 0x1, 0x0, 0x6, 0x4, [{0x10}]}, @func={0x6, 0x0, 0x0, 0xc, 0x3}, @enum={0x8, 0x9, 0x0, 0x6, 0x4, [{0x5, 0x3}, {0xf, 0x9be}, {0x9, 0x641b}, {0x6, 0x6}, {0x1, 0x3}, {0x7, 0x7ff}, {0x4, 0x3}, {0x6, 0xad3}, {0x5, 0x2}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf}, {0xd, 0x4}]}]}, {0x0, [0xe]}}, &(0x7f0000000480)=""/36, 0xb7, 0x24, 0x0, 0x400, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x9, 0x81, 0x3, 0x2000, r4, 0x8, '\x00', r5, r6, 0x5, 0x3, 0x0, 0x2}, 0x50)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x53, 0x202, 0x4, 0x9, r2}, 0x10)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.049912782s ago: executing program 3 (id=3724):
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x20, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x11, r6, 0x7ac87000)
sendmmsg$inet6(r6, &(0x7f000000ad00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f0000008600)="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", 0x100}, {&(0x7f0000002380)="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", 0xc6b}], 0x7}}], 0x1, 0x8800)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="27030200590214000600002fb96d", 0xe}, {&(0x7f0000000240)="499e1cf1c330f6bff8971cb97693054e96132d70", 0x14}], 0x2}, 0x40084)
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
r10 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f00000008c0), 0x4)

827.500667ms ago: executing program 0 (id=3725):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000340)=r2}, 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000b00)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce9a00000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

727.154976ms ago: executing program 0 (id=3726):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71009000008ffffffffffffffffffe7ee00000000007ffffffe00000000", 0x58}], 0x1)

656.607051ms ago: executing program 0 (id=3727):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0xfffffffffffffed5, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x8010)

572.27734ms ago: executing program 4 (id=3728):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000000000000692600000000"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r1}, 0x38) (fail_nth: 43)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r1}, 0x38)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='workqueue_queue_work\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000c000440000000000000000314000000030a010200000000000000000200000014000000020a09000000000000000000000000001400000011005322e3cde347a7bed332ab010000"], 0x70}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2, 0x17, 0x5, 0x2, 0x29, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d5, 0x40, 0x6, 0x6e, 0x3, 0x20000001}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x32ffda51, @loopback, 0x400}}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x6e6bbf, 0xe5, {0x6, 0x32, 0x1, 0x4, 0x0, 0xfffff815, 0x0, @in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x2d}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x9, @private1, 0xf}, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, @in6={0xa, 0x4e21, 0x0, @remote, 0x1}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x4, 0x7, 0x17, 0x4, 0x1}, @sadb_key={0x3, 0x0, 0x70, 0x0, "026df012831c6ec231ef1f762ba8"}]}, 0x148}}, 0x4000005)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)={0xff, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x20)
listen(0xffffffffffffffff, 0xc)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

124.826274ms ago: executing program 3 (id=3729):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0x1)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80003, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0x5, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc851}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
bind$isdn_base(r1, &(0x7f0000000040)={0x22, 0x0, 0xf9, 0x3, 0x5}, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg\x00'})
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r10, &(0x7f0000000000)="0c000000010001", 0x7)

123.846805ms ago: executing program 2 (id=3730):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c9", 0x7b}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002240)="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", 0x12a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000640)="54c59afc1a5728711633d5b2966f9d91f849029f8000924638fd9dac482bc8b533ac438944ef7c56121e6711ae1cf8265f15218e28ee830030ec29e9e56c7da591bde19a38da4e324c71ad551dcffba7705ef78c1050175ef466fd78c8a0a6435db969098a48a124aae1bf861c3710577ec7e6b11070ec726bd0acafd09defad34c4c04bae1f9e34dc606660f2637234064a2ebbd283ed11bd994b40314c89b31ae74ca1b1fcdb9f5d698e3364943c89484807225e43ba4612aad5f396147cff4151b3bfb9f5bde48dd4e545444cbfd8073358822ea7ff14d3440365552f2e9628f6b254d3559d07c016250841ae4b4015c1ad", 0xf3}, {&(0x7f0000000340)="a9e7664b8115041928ef524290718ac78da582c28c965fd813c4d7f61c8f2d741f215b552c3e1ada475b8e4589c377e892822827f6ec2428853f50af8a83a4f15a99f3b6c223ef37e2074c12008772a3ae9d0ce0fbd323051c49f1e3bd7bd32894e9df6b66d0550f", 0x68}, {&(0x7f0000000740)="e1e3eefd15a4443fc8bf9101d56de607099daa3232607dd1cdf3191a5a72307380c1184136bbe2818e1cd36d18c872aa6ef6417567d9f9436b5148401af5b8e12b55", 0x42}, {&(0x7f0000000a00)="b85d9aa3bc683bd77ce3a841b543add98d99322fac067a4a4034688ebf1e4b3b38767bdf0876cb8ac4c215bcbbbca3d210daca84b80eac976e5c1b89fa613970e0f0da8fa5d52d628195934df6f44ac85f06e1d71f91bab07c76a6ca452aa867fff5acafa171316c3855f7c7e114f8a102e763df8775c3d4e81b21b1c17b2d2a0d871406965da9", 0x87}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="04", 0x2bc, 0x10008095, 0x0, 0x0)

123.332458ms ago: executing program 1 (id=3731):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x300, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0)

48.381101ms ago: executing program 0 (id=3732):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x1}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) (fail_nth: 6)

0s ago: executing program 1 (id=3733):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0xc000084)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4000800)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x2c}}, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x2, 0xfdffffff, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xe, 0x6}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xf4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008085}, 0x8814)

kernel console output (not intermixed with test programs):

60
[  404.146480][T15909]  should_failslab+0xa8/0x100
[  404.146507][T15909]  __kmalloc_cache_noprof+0x84/0x700
[  404.146529][T15909]  ? __lock_acquire+0x6b6/0x2cf0
[  404.146548][T15909]  ? rtnl_newlink+0xfb/0x1c90
[  404.146577][T15909]  rtnl_newlink+0xfb/0x1c90
[  404.146602][T15909]  ? unwind_next_frame+0xa5/0x23d0
[  404.146636][T15909]  ? __pfx_rtnl_newlink+0x10/0x10
[  404.146662][T15909]  ? __lock_acquire+0x6b6/0x2cf0
[  404.146689][T15909]  ? __lock_acquire+0x6b6/0x2cf0
[  404.146712][T15909]  ? __lock_acquire+0x6b6/0x2cf0
[  404.146742][T15909]  ? unwind_next_frame+0xa5/0x23d0
[  404.146772][T15909]  ? unwind_next_frame+0xa5/0x23d0
[  404.146799][T15909]  ? is_bpf_text_address+0x26/0x2b0
[  404.146842][T15909]  ? __lock_acquire+0x6b6/0x2cf0
[  404.146864][T15909]  ? is_bpf_text_address+0x292/0x2b0
[  404.146916][T15909]  ? is_bpf_text_address+0x26/0x2b0
[  404.146948][T15909]  ? kernel_text_address+0xa5/0xe0
[  404.146975][T15909]  ? __kernel_text_address+0xd/0x40
[  404.146999][T15909]  ? unwind_get_return_address+0x4d/0x90
[  404.147031][T15909]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  404.147071][T15909]  ? __pfx_rtnl_newlink+0x10/0x10
[  404.147091][T15909]  rtnetlink_rcv_msg+0x7cf/0xb70
[  404.147117][T15909]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  404.147139][T15909]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  404.147162][T15909]  ? __lock_acquire+0x6b6/0x2cf0
[  404.147197][T15909]  netlink_rcv_skb+0x208/0x470
[  404.147225][T15909]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  404.147251][T15909]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  404.147291][T15909]  ? netlink_deliver_tap+0x2e/0x1b0
[  404.147328][T15909]  netlink_unicast+0x82f/0x9e0
[  404.147375][T15909]  ? __pfx_netlink_unicast+0x10/0x10
[  404.147400][T15909]  ? __alloc_skb+0x198/0x3b0
[  404.147422][T15909]  ? netlink_sendmsg+0x642/0xb30
[  404.147445][T15909]  ? skb_put+0x11b/0x210
[  404.147469][T15909]  netlink_sendmsg+0x805/0xb30
[  404.147506][T15909]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.147537][T15909]  ? aa_sock_msg_perm+0xf1/0x1b0
[  404.147565][T15909]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  404.147583][T15909]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.147611][T15909]  __sock_sendmsg+0x21c/0x270
[  404.147645][T15909]  ____sys_sendmsg+0x505/0x820
[  404.147675][T15909]  ? __pfx_____sys_sendmsg+0x10/0x10
[  404.147708][T15909]  ? import_iovec+0x74/0xa0
[  404.147737][T15909]  ___sys_sendmsg+0x21f/0x2a0
[  404.147764][T15909]  ? __pfx____sys_sendmsg+0x10/0x10
[  404.147825][T15909]  ? __fget_files+0x2a/0x420
[  404.147849][T15909]  ? __fget_files+0x3a0/0x420
[  404.147883][T15909]  __x64_sys_sendmsg+0x19b/0x260
[  404.147911][T15909]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  404.147945][T15909]  ? __pfx_ksys_write+0x10/0x10
[  404.147978][T15909]  do_syscall_64+0xec/0xf80
[  404.148008][T15909]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.148028][T15909]  ? trace_irq_disable+0x37/0x100
[  404.148052][T15909]  ? clear_bhb_loop+0x60/0xb0
[  404.148074][T15909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.148092][T15909] RIP: 0033:0x7f8748b8f749
[  404.148110][T15909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  404.148126][T15909] RSP: 002b:00007f87499be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  404.148150][T15909] RAX: ffffffffffffffda RBX: 00007f8748de6090 RCX: 00007f8748b8f749
[  404.148165][T15909] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000005
[  404.148177][T15909] RBP: 00007f87499be090 R08: 0000000000000000 R09: 0000000000000000
[  404.148189][T15909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  404.148200][T15909] R13: 00007f8748de6128 R14: 00007f8748de6090 R15: 00007fff0bd9b258
[  404.148234][T15909]  </TASK>
[  404.547938][ T5849] Bluetooth: hci1: command tx timeout
[  404.605201][T15907] 8021q: adding VLAN 0 to HW filter on device bond12
[  404.624937][ T8365] IPVS: stop unused estimator thread 0...
[  404.761865][T15922] netlink: 'syz.0.2902': attribute type 4 has an invalid length.
[  404.770956][T15921] netlink: 'syz.2.2904': attribute type 2 has an invalid length.
[  404.787947][T15922] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2902'.
[  404.893354][T15922] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2902'.
[  404.936371][T15922] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  405.197358][T15929] lo speed is unknown, defaulting to 1000
[  405.221800][T15929] virt_wifi0 speed is unknown, defaulting to 1000
[  405.232722][T15765] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  405.250439][T15765] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  405.277813][T15765] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  405.332042][T15765] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  405.610196][T15765] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.645938][T15765] 8021q: adding VLAN 0 to HW filter on device team0
[  405.694000][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.701370][ T8365] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.730116][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.737294][ T8365] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.814352][T15954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2911'.
[  405.825417][T15954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2911'.
[  405.913695][T15958] syz_tun: entered allmulticast mode
[  405.921542][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2912'.
[  406.012665][T15958] syz_tun (unregistering): left allmulticast mode
[  406.144198][T15765] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.207320][T15969] netlink: 'syz.2.2915': attribute type 2 has an invalid length.
[  406.245113][T15969] : entered promiscuous mode
[  406.252546][T15765] veth0_vlan: entered promiscuous mode
[  406.294889][T15765] veth1_vlan: entered promiscuous mode
[  406.332326][T15976] netlink: 'syz.2.2915': attribute type 6 has an invalid length.
[  406.368373][T15976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2915'.
[  406.439961][T15765] veth0_macvtap: entered promiscuous mode
[  406.472285][T15765] veth1_macvtap: entered promiscuous mode
[  406.521842][T15765] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.554679][T15765] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.601692][ T9126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.615398][ T9126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.625486][ T9126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.646222][ T9126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.660718][T15982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  406.700262][T15982] tipc: Resetting bearer <eth:syzkaller0>
[  406.756611][T15981] tipc: Disabling bearer <eth:syzkaller0>
[  406.838278][ T9126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.853466][ T9126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.918891][ T9126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.938292][ T9126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.144671][T15996] lo speed is unknown, defaulting to 1000
[  407.171611][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'.
[  407.318116][T16000] netlink: 'syz.0.2925': attribute type 1 has an invalid length.
[  407.333171][T16000] netlink: 'syz.0.2925': attribute type 2 has an invalid length.
[  407.450836][T16005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2921'.
[  407.454544][T15998] lo speed is unknown, defaulting to 1000
[  407.502829][T15996] virt_wifi0 speed is unknown, defaulting to 1000
[  407.532334][T15998] virt_wifi0 speed is unknown, defaulting to 1000
[  407.574370][T16011] FAULT_INJECTION: forcing a failure.
[  407.574370][T16011] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  407.593365][T16011] CPU: 0 UID: 0 PID: 16011 Comm: syz.0.2926 Not tainted syzkaller #0 PREEMPT(full) 
[  407.593403][T16011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  407.593415][T16011] Call Trace:
[  407.593423][T16011]  <TASK>
[  407.593432][T16011]  dump_stack_lvl+0xe8/0x150
[  407.593465][T16011]  should_fail_ex+0x414/0x560
[  407.593503][T16011]  _copy_from_user+0x2d/0xb0
[  407.593528][T16011]  kstrtouint_from_user+0xc4/0x170
[  407.593551][T16011]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  407.593590][T16011]  proc_fail_nth_write+0x88/0x200
[  407.593612][T16011]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  407.593640][T16011]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  407.593661][T16011]  vfs_write+0x27e/0xb30
[  407.593691][T16011]  ? __pfx_vfs_write+0x10/0x10
[  407.593710][T16011]  ? __fget_files+0x2a/0x420
[  407.593738][T16011]  ? __fget_files+0x3a0/0x420
[  407.593762][T16011]  ? __fget_files+0x2a/0x420
[  407.593795][T16011]  ksys_write+0x145/0x250
[  407.593816][T16011]  ? __pfx_ksys_write+0x10/0x10
[  407.593849][T16011]  do_syscall_64+0xec/0xf80
[  407.593872][T16011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.593890][T16011]  ? trace_irq_disable+0x37/0x100
[  407.593914][T16011]  ? clear_bhb_loop+0x60/0xb0
[  407.593939][T16011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.593959][T16011] RIP: 0033:0x7fc9b3d8e1ff
[  407.593978][T16011] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  407.593995][T16011] RSP: 002b:00007fc9b4b9a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  407.594018][T16011] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc9b3d8e1ff
[  407.594041][T16011] RDX: 0000000000000001 RSI: 00007fc9b4b9a0a0 RDI: 0000000000000004
[  407.594054][T16011] RBP: 00007fc9b4b9a090 R08: 0000000000000000 R09: 0000000000000000
[  407.594066][T16011] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  407.594078][T16011] R13: 00007fc9b3fe6038 R14: 00007fc9b3fe5fa0 R15: 00007ffcf9ba7a78
[  407.594114][T16011]  </TASK>
[  408.021428][T16014] netlink: 'syz.1.2928': attribute type 2 has an invalid length.
[  408.162197][T16023] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  408.245473][T16016] lo speed is unknown, defaulting to 1000
[  408.260403][T16016] virt_wifi0 speed is unknown, defaulting to 1000
[  408.394205][T16030] netlink: 'syz.3.2933': attribute type 13 has an invalid length.
[  408.639098][ T9781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.730575][T16039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2935'.
[  408.756180][T16039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2935'.
[  408.830404][T16043] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  408.965208][T16050] netlink: 'syz.3.2939': attribute type 2 has an invalid length.
[  409.117113][T16050] !: entered promiscuous mode
[  409.390537][T16058] netlink: 'syz.3.2942': attribute type 2 has an invalid length.
[  409.518764][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  409.538420][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  409.546967][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  409.557065][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  409.565227][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  409.642569][T16074] IPv6: addrconf: prefix option has invalid lifetime
[  409.649589][T16074] IPv6: addrconf: prefix option has invalid lifetime
[  409.658974][T16074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2946'.
[  409.778063][T16075] dvmrp6: entered allmulticast mode
[  409.887778][T16067] lo speed is unknown, defaulting to 1000
[  409.943863][T16067] virt_wifi0 speed is unknown, defaulting to 1000
[  409.994000][T16081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2948'.
[  410.034949][T16081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2948'.
[  410.054724][ T5845] bond0: (slave syz_tun): Releasing backup interface
[  410.080182][ T5845] syz_tun (unregistering): left promiscuous mode
[  410.273572][T16090] siw: device registration error -23
[  410.522387][T16102] netlink: 'syz.4.2955': attribute type 2 has an invalid length.
[  410.573464][T16067] chnl_net:caif_netlink_parms(): no params data found
[  410.672593][T16109] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  410.833375][T16113] veth0_vlan: left promiscuous mode
[  410.848533][T16113] veth0_vlan: entered promiscuous mode
[  410.887756][T16067] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.895267][T16067] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.931707][T16067] bridge_slave_0: entered allmulticast mode
[  410.961316][T16067] bridge_slave_0: entered promiscuous mode
[  410.981801][T16067] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.999264][T16067] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.017325][T16067] bridge_slave_1: entered allmulticast mode
[  411.049672][T16067] bridge_slave_1: entered promiscuous mode
[  411.184951][T16067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.214535][T16067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.378916][T16067] team0: Port device team_slave_0 added
[  411.414233][T16067] team0: Port device team_slave_1 added
[  411.541436][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2963'.
[  411.573874][T16067] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.591936][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  411.663237][T16067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.676843][ T5849] Bluetooth: hci2: command tx timeout
[  411.696490][T16067] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.704361][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  411.730568][T16067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.743265][T16135] syzkaller0: entered promiscuous mode
[  411.762508][T16141] netlink: 'syz.3.2966': attribute type 2 has an invalid length.
[  411.770637][T16135] syzkaller0: entered allmulticast mode
[  411.826938][T16144] netlink: 'syz.0.2968': attribute type 2 has an invalid length.
[  411.944454][T16150] netlink: 'syz.0.2968': attribute type 6 has an invalid length.
[  411.959957][T16067] hsr_slave_0: entered promiscuous mode
[  411.999903][T16067] hsr_slave_1: entered promiscuous mode
[  412.013779][T16148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2969'.
[  412.121673][T16144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2968'.
[  412.172234][T16157] syzkaller0: entered promiscuous mode
[  412.178118][T16157] syzkaller0: entered allmulticast mode
[  412.196478][T16163] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2971'.
[  412.914395][T16179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2978'.
[  412.982550][T16179] pim6reg: entered allmulticast mode
[  412.993205][T16067] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  413.037821][T16181] pim6reg: left allmulticast mode
[  413.047286][T16179] netlink: 'syz.0.2978': attribute type 6 has an invalid length.
[  413.071329][T16179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2978'.
[  413.110954][T16182] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2978'.
[  413.124887][T16067] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  413.165421][T16067] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  413.191681][T16067] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  413.207144][T16179] "”*Œ¹": renamed from vlan0
[  413.482193][T16067] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.512810][T16067] 8021q: adding VLAN 0 to HW filter on device team0
[  413.531207][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.538485][ T9126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.557509][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.564745][ T9126] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.654745][T16191] bridge: RTM_NEWNEIGH with invalid ether address
[  413.758228][ T5849] Bluetooth: hci2: command tx timeout
[  413.941922][T16200] siw: device registration error -23
[  413.968491][T16067] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.023806][T16204] openvswitch: netlink: IP tunnel dst address not specified
[  414.054501][T16067] veth0_vlan: entered promiscuous mode
[  414.087310][T16067] veth1_vlan: entered promiscuous mode
[  414.104689][T16208] Set syz1 is full, maxelem 65536 reached
[  414.171484][T16067] veth0_macvtap: entered promiscuous mode
[  414.178081][T16210] netlink: 'syz.4.2987': attribute type 2 has an invalid length.
[  414.198954][T16067] veth1_macvtap: entered promiscuous mode
[  414.246660][T16067] batman_adv: batadv0: Interface activated: batadv_slave_0
[  414.258997][T16215] netlink: 'syz.4.2987': attribute type 6 has an invalid length.
[  414.294273][T16067] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.323905][ T9126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.347340][ T9126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.369404][ T9126] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.395536][ T9126] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.406741][T16221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2990'.
[  414.425290][T16210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2987'.
[  414.511358][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.522934][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.551749][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.562680][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.222696][T16245] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  415.254192][T16242] lo speed is unknown, defaulting to 1000
[  415.269960][T16242] virt_wifi0 speed is unknown, defaulting to 1000
[  415.658174][T16266] netlink: 'syz.3.3004': attribute type 2 has an invalid length.
[  415.678857][T16266] netlink: 'syz.3.3004': attribute type 1 has an invalid length.
[  415.704272][T16266] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3004'.
[  415.829012][ T5849] Bluetooth: hci2: command tx timeout
[  416.184605][T16278] netlink: 'syz.4.3006': attribute type 2 has an invalid length.
[  416.357047][T16286] netlink: 'syz.4.3006': attribute type 6 has an invalid length.
[  416.484995][T16288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3006'.
[  416.742382][T16297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3009'.
[  416.919486][T16306] netlink: 'syz.3.3013': attribute type 4 has an invalid length.
[  417.121158][T16313] FAULT_INJECTION: forcing a failure.
[  417.121158][T16313] name failslab, interval 1, probability 0, space 0, times 0
[  417.154552][T16313] CPU: 1 UID: 0 PID: 16313 Comm: syz.3.3019 Not tainted syzkaller #0 PREEMPT(full) 
[  417.154583][T16313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  417.154596][T16313] Call Trace:
[  417.154604][T16313]  <TASK>
[  417.154613][T16313]  dump_stack_lvl+0xe8/0x150
[  417.154651][T16313]  should_fail_ex+0x414/0x560
[  417.154689][T16313]  should_failslab+0xa8/0x100
[  417.154715][T16313]  __kmalloc_noprof+0xdf/0x800
[  417.154733][T16313]  ? kfree+0x4d/0x660
[  417.154756][T16313]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  417.154790][T16313]  tomoyo_realpath_from_path+0xe3/0x5d0
[  417.154820][T16313]  ? tomoyo_domain+0xd8/0x130
[  417.154852][T16313]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  417.154876][T16313]  tomoyo_path_number_perm+0x1e8/0x5a0
[  417.154902][T16313]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  417.154922][T16313]  ? __lock_acquire+0x6b6/0x2cf0
[  417.154961][T16313]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  417.155009][T16313]  ? __fget_files+0x2a/0x420
[  417.155037][T16313]  ? __fget_files+0x2a/0x420
[  417.155059][T16313]  ? __fget_files+0x3a0/0x420
[  417.155082][T16313]  ? __fget_files+0x2a/0x420
[  417.155110][T16313]  security_file_ioctl+0xcb/0x2d0
[  417.155134][T16313]  __se_sys_ioctl+0x47/0x170
[  417.155166][T16313]  do_syscall_64+0xec/0xf80
[  417.155189][T16313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.155209][T16313]  ? trace_irq_disable+0x37/0x100
[  417.155245][T16313]  ? clear_bhb_loop+0x60/0xb0
[  417.155270][T16313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.155289][T16313] RIP: 0033:0x7f45b698f749
[  417.155308][T16313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.155326][T16313] RSP: 002b:00007f45b78a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  417.155349][T16313] RAX: ffffffffffffffda RBX: 00007f45b6be5fa0 RCX: 00007f45b698f749
[  417.155363][T16313] RDX: 0000200000000200 RSI: 00000000800442d3 RDI: 0000000000000004
[  417.155377][T16313] RBP: 00007f45b78a3090 R08: 0000000000000000 R09: 0000000000000000
[  417.155389][T16313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.155400][T16313] R13: 00007f45b6be6038 R14: 00007f45b6be5fa0 R15: 00007ffc3aad41e8
[  417.155434][T16313]  </TASK>
[  417.155559][T16313] ERROR: Out of memory at tomoyo_realpath_from_path.
[  417.453783][T16323] lo speed is unknown, defaulting to 1000
[  417.463259][T16327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3021'.
[  417.475961][T16323] virt_wifi0 speed is unknown, defaulting to 1000
[  417.909033][ T5849] Bluetooth: hci2: command tx timeout
[  418.211974][T16356] netlink: 'syz.4.3030': attribute type 2 has an invalid length.
[  418.259836][T16356] netlink: 'syz.4.3030': attribute type 10 has an invalid length.
[  418.292646][T16347] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  418.363587][T16356] veth0_vlan: left promiscuous mode
[  418.377087][T16356] veth0_vlan: entered promiscuous mode
[  418.386143][T16356] team0: Device veth0_vlan failed to register rx_handler
[  418.419588][T16358] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  418.446225][T16361] syz_tun: entered allmulticast mode
[  418.472134][T16361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3032'.
[  418.502612][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'.
[  418.568855][T16361] syz_tun (unregistering): left allmulticast mode
[  419.122094][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3039'.
[  419.179710][T16384] xt_bpf: check failed: parse error
[  419.772042][T16397] FAULT_INJECTION: forcing a failure.
[  419.772042][T16397] name failslab, interval 1, probability 0, space 0, times 0
[  419.808858][T16394] lo speed is unknown, defaulting to 1000
[  419.810586][T16397] CPU: 1 UID: 0 PID: 16397 Comm: syz.4.3044 Not tainted syzkaller #0 PREEMPT(full) 
[  419.810614][T16397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  419.810624][T16397] Call Trace:
[  419.810631][T16397]  <TASK>
[  419.810639][T16397]  dump_stack_lvl+0xe8/0x150
[  419.810668][T16397]  should_fail_ex+0x414/0x560
[  419.810701][T16397]  should_failslab+0xa8/0x100
[  419.810725][T16397]  __kmalloc_noprof+0xdf/0x800
[  419.810742][T16397]  ? rcu_is_watching+0x15/0xb0
[  419.810762][T16397]  ? security_sk_alloc+0x52/0x390
[  419.810793][T16397]  security_sk_alloc+0x52/0x390
[  419.810822][T16397]  sk_prot_alloc+0x101/0x220
[  419.810847][T16397]  sk_alloc+0x3a/0x390
[  419.810871][T16397]  inet_create+0x7a0/0x1000
[  419.810889][T16397]  ? inet_create+0x9c/0x1000
[  419.810910][T16397]  __sock_create+0x4b3/0x9d0
[  419.810938][T16397]  mptcp_subflow_create_socket+0xf0/0x800
[  419.810966][T16397]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  419.810990][T16397]  ? __pfx_mptcp_subflow_create_socket+0x10/0x10
[  419.811018][T16397]  ? do_raw_spin_lock+0x121/0x290
[  419.811040][T16397]  ? lock_sock_nested+0x6a/0x100
[  419.811059][T16397]  __mptcp_nmpc_sk+0x148/0x760
[  419.811085][T16397]  ? __pfx___mptcp_nmpc_sk+0x10/0x10
[  419.811112][T16397]  ? __local_bh_enable_ip+0xd0/0x130
[  419.811136][T16397]  mptcp_setsockopt+0xedb/0x3590
[  419.811169][T16397]  ? aa_sk_perm+0x7ee/0x920
[  419.811189][T16397]  ? __pfx_mptcp_setsockopt+0x10/0x10
[  419.811217][T16397]  ? __pfx_aa_sk_perm+0x10/0x10
[  419.811248][T16397]  ? __fget_files+0x2a/0x420
[  419.811269][T16397]  ? aa_sock_opt_perm+0xff/0x1a0
[  419.811293][T16397]  ? sock_common_setsockopt+0x36/0xc0
[  419.811310][T16397]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  419.811330][T16397]  do_sock_setsockopt+0x17c/0x1b0
[  419.811356][T16397]  __x64_sys_setsockopt+0x13f/0x1b0
[  419.811382][T16397]  do_syscall_64+0xec/0xf80
[  419.811402][T16397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.811420][T16397]  ? trace_irq_disable+0x37/0x100
[  419.811442][T16397]  ? clear_bhb_loop+0x60/0xb0
[  419.811463][T16397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.811480][T16397] RIP: 0033:0x7f8748b8f749
[  419.811498][T16397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.811513][T16397] RSP: 002b:00007f87499df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  419.811534][T16397] RAX: ffffffffffffffda RBX: 00007f8748de5fa0 RCX: 00007f8748b8f749
[  419.811553][T16397] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000003
[  419.811563][T16397] RBP: 00007f87499df090 R08: 0000000000000001 R09: 0000000000000000
[  419.811574][T16397] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.811585][T16397] R13: 00007f8748de6038 R14: 00007f8748de5fa0 R15: 00007fff0bd9b258
[  419.811616][T16397]  </TASK>
[  419.860607][T16398] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  419.899310][T16394] virt_wifi0 speed is unknown, defaulting to 1000
[  420.135857][T16403] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  420.252466][T16409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3047'.
[  420.270848][T16407] syzkaller0: entered promiscuous mode
[  420.287673][T16407] syzkaller0: entered allmulticast mode
[  420.414771][T16413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3049'.
[  420.425230][T16413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3049'.
[  420.516642][T16409] bond0: (slave bond_slave_1): Releasing backup interface
[  420.605224][T16422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.612913][T16422] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode
[  420.637264][T16422] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode
[  420.660492][T16422] tipc: Resetting bearer <eth:syzkaller0>
[  420.753152][T16427] xt_hashlimit: size too large, truncated to 1048576
[  420.773450][T16427] xt_hashlimit: max too large, truncated to 1048576
[  420.859983][T16433] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3053'.
[  421.115248][T16446] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  421.324786][T16450] lo speed is unknown, defaulting to 1000
[  421.371880][T16450] virt_wifi0 speed is unknown, defaulting to 1000
[  421.472268][T16454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3062'.
[  421.482990][T16454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3062'.
[  421.648589][T16458] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  421.681172][ T9783] tipc: Node number set to 3194693034
[  421.698023][T16463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3066'.
[  421.752426][T16456] lo speed is unknown, defaulting to 1000
[  421.760354][T16456] virt_wifi0 speed is unknown, defaulting to 1000
[  421.878219][T16468] netlink: 'syz.3.3066': attribute type 13 has an invalid length.
[  422.039042][T16468] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.047503][T16468] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.089724][ T9783] hid-generic 0005:4C4A:5505.0001: item fetching failed at offset 0/1
[  422.130526][ T9783] hid-generic 0005:4C4A:5505.0001: probe with driver hid-generic failed with error -22
[  422.241349][T16468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.255669][T16468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  422.372830][ T6078] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.403469][ T6078] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.415146][ T6078] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.437188][ T6078] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.032422][T16504] x_tables: duplicate underflow at hook 1
[  423.515964][ T5951] IPVS: starting estimator thread 0...
[  423.522445][T16521] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  423.577144][T16519] lo speed is unknown, defaulting to 1000
[  423.601185][T16519] virt_wifi0 speed is unknown, defaulting to 1000
[  423.619643][T16522] IPVS: using max 28 ests per chain, 67200 per kthread
[  423.625734][T16525] syz_tun: entered allmulticast mode
[  423.634489][T16525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3083'.
[  423.686502][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3083'.
[  423.753073][T16529] syz_tun (unregistering): left allmulticast mode
[  423.792091][T16534] FAULT_INJECTION: forcing a failure.
[  423.792091][T16534] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  423.810266][T16534] CPU: 0 UID: 0 PID: 16534 Comm: syz.1.3086 Not tainted syzkaller #0 PREEMPT(full) 
[  423.810296][T16534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  423.810308][T16534] Call Trace:
[  423.810315][T16534]  <TASK>
[  423.810323][T16534]  dump_stack_lvl+0xe8/0x150
[  423.810353][T16534]  should_fail_ex+0x414/0x560
[  423.810388][T16534]  _copy_to_user+0x31/0xb0
[  423.810413][T16534]  __htab_map_lookup_and_delete_batch+0x103f/0x13b0
[  423.810475][T16534]  ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10
[  423.810509][T16534]  ? __pfx_htab_map_lookup_and_delete_batch+0x10/0x10
[  423.810530][T16534]  bpf_map_do_batch+0x44f/0x630
[  423.810565][T16534]  __sys_bpf+0x778/0x860
[  423.810592][T16534]  ? __pfx___sys_bpf+0x10/0x10
[  423.810634][T16534]  ? ksys_write+0x22a/0x250
[  423.810655][T16534]  ? __pfx_ksys_write+0x10/0x10
[  423.810681][T16534]  __x64_sys_bpf+0x7c/0x90
[  423.810705][T16534]  do_syscall_64+0xec/0xf80
[  423.810728][T16534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.810745][T16534]  ? trace_irq_disable+0x37/0x100
[  423.810767][T16534]  ? clear_bhb_loop+0x60/0xb0
[  423.810791][T16534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.810809][T16534] RIP: 0033:0x7fbdb658f749
[  423.810829][T16534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  423.810846][T16534] RSP: 002b:00007fbdb73c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  423.810869][T16534] RAX: ffffffffffffffda RBX: 00007fbdb67e5fa0 RCX: 00007fbdb658f749
[  423.810884][T16534] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019
[  423.810895][T16534] RBP: 00007fbdb73c3090 R08: 0000000000000000 R09: 0000000000000000
[  423.810908][T16534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  423.810920][T16534] R13: 00007fbdb67e6038 R14: 00007fbdb67e5fa0 R15: 00007ffcaad95988
[  423.810952][T16534]  </TASK>
[  424.267046][T16544] lo speed is unknown, defaulting to 1000
[  424.297568][T16544] virt_wifi0 speed is unknown, defaulting to 1000
[  424.473682][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3092'.
[  424.503002][T16556] hsr_slave_0: left promiscuous mode
[  424.523786][T16556] hsr_slave_1: left promiscuous mode
[  424.599402][T16557] batadv_slave_1: entered promiscuous mode
[  425.172834][T16542] batadv_slave_1: left promiscuous mode
[  425.437310][T16576] netem: incorrect ge model size
[  425.493940][T16582] netlink: 'syz.3.3102': attribute type 2 has an invalid length.
[  425.820796][T16592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3104'.
[  425.926134][T16596] xt_CT: You must specify a L4 protocol and not use inversions on it
[  426.512438][T16630] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.629812][T16630] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.740173][T16630] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.846456][T16630] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.974913][ T3808] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.996002][  T195] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.017248][  T195] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.034435][  T195] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.293805][T16647] FAULT_INJECTION: forcing a failure.
[  427.293805][T16647] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  427.353299][T16647] CPU: 0 UID: 0 PID: 16647 Comm: syz.4.3119 Not tainted syzkaller #0 PREEMPT(full) 
[  427.353329][T16647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  427.353341][T16647] Call Trace:
[  427.353349][T16647]  <TASK>
[  427.353359][T16647]  dump_stack_lvl+0xe8/0x150
[  427.353391][T16647]  should_fail_ex+0x414/0x560
[  427.353428][T16647]  _copy_from_user+0x2d/0xb0
[  427.353454][T16647]  ___sys_recvmsg+0x12e/0x510
[  427.353488][T16647]  ? __pfx____sys_recvmsg+0x10/0x10
[  427.353517][T16647]  ? __fget_files+0x2a/0x420
[  427.353577][T16647]  do_recvmmsg+0x307/0x770
[  427.353612][T16647]  ? __pfx_do_recvmmsg+0x10/0x10
[  427.353653][T16647]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  427.353697][T16647]  __x64_sys_recvmmsg+0x190/0x240
[  427.353727][T16647]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  427.353765][T16647]  do_syscall_64+0xec/0xf80
[  427.353788][T16647]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.353806][T16647]  ? trace_irq_disable+0x37/0x100
[  427.353831][T16647]  ? clear_bhb_loop+0x60/0xb0
[  427.353856][T16647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.353875][T16647] RIP: 0033:0x7f8748b8f749
[  427.353893][T16647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.353910][T16647] RSP: 002b:00007f87499be038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  427.353932][T16647] RAX: ffffffffffffffda RBX: 00007f8748de6090 RCX: 00007f8748b8f749
[  427.353946][T16647] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004
[  427.353959][T16647] RBP: 00007f87499be090 R08: 0000000000000000 R09: 0000000000000000
[  427.353971][T16647] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[  427.353983][T16647] R13: 00007f8748de6128 R14: 00007f8748de6090 R15: 00007fff0bd9b258
[  427.354016][T16647]  </TASK>
[  427.841099][T16660] lo speed is unknown, defaulting to 1000
[  427.849178][T16660] virt_wifi0 speed is unknown, defaulting to 1000
[  428.489805][T16681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3132'.
[  428.518782][T16681] netlink: 'syz.3.3132': attribute type 2 has an invalid length.
[  428.795328][   T25] block nbd0: Possible stuck request ffff888024f48000: control (read@0,1024B). Runtime 330 seconds
[  428.809544][   T25] block nbd0: Possible stuck request ffff888024f48200: control (read@1024,1024B). Runtime 330 seconds
[  428.820705][   T25] block nbd0: Possible stuck request ffff888024f48400: control (read@2048,1024B). Runtime 330 seconds
[  428.832054][   T25] block nbd0: Possible stuck request ffff888024f48600: control (read@3072,1024B). Runtime 330 seconds
[  429.062656][T16704] netlink: 'syz.4.3138': attribute type 8 has an invalid length.
[  429.071744][T16704] sch_fq: defrate 0 ignored.
[  429.703941][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3144'.
[  430.100363][T16736] netlink: zone id is out of range
[  430.120194][T16736] netlink: zone id is out of range
[  430.188174][T16736] netlink: zone id is out of range
[  430.200852][T16736] netlink: zone id is out of range
[  430.216497][T16736] netlink: zone id is out of range
[  430.228042][T16736] netlink: zone id is out of range
[  430.233531][T16736] netlink: zone id is out of range
[  430.254724][T16736] netlink: zone id is out of range
[  430.273232][T16736] netlink: zone id is out of range
[  430.287879][T16736] netlink: zone id is out of range
[  430.414096][T16748] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3152'.
[  430.608164][T16756] syz_tun: entered allmulticast mode
[  430.614519][T16755] syz_tun: left allmulticast mode
[  431.060461][T16772] syzkaller1: entered promiscuous mode
[  431.075950][T16772] syzkaller1: entered allmulticast mode
[  431.205872][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  431.258141][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  431.290409][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  431.340289][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  431.348751][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  431.471426][T16780] lo speed is unknown, defaulting to 1000
[  431.489586][T16780] virt_wifi0 speed is unknown, defaulting to 1000
[  431.846675][T16792] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3164'.
[  431.868173][T16787] x_tables: duplicate underflow at hook 2
[  432.043796][T16780] chnl_net:caif_netlink_parms(): no params data found
[  432.323267][T16780] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.345497][T16780] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.364749][T16780] bridge_slave_0: entered allmulticast mode
[  432.375143][T16780] bridge_slave_0: entered promiscuous mode
[  432.403259][T16780] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.417195][T16780] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.430711][T16780] bridge_slave_1: entered allmulticast mode
[  432.449263][T16780] bridge_slave_1: entered promiscuous mode
[  432.575678][T16822] netlink: 'syz.4.3174': attribute type 2 has an invalid length.
[  432.592674][T16780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  432.606423][T16780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.620574][T16822] netlink: 'syz.4.3174': attribute type 6 has an invalid length.
[  432.636558][T16822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3174'.
[  432.772062][T16780] team0: Port device team_slave_0 added
[  432.781436][T16780] team0: Port device team_slave_1 added
[  432.844767][T16829] lo: entered allmulticast mode
[  432.894838][T16780] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.917533][T16780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.943771][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3177'.
[  433.025110][T16780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  433.056781][T16780] batman_adv: batadv0: Adding interface: batadv_slave_1
[  433.066665][T16780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  433.127618][T16780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.147054][T16828] lo: left allmulticast mode
[  433.342074][T16780] hsr_slave_0: entered promiscuous mode
[  433.351489][T16780] hsr_slave_1: entered promiscuous mode
[  433.359366][T16780] debugfs: 'hsr0' already exists in 'hsr'
[  433.365656][T16780] Cannot create hsr debugfs directory
[  433.371471][T16853] netlink: 'syz.1.3185': attribute type 2 has an invalid length.
[  433.410929][T16853] : entered promiscuous mode
[  433.424046][T16857] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3186'.
[  433.428381][   T52] Bluetooth: hci4: command tx timeout
[  433.436590][T16853] netlink: 'syz.1.3185': attribute type 6 has an invalid length.
[  433.532884][T16853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3185'.
[  433.693764][T16780] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  433.756344][T16868] lo speed is unknown, defaulting to 1000
[  433.764592][T16868] virt_wifi0 speed is unknown, defaulting to 1000
[  433.788782][ T5965] IPVS: starting estimator thread 0...
[  433.813056][T16780] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  433.888646][T16872] IPVS: using max 27 ests per chain, 64800 per kthread
[  433.913248][T16780] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  433.965558][T16780] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  434.096353][T16881] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3193'.
[  434.119855][T16881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3193'.
[  434.137859][T16881] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3193'.
[  434.285403][T16891] netlink: 'syz.4.3197': attribute type 2 has an invalid length.
[  434.305464][T16887] lo speed is unknown, defaulting to 1000
[  434.328965][T16887] virt_wifi0 speed is unknown, defaulting to 1000
[  434.343494][T16780] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  434.371840][T16780] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  434.382350][T16891] netlink: 'syz.4.3197': attribute type 6 has an invalid length.
[  434.424562][T16780] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  434.461463][T16780] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  434.474364][T16895] lo: entered allmulticast mode
[  434.587840][T16895] lo: left allmulticast mode
[  434.722380][T16909] lo speed is unknown, defaulting to 1000
[  434.748763][T16909] virt_wifi0 speed is unknown, defaulting to 1000
[  434.920217][T16918] __nla_validate_parse: 4 callbacks suppressed
[  434.920238][T16918] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3204'.
[  434.942083][T16780] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.949071][T16920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3205'.
[  434.993100][T16780] 8021q: adding VLAN 0 to HW filter on device team0
[  435.024348][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.032031][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.066432][T11095] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.073752][T11095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.172318][T16923] syzkaller0: entered promiscuous mode
[  435.178139][T16923] syzkaller0: entered allmulticast mode
[  435.194651][T16923] FAULT_INJECTION: forcing a failure.
[  435.194651][T16923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.218159][T16923] CPU: 0 UID: 0 PID: 16923 Comm: syz.1.3206 Not tainted syzkaller #0 PREEMPT(full) 
[  435.218190][T16923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  435.218204][T16923] Call Trace:
[  435.218212][T16923]  <TASK>
[  435.218221][T16923]  dump_stack_lvl+0xe8/0x150
[  435.218254][T16923]  should_fail_ex+0x414/0x560
[  435.218291][T16923]  _copy_from_iter+0x4ff/0x1630
[  435.218327][T16923]  ? __pfx__copy_from_iter+0x10/0x10
[  435.218360][T16923]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  435.218393][T16923]  skb_copy_datagram_from_iter+0xf5/0x720
[  435.218425][T16923]  ? dev_get_by_index+0x22/0x2e0
[  435.218454][T16923]  ? skb_put+0x11b/0x210
[  435.218482][T16923]  packet_sendmsg+0x3797/0x5080
[  435.218522][T16923]  ? aa_update_label_name+0x10/0x3d0
[  435.218542][T16923]  ? __lock_acquire+0x6b6/0x2cf0
[  435.218573][T16923]  ? unwind_next_frame+0xa5/0x23d0
[  435.218616][T16923]  ? aa_sk_perm+0x15f/0x920
[  435.218640][T16923]  ? __pfx_packet_sendmsg+0x10/0x10
[  435.218666][T16923]  ? aa_sk_perm+0x7ee/0x920
[  435.218692][T16923]  ? __lock_acquire+0x6b6/0x2cf0
[  435.218713][T16923]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  435.218746][T16923]  ? aa_sock_msg_perm+0xf1/0x1b0
[  435.218774][T16923]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  435.218792][T16923]  ? __pfx_packet_sendmsg+0x10/0x10
[  435.218822][T16923]  __sock_sendmsg+0x21c/0x270
[  435.218856][T16923]  ____sys_sendmsg+0x505/0x820
[  435.218886][T16923]  ? __pfx_____sys_sendmsg+0x10/0x10
[  435.218931][T16923]  ? import_iovec+0x74/0xa0
[  435.218959][T16923]  ___sys_sendmsg+0x21f/0x2a0
[  435.218986][T16923]  ? __pfx____sys_sendmsg+0x10/0x10
[  435.219049][T16923]  ? __fget_files+0x2a/0x420
[  435.219073][T16923]  ? __fget_files+0x3a0/0x420
[  435.219108][T16923]  __x64_sys_sendmsg+0x19b/0x260
[  435.219135][T16923]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  435.219170][T16923]  ? __pfx_ksys_write+0x10/0x10
[  435.219202][T16923]  do_syscall_64+0xec/0xf80
[  435.219226][T16923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.219244][T16923]  ? trace_irq_disable+0x37/0x100
[  435.219271][T16923]  ? clear_bhb_loop+0x60/0xb0
[  435.219294][T16923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.219314][T16923] RIP: 0033:0x7fbdb658f749
[  435.219333][T16923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  435.219350][T16923] RSP: 002b:00007fbdb73c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  435.219373][T16923] RAX: ffffffffffffffda RBX: 00007fbdb67e5fa0 RCX: 00007fbdb658f749
[  435.219388][T16923] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000005
[  435.219401][T16923] RBP: 00007fbdb73c3090 R08: 0000000000000000 R09: 0000000000000000
[  435.219413][T16923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.219426][T16923] R13: 00007fbdb67e6038 R14: 00007fbdb67e5fa0 R15: 00007ffcaad95988
[  435.219459][T16923]  </TASK>
[  435.226039][T16927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3208'.
[  435.298008][T16928] tipc: Can't bind to reserved service type 1
[  435.360726][T16927] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3208'.
[  435.509832][   T52] Bluetooth: hci4: command tx timeout
[  435.551975][T16927] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3208'.
[  435.561159][T16927] netlink: 'syz.3.3208': attribute type 5 has an invalid length.
[  435.597502][T16927] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3208'.
[  437.465412][T16928] vlan2: entered allmulticast mode
[  437.587603][   T52] Bluetooth: hci4: command tx timeout
[  437.699236][T16943] syz_tun: entered allmulticast mode
[  437.726889][T16943] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3212'.
[  437.764997][T16943] syz_tun: left allmulticast mode
[  437.851626][T16954] netlink: 'syz.3.3216': attribute type 12 has an invalid length.
[  438.028644][T16780] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.040162][T16962] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3217'.
[  438.166424][T16780] veth0_vlan: entered promiscuous mode
[  438.216360][T16780] veth1_vlan: entered promiscuous mode
[  438.294818][T16780] veth0_macvtap: entered promiscuous mode
[  438.319094][T16780] veth1_macvtap: entered promiscuous mode
[  438.364867][T16780] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.403147][T16780] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.435373][T11095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.459096][T11095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.490065][T11095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.508880][T11095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.536012][T16953] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3215'.
[  438.726679][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.744339][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.801236][ T3808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.816527][ T3808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.990947][T16991] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3227'.
[  439.006188][T16991] net_ratelimit: 72 callbacks suppressed
[  439.006208][T16991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  439.236417][T17000] netlink: 'syz.3.3229': attribute type 1 has an invalid length.
[  439.248763][T17000] netlink: 'syz.3.3229': attribute type 2 has an invalid length.
[  439.444955][T17013] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  439.668989][   T52] Bluetooth: hci4: command tx timeout
[  439.690091][T17020] netlink: 'syz.2.3237': attribute type 6 has an invalid length.
[  439.737068][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  439.753246][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  439.762001][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  439.770421][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  439.778543][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  439.831831][T17022] lo speed is unknown, defaulting to 1000
[  439.839937][T17022] virt_wifi0 speed is unknown, defaulting to 1000
[  440.312323][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  440.345508][T17038] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  440.411859][T17045] IPv6: Can't replace route, no match found
[  440.526125][T17022] chnl_net:caif_netlink_parms(): no params data found
[  440.609362][T17050] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3245'.
[  440.673281][T17054] netlink: 'syz.0.3247': attribute type 1 has an invalid length.
[  440.681784][T17054] netlink: 'syz.0.3247': attribute type 2 has an invalid length.
[  440.805040][T17062] netlink: 'syz.1.3249': attribute type 13 has an invalid length.
[  440.807908][T17022] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.823558][T17022] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.832854][T17022] bridge_slave_0: entered allmulticast mode
[  440.842263][T17022] bridge_slave_0: entered promiscuous mode
[  440.902711][T17066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3251'.
[  440.912721][T17066] openvswitch: netlink: Flow actions attr not present in new flow.
[  441.057096][T17022] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.074684][T17022] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.082738][T17022] bridge_slave_1: entered allmulticast mode
[  441.091757][T17022] bridge_slave_1: entered promiscuous mode
[  441.102204][T17072] syz_tun: entered allmulticast mode
[  441.163983][T17070] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3252'.
[  441.182698][T17070] syz_tun: left allmulticast mode
[  441.199364][T17022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  441.242228][T17022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  441.274893][T17078] No such timeout policy "syz1"
[  441.522078][T17022] team0: Port device team_slave_0 added
[  441.545006][T17086] tipc: Started in network mode
[  441.557826][T17086] tipc: Node identity 52d4343f9179, cluster identity 4711
[  441.565286][T17086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  441.607341][T17022] team0: Port device team_slave_1 added
[  441.698817][T17086] tipc: Disabling bearer <eth:syzkaller0>
[  441.723391][T17022] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.739413][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.785366][T17022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.798949][T17022] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.806062][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.832810][   T52] Bluetooth: hci0: command tx timeout
[  441.847266][T17022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.879817][T17097] netlink: 'syz.3.3260': attribute type 13 has an invalid length.
[  441.892252][T17097] netlink: 'syz.3.3260': attribute type 17 has an invalid length.
[  441.893365][T17094] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3258'.
[  441.968596][T17097] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.009175][T17097] 8021q: adding VLAN 0 to HW filter on device team0
[  442.052087][T17097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  442.235045][T17022] hsr_slave_0: entered promiscuous mode
[  442.248999][T17022] hsr_slave_1: entered promiscuous mode
[  442.256705][T17022] debugfs: 'hsr0' already exists in 'hsr'
[  442.263320][T17022] Cannot create hsr debugfs directory
[  442.270650][T17107] syzkaller0: mtu less than device minimum
[  442.315580][T17111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3265'.
[  442.381467][T17111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3265'.
[  442.417629][ T1159] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  442.428824][ T1159] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  442.453542][T17116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3267'.
[  442.453858][ T1159] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  442.478411][T17119] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  442.488578][ T1159] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  442.500081][T17111] IPv6: Can't replace route, no match found
[  442.584405][T17124] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3269'.
[  442.591269][T17116] @: option packets_per_slave: invalid value (65547)
[  442.594736][T17124] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3269'.
[  442.635056][T17116] @: option packets_per_slave: allowed values 0 - 65535
[  442.652837][T17116] @ (unregistering): Released all slaves
[  442.733131][T17116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3267'.
[  442.804026][T17116] @: option packets_per_slave: invalid value (65547)
[  442.830632][T17116] @: option packets_per_slave: allowed values 0 - 65535
[  442.841810][T17116] @ (unregistering): Released all slaves
[  443.004523][T17136] syzkaller0: entered promiscuous mode
[  443.011062][T17136] syzkaller0: entered allmulticast mode
[  443.913236][   T52] Bluetooth: hci0: command tx timeout
[  445.172696][T17154] syzkaller0: mtu less than device minimum
[  445.207191][T17150] lo speed is unknown, defaulting to 1000
[  445.317953][T17150] virt_wifi0 speed is unknown, defaulting to 1000
[  445.328964][T17158] netlink: 'syz.2.3278': attribute type 1 has an invalid length.
[  445.415754][T17158] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR
[  445.421782][T17162] netlink: 'syz.2.3278': attribute type 1 has an invalid length.
[  445.455826][T17162] workqueue: Failed to create a rescuer kthread for wq "phy3-mac-cmds": -EINTR
[  445.546710][T17164] netlink: 'syz.1.3280': attribute type 4 has an invalid length.
[  445.599720][T17175] bridge_slave_1: left allmulticast mode
[  445.605839][T17175] bridge_slave_1: left promiscuous mode
[  445.612687][T17175] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.623423][T17175] ¾x9ÿ: left allmulticast mode
[  445.629987][T17175] ¾x9ÿ: left promiscuous mode
[  445.636211][T17175] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  445.938171][T17181] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  445.988081][   T52] Bluetooth: hci0: command tx timeout
[  446.063996][T17190] __nla_validate_parse: 4 callbacks suppressed
[  446.064019][T17190] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3285'.
[  446.110047][T17190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  446.134286][T17022] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  446.158949][T17022] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  446.183523][T17022] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  446.226261][T17022] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  446.715076][T17022] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.825639][T17022] 8021q: adding VLAN 0 to HW filter on device team0
[  446.852470][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.859783][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.893619][T11097] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.900865][T11097] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.912627][T17215] netlink: 'syz.3.3291': attribute type 83 has an invalid length.
[  446.931520][T17215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3291'.
[  447.048908][T17022] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  447.095285][T17022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  447.962055][T17022] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.067724][   T52] Bluetooth: hci0: command tx timeout
[  448.797965][T17022] veth0_vlan: entered promiscuous mode
[  448.832946][T17022] veth1_vlan: entered promiscuous mode
[  448.941955][T17022] veth0_macvtap: entered promiscuous mode
[  448.964515][T17022] veth1_macvtap: entered promiscuous mode
[  449.019461][T17022] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.058699][T17022] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.112040][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.128037][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.153343][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.180794][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.941891][  T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.943393][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3313'.
[  449.979551][  T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.047839][T17286] @: option packets_per_slave: invalid value (65547)
[  450.056681][T17286] @: option packets_per_slave: allowed values 0 - 65535
[  450.066552][T17286] @ (unregistering): Released all slaves
[  450.156345][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3313'.
[  450.181919][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.201955][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.243882][T17286] @: option packets_per_slave: invalid value (65547)
[  450.279298][T17286] @: option packets_per_slave: allowed values 0 - 65535
[  450.291667][T17286] @ (unregistering): Released all slaves
[  450.333680][T17303] netlink: 'syz.0.3318': attribute type 2 has an invalid length.
[  450.393507][T17303] : entered promiscuous mode
[  450.484091][T17305] netlink: 'syz.0.3318': attribute type 6 has an invalid length.
[  450.698978][T17305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3318'.
[  450.809637][T17320] FAULT_INJECTION: forcing a failure.
[  450.809637][T17320] name failslab, interval 1, probability 0, space 0, times 0
[  450.856456][T17320] CPU: 1 UID: 0 PID: 17320 Comm: syz.3.3321 Not tainted syzkaller #0 PREEMPT(full) 
[  450.856486][T17320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  450.856499][T17320] Call Trace:
[  450.856507][T17320]  <TASK>
[  450.856515][T17320]  dump_stack_lvl+0xe8/0x150
[  450.856549][T17320]  should_fail_ex+0x414/0x560
[  450.856586][T17320]  should_failslab+0xa8/0x100
[  450.856612][T17320]  __kmalloc_cache_noprof+0x84/0x700
[  450.856632][T17320]  ? subflow_ulp_init+0xd0/0x620
[  450.856666][T17320]  subflow_ulp_init+0xd0/0x620
[  450.856695][T17320]  ? tcp_set_ulp+0xb1/0x5f0
[  450.856722][T17320]  tcp_set_ulp+0x53c/0x5f0
[  450.856747][T17320]  mptcp_subflow_create_socket+0x34b/0x800
[  450.856783][T17320]  ? __pfx_mptcp_subflow_create_socket+0x10/0x10
[  450.856816][T17320]  ? do_raw_spin_lock+0x121/0x290
[  450.856850][T17320]  ? lock_sock_nested+0x6a/0x100
[  450.856873][T17320]  __mptcp_nmpc_sk+0x148/0x760
[  450.856905][T17320]  ? __pfx___mptcp_nmpc_sk+0x10/0x10
[  450.856936][T17320]  ? __local_bh_enable_ip+0xd0/0x130
[  450.856963][T17320]  mptcp_setsockopt+0xedb/0x3590
[  450.857003][T17320]  ? aa_sk_perm+0x7ee/0x920
[  450.857026][T17320]  ? __pfx_mptcp_setsockopt+0x10/0x10
[  450.857060][T17320]  ? __pfx_aa_sk_perm+0x10/0x10
[  450.857087][T17320]  ? __fget_files+0x2a/0x420
[  450.857109][T17320]  ? aa_sock_opt_perm+0xff/0x1a0
[  450.857138][T17320]  ? sock_common_setsockopt+0x36/0xc0
[  450.857158][T17320]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  450.857181][T17320]  do_sock_setsockopt+0x17c/0x1b0
[  450.857213][T17320]  __x64_sys_setsockopt+0x13f/0x1b0
[  450.857244][T17320]  do_syscall_64+0xec/0xf80
[  450.857269][T17320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.857288][T17320]  ? trace_irq_disable+0x37/0x100
[  450.857315][T17320]  ? clear_bhb_loop+0x60/0xb0
[  450.857340][T17320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.857360][T17320] RIP: 0033:0x7f45b698f749
[  450.857379][T17320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  450.857396][T17320] RSP: 002b:00007f45b78a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  450.857424][T17320] RAX: ffffffffffffffda RBX: 00007f45b6be5fa0 RCX: 00007f45b698f749
[  450.857439][T17320] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000003
[  450.857450][T17320] RBP: 00007f45b78a3090 R08: 0000000000000001 R09: 0000000000000000
[  450.857463][T17320] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.857475][T17320] R13: 00007f45b6be6038 R14: 00007f45b6be5fa0 R15: 00007ffc3aad41e8
[  450.857510][T17320]  </TASK>
[  451.467180][T17342] syz_tun: entered allmulticast mode
[  451.479952][T17342] syz_tun: left allmulticast mode
[  451.623356][T17348] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3332'.
[  451.650970][T17348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  451.749824][T17355] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  451.875189][T17351] lo speed is unknown, defaulting to 1000
[  451.900891][T17351] virt_wifi0 speed is unknown, defaulting to 1000
[  452.053080][T17367] syz_tun: entered allmulticast mode
[  452.071634][T17367] syz_tun: left allmulticast mode
[  452.158477][T17374] netlink: 548 bytes leftover after parsing attributes in process `syz.1.3342'.
[  452.208250][T17376] syz_tun: entered allmulticast mode
[  452.218224][T17376] syz_tun: left allmulticast mode
[  452.304915][T17381] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3345'.
[  452.351902][T17384] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3346'.
[  452.363697][T17384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  452.795520][T17398] syzkaller0: entered promiscuous mode
[  452.825965][T17398] syzkaller0: entered allmulticast mode
[  452.864904][T17398] 0: reclassify loop, rule prio 0, protocol 800
[  453.075928][T17413] syz_tun: entered allmulticast mode
[  453.083949][T17413] syz_tun: left allmulticast mode
[  453.207778][T17418] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3359'.
[  453.218698][T17418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  453.272858][T17420] lo speed is unknown, defaulting to 1000
[  453.280751][T17420] virt_wifi0 speed is unknown, defaulting to 1000
[  453.300082][T17422] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  453.664734][T17431] FAULT_INJECTION: forcing a failure.
[  453.664734][T17431] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  453.678728][T17431] CPU: 1 UID: 0 PID: 17431 Comm: syz.0.3363 Not tainted syzkaller #0 PREEMPT(full) 
[  453.678747][T17431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  453.678755][T17431] Call Trace:
[  453.678761][T17431]  <TASK>
[  453.678766][T17431]  dump_stack_lvl+0xe8/0x150
[  453.678788][T17431]  should_fail_ex+0x414/0x560
[  453.678810][T17431]  _copy_to_user+0x31/0xb0
[  453.678827][T17431]  __htab_map_lookup_and_delete_batch+0xfe6/0x13b0
[  453.678866][T17431]  ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10
[  453.678895][T17431]  ? __pfx_htab_map_lookup_and_delete_batch+0x10/0x10
[  453.678909][T17431]  bpf_map_do_batch+0x44f/0x630
[  453.678930][T17431]  __sys_bpf+0x778/0x860
[  453.678947][T17431]  ? __pfx___sys_bpf+0x10/0x10
[  453.678973][T17431]  ? ksys_write+0x22a/0x250
[  453.678986][T17431]  ? __pfx_ksys_write+0x10/0x10
[  453.679002][T17431]  __x64_sys_bpf+0x7c/0x90
[  453.679016][T17431]  do_syscall_64+0xec/0xf80
[  453.679031][T17431]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.679042][T17431]  ? trace_irq_disable+0x37/0x100
[  453.679057][T17431]  ? clear_bhb_loop+0x60/0xb0
[  453.679071][T17431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.679083][T17431] RIP: 0033:0x7fa2f538f749
[  453.679102][T17431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  453.679112][T17431] RSP: 002b:00007fa2f619b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  453.679127][T17431] RAX: ffffffffffffffda RBX: 00007fa2f55e5fa0 RCX: 00007fa2f538f749
[  453.679137][T17431] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019
[  453.679145][T17431] RBP: 00007fa2f619b090 R08: 0000000000000000 R09: 0000000000000000
[  453.679152][T17431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  453.679159][T17431] R13: 00007fa2f55e6038 R14: 00007fa2f55e5fa0 R15: 00007ffcc189fa88
[  453.679178][T17431]  </TASK>
[  454.278884][T17444] syz_tun: entered allmulticast mode
[  454.305683][T17444] syz_tun: left allmulticast mode
[  454.738037][T17456] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3372'.
[  455.125414][T17473] lo speed is unknown, defaulting to 1000
[  455.166950][T17478] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  455.167356][T17473] virt_wifi0 speed is unknown, defaulting to 1000
[  455.194336][   T10] IPVS: starting estimator thread 0...
[  455.232725][T17476] lo speed is unknown, defaulting to 1000
[  455.262944][   T10] IPVS: starting estimator thread 0...
[  455.273096][T17482] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  455.310359][T17479] IPVS: using max 27 ests per chain, 64800 per kthread
[  455.321560][T17476] virt_wifi0 speed is unknown, defaulting to 1000
[  455.380770][T17487] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  455.412995][T17484] IPVS: using max 24 ests per chain, 57600 per kthread
[  455.443770][T17486] lo speed is unknown, defaulting to 1000
[  455.479725][T17486] virt_wifi0 speed is unknown, defaulting to 1000
[  455.773185][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3375'.
[  456.409743][T17495] xt_bpf: check failed: parse error
[  457.056612][T17541] xt_recent: Unsupported userspace flags (000000b1)
[  457.073642][T17542] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  457.111777][T17537] lo speed is unknown, defaulting to 1000
[  457.168617][T17537] virt_wifi0 speed is unknown, defaulting to 1000
[  457.426761][T17558] netlink: 'syz.0.3405': attribute type 8 has an invalid length.
[  457.441296][T17558] sch_fq: defrate 0 ignored.
[  457.599157][T17571] batadv1: entered promiscuous mode
[  457.711171][T17578] netlink: 'syz.0.3407': attribute type 6 has an invalid length.
[  457.744738][T17578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3407'.
[  458.075160][T17583] netlink: 'syz.2.3409': attribute type 1 has an invalid length.
[  458.106150][T17571] lo speed is unknown, defaulting to 1000
[  458.175629][T17571] virt_wifi0 speed is unknown, defaulting to 1000
[  458.464369][T17595] siw: device registration error -23
[  458.483050][T17597] netlink: 'syz.2.3416': attribute type 1 has an invalid length.
[  458.603256][T17599] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  458.678350][T17603] siw: device registration error -23
[  458.749411][T17609] lo speed is unknown, defaulting to 1000
[  458.759039][T17609] virt_wifi0 speed is unknown, defaulting to 1000
[  458.818019][T17610] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  458.859380][T17614] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  458.885059][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3423'.
[  458.898048][   T25] block nbd0: Possible stuck request ffff888024f48000: control (read@0,1024B). Runtime 360 seconds
[  458.898100][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3423'.
[  458.912040][   T25] block nbd0: Possible stuck request ffff888024f48200: control (read@1024,1024B). Runtime 360 seconds
[  458.918367][T17616] netlink: 'syz.3.3422': attribute type 13 has an invalid length.
[  458.937864][   T25] block nbd0: Possible stuck request ffff888024f48400: control (read@2048,1024B). Runtime 360 seconds
[  458.951925][   T25] block nbd0: Possible stuck request ffff888024f48600: control (read@3072,1024B). Runtime 360 seconds
[  459.025398][T17616] gretap0: refused to change device tx_queue_len
[  459.034093][T17616] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  459.146243][ T3808] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  459.166108][ T3808] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  459.190645][T17612] lo speed is unknown, defaulting to 1000
[  459.204951][ T3808] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  459.238288][T17612] virt_wifi0 speed is unknown, defaulting to 1000
[  459.245693][ T3808] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  459.278687][T17634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3427'.
[  459.313873][T17634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3427'.
[  459.362025][T17639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3428'.
[  459.583470][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3429'.
[  459.650273][T17645] openvswitch: netlink: Flow actions attr not present in new flow.
[  459.750083][T17647] netlink: zone id is out of range
[  459.862871][T17651] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  460.115004][T17665] netlink: 'syz.2.3436': attribute type 2 has an invalid length.
[  461.441126][T17691] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  462.126735][T17710] netlink: 'syz.0.3444': attribute type 10 has an invalid length.
[  462.207798][T17710] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3444'.
[  462.552941][   T13] bond15 (unregistering): (slave geneve4): Releasing backup interface
[  463.223733][   T13] bridge11 (unregistering): left promiscuous mode
[  463.232140][   T13] team0: Port device bridge11 removed
[  463.503582][   T13] bond0 (unregistering): left promiscuous mode
[  463.510141][   T13] team0: left promiscuous mode
[  463.516572][   T13] bond0 (unregistering): (slave team0): Releasing backup interface
[  463.525912][   T13] bond0 (unregistering): Released all slaves
[  463.540154][   T13] bond1 (unregistering): Released all slaves
[  463.689255][   T13] bond2 (unregistering): Released all slaves
[  463.702369][   T13] bond3 (unregistering): Released all slaves
[  463.715348][   T13] bond4 (unregistering): Released all slaves
[  463.863196][   T13] bond5 (unregistering): Released all slaves
[  463.995487][   T13] bond6 (unregistering): Released all slaves
[  464.129848][   T13] bond7 (unregistering): Released all slaves
[  464.255013][   T13] bond8 (unregistering): Released all slaves
[  464.392696][   T13] bond9 (unregistering): Released all slaves
[  464.508338][   T13] bond10 (unregistering): (slave wireguard0): Releasing backup interface
[  464.516966][   T13] wireguard0: left promiscuous mode
[  464.522893][   T13] bond10 (unregistering): Released all slaves
[  464.543132][   T13] bond11 (unregistering): Released all slaves
[  464.672310][   T13] bond12 (unregistering): (slave veth3): Releasing backup interface
[  464.682017][   T13] bond12 (unregistering): Released all slaves
[  464.803001][   T13] bond13 (unregistering): Released all slaves
[  464.920443][   T13] bond14 (unregistering): Released all slaves
[  464.933235][   T13] bond15 (unregistering): Released all slaves
[  464.945736][T17692] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  464.958363][T17710] team0: entered promiscuous mode
[  464.963463][T17710] team_slave_0: entered promiscuous mode
[  464.971957][T17710] team_slave_1: entered promiscuous mode
[  464.999145][T17714] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  465.141341][   T13] : left promiscuous mode
[  465.281837][   T13] !: left promiscuous mode
[  465.373047][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3453'.
[  465.420280][   T13] tipc: Left network mode
[  465.665252][T17745] netlink: 'syz.0.3457': attribute type 1 has an invalid length.
[  465.712274][T17745] netlink: 'syz.0.3457': attribute type 2 has an invalid length.
[  466.067297][T17753] FAULT_INJECTION: forcing a failure.
[  466.067297][T17753] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.099735][   T13] batadv0: left promiscuous mode
[  466.160222][T17753] CPU: 1 UID: 0 PID: 17753 Comm: syz.0.3458 Not tainted syzkaller #0 PREEMPT(full) 
[  466.160260][T17753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  466.160273][T17753] Call Trace:
[  466.160282][T17753]  <TASK>
[  466.160292][T17753]  dump_stack_lvl+0xe8/0x150
[  466.160325][T17753]  should_fail_ex+0x414/0x560
[  466.160363][T17753]  _copy_from_iter+0x1cd/0x1630
[  466.160399][T17753]  ? __pfx__copy_from_iter+0x10/0x10
[  466.160422][T17753]  ? __build_skb_around+0x22d/0x3c0
[  466.160448][T17753]  ? __alloc_skb+0x198/0x3b0
[  466.160471][T17753]  ? netlink_sendmsg+0x642/0xb30
[  466.160498][T17753]  ? skb_put+0x11b/0x210
[  466.160526][T17753]  netlink_sendmsg+0x6b2/0xb30
[  466.160565][T17753]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.160599][T17753]  ? aa_sock_msg_perm+0xf1/0x1b0
[  466.160627][T17753]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  466.160646][T17753]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.160677][T17753]  __sock_sendmsg+0x21c/0x270
[  466.160711][T17753]  ____sys_sendmsg+0x505/0x820
[  466.160743][T17753]  ? __pfx_____sys_sendmsg+0x10/0x10
[  466.160779][T17753]  ? import_iovec+0x74/0xa0
[  466.160807][T17753]  ___sys_sendmsg+0x21f/0x2a0
[  466.160836][T17753]  ? __pfx____sys_sendmsg+0x10/0x10
[  466.160907][T17753]  ? __fget_files+0x2a/0x420
[  466.160932][T17753]  ? __fget_files+0x3a0/0x420
[  466.160966][T17753]  __x64_sys_sendmsg+0x19b/0x260
[  466.160993][T17753]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  466.161029][T17753]  ? __pfx_ksys_write+0x10/0x10
[  466.161061][T17753]  do_syscall_64+0xec/0xf80
[  466.161084][T17753]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.161102][T17753]  ? trace_irq_disable+0x37/0x100
[  466.161126][T17753]  ? clear_bhb_loop+0x60/0xb0
[  466.161149][T17753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.161167][T17753] RIP: 0033:0x7fa2f538f749
[  466.161186][T17753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  466.161203][T17753] RSP: 002b:00007fa2f617a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  466.161226][T17753] RAX: ffffffffffffffda RBX: 00007fa2f55e6090 RCX: 00007fa2f538f749
[  466.161241][T17753] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005
[  466.161254][T17753] RBP: 00007fa2f617a090 R08: 0000000000000000 R09: 0000000000000000
[  466.161266][T17753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.161278][T17753] R13: 00007fa2f55e6128 R14: 00007fa2f55e6090 R15: 00007ffcc189fa88
[  466.161310][T17753]  </TASK>
[  466.544925][   T13] hsr_slave_0: left promiscuous mode
[  467.650131][T17771] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  467.908468][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3461'.
[  467.950365][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3461'.
[  467.992865][T17781] netlink: 'syz.4.3461': attribute type 10 has an invalid length.
[  468.051136][T17786] netlink: 'syz.4.3461': attribute type 10 has an invalid length.
[  468.074516][T17781] team0: Port device dummy0 added
[  468.154057][T17791] netlink: 'syz.3.3464': attribute type 1 has an invalid length.
[  468.164760][T17791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3464'.
[  468.181569][T17786] team0: Port device dummy0 removed
[  468.245995][T17786] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  468.318840][   T13] IPVS: stop unused estimator thread 0...
[  468.322239][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3467'.
[  468.509998][T17805] netlink: 'syz.1.3473': attribute type 1 has an invalid length.
[  468.584514][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3472'.
[  468.615171][T17803] lo speed is unknown, defaulting to 1000
[  468.633759][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3472'.
[  468.659385][T17803] virt_wifi0 speed is unknown, defaulting to 1000
[  468.666266][T17807] netlink: 'syz.0.3472': attribute type 15 has an invalid length.
[  468.677911][T17810] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7
[  468.734570][T17814] FAULT_INJECTION: forcing a failure.
[  468.734570][T17814] name failslab, interval 1, probability 0, space 0, times 0
[  468.756658][T17814] CPU: 0 UID: 0 PID: 17814 Comm: syz.1.3475 Not tainted syzkaller #0 PREEMPT(full) 
[  468.756687][T17814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  468.756698][T17814] Call Trace:
[  468.756705][T17814]  <TASK>
[  468.756712][T17814]  dump_stack_lvl+0xe8/0x150
[  468.756741][T17814]  should_fail_ex+0x414/0x560
[  468.756862][T17814]  should_failslab+0xa8/0x100
[  468.756886][T17814]  kmem_cache_alloc_noprof+0x88/0x710
[  468.756911][T17814]  ? ovs_flow_alloc+0x24/0x1f0
[  468.756939][T17814]  ovs_flow_alloc+0x24/0x1f0
[  468.756970][T17814]  ovs_flow_cmd_new+0x1ee/0xd80
[  468.756986][T17814]  ? stack_depot_save_flags+0x33/0x810
[  468.757012][T17814]  ? __pfx_kasan_save_track+0x1/0x10
[  468.757036][T17814]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  468.757107][T17814]  ? rcu_is_watching+0x15/0xb0
[  468.757133][T17814]  ? __nla_parse+0x40/0x60
[  468.757159][T17814]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  468.757191][T17814]  genl_family_rcv_msg_doit+0x215/0x300
[  468.757220][T17814]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  468.757255][T17814]  ? bpf_lsm_capable+0x9/0x20
[  468.757278][T17814]  ? security_capable+0x7e/0x2e0
[  468.757308][T17814]  genl_rcv_msg+0x60e/0x790
[  468.757336][T17814]  ? __pfx_genl_rcv_msg+0x10/0x10
[  468.757357][T17814]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  468.757380][T17814]  ? __asan_memcpy+0x40/0x70
[  468.757406][T17814]  ? __pfx_ref_tracker_free+0x10/0x10
[  468.757425][T17814]  ? __skb_clone+0x63/0x7a0
[  468.757458][T17814]  netlink_rcv_skb+0x208/0x470
[  468.757487][T17814]  ? __pfx_genl_rcv_msg+0x10/0x10
[  468.757510][T17814]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  468.757533][T17814]  ? genl_rcv+0x19/0x40
[  468.757570][T17814]  ? down_read+0x274/0x2e0
[  468.757595][T17814]  ? genl_rcv+0xd/0x40
[  468.757617][T17814]  genl_rcv+0x28/0x40
[  468.757636][T17814]  netlink_unicast+0x82f/0x9e0
[  468.757671][T17814]  ? __pfx_netlink_unicast+0x10/0x10
[  468.757696][T17814]  ? __alloc_skb+0x198/0x3b0
[  468.757720][T17814]  ? netlink_sendmsg+0x642/0xb30
[  468.757746][T17814]  ? skb_put+0x11b/0x210
[  468.757785][T17814]  netlink_sendmsg+0x805/0xb30
[  468.757824][T17814]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.757856][T17814]  ? aa_sock_msg_perm+0xf1/0x1b0
[  468.757886][T17814]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  468.757904][T17814]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.757935][T17814]  __sock_sendmsg+0x21c/0x270
[  468.757968][T17814]  ____sys_sendmsg+0x505/0x820
[  468.757996][T17814]  ? __pfx_____sys_sendmsg+0x10/0x10
[  468.758031][T17814]  ? import_iovec+0x74/0xa0
[  468.758060][T17814]  ___sys_sendmsg+0x21f/0x2a0
[  468.758086][T17814]  ? __pfx____sys_sendmsg+0x10/0x10
[  468.758153][T17814]  ? __fget_files+0x2a/0x420
[  468.758178][T17814]  ? __fget_files+0x3a0/0x420
[  468.758215][T17814]  __x64_sys_sendmsg+0x19b/0x260
[  468.758243][T17814]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  468.758280][T17814]  ? __pfx_ksys_write+0x10/0x10
[  468.758312][T17814]  do_syscall_64+0xec/0xf80
[  468.758334][T17814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.758353][T17814]  ? trace_irq_disable+0x37/0x100
[  468.758379][T17814]  ? clear_bhb_loop+0x60/0xb0
[  468.758404][T17814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.758423][T17814] RIP: 0033:0x7fbdb658f749
[  468.758444][T17814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  468.758462][T17814] RSP: 002b:00007fbdb73c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  468.758486][T17814] RAX: ffffffffffffffda RBX: 00007fbdb67e5fa0 RCX: 00007fbdb658f749
[  468.758501][T17814] RDX: 0000000000008800 RSI: 0000200000000000 RDI: 0000000000000003
[  468.758514][T17814] RBP: 00007fbdb73c3090 R08: 0000000000000000 R09: 0000000000000000
[  468.758527][T17814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.758539][T17814] R13: 00007fbdb67e6038 R14: 00007fbdb67e5fa0 R15: 00007ffcaad95988
[  468.758574][T17814]  </TASK>
[  469.354290][T17830] netlink: 'syz.0.3478': attribute type 1 has an invalid length.
[  469.444252][T17835] FAULT_INJECTION: forcing a failure.
[  469.444252][T17835] name failslab, interval 1, probability 0, space 0, times 0
[  469.459277][T17835] CPU: 0 UID: 0 PID: 17835 Comm: syz.0.3478 Not tainted syzkaller #0 PREEMPT(full) 
[  469.459310][T17835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  469.459324][T17835] Call Trace:
[  469.459334][T17835]  <TASK>
[  469.459344][T17835]  dump_stack_lvl+0xe8/0x150
[  469.459376][T17835]  should_fail_ex+0x414/0x560
[  469.459412][T17835]  should_failslab+0xa8/0x100
[  469.459441][T17835]  __kmalloc_cache_noprof+0x84/0x700
[  469.459460][T17835]  ? __pfx_stack_trace_save+0x10/0x10
[  469.459491][T17835]  ? rtnl_newlink+0xfb/0x1c90
[  469.459522][T17835]  rtnl_newlink+0xfb/0x1c90
[  469.459546][T17835]  ? kasan_save_track+0x4f/0x80
[  469.459563][T17835]  ? kasan_save_track+0x3e/0x80
[  469.459580][T17835]  ? kasan_save_free_info+0x46/0x50
[  469.459607][T17835]  ? __kasan_slab_free+0x5c/0x80
[  469.459627][T17835]  ? kmem_cache_free+0x197/0x620
[  469.459646][T17835]  ? nlmon_xmit+0xb0/0x100
[  469.459672][T17835]  ? dev_hard_start_xmit+0x2cd/0x800
[  469.459698][T17835]  ? __dev_queue_xmit+0x149d/0x31c0
[  469.459738][T17835]  ? __netlink_deliver_tap+0x5ad/0x850
[  469.459764][T17835]  ? netlink_deliver_tap+0x19c/0x1b0
[  469.459846][T17835]  ? netlink_unicast+0x7fa/0x9e0
[  469.459869][T17835]  ? netlink_sendmsg+0x805/0xb30
[  469.459898][T17835]  ? __pfx_rtnl_newlink+0x10/0x10
[  469.459919][T17835]  ? do_syscall_64+0xec/0xf80
[  469.459941][T17835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.459999][T17835]  ? kasan_quarantine_put+0xbb/0x1f0
[  469.460020][T17835]  ? lockdep_hardirqs_on+0x7b/0x110
[  469.460049][T17835]  ? kmem_cache_free+0x197/0x620
[  469.460068][T17835]  ? nlmon_xmit+0xb0/0x100
[  469.460106][T17835]  ? __lock_acquire+0x6b6/0x2cf0
[  469.460136][T17835]  ? __local_bh_enable_ip+0xd0/0x130
[  469.460158][T17835]  ? lockdep_hardirqs_on+0x7b/0x110
[  469.460181][T17835]  ? __dev_queue_xmit+0x289/0x31c0
[  469.460207][T17835]  ? __local_bh_enable_ip+0xd0/0x130
[  469.460226][T17835]  ? __dev_queue_xmit+0x289/0x31c0
[  469.460260][T17835]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  469.460300][T17835]  ? __pfx_rtnl_newlink+0x10/0x10
[  469.460321][T17835]  rtnetlink_rcv_msg+0x7cf/0xb70
[  469.460349][T17835]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  469.460371][T17835]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  469.460392][T17835]  ? ref_tracker_free+0x63a/0x7d0
[  469.460414][T17835]  ? __asan_memcpy+0x40/0x70
[  469.460443][T17835]  ? __pfx_ref_tracker_free+0x10/0x10
[  469.460460][T17835]  ? __skb_clone+0x63/0x7a0
[  469.460497][T17835]  netlink_rcv_skb+0x208/0x470
[  469.460528][T17835]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  469.460552][T17835]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  469.460592][T17835]  ? netlink_deliver_tap+0x2e/0x1b0
[  469.460629][T17835]  netlink_unicast+0x82f/0x9e0
[  469.460664][T17835]  ? __pfx_netlink_unicast+0x10/0x10
[  469.460688][T17835]  ? __alloc_skb+0x198/0x3b0
[  469.460709][T17835]  ? netlink_sendmsg+0x642/0xb30
[  469.460735][T17835]  ? skb_put+0x11b/0x210
[  469.460762][T17835]  netlink_sendmsg+0x805/0xb30
[  469.460812][T17835]  ? __pfx_netlink_sendmsg+0x10/0x10
[  469.460845][T17835]  ? aa_sock_msg_perm+0xf1/0x1b0
[  469.460874][T17835]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  469.460893][T17835]  ? __pfx_netlink_sendmsg+0x10/0x10
[  469.460922][T17835]  __sock_sendmsg+0x21c/0x270
[  469.460957][T17835]  ____sys_sendmsg+0x505/0x820
[  469.460990][T17835]  ? __pfx_____sys_sendmsg+0x10/0x10
[  469.461024][T17835]  ? import_iovec+0x74/0xa0
[  469.461049][T17835]  ___sys_sendmsg+0x21f/0x2a0
[  469.461073][T17835]  ? __pfx____sys_sendmsg+0x10/0x10
[  469.461130][T17835]  ? __fget_files+0x2a/0x420
[  469.461154][T17835]  ? __fget_files+0x3a0/0x420
[  469.461184][T17835]  __x64_sys_sendmsg+0x19b/0x260
[  469.461210][T17835]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  469.461242][T17835]  ? __pfx_ksys_write+0x10/0x10
[  469.461273][T17835]  do_syscall_64+0xec/0xf80
[  469.461295][T17835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.461314][T17835]  ? trace_irq_disable+0x37/0x100
[  469.461348][T17835]  ? clear_bhb_loop+0x60/0xb0
[  469.461370][T17835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.461389][T17835] RIP: 0033:0x7fa2f538f749
[  469.461408][T17835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.461426][T17835] RSP: 002b:00007fa2f617a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  469.461450][T17835] RAX: ffffffffffffffda RBX: 00007fa2f55e6090 RCX: 00007fa2f538f749
[  469.461465][T17835] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000005
[  469.461487][T17835] RBP: 00007fa2f617a090 R08: 0000000000000000 R09: 0000000000000000
[  469.461500][T17835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.461513][T17835] R13: 00007fa2f55e6128 R14: 00007fa2f55e6090 R15: 00007ffcc189fa88
[  469.461548][T17835]  </TASK>
[  470.006452][T17830] 8021q: adding VLAN 0 to HW filter on device bond1
[  470.037863][T17825] lo speed is unknown, defaulting to 1000
[  470.070565][T17825] virt_wifi0 speed is unknown, defaulting to 1000
[  470.174645][T17841] siw: device registration error -23
[  470.210758][T17839] lo speed is unknown, defaulting to 1000
[  470.223739][T17839] virt_wifi0 speed is unknown, defaulting to 1000
[  470.494224][T17854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3483'.
[  470.527673][T17854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3483'.
[  470.544833][T17854] openvswitch: netlink: Message has 4 unknown bytes.
[  471.136246][T17878] netlink: 'syz.0.3488': attribute type 13 has an invalid length.
[  471.855985][T17897] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3493'.
[  472.281502][T17913] veth0: entered promiscuous mode
[  472.335027][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3499'.
[  472.462918][T17924] vcan0: tx drop: invalid da for name 0x00feffffffffffff
[  472.556743][T17929] FAULT_INJECTION: forcing a failure.
[  472.556743][T17929] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  472.575698][T17929] CPU: 0 UID: 0 PID: 17929 Comm: syz.4.3504 Not tainted syzkaller #0 PREEMPT(full) 
[  472.575728][T17929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  472.575740][T17929] Call Trace:
[  472.575749][T17929]  <TASK>
[  472.575758][T17929]  dump_stack_lvl+0xe8/0x150
[  472.575800][T17929]  should_fail_ex+0x414/0x560
[  472.575837][T17929]  _copy_from_user+0x2d/0xb0
[  472.575864][T17929]  ___sys_recvmsg+0x12e/0x510
[  472.575899][T17929]  ? __pfx____sys_recvmsg+0x10/0x10
[  472.575965][T17929]  do_recvmmsg+0x307/0x770
[  472.575999][T17929]  ? __pfx_do_recvmmsg+0x10/0x10
[  472.576035][T17929]  ? kmem_cache_free+0x197/0x620
[  472.576055][T17929]  ? do_sys_openat2+0x15a/0x200
[  472.576096][T17929]  __x64_sys_recvmmsg+0x190/0x240
[  472.576123][T17929]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  472.576147][T17929]  ? inet_shutdown+0x2b1/0x390
[  472.576188][T17929]  do_syscall_64+0xec/0xf80
[  472.576213][T17929]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.576231][T17929]  ? trace_irq_disable+0x37/0x100
[  472.576257][T17929]  ? clear_bhb_loop+0x60/0xb0
[  472.576281][T17929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.576299][T17929] RIP: 0033:0x7fd9f3f8f749
[  472.576318][T17929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  472.576336][T17929] RSP: 002b:00007fd9f4e64038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  472.576358][T17929] RAX: ffffffffffffffda RBX: 00007fd9f41e5fa0 RCX: 00007fd9f3f8f749
[  472.576372][T17929] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000004
[  472.576386][T17929] RBP: 00007fd9f4e64090 R08: 0000000000000000 R09: 0000000000000000
[  472.576398][T17929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  472.576411][T17929] R13: 00007fd9f41e6038 R14: 00007fd9f41e5fa0 R15: 00007ffc3f110ca8
[  472.576444][T17929]  </TASK>
[  472.769193][T17932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3505'.
[  472.771584][T17930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  472.911225][T17934] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3508'.
[  472.929257][T17938] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3507'.
[  472.940498][T17938] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3507'.
[  473.555306][T17949] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  473.650918][T17959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3514'.
[  473.715629][T17961] openvswitch: netlink: Multiple metadata blocks provided
[  473.861110][T17965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3516'.
[  473.881554][T17965] vlan2: entered allmulticast mode
[  473.886949][T17965] veth1: entered allmulticast mode
[  474.139386][T17976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  474.370260][T17983] @: option packets_per_slave: invalid value (65547)
[  474.377104][T17983] @: option packets_per_slave: allowed values 0 - 65535
[  474.429152][T17983] @ (unregistering): Released all slaves
[  474.526456][T17989] netlink: 'syz.4.3526': attribute type 10 has an invalid length.
[  474.587348][T17989] veth0_vlan: left promiscuous mode
[  474.605023][T17992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  474.638256][T17989] veth0_vlan: entered promiscuous mode
[  474.656181][T17989] team0: Device veth0_vlan failed to register rx_handler
[  474.746411][T17983] @: option packets_per_slave: invalid value (65547)
[  474.753526][T17983] @: option packets_per_slave: allowed values 0 - 65535
[  474.781045][T17983] @ (unregistering): Released all slaves
[  475.048663][T17997] netlink: 'syz.4.3529': attribute type 1 has an invalid length.
[  475.078310][T17997] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96
[  475.165860][T17999] FAULT_INJECTION: forcing a failure.
[  475.165860][T17999] name failslab, interval 1, probability 0, space 0, times 0
[  475.220128][T17999] CPU: 1 UID: 0 PID: 17999 Comm: syz.1.3530 Not tainted syzkaller #0 PREEMPT(full) 
[  475.220160][T17999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  475.220173][T17999] Call Trace:
[  475.220182][T17999]  <TASK>
[  475.220192][T17999]  dump_stack_lvl+0xe8/0x150
[  475.220223][T17999]  should_fail_ex+0x414/0x560
[  475.220262][T17999]  should_failslab+0xa8/0x100
[  475.220289][T17999]  __kvmalloc_node_noprof+0x175/0x920
[  475.220314][T17999]  ? page_pool_create_percpu+0x2dd/0xb80
[  475.220333][T17999]  ? page_pool_create_percpu+0xaf/0xb80
[  475.220359][T17999]  page_pool_create_percpu+0x2dd/0xb80
[  475.220389][T17999]  bpf_test_run_xdp_live+0x1cf/0x1b20
[  475.220420][T17999]  ? bpf_dispatcher_change_prog+0xb35/0xc90
[  475.220455][T17999]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  475.220492][T17999]  ? __pfx_autoremove_wake_function+0x10/0x10
[  475.220526][T17999]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  475.220556][T17999]  ? 0xffffffffa02018c0
[  475.220595][T17999]  ? 0xffffffffa0201658
[  475.220612][T17999]  ? 0xffffffffa0201798
[  475.220657][T17999]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  475.220699][T17999]  ? _copy_from_user+0x94/0xb0
[  475.220725][T17999]  ? bpf_test_init+0x113/0x150
[  475.220748][T17999]  ? xdp_convert_md_to_buff+0x5b/0x330
[  475.220779][T17999]  bpf_prog_test_run_xdp+0x7c0/0x10e0
[  475.220825][T17999]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  475.220858][T17999]  ? __fget_files+0x2a/0x420
[  475.220890][T17999]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  475.220921][T17999]  bpf_prog_test_run+0x2c7/0x340
[  475.220956][T17999]  __sys_bpf+0x562/0x860
[  475.220987][T17999]  ? __pfx___sys_bpf+0x10/0x10
[  475.221032][T17999]  ? ksys_write+0x22a/0x250
[  475.221056][T17999]  ? __pfx_ksys_write+0x10/0x10
[  475.221094][T17999]  __x64_sys_bpf+0x7c/0x90
[  475.221122][T17999]  do_syscall_64+0xec/0xf80
[  475.221146][T17999]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.221166][T17999]  ? trace_irq_disable+0x37/0x100
[  475.221192][T17999]  ? clear_bhb_loop+0x60/0xb0
[  475.221218][T17999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.221238][T17999] RIP: 0033:0x7fbdb658f749
[  475.221256][T17999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  475.221273][T17999] RSP: 002b:00007fbdb73c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  475.221296][T17999] RAX: ffffffffffffffda RBX: 00007fbdb67e5fa0 RCX: 00007fbdb658f749
[  475.221311][T17999] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  475.221325][T17999] RBP: 00007fbdb73c3090 R08: 0000000000000000 R09: 0000000000000000
[  475.221338][T17999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.221350][T17999] R13: 00007fbdb67e6038 R14: 00007fbdb67e5fa0 R15: 00007ffcaad95988
[  475.221385][T17999]  </TASK>
[  475.221395][T17999] page_pool_create_percpu() gave up with errno -12
[  475.665232][T18005] __nla_validate_parse: 7 callbacks suppressed
[  475.665254][T18005] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3533'.
[  475.852582][T18020] netlink: 'syz.3.3537': attribute type 13 has an invalid length.
[  475.897056][T18014] bond1: option arp_validate: invalid value (18446744073491447809)
[  475.931418][T18014] bond1 (unregistering): Released all slaves
[  475.966418][T18012] syzkaller0: entered promiscuous mode
[  475.974521][T18012] syzkaller0: entered allmulticast mode
[  476.286324][ T8640] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.306388][ T8640] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.328334][T18030] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:0
[  476.338777][ T8640] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.368032][ T8640] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.390508][T18030] netlink: 'syz.4.3542': attribute type 1 has an invalid length.
[  476.542332][T18039] netlink: 'syz.1.3545': attribute type 3 has an invalid length.
[  476.577908][T18039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3545'.
[  476.731287][T18044] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  477.097295][T18065] lo: entered allmulticast mode
[  477.117021][T18065] lo: left allmulticast mode
[  477.188292][T18071] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  477.219777][T18069] lo speed is unknown, defaulting to 1000
[  477.239292][T18069] virt_wifi0 speed is unknown, defaulting to 1000
[  477.308317][T18077] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  477.362539][T18072] lo speed is unknown, defaulting to 1000
[  477.393564][T18072] virt_wifi0 speed is unknown, defaulting to 1000
[  477.512290][T18090] siw: device registration error -23
[  477.801654][T18108] lo: entered allmulticast mode
[  477.809650][T18108] lo: left allmulticast mode
[  478.117329][T18118] netlink: 'syz.2.3575': attribute type 83 has an invalid length.
[  478.608237][T18135] lo speed is unknown, defaulting to 1000
[  478.615994][T18135] virt_wifi0 speed is unknown, defaulting to 1000
[  478.704681][T18140] lo speed is unknown, defaulting to 1000
[  478.729633][T18141] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  478.755803][T18140] virt_wifi0 speed is unknown, defaulting to 1000
[  479.128788][T18158] netlink: 'syz.2.3588': attribute type 6 has an invalid length.
[  479.156292][T18158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3588'.
[  479.303873][T18166] siw: device registration error -23
[  479.957511][   T30] audit: type=1107 audit(1768409112.886:3): pid=18188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  480.367182][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3598'.
[  480.952146][T18217] lo speed is unknown, defaulting to 1000
[  480.974768][T18217] virt_wifi0 speed is unknown, defaulting to 1000
[  480.993637][T18218] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  481.564199][T18247] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3614'.
[  481.573527][T18247] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3614'.
[  481.585716][T18247] block nbd0: reconnected socket
[  481.601224][T18247] tipc: Enabling of bearer <“dp:s> rejected, media not registered
[  481.615694][   T52] block nbd0: Receive control failed (result -32)
[  481.716158][T18251] siw: device registration error -23
[  482.162395][T18265] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3617'.
[  482.282606][T18268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3619'.
[  482.388227][T18272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3620'.
[  482.807846][T18288] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3626'.
[  483.053959][T18301] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  483.090364][T18296] lo speed is unknown, defaulting to 1000
[  483.131349][T18296] virt_wifi0 speed is unknown, defaulting to 1000
[  483.190427][T18307] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3631'.
[  483.815594][T18328] ¾x9ÿ: renamed from bridge_slave_0
[  484.265426][T18342] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.273560][T18342] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  484.421738][T18342] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  484.449412][T18342] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  484.475575][T18342] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.501907][T18342] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  484.625695][ T9783] syz1: Port: 1 Link DOWN
[  484.657595][T11095] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.677681][T11095] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.703805][T11095] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.714785][T11095] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.756676][T18357] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  484.920662][T18364] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  484.950923][T18362] lo speed is unknown, defaulting to 1000
[  484.973269][T18362] virt_wifi0 speed is unknown, defaulting to 1000
[  485.026461][T18371] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  485.083631][T18373] FAULT_INJECTION: forcing a failure.
[  485.083631][T18373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  485.117857][T18373] CPU: 1 UID: 0 PID: 18373 Comm: syz.0.3647 Not tainted syzkaller #0 PREEMPT(full) 
[  485.117888][T18373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  485.117901][T18373] Call Trace:
[  485.117910][T18373]  <TASK>
[  485.117920][T18373]  dump_stack_lvl+0xe8/0x150
[  485.117962][T18373]  should_fail_ex+0x414/0x560
[  485.118006][T18373]  _copy_from_user+0x2d/0xb0
[  485.118040][T18373]  ___sys_recvmsg+0x12e/0x510
[  485.118076][T18373]  ? __pfx____sys_recvmsg+0x10/0x10
[  485.118109][T18373]  ? __fget_files+0x2a/0x420
[  485.118172][T18373]  do_recvmmsg+0x307/0x770
[  485.118208][T18373]  ? __pfx_do_recvmmsg+0x10/0x10
[  485.118250][T18373]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  485.118296][T18373]  __x64_sys_recvmmsg+0x190/0x240
[  485.118327][T18373]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  485.118368][T18373]  do_syscall_64+0xec/0xf80
[  485.118394][T18373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.118414][T18373]  ? trace_irq_disable+0x37/0x100
[  485.118441][T18373]  ? clear_bhb_loop+0x60/0xb0
[  485.118468][T18373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.118488][T18373] RIP: 0033:0x7fa2f538f749
[  485.118507][T18373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  485.118526][T18373] RSP: 002b:00007fa2f617a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  485.118549][T18373] RAX: ffffffffffffffda RBX: 00007fa2f55e6090 RCX: 00007fa2f538f749
[  485.118565][T18373] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004
[  485.118579][T18373] RBP: 00007fa2f617a090 R08: 0000000000000000 R09: 0000000000000000
[  485.118592][T18373] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[  485.118605][T18373] R13: 00007fa2f55e6128 R14: 00007fa2f55e6090 R15: 00007ffcc189fa88
[  485.118639][T18373]  </TASK>
[  485.130856][T18366] lo speed is unknown, defaulting to 1000
[  485.237985][T18377] FAULT_INJECTION: forcing a failure.
[  485.237985][T18377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  485.254625][T18366] virt_wifi0 speed is unknown, defaulting to 1000
[  485.302569][T18377] CPU: 1 UID: 0 PID: 18377 Comm: syz.4.3648 Not tainted syzkaller #0 PREEMPT(full) 
[  485.302603][T18377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  485.302615][T18377] Call Trace:
[  485.302623][T18377]  <TASK>
[  485.302631][T18377]  dump_stack_lvl+0xe8/0x150
[  485.302661][T18377]  should_fail_ex+0x414/0x560
[  485.302695][T18377]  _copy_from_user+0x2d/0xb0
[  485.302718][T18377]  generic_map_update_batch+0x50f/0x810
[  485.302752][T18377]  ? __pfx_generic_map_update_batch+0x10/0x10
[  485.302773][T18377]  ? __fget_files+0x2a/0x420
[  485.302802][T18377]  ? __pfx_generic_map_update_batch+0x10/0x10
[  485.302823][T18377]  bpf_map_do_batch+0x39b/0x630
[  485.302853][T18377]  __sys_bpf+0x690/0x860
[  485.302880][T18377]  ? __pfx___sys_bpf+0x10/0x10
[  485.302926][T18377]  ? rcu_is_watching+0x15/0xb0
[  485.302956][T18377]  __x64_sys_bpf+0x7c/0x90
[  485.302979][T18377]  do_syscall_64+0xec/0xf80
[  485.303002][T18377]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.303027][T18377]  ? trace_irq_disable+0x37/0x100
[  485.303049][T18377]  ? clear_bhb_loop+0x60/0xb0
[  485.303071][T18377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.303089][T18377] RIP: 0033:0x7fd9f3f8f749
[  485.303106][T18377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  485.303123][T18377] RSP: 002b:00007fd9f4e64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  485.303143][T18377] RAX: ffffffffffffffda RBX: 00007fd9f41e5fa0 RCX: 00007fd9f3f8f749
[  485.303157][T18377] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a
[  485.303169][T18377] RBP: 00007fd9f4e64090 R08: 0000000000000000 R09: 0000000000000000
[  485.303180][T18377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  485.303192][T18377] R13: 00007fd9f41e6038 R14: 00007fd9f41e5fa0 R15: 00007ffc3f110ca8
[  485.303222][T18377]  </TASK>
[  485.622594][T18386] netlink: 'syz.2.3649': attribute type 6 has an invalid length.
[  485.756827][T18383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3649'.
[  485.796928][T18390] syzkaller1: entered promiscuous mode
[  485.818595][T18390] syzkaller1: entered allmulticast mode
[  486.046000][T18389] netlink: 'syz.4.3650': attribute type 10 has an invalid length.
[  486.056300][T18389] team0: Device ipvlan1 failed to register rx_handler
[  486.443971][T18408] tipc: Failed to remove unknown binding: 66,0,0/0:2225141234/2225141235
[  486.746165][T18419] x_tables: ip6_tables: mh match: only valid for protocol 135
[  486.928600][T18423] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3660'.
[  487.133013][T18426] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3661'.
[  487.142402][T18426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3661'.
[  487.223934][T18430] netlink: 'syz.2.3662': attribute type 6 has an invalid length.
[  487.262996][T18407] tipc: Failed to remove unknown binding: 66,0,0/0:2225141234/2225141235
[  487.292829][T18430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3662'.
[  487.413219][T18441] netlink: 'syz.3.3666': attribute type 5 has an invalid length.
[  487.463218][T18441] IPv6: NLM_F_CREATE should be specified when creating new route
[  487.521567][T18444] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3667'.
[  487.532309][T18446] tipc: Resetting bearer <eth:syzkaller0>
[  487.560117][T18446] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  487.761076][T18457] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3673'.
[  487.794823][T18457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  487.825972][T11095] tipc: Resetting bearer <eth:syzkaller0>
[  487.952526][T18465] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3674'.
[  487.973726][T18465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  488.145680][T18469] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  488.199771][T18469] bond1 (unregistering): Released all slaves
[  488.261811][T18478] netlink: 'syz.2.3678': attribute type 6 has an invalid length.
[  488.308243][T18478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3678'.
[  488.633698][T18499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3684'.
[  488.676318][T18501] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3683'.
[  488.957630][   T25] block nbd0: Possible stuck request ffff888024f48000: control (read@0,1024B). Runtime 390 seconds
[  488.971825][   T25] block nbd0: Possible stuck request ffff888024f48200: control (read@1024,1024B). Runtime 390 seconds
[  488.986810][   T25] block nbd0: Possible stuck request ffff888024f48400: control (read@2048,1024B). Runtime 390 seconds
[  488.998609][T18516] block nbd0: Dead connection, failed to find a fallback
[  489.006082][T18516] block nbd0: shutting down sockets
[  489.013202][T18516] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  489.028239][T18516] Buffer I/O error on dev nbd0, logical block 1, async page read
[  489.036220][T18516] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  489.046036][T18516] Buffer I/O error on dev nbd0, logical block 0, async page read
[  489.054935][T18516] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  489.065320][T18516] Buffer I/O error on dev nbd0, logical block 2, async page read
[  489.077688][T18517] block nbd0: Possible stuck request ffff888024f48600: control (read@3072,1024B). Runtime 390 seconds
[  489.090856][T18516] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  489.100661][T18516] Buffer I/O error on dev nbd0, logical block 3, async page read
[  489.110117][ T5969] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  489.127482][ T5969] Buffer I/O error on dev nbd0, logical block 0, async page read
[  489.135357][ T5969] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  489.175185][ T5969] Buffer I/O error on dev nbd0, logical block 1, async page read
[  489.184220][ T5969] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  489.200630][ T5969] Buffer I/O error on dev nbd0, logical block 2, async page read
[  489.208578][ T5969] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  489.218353][ T5969] Buffer I/O error on dev nbd0, logical block 3, async page read
[  489.226205][ T5969] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  489.236012][ T5969] Buffer I/O error on dev nbd0, logical block 0, async page read
[  489.244323][ T5969] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  489.255472][ T5969] Buffer I/O error on dev nbd0, logical block 1, async page read
[  489.264370][ T5969] ldm_validate_partition_table(): Disk read failed.
[  489.272391][ T5969] Dev nbd0: unable to read RDB block 0
[  489.279978][ T5969]  nbd0: unable to read partition table
[  489.293766][ T5969] ldm_validate_partition_table(): Disk read failed.
[  489.301235][ T5969] Dev nbd0: unable to read RDB block 0
[  489.307659][ T5969]  nbd0: unable to read partition table
[  489.381162][ T5969] udevd[5969]: failed to send result of seq 11258 to main daemon: Connection refused
[  489.713237][T18539] netlink: 'syz.0.3691': attribute type 6 has an invalid length.
[  489.927335][T18545] .70·: renamed from hsr0 (while UP)
[  489.960185][T18545] .70·: entered allmulticast mode
[  489.965558][T18545] hsr_slave_0: entered allmulticast mode
[  489.977328][T18545] hsr_slave_1: entered allmulticast mode
[  489.985154][T18545] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check.
[  490.182338][T18557] tipc: Resetting bearer <eth:syzkaller0>
[  490.453777][T18560] lo speed is unknown, defaulting to 1000
[  490.477279][T18560] virt_wifi0 speed is unknown, defaulting to 1000
[  490.497043][T18569] lo speed is unknown, defaulting to 1000
[  490.554474][T18569] virt_wifi0 speed is unknown, defaulting to 1000
[  490.982383][T18592] netlink: 'syz.1.3706': attribute type 6 has an invalid length.
[  491.166819][T18598] syz_tun: entered allmulticast mode
[  491.196331][T18598] syz_tun: left allmulticast mode
[  491.367205][T18604] FAULT_INJECTION: forcing a failure.
[  491.367205][T18604] name failslab, interval 1, probability 0, space 0, times 0
[  491.397312][T18604] CPU: 1 UID: 0 PID: 18604 Comm: syz.3.3711 Not tainted syzkaller #0 PREEMPT(full) 
[  491.397344][T18604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  491.397358][T18604] Call Trace:
[  491.397367][T18604]  <TASK>
[  491.397377][T18604]  dump_stack_lvl+0xe8/0x150
[  491.397414][T18604]  should_fail_ex+0x414/0x560
[  491.397449][T18604]  should_failslab+0xa8/0x100
[  491.397476][T18604]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  491.397506][T18604]  ? kmem_cache_alloc_noprof+0x3ce/0x710
[  491.397536][T18604]  ? ovs_flow_alloc+0x103/0x1f0
[  491.397562][T18604]  ? ovs_flow_alloc+0x24/0x1f0
[  491.397595][T18604]  ovs_flow_alloc+0x103/0x1f0
[  491.397627][T18604]  ovs_flow_cmd_new+0x1ee/0xd80
[  491.397648][T18604]  ? stack_depot_save_flags+0x33/0x810
[  491.397690][T18604]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  491.397781][T18604]  ? rcu_is_watching+0x15/0xb0
[  491.397809][T18604]  ? __nla_parse+0x40/0x60
[  491.397837][T18604]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  491.397871][T18604]  genl_family_rcv_msg_doit+0x215/0x300
[  491.397903][T18604]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  491.397941][T18604]  ? bpf_lsm_capable+0x9/0x20
[  491.397964][T18604]  ? security_capable+0x7e/0x2e0
[  491.397995][T18604]  genl_rcv_msg+0x60e/0x790
[  491.398025][T18604]  ? __pfx_genl_rcv_msg+0x10/0x10
[  491.398046][T18604]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  491.398084][T18604]  netlink_rcv_skb+0x208/0x470
[  491.398115][T18604]  ? __pfx_genl_rcv_msg+0x10/0x10
[  491.398139][T18604]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  491.398164][T18604]  ? genl_rcv+0x19/0x40
[  491.398205][T18604]  ? down_read+0x274/0x2e0
[  491.398229][T18604]  ? genl_rcv+0xd/0x40
[  491.398253][T18604]  genl_rcv+0x28/0x40
[  491.398273][T18604]  netlink_unicast+0x82f/0x9e0
[  491.398309][T18604]  ? __pfx_netlink_unicast+0x10/0x10
[  491.398335][T18604]  ? __alloc_skb+0x198/0x3b0
[  491.398359][T18604]  ? netlink_sendmsg+0x642/0xb30
[  491.398386][T18604]  ? skb_put+0x11b/0x210
[  491.398414][T18604]  netlink_sendmsg+0x805/0xb30
[  491.398454][T18604]  ? __pfx_netlink_sendmsg+0x10/0x10
[  491.398488][T18604]  ? aa_sock_msg_perm+0xf1/0x1b0
[  491.398517][T18604]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  491.398536][T18604]  ? __pfx_netlink_sendmsg+0x10/0x10
[  491.398566][T18604]  __sock_sendmsg+0x21c/0x270
[  491.398600][T18604]  ____sys_sendmsg+0x505/0x820
[  491.398634][T18604]  ? __pfx_____sys_sendmsg+0x10/0x10
[  491.398670][T18604]  ? import_iovec+0x74/0xa0
[  491.398700][T18604]  ___sys_sendmsg+0x21f/0x2a0
[  491.398736][T18604]  ? __pfx____sys_sendmsg+0x10/0x10
[  491.398804][T18604]  ? __fget_files+0x2a/0x420
[  491.398828][T18604]  ? __fget_files+0x3a0/0x420
[  491.398867][T18604]  __x64_sys_sendmsg+0x19b/0x260
[  491.398897][T18604]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  491.398935][T18604]  ? __pfx_ksys_write+0x10/0x10
[  491.398970][T18604]  do_syscall_64+0xec/0xf80
[  491.398993][T18604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.399013][T18604]  ? trace_irq_disable+0x37/0x100
[  491.399038][T18604]  ? clear_bhb_loop+0x60/0xb0
[  491.399064][T18604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.399084][T18604] RIP: 0033:0x7f45b698f749
[  491.399104][T18604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  491.399121][T18604] RSP: 002b:00007f45b78a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  491.399145][T18604] RAX: ffffffffffffffda RBX: 00007f45b6be5fa0 RCX: 00007f45b698f749
[  491.399160][T18604] RDX: 0000000000008800 RSI: 0000200000000000 RDI: 0000000000000003
[  491.399175][T18604] RBP: 00007f45b78a3090 R08: 0000000000000000 R09: 0000000000000000
[  491.399187][T18604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  491.399200][T18604] R13: 00007f45b6be6038 R14: 00007f45b6be5fa0 R15: 00007ffc3aad41e8
[  491.399237][T18604]  </TASK>
[  491.920501][T18611] netlink: 'syz.2.3714': attribute type 9 has an invalid length.
[  491.943892][T18611] netlink: 'syz.2.3714': attribute type 10 has an invalid length.
[  492.093004][T18617] netlink: 'syz.3.3716': attribute type 1 has an invalid length.
[  492.123456][T18617] netlink: 'syz.3.3716': attribute type 2 has an invalid length.
[  492.134568][T18620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  492.142245][T18620] IPv6: NLM_F_CREATE should be set when creating new route
[  492.149681][T18620] IPv6: NLM_F_CREATE should be set when creating new route
[  492.156986][T18620] IPv6: NLM_F_CREATE should be set when creating new route
[  492.197387][T18625] __nla_validate_parse: 11 callbacks suppressed
[  492.203905][T18625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3720'.
[  492.279442][T18629] netlink: 'syz.2.3720': attribute type 6 has an invalid length.
[  492.382839][T18625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3720'.
[  492.660477][T18641] syzkaller0: entered promiscuous mode
[  492.666365][T18641] syzkaller0: entered allmulticast mode
[  492.965517][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3727'.
[  492.989317][T18655] veth1_macvtap: left promiscuous mode
[  493.036848][T18658] FAULT_INJECTION: forcing a failure.
[  493.036848][T18658] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  493.076119][T18658] CPU: 0 UID: 0 PID: 18658 Comm: syz.4.3728 Not tainted syzkaller #0 PREEMPT(full) 
[  493.076147][T18658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  493.076159][T18658] Call Trace:
[  493.076166][T18658]  <TASK>
[  493.076174][T18658]  dump_stack_lvl+0xe8/0x150
[  493.076204][T18658]  should_fail_ex+0x414/0x560
[  493.076236][T18658]  _copy_from_user+0x2d/0xb0
[  493.076259][T18658]  generic_map_update_batch+0x566/0x810
[  493.076291][T18658]  ? __pfx_generic_map_update_batch+0x10/0x10
[  493.076311][T18658]  ? __fget_files+0x2a/0x420
[  493.076342][T18658]  ? __pfx_generic_map_update_batch+0x10/0x10
[  493.076365][T18658]  bpf_map_do_batch+0x39b/0x630
[  493.076400][T18658]  __sys_bpf+0x690/0x860
[  493.076430][T18658]  ? __pfx___sys_bpf+0x10/0x10
[  493.076476][T18658]  ? ksys_write+0x22a/0x250
[  493.076498][T18658]  ? __pfx_ksys_write+0x10/0x10
[  493.076527][T18658]  __x64_sys_bpf+0x7c/0x90
[  493.076553][T18658]  do_syscall_64+0xec/0xf80
[  493.076577][T18658]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.076597][T18658]  ? trace_irq_disable+0x37/0x100
[  493.076623][T18658]  ? clear_bhb_loop+0x60/0xb0
[  493.076648][T18658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.076667][T18658] RIP: 0033:0x7fd9f3f8f749
[  493.076696][T18658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  493.076713][T18658] RSP: 002b:00007fd9f4e64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  493.076735][T18658] RAX: ffffffffffffffda RBX: 00007fd9f41e5fa0 RCX: 00007fd9f3f8f749
[  493.076750][T18658] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a
[  493.076764][T18658] RBP: 00007fd9f4e64090 R08: 0000000000000000 R09: 0000000000000000
[  493.076777][T18658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  493.076789][T18658] R13: 00007fd9f41e6038 R14: 00007fd9f41e5fa0 R15: 00007ffc3f110ca8
[  493.076825][T18658]  </TASK>
[  493.451998][T18667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  493.465706][T18667] syzkaller0: entered promiscuous mode
[  493.471887][T18667] syzkaller0: entered allmulticast mode
[  493.512754][T18667] tipc: Resetting bearer <eth:syzkaller0>
[  493.548872][T18674] FAULT_INJECTION: forcing a failure.
[  493.548872][T18674] name failslab, interval 1, probability 0, space 0, times 0
[  493.569648][T18674] CPU: 0 UID: 0 PID: 18674 Comm: syz.0.3732 Not tainted syzkaller #0 PREEMPT(full) 
[  493.569681][T18674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  493.569694][T18674] Call Trace:
[  493.569702][T18674]  <TASK>
[  493.569712][T18674]  dump_stack_lvl+0xe8/0x150
[  493.569745][T18674]  should_fail_ex+0x414/0x560
[  493.569791][T18674]  ? __pfx_cake_init+0x10/0x10
[  493.569823][T18674]  should_failslab+0xa8/0x100
[  493.569850][T18674]  __kmalloc_cache_noprof+0x84/0x700
[  493.569874][T18674]  ? is_dynamic_key+0xd6/0x1c0
[  493.569892][T18674]  ? cake_init+0x5e/0x9f0
[  493.569922][T18674]  ? __pfx_cake_init+0x10/0x10
[  493.569952][T18674]  cake_init+0x5e/0x9f0
[  493.569988][T18674]  ? lockdep_rtnl_is_held+0x26/0x40
[  493.570016][T18674]  ? qdisc_lookup+0x36d/0x6d0
[  493.570047][T18674]  ? __pfx_cake_init+0x10/0x10
[  493.570076][T18674]  qdisc_create+0x7ac/0xea0
[  493.570110][T18674]  tc_modify_qdisc+0x1547/0x2020
[  493.570149][T18674]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  493.570171][T18674]  ? __dev_queue_xmit+0x289/0x31c0
[  493.570233][T18674]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  493.570255][T18674]  rtnetlink_rcv_msg+0x77c/0xb70
[  493.570284][T18674]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  493.570314][T18674]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  493.570335][T18674]  ? ref_tracker_free+0x63a/0x7d0
[  493.570358][T18674]  ? __asan_memcpy+0x40/0x70
[  493.570388][T18674]  ? __pfx_ref_tracker_free+0x10/0x10
[  493.570423][T18674]  netlink_rcv_skb+0x208/0x470
[  493.570454][T18674]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  493.570480][T18674]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  493.570523][T18674]  ? netlink_deliver_tap+0x2e/0x1b0
[  493.570562][T18674]  netlink_unicast+0x82f/0x9e0
[  493.570599][T18674]  ? __pfx_netlink_unicast+0x10/0x10
[  493.570624][T18674]  ? __alloc_skb+0x198/0x3b0
[  493.570649][T18674]  ? netlink_sendmsg+0x642/0xb30
[  493.570676][T18674]  ? skb_put+0x11b/0x210
[  493.570704][T18674]  netlink_sendmsg+0x805/0xb30
[  493.570746][T18674]  ? __pfx_netlink_sendmsg+0x10/0x10
[  493.570788][T18674]  ? aa_sock_msg_perm+0xf1/0x1b0
[  493.570817][T18674]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  493.570837][T18674]  ? __pfx_netlink_sendmsg+0x10/0x10
[  493.570869][T18674]  __sock_sendmsg+0x21c/0x270
[  493.570905][T18674]  ____sys_sendmsg+0x505/0x820
[  493.570939][T18674]  ? __pfx_____sys_sendmsg+0x10/0x10
[  493.570977][T18674]  ? import_iovec+0x74/0xa0
[  493.571007][T18674]  ___sys_sendmsg+0x21f/0x2a0
[  493.571036][T18674]  ? __pfx____sys_sendmsg+0x10/0x10
[  493.571107][T18674]  ? __fget_files+0x2a/0x420
[  493.571132][T18674]  ? __fget_files+0x3a0/0x420
[  493.571171][T18674]  __x64_sys_sendmsg+0x19b/0x260
[  493.571201][T18674]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  493.571239][T18674]  ? __pfx_ksys_write+0x10/0x10
[  493.571275][T18674]  do_syscall_64+0xec/0xf80
[  493.571300][T18674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.571320][T18674]  ? trace_irq_disable+0x37/0x100
[  493.571347][T18674]  ? clear_bhb_loop+0x60/0xb0
[  493.571374][T18674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.571395][T18674] RIP: 0033:0x7fa2f538f749
[  493.571414][T18674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  493.571433][T18674] RSP: 002b:00007fa2f619b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  493.571457][T18674] RAX: ffffffffffffffda RBX: 00007fa2f55e5fa0 RCX: 00007fa2f538f749
[  493.571473][T18674] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004
[  493.571486][T18674] RBP: 00007fa2f619b090 R08: 0000000000000000 R09: 0000000000000000
[  493.571500][T18674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.571513][T18674] R13: 00007fa2f55e6038 R14: 00007fa2f55e5fa0 R15: 00007ffcc189fa88
[  493.571550][T18674]  </TASK>
[  493.962957][T18674] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI
[  493.975083][T18674] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[  493.978258][T18676] Bluetooth: MGMT ver 1.23
[  493.983522][T18674] CPU: 0 UID: 0 PID: 18674 Comm: syz.0.3732 Not tainted syzkaller #0 PREEMPT(full) 
[  493.983550][T18674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  493.983563][T18674] RIP: 0010:hrtimer_try_to_cancel+0x7d/0x420
[  494.013571][T18674] Code: ae 12 00 48 8b 5c 24 08 48 8b 44 24 10 42 80 3c 30 00 74 08 48 89 df e8 91 ce 78 00 4c 8b 3b 49 8d 5f 10 49 89 dc 49 c1 ec 03 <43> 0f b6 04 34 84 c0 0f 85 bf 00 00 00 8b 2b 89 ee 83 e6 01 31 ff
[  494.033286][T18674] RSP: 0018:ffffc90004e87218 EFLAGS: 00010202
[  494.039376][T18674] RAX: 1ffff1100405f860 RBX: 0000000000000010 RCX: 1ffff1100405f861
[  494.047369][T18674] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: ffff8880202fc2d0
[  494.055371][T18674] RBP: ffffc90004e87410 R08: 0000000000000000 R09: ffffffff822729fc
[  494.063534][T18674] R10: dffffc0000000000 R11: ffffffff896d2b10 R12: 0000000000000002
[  494.071533][T18674] R13: 00000000fffffff4 R14: dffffc0000000000 R15: 0000000000000000
[  494.079531][T18674] FS:  00007fa2f619b6c0(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000
[  494.088683][T18674] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  494.095288][T18674] CR2: 00007ffcc97dfd5c CR3: 000000001120c000 CR4: 00000000003526f0
[  494.103288][T18674] Call Trace:
[  494.106609][T18674]  <TASK>
[  494.109573][T18674]  ? __pfx_cake_destroy+0x10/0x10
[  494.114735][T18674]  hrtimer_cancel+0x16/0x50
[  494.119267][T18674]  cake_destroy+0x28/0x100
[  494.123705][T18674]  qdisc_create+0xaa3/0xea0
[  494.128230][T18674]  tc_modify_qdisc+0x1547/0x2020
[  494.133181][T18674]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  494.138484][T18674]  ? __dev_queue_xmit+0x289/0x31c0
[  494.143660][T18674]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  494.148966][T18674]  rtnetlink_rcv_msg+0x77c/0xb70
[  494.153941][T18674]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  494.159081][T18674]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  494.164568][T18674]  ? ref_tracker_free+0x63a/0x7d0
[  494.169663][T18674]  ? __asan_memcpy+0x40/0x70
[  494.174295][T18674]  ? __pfx_ref_tracker_free+0x10/0x10
[  494.179838][T18674]  netlink_rcv_skb+0x208/0x470
[  494.184640][T18674]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  494.191796][T18674]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  494.197212][T18674]  ? netlink_deliver_tap+0x2e/0x1b0
[  494.202430][T18674]  netlink_unicast+0x82f/0x9e0
[  494.207236][T18674]  ? __pfx_netlink_unicast+0x10/0x10
[  494.212529][T18674]  ? __alloc_skb+0x198/0x3b0
[  494.217126][T18674]  ? netlink_sendmsg+0x642/0xb30
[  494.222163][T18674]  ? skb_put+0x11b/0x210
[  494.226415][T18674]  netlink_sendmsg+0x805/0xb30
[  494.231206][T18674]  ? __pfx_netlink_sendmsg+0x10/0x10
[  494.237391][T18674]  ? aa_sock_msg_perm+0xf1/0x1b0
[  494.243326][T18674]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  494.248640][T18674]  ? __pfx_netlink_sendmsg+0x10/0x10
[  494.254028][T18674]  __sock_sendmsg+0x21c/0x270
[  494.258720][T18674]  ____sys_sendmsg+0x505/0x820
[  494.263631][T18674]  ? __pfx_____sys_sendmsg+0x10/0x10
[  494.269024][T18674]  ? import_iovec+0x74/0xa0
[  494.273549][T18674]  ___sys_sendmsg+0x21f/0x2a0
[  494.278255][T18674]  ? __pfx____sys_sendmsg+0x10/0x10
[  494.283478][T18674]  ? __fget_files+0x2a/0x420
[  494.288080][T18674]  ? __fget_files+0x3a0/0x420
[  494.292769][T18674]  __x64_sys_sendmsg+0x19b/0x260
[  494.298160][T18674]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  494.303721][T18674]  ? __pfx_ksys_write+0x10/0x10
[  494.308586][T18674]  do_syscall_64+0xec/0xf80
[  494.313097][T18674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.319168][T18674]  ? trace_irq_disable+0x37/0x100
[  494.324221][T18674]  ? clear_bhb_loop+0x60/0xb0
[  494.328930][T18674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.335287][T18674] RIP: 0033:0x7fa2f538f749
[  494.340253][T18674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  494.359964][T18674] RSP: 002b:00007fa2f619b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  494.368399][T18674] RAX: ffffffffffffffda RBX: 00007fa2f55e5fa0 RCX: 00007fa2f538f749
[  494.376378][T18674] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004
[  494.384356][T18674] RBP: 00007fa2f619b090 R08: 0000000000000000 R09: 0000000000000000
[  494.392336][T18674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  494.400322][T18674] R13: 00007fa2f55e6038 R14: 00007fa2f55e5fa0 R15: 00007ffcc189fa88
[  494.408323][T18674]  </TASK>
[  494.411365][T18674] Modules linked in:
[  494.417863][T18674] ---[ end trace 0000000000000000 ]---
[  494.434709][T18674] RIP: 0010:hrtimer_try_to_cancel+0x7d/0x420
[  494.445460][T18674] Code: ae 12 00 48 8b 5c 24 08 48 8b 44 24 10 42 80 3c 30 00 74 08 48 89 df e8 91 ce 78 00 4c 8b 3b 49 8d 5f 10 49 89 dc 49 c1 ec 03 <43> 0f b6 04 34 84 c0 0f 85 bf 00 00 00 8b 2b 89 ee 83 e6 01 31 ff
[  494.465925][T18674] RSP: 0018:ffffc90004e87218 EFLAGS: 00010202
[  494.485969][T18674] RAX: 1ffff1100405f860 RBX: 0000000000000010 RCX: 1ffff1100405f861
[  494.486914][T18680] netlink: 'syz.1.3733': attribute type 13 has an invalid length.
[  494.494375][T18674] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: ffff8880202fc2d0
[  494.494401][T18674] RBP: ffffc90004e87410 R08: 0000000000000000 R09: ffffffff822729fc
[  494.494417][T18674] R10: dffffc0000000000 R11: ffffffff896d2b10 R12: 0000000000000002
[  494.529092][T18674] R13: 00000000fffffff4 R14: dffffc0000000000 R15: 0000000000000000
[  494.537691][T18674] FS:  00007fa2f619b6c0(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000
[  494.547372][T18674] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  494.554732][T18674] CR2: 0000200000004bc0 CR3: 000000001120c000 CR4: 00000000003526f0
[  494.563295][T18674] Kernel panic - not syncing: Fatal exception
[  494.569843][T18674] Kernel Offset: disabled
[  494.574171][T18674] Rebooting in 86400 seconds..