last executing test programs:

3.16299317s ago: executing program 2 (id=1524):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x6, 0x40, 0x3ff, 0x5, 0x200]}, &(0x7f0000000300)=0x54)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe54a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80)
unshare(0x20000400)
r1 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r1, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x4, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x5}, &(0x7f00000001c0)=0x8)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000b20000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB='\x00'/13], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, 0x0)

3.001539199s ago: executing program 0 (id=1525):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={r2, 0x5}, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYRES32, @ANYBLOB]}, 0x7c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_emit_ethernet(0x1f, &(0x7f0000000240)=ANY=[], 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00')
unshare(0x6a040000)
pselect6(0x0, 0x0, &(0x7f0000000a00)={0x8, 0x80000001, 0x4, 0x9, 0x8, 0x3, 0x4, 0x3}, 0x0, &(0x7f0000000a80), &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8})
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x60, 0x2a, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@typed={0x49, 0x1, 0x0, 0x0, @str='hm\xf33)\xf3\xff\x00\x00\x00\x00\xea\x91o\xaf\xd4\x00\x00s}\x19f\xceM\f\xac\xfa\xc8\xbd\xf0M1\x04\x988..\x8d\x8e\xf4X\xb1\x1cs\xef\xcf=\x83\xd1\xbe\xfe\xba.\xd6@S\x7f\x91\xda?\x975\x89D\xa7\x1a\xa2=j'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
sendmsg$sock(r6, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

2.975061264s ago: executing program 4 (id=1527):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a000000000000000000000000006d0000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da093dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e86b2145980b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d57"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80000a000000000300014002000c0901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)

2.80576287s ago: executing program 4 (id=1529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000400000000000000000000fb00000000"], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0x7, 0x2, 0x3, 0x3, 0xfe, 0x5, 0x29, 0xfc, 0x0, 0x42, 0x28}, 0xe)
write$tun(r6, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)
r8 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x8000)
accept$inet6(r8, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x43cfc1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x2557, 0xc8, &(0x7f00000004c0)=""/200, 0x41100, 0x2, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x4, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r9, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f0000000940)=[{0x5, 0x5, 0xf, 0x3}, {0x4, 0x5, 0x7, 0x7}], 0x10, 0x7}, 0x94)

2.774942051s ago: executing program 2 (id=1531):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) (async)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read(r1, &(0x7f0000000080)=""/4, 0x4) (async)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8801, 0x0)
socket(0x22, 0x800, 0x6) (async)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xfffb, 0x2}, 0x6) (async)
setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4)
recvmmsg(r3, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}, 0x1ff}, {{&(0x7f0000000340)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000001880)=""/4096, 0x1000}}, {{&(0x7f0000002880)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002900)=""/16, 0x10}, {&(0x7f0000002940)=""/114, 0x72}, {&(0x7f00000029c0)=""/118, 0x76}, {&(0x7f0000002a40)=""/46, 0x2e}, {&(0x7f0000002a80)=""/191, 0xbf}, {&(0x7f0000002b40)=""/142, 0x8e}, {&(0x7f0000002c00)=""/103, 0x67}, {&(0x7f0000002c80)=""/95, 0x5f}, {&(0x7f0000000900)=""/230, 0xe3}], 0x9, &(0x7f0000002ec0)=""/210, 0xffd9}, 0x226f}, {{&(0x7f0000002fc0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003040)=""/162, 0xa2}, {&(0x7f0000003100)=""/197, 0xc5}, {&(0x7f0000003200)=""/8, 0x8}, {&(0x7f0000003240)=""/118, 0x76}, {&(0x7f00000032c0)=""/180, 0xb4}, {&(0x7f0000003380)=""/92, 0x5c}], 0x6}, 0xfff}, {{&(0x7f0000003480)=@ax25={{0x3, @default}, [@rose, @netrom, @rose, @default, @netrom, @netrom, @null, @netrom]}, 0x80, &(0x7f0000004980)=[{&(0x7f0000003500)=""/242, 0xf2}, {&(0x7f00000002c0)=""/11, 0x9}, {&(0x7f0000003640)=""/153, 0x99}, {&(0x7f0000003700)=""/120, 0x78}, {&(0x7f0000003780)=""/143, 0x8f}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/261, 0x105}, {&(0x7f0000004940)=""/50, 0x32}], 0x8}, 0xf}, {{0x0, 0x0, &(0x7f0000005bc0)=[{&(0x7f0000004a00)=""/75, 0x4b}, {&(0x7f0000004a80)=""/33, 0x21}, {&(0x7f0000004ac0)=""/27, 0x1b}, {&(0x7f0000004b00)=""/137, 0x89}, {&(0x7f0000004bc0)=""/4096, 0x1000}], 0x5, &(0x7f0000005c40)=""/189, 0xbd}, 0x2}], 0x6, 0x40002000, 0x0) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88fb4500002c0000000410119078640108000000142100004e200018907804000000ea450000c500000000000000"], 0x0) (async)
sendmmsg$inet6(r4, &(0x7f0000007240), 0x0, 0x1c000) (async)
pselect6(0x40, &(0x7f0000000a80)={0x2, 0x5, 0x0, 0x100000000, 0x6, 0x1, 0x100000000000003, 0xfffffffffffffffd}, &(0x7f00000003c0)={0x8, 0xa, 0x4, 0x800, 0x1000000000e, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0)
shutdown(r4, 0x0)
r5 = socket$kcm(0x29, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000b8ee00000114000400fe8000000000000000000000000000aa0c00028004000100"], 0x98}}, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6) (async)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="d4000021", @ANYRESHEX=r6, @ANYBLOB="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", @ANYRES8], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x40010) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x6, 0x9, &(0x7f0000001080)={{0x2c, @multicast2, 0x2, 0x0, 'fo\x00', 0x1d, 0x0, 0x5d}, {@private=0xa010101, 0x2, 0x2000, 0x7ffffff, 0x0, 0x20104}}, 0x44) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000300)={0x8, 'syz_tun\x00', {'veth0_to_team\x00'}, 0x5}) (async)
getsockopt$inet_tcp_int(r8, 0x6, 0x9, 0x0, &(0x7f0000000040))
r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r9, 0xc0385868, &(0x7f0000000240)={<r10=>r2, &(0x7f0000000140)='/dev/rfkill\x00', 0x20b840, &(0x7f0000000180)={@_ha_fsid={[0xb594, 0x8bf]}, {0x6, 0x401, 0x2d6, 0x6}}, 0x7fffffff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x6})
ioctl$IMHOLD_L1(r10, 0x80044948, &(0x7f0000000280)=0x4dc)

2.472165647s ago: executing program 1 (id=1534):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x9, @empty, 0x7}}, 0xd, 0x7fff}, &(0x7f0000001040)=0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x88, 0x23, 0x100, 0x70bd2a, 0x25dfdbfd, 0x0, [@etimer_thresh={0x3, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd28, 0x70bd2b, 0x8, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x0]}}, @policy_type={0xa}, @coaddr={0x14, 0xe, @in6=@mcast1}, @srcaddr={0x14, 0xd, @in6=@ipv4={'\x00', '\xff\xff', @local}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000005000000"], 0x48)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2.33806777s ago: executing program 3 (id=1535):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000000)="00000000000000056e615700", 0x0}, 0x20)

2.087134722s ago: executing program 1 (id=1536):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x2, 0x1, 0x7fffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20014080)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_vlan\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xc, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x6066cfa5, 0x54, &(0x7f0000000300)=""/84, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0xa, 0x7, 0xc}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r0, r0], &(0x7f0000000400)=[{0x0, 0x5, 0x6, 0x7}, {0x5, 0x5, 0x10, 0xc}, {0x2, 0x2, 0x0, 0x5}, {0x0, 0x3, 0x4, 0x6}], 0x10, 0x2}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex=r2, r0, 0x7, 0x1, r0, @void, @value=r3}, 0x20)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x29}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ef21651863164676dde06a6ec9665e61"}, @NL80211_ATTR_PMK={0x14, 0xfe, "05f7895413a7c4a44a566bd41c0264eb"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "eb5fb15ab02621af396cd3e7f73cc184"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6541b18023a811628f5143fadf026e6b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "02790e8e01551f07ab330f4e4463eee3"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x11)
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f00000006c0)={<r6=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000740), 0x4)
getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000780), &(0x7f00000007c0)=0xe)
r7 = openat$cgroup_type(r6, &(0x7f0000000800), 0x2, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000b00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x128, 0x18, 0xa, 0x101, 0x0, 0x0, {0x8, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x6}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8001}]}}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}]}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x21c}}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LIST(r9, &(0x7f0000000fc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000bc0)={0x3a8, r10, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40131a5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18d0}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5563}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10eaf4a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f689612}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44fa}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4dc9c399}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7228d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd107}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5c1}]}, {0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe8835d7}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30a791e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13548786}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20cc8b36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71a5e23b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37905aa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fb994ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x896edbc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd1a3f65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b5b4002}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33576924}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50ff6b93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}]}, {0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8d83bcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44d6ec79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43900c55}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c4, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x179b1ace}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4009d0fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5752261e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfe908c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x505fb72f}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36915697}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70f61be0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fcfa2b0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17ac2fa8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe138}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc0605a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43ae106d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8155}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c2ee2d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda3a}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x233a8d0c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18e62052}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dee6bd6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38a87682}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16e6f6ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d8e}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b59f56e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc94a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3923e449}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b88455b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43006c38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fb2}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6385}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccb8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26565661}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf919}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23a1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc06a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23db047b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9085}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76c048c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18ce3653}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63a6f0dc}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x295c37e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fb2c127}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x629c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa87a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6aea}]}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x8030}, 0x4001)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000001480)={{r7, &(0x7f0000001000)='vlan1\x00', 0x103201, &(0x7f0000001040)={@align=0x7, {0x8, 0x2d, 0x100, 0xbeb}}, 0x663, &(0x7f0000001080), &(0x7f00000010c0)=0x4e3}, 0x4, &(0x7f0000001400)=[{0x2, 0x3, &(0x7f0000001100)='\x00', &(0x7f0000001140)="de14c5d1fd150c96f9d3a5b8b33cadc9a23cf0e8b5c7768ff2b16afb1ccdc54fa650cf9ae18f561bc5261833b0a53ea473385a94b882484e4b85fd1aee8b38c43c3be739b0ab482e84e58f0ef83e77a7ff4b634f336286d7bd713616054d37a9d3182d99bc6d792792e335225b55f1264143f1bef1205fde716c6d2e4b261faca1153ff5442d0fc83b8628cd37a045c3ca62325715b4f5761f83feb16f7ca5544088f24cc401525c", 0xa8}, {0x4, 0x800, &(0x7f0000001200)='%)\\\\&\x80::\x00', &(0x7f0000001240)="39adde07d4cd3ffc5d2bb58ca6505c74e4b2b820dba919a60c737a9588198b809f0a12661283ff13fb", 0x29, 0x8}, {0x2, 0x7, &(0x7f0000001280)='@]\x00', &(0x7f00000012c0)="68b34f5d08643ec6385359a9ff74a451e59c301169117bc95bdc408345d1a1834fc00bd0aaa07d594a6b7b310c500a3c1bb98c42650e66996dd45e5bb8c3acccca0dcab2154f64f6dc22adcd8e55447699b9ea9ebc1290825b565d091dc98ad7dd2443953524c41bac7b7e68", 0x6c, 0x20}, {0x2, 0x2e13, &(0x7f0000001340)='\x00', &(0x7f0000001380)="3606a3e65243c5e2dd29180312057f986b7bd27b2611b51262df807395790d681e43ccc802152831c37785793a496c06c290127156ef900dcbd195e8085a46364d8c553b4e93daf4cd98e461fb43afbdac59ae2526803d0964898f41b049fa18040341083dc9697124759ab93d", 0x6d}]})
r11 = socket$nl_audit(0x10, 0x3, 0x9)
getsockname$netlink(r11, &(0x7f0000001500), &(0x7f0000001540)=0xc)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001580), 0x404c0, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x10000, 0x0)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000001600)=0x5f5f5840)
ioctl$OCFS2_IOC_UNRESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000001640)={0x1, 0x2, 0x7fffffffffffffff, 0xff, 0x71, 0x40})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x66, &(0x7f0000001680)={<r13=>0x0}, &(0x7f00000016c0)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001700)={r13, @in6={{0xa, 0x4e22, 0x3ff, @private1, 0xfffffffa}}, 0x3, 0x1, 0x88, 0xf6, 0x88, 0x0, 0x4}, &(0x7f00000017c0)=0x9c)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001840)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x38, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xe, 0x19}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40)

2.08689526s ago: executing program 3 (id=1537):
r0 = socket$tipc(0x1e, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1}, 0x10042)

1.887354911s ago: executing program 0 (id=1538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffc}]}]}, 0x2c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0)

1.870239567s ago: executing program 3 (id=1539):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vcan0\x00', 0x2})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x18, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x30, 0x0]}}, 0x0, 0x2d}, 0x28)
r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0)
read(r2, &(0x7f0000000040)=""/190, 0xbe)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x20, 0x33, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x850)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x18, 0x3, 0x9, 0x5, 0x0, 0x4, 0x25dfdbff, [@sadb_address={0x3, 0x7, 0x33, 0x90, 0x0, @in={0x2, 0x4e21, @empty}}]}, 0x28}}, 0x800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000007b280000000c000180080001", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
accept4(0xffffffffffffffff, &(0x7f00000002c0)=@alg, &(0x7f0000000440)=0x80, 0xc0800)

1.816906444s ago: executing program 1 (id=1540):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x20, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x823}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044064}, 0x20040000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1)
syz_init_net_socket$802154_raw(0x24, 0x4, 0x0)
listen(r6, 0xe)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000580)=0xe8)
sendmsg$nl_netfilter(r7, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000640)={0x314, 0x11, 0x8, 0x201, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x4}, [@nested={0x1d0, 0x4a, 0x0, 0x1, [@nested={0x4, 0x108}, @typed={0x8, 0x81, 0x0, 0x0, @uid=r8}, @generic="eec798091f8d087a07753ef19c61b124bc5a3ff844cc4fca3fca167d903c162644278cdc56e54cf679e22f61a4c57f4ec1820f73cb0df26a1c28c291dff7e0d2c8a8715cc10b1bb82875d099367e7de20c82cf847d6399ffb0e3e295b5500583acd3d1b61335d91d5752f880ed53c2111fbf00ca7ca5f5219d12dfa851660485121ca4b38b06589fbd7682a8951c5b3a7644f91c39fa33d7d490f36607fa98a36b5188061a8b6b2187478e2e9aaa0b1ef10de17f410eaf9fc46bf1c1f256db81a9d54de83ac5f576e569e8c310a22c1b2fc336995d732f72402ebeb13b655afa5c", @generic="e92c1c49910e79f38c6ebecfa11318313f3e29a0037da401b2d70bf198bff858d2a9dd742b413d3e72ab5db26634fa40e8e02e80175046401669cb3396fd465e72b86dc3032488d708c0b52904f4a53cd3273f6ac72e0e90f5ad032791c6afb372ec44fad13f25fdce7fb3396385a07ac690f98fae5a0c2376dd7893269fc61de02d5d1bfe12ca17dea7bf93c0148b72c4b87f50449b028aa33ad0bc9b237b8727ff72c63f81c76041171fe2a863f640aec2ee7cf3b678214e7e4f69e201e68988ad5bf05a44e2e68f774202aeae311e07fd351b8e9752", @typed={0x8, 0x6f, 0x0, 0x0, @uid=r9}]}, @typed={0x4, 0xe9}, @generic="c2b53b26a18c2221e17cb54c9151299a6bb3d9aaede05b71072b6ab3248d1827331c9425133b3063e165f58ea75bbdec78caf7c2fe00f1f0268ee87dcc8721fa1c21bcb3573adf375f612f9787b2ac603ca319dece1ba43368f9ce75b63a2c10c15c562f7ff14dd861a100fb8fbf08cf0a0105ec4ca884270134ed66970bea30f89de6148f5b53f5ce03ba4df0e15711aff93273fca7502388923faa96479419698eef0113a65722eae78b1abfb74bca7b16f2c350aea0cc605bebb28664ec22ac", @typed={0x68, 0xae, 0x0, 0x0, @binary="4454e01b8c6e86183fa2d5298309faf693ade65d9b747de0ece5736f76533858a91498d48742612363ee81682abb5b9e97e8a678f19a59919cdeac75b3227502323647e24afcca553b372d40d38996cbd25fd93a2f1ecb6ce03736f3b100b79b5f530d9d"}]}, 0x314}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r10=>0x0, 0x4, 0x2, 0x78, 0x2, 0x17, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x700, 0x9, 0xfffffc01}})
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x1, 0xb}, {0xfff2, 0xf}, {0xffff, 0xfff2}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000a00)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x5c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x7, 0x3}, {0x2, 0xf}, {0xfff1, 0xa}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x14}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xddd, 0x3, 0x2, 0x2, 0x7, 0x6, 0x4000000, 0x7}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40048d9}, 0x35897be4eafec344)

1.648881833s ago: executing program 0 (id=1541):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80000a000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b315277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)

1.570476695s ago: executing program 4 (id=1542):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff2}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000011}, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000480)={0x0, @private, @multicast2}, &(0x7f0000000240)=0x1)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98021422576e1f8f1d2ac6dd60fa7599eba67979a399e581581834335637dd5d84389402a09f581c09118cfd9d9c3310605ef0e1a48220cccc8f2366439a2c1b7086783e30fcbb6e7ef1659a765c75048da95556bf0484f00ce396330554e7680612e8d000224f9429bef58ae26f530809fe159a354b382c3870ba3d056636b917ddb64a17ce707d6e3d017c2c5b50be3d55b3946d88069d3f5ba0d55e9952438ceb8c8a48f538dfcd418933c05357f1190dd3fad1172497484b9ac2379c44ab5df980aaaff65746ad782358fa1e415a85a3afbde8e2d0ad", 0xd9}, {&(0x7f00000002c0)="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", 0x3e9}], 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.parent_freezing\x00', 0x275a, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000080)="29000300010003", 0x7)
ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff2}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000011}, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000480)={0x0, @private, @multicast2}, &(0x7f0000000240)=0x1) (async)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98021422576e1f8f1d2ac6dd60fa7599eba67979a399e581581834335637dd5d84389402a09f581c09118cfd9d9c3310605ef0e1a48220cccc8f2366439a2c1b7086783e30fcbb6e7ef1659a765c75048da95556bf0484f00ce396330554e7680612e8d000224f9429bef58ae26f530809fe159a354b382c3870ba3d056636b917ddb64a17ce707d6e3d017c2c5b50be3d55b3946d88069d3f5ba0d55e9952438ceb8c8a48f538dfcd418933c05357f1190dd3fad1172497484b9ac2379c44ab5df980aaaff65746ad782358fa1e415a85a3afbde8e2d0ad", 0xd9}, {&(0x7f00000002c0)="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", 0x3e9}], 0x2) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.parent_freezing\x00', 0x275a, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r7, &(0x7f0000000080)="29000300010003", 0x7) (async)
ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48) (async)

1.513635153s ago: executing program 1 (id=1543):
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f00000000c0)=0x6, 0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000023c0), r3)
sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002400)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x400c000)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="c2", 0x1}], 0x1, 0x3)
close(0x4)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r8)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r10 = socket$kcm(0x10, 0x0, 0x4)
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000014006b04000000d86e6c1d000a117ea6e070d6060003910000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f61400c9f4d49346d88037e786a6d0bdd7000000", 0x5b}, {&(0x7f0000000280)="e1", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_emit_ethernet(0x119, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r11}, 0x18)
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000180)="0400b4c7", 0x4)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240))
connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r11}, 0x18)
splice(r5, 0x0, r6, 0x0, 0x10500, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000008000000000000ffffffff1864000008000000000000000d0000009500000000000000852000000400000018000000f909000000000000faff0000184400000500000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1.386502626s ago: executing program 0 (id=1544):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x0, 0x4001}, 0xc)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f0000000040)={0x400, 0xb, 0x1, 0x0, 0x100})
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x5}, 0xc)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000100)={"4f103f22c01eb7c7a1e899484799ac10", 0x0, <r3=>0x0, {0x0, 0xb}, {0xffffffffffff0001, 0x4}, 0xd, [0x74, 0x0, 0x7, 0x7, 0x10001, 0x3, 0x7, 0x40, 0x2, 0x0, 0x5, 0x3, 0x10001, 0x8, 0x40, 0x800]})
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000200)=r3)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x36, 0x0, r2, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0xb, 0x8})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}}, 0x6040)
bind$qrtr(r1, &(0x7f0000000500)={0x2a, 0x1, 0x7fff}, 0xc)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000540)={@loopback, 0x6, 0x1, 0xff, 0x0, 0x2, 0x162}, 0x20)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000580)={0x2, 0x5, 0x80, 0x9, 0x3, 0xa, 0x1, 0x7, 0x6, 0xfa, 0x9, 0x2, 0x8, 0x2}, 0xe)
ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000600)={0x9a, 0x8, '\x00', 0x1, &(0x7f00000005c0)=[0x0]})
syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000680)={{0x0, 0xe7, 0x5, 0x5a4, 0x9, 0x8, 0x7, 0x4, 0x3, 0x0, 0x7, 0x8, 0x44b8, 0x8, 0x9b}})
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000002680)=0x1, 0x4)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002700), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002740)={0x14, r9, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48e4}, 0x0)
r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002bc0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x3c, r10, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x5]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x400c015)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_PHY(r11, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004090}, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)

1.151246022s ago: executing program 2 (id=1545):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70007000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.089751104s ago: executing program 1 (id=1546):
socket$pppoe(0x18, 0x1, 0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind(r1, &(0x7f0000000400)=@phonet={0x23, 0x0, 0x1, 0x1}, 0x80)
writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x80, 0x8)
readv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1)
write(r2, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', <r5=>0x0, 0x29, 0x4, 0xcc, 0x8, 0x2f, @local, @mcast1, 0x8, 0x40, 0x4, 0x231f}})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="05340000000000050000000800000014", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000340)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x6, 0xffffffffffffffff}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0x18, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
close(r8)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getpeername(r9, 0x0, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x1c, 0x107, 0x70bd2b, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0x24000004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94)
r10 = socket$igmp(0x2, 0x3, 0x2)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYBLOB="480000000206030000000000000000000700080605000100070000000900020073797a31000004000c000780050014006b00000005000400010000000c000300686173683a697000"], 0x48}, 0x1, 0x0, 0x0, 0x4854}, 0x20004000)
ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'})
r12 = socket$netlink(0x10, 0x3, 0x0)
writev(r12, &(0x7f00000003c0)=[{0x0}], 0x1)

1.058862918s ago: executing program 0 (id=1547):
syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x46, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x80]}, {}, {}, {0xa888}}}}}}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x1f, 0x1, 0xfffff001, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, r2, 0x32, 0x2048, 0x0, @value, @void, @void, @void, r3}, 0x20)
write$tun(r0, &(0x7f0000001c40)=ANY=[], 0xfce)

905.416509ms ago: executing program 3 (id=1548):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0xa, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=@getchain={0x44, 0x66, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x1}, {0x1, 0xe}, {0x2, 0xd}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}]}, 0x44}}, 0x4000800)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @broadcast}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c1d1a1d6b8d93b12202bd5dbecc88ebe"}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="215428336f7039afb0ab3914f84f", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

857.018947ms ago: executing program 4 (id=1549):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x0, 0xf3, "d86b79ac722c3709dcb23b331c189c304011ebf2453ec463c8207b6d29395978d2fe471e7a1e744cb247a8682210bd3309fc39b23195296f39e282ba058892033e4d0d380b75b3f225b49636bce772c06f047cc5f436668a72462724290272af1f1432c3a7d8e2a3088005d51b4cafc534c25f9a503718040416ad05ee93a44005b33824472430660a09d9bcb4aa35d70a8b48cd2c993189fe15fbed413b312856a858623c883e99e4ff2ed4a9158b5bd1f51ab4153b9b630f187af585aa65089847d3af5809584dd76866e8bcca0a5d56d8ddbf5480508201595d4036c68c23a4e072a22e7c4202101add70aba257bfafdff3"})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000200)={<r2=>r1, &(0x7f0000000100)='&,^:%)\x00', 0x2000, &(0x7f0000000140)={@_ha_fsid={[0x2e70, 0x9]}, {0x8, 0xca, 0x7f, 0x2}}, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x2})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xbc, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xba7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4856}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x400}, 0x20040000)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x0, 0x700001b, 0x148, 0xe0, 0x148, 0x270, 0x206, 0x240, 0x270, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x98, 0xe0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x7f, {0xfffffffffffffff8}}}}, {{@ip={@multicast1, @rand_addr=0x64010102, 0xffffff00, 0xff, 'veth1_to_batadv\x00', 'sit0\x00', {0xff}, {0xff}, 0x5c, 0x3}, 0x0, 0x150, 0x190, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xffffffff, 0xff, 0xff000000, 0xff000000], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0xff, 0xffffff00, 0xffffff], @ipv6=@private2, [0xff000000, 0xffffff00, 0xffffffff, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], 0xfffffffc, 0xa5, 0x2c, 0x4e22, 0x4e24, 0x4e21, 0x4e24, 0x198, 0x80}, 0x0, 0x8c}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368)

856.876981ms ago: executing program 2 (id=1550):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)

728.76062ms ago: executing program 2 (id=1551):
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080005"], 0x20}}, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, 0x0, 0x30b, 0x0, 0x35dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0c3}, 0x20060000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100001000000000000000000ff020000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000000000000000b294c2903ee518adc818571d1b3e76deb20b5b3f9f0b326288380b87c2a4a6380a05467d2b40b581843366dacba4d66f2c6d5c10ea74f154f5319886144727ff936e4d2c87646927e6e525424f71b08bf4d52872bcac94ca9759f69aacbd0709ce6878eae13179d4617c07863bbbeee9f69adae267232fca442882816fe713b8a15535fca2dbf68617e5b5480d05518d343b80aad5eac1c153c52efb5914a97ce4ed2ae3ebeabb078af284f65493260ac61fddcbbb3c8bc983fe04b84ccd0ebe9296c7cb48c8f7e375417be6e312594f3c737568a8ed2d2b0c2bd1a608c4e84649fd25ebb47a645a35e8f2fd0009dd732579de7a1355bf9922a3691ea3dacef6ae4ab148f8173a3bf7a279e8e6b70d50144ac9cfa58150c7dce2471ad3cbe55e48280729f1e72587e5f0881163352b2bddef3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000006c000000fe8000000000000000000000000000aa0000000000000000020000000000000000000000000000000800000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000100000003000000000000001000000000400000020004000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a000000070000000200", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffe0, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)

647.648182ms ago: executing program 4 (id=1552):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050200000000fddbdf250700000008000900000000001800018014000200626f6e645f736c6176655f3100000000"], 0x34}}, 0x0) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x40}, 0x8000)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r4, 0x6, 0x3, 0x0, &(0x7f0000000100)) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff}) (async)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0)
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f00000000c0)={0x1, 0x0, 0xffffd00e})
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',h\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fbdbdf2513000000180007800c000300a7f80000000000000800020009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1850}, 0x20008000)
getpeername$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

509.24146ms ago: executing program 0 (id=1553):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x2c060000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="495300000008000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="040042"], 0x20}}, 0x40)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xd}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40055}, 0x40000)
r4 = socket$netlink(0x10, 0x3, 0x14)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYRESHEX, @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r5, 0x29, 0x22, &(0x7f0000000100), 0x4)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$SOCK_DESTROY(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140009001500010000f36d000000000023004000"], 0x14}}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054)
sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r8, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/119, 0x77}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x18, 0x31, 0x2, 0xb, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast1}}, @sadb_address={0x3, 0x12, 0x3c, 0x80, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @broadcast}}]}, 0x58}}, 0x0)

420.864804ms ago: executing program 3 (id=1554):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000a0000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000400)="b9ffe2318944268cb89914f086dd0150dc14c0e1c6a40da50d5eb299ee5257fe68331464e1b7da59ff1569eda766b4fbb459e1ed543d", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a}, 0x20)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006000000850000000e00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000980)="637b24c4bad98cb1f4ec33c9e900", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

361.401153ms ago: executing program 4 (id=1555):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="a00000007000000329bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0c0001800500060002000000100001800c0004800800010009000000100001800c00048008000100090000000c00018005000300120000000c00018008000100000000000c0001800500060005000000100001800c00048008000200110000000c000180060002000d000000100001800c00048008000100420800000c000180060002000c000000"], 0xa0}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x8, 0x4}, 0x20)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x36, 0xb, &(0x7f0000000140)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbb, &(0x7f000000cf3d)=""/187, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xd}, 0x94)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x40800)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffd, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x400, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=ANY=[@ANYBLOB="a0010000180001002cbd7000fddbdf251d01030015000100040000c00202000058df04e3d15e576d0500000015000100030000a006020000724985a94dc0d35d0100000008000900", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x2000c001}, 0x8004)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)

110.471655ms ago: executing program 1 (id=1556):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff}, 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4}, 0x6)
r0 = socket(0x10, 0x2, 0x0)
close(0x3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
socket$inet6_sctp(0xa, 0x1, 0x84)
recvmmsg(r2, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @mcast2, 0x3}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x20, r6, 0x1, 0x0, 0x4, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x20}}, 0x4000)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000010}, 0x4040004)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000010)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80})

1.381953ms ago: executing program 2 (id=1557):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYBLOB="12e01b3989dd13"], 0x1000f)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)

0s ago: executing program 3 (id=1558):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
sendmsg$sock(r2, &(0x7f0000000040)={&(0x7f0000000300)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xe}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x51, 0xdffffffa}}], 0x3}, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f00000000c0)='\x00', 0x1)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="32ebfbc9a87549099b14c1aa1b18a5421c469d5e2b9b2438f8bb9b2fef482c0f875a95030e1f4fd97381855872b5bd03aa1f47d1ac8c9bfbb644e7cc7553a433022d90a00c312ad5534c0262923eeca25ccb416590c5f02a44c554352215d61b614d642a889a986602c621cdc252b945d976ef03afba0a09cc6b8b91d8f0c937eeb311acd4e2c69b7613db9d2fa7372b22ce9546f4af217c8e3462f855155a5522c3b2584d6b6cc4903667d5d0d5e9304a607675dfa048aa8af6dac8f2921193c62d7cad", 0xc4)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000900)={{<r4=>r3, &(0x7f0000000100)='veth0_to_team\x00', 0x200b80, &(0x7f0000000140)={@_ha_fsid={[0x7fffffff, 0x2]}, {0x7, 0xac0, 0x2, 0x8}}, 0xac, &(0x7f0000000180), &(0x7f0000000200)=0x1f6}, 0x5, &(0x7f0000000840)=[{0x2, 0x0, &(0x7f0000000280)='syzkaller0\x00', &(0x7f0000000400)="b2af5e7c9a2878e35c3d", 0xa}, {0x2, 0x7, &(0x7f0000000440)='#)\x00', &(0x7f0000000480)="963ebca7a55863a45c09582c62476c14d5a95b10cd6a1f6c50f1f338eaa3982f797a13e340cd347469de73f05cfc7269a4c04a4e288040b7528e5daf6cc1c2ffd4f5ea52786af602d4be9c2a5f53994c9c86329f3dc5f5615929b406ba9aed5152613d9de76ba9a7ec7f8fc48a307ad4f1eaf8e86ee070d4cd438fb62336c4180b0cfbb4cc19cc78b1a4654bfc715dd5b1a3e3c9d8dce7c0f67570202f6faeba974c5cf051f42795e49faea41d5951fe35c399415a4537c9791e7138865a29735f876e55acf70f39e4a810dceabb8079a5", 0xd1, 0x28}, {0x2, 0x4, &(0x7f0000000580)='veth0_to_team\x00', &(0x7f00000005c0)="3dd5fe7c3ea069774e997cd4cf3f5c7a10eddd62fcbbd25d3c54f6db05427bf61a575af2dbf0b2f797ea74debd7b74c4f1c033e0c6faae6f", 0x38, 0x18}, {0x3, 0x8, &(0x7f0000000600)='syzkaller0\x00', &(0x7f0000000640)="48d32397e97c7f5e79f560ab6285e7d4515f8e3e503437ee3f68d2bf18c58616ea96cb172982045b027527f63fc1d09f94a7034477472d293030f9ff70d4692dff90b4bdcbea4093e34e32baf65fbb092ee47b6f3ead3a7823b6f54905ca21cf0babfc6af48b31085b12f486576bf6eeae5d5859a7ca16816b6cc96465a865fa86cecf338d3a433a2d95", 0x8a, 0x28}, {0x2, 0x2, &(0x7f0000000700)='+*-.\\/-.\x00', &(0x7f0000000740)="69d2f24058a34767cd7f22a0feee82d406972175e948a722e086a8cba5f23b5cda83219af3306969879d0b0911f14360fa3a4d6cc92ef4f1a53e25b2f2fa10b2ff5f14fa81a7144ced62607e451b45dd13e97cc545b5538fafc257e8fdd4d9125fd48ef0de9398cb761c211eb2783102e0edd3dd15296d94934731b5088a383f32bef25b116afd646d684e48598afb021d618c348ebc648ee90d84bc6b76f0a67a4334978cf18dacf81dc4674c2f5e4448067abdd145210755e08120fda9494aaaab0808b4", 0xc5, 0x22}]})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x48, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10000, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044804)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x1000})

kernel console output (not intermixed with test programs):

1.613983][ T7218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.348'.
[  121.644381][ T7211] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  121.685918][   T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.721208][ T7223] netlink: 'syz.3.349': attribute type 11 has an invalid length.
[  121.768641][ T7223] netlink: 'syz.3.349': attribute type 23 has an invalid length.
[  121.837855][ T7223] netlink: 224 bytes leftover after parsing attributes in process `syz.3.349'.
[  122.006997][ T5956] IPVS: starting estimator thread 0...
[  122.015729][ T7220] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  122.039540][ T7223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.349'.
[  122.060094][ T7223] netlink: 32 bytes leftover after parsing attributes in process `syz.3.349'.
[  122.126007][ T7223] gretap1: entered promiscuous mode
[  122.136560][ T7236] IPVS: using max 27 ests per chain, 64800 per kthread
[  122.310737][ T1165] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  123.091644][ T7278] lo: entered allmulticast mode
[  123.111595][ T7278] lo: left allmulticast mode
[  123.212732][ T7281] netlink: 'syz.1.364': attribute type 1 has an invalid length.
[  123.280394][ T7281] netlink: 224 bytes leftover after parsing attributes in process `syz.1.364'.
[  123.404223][ T7288] netlink: 2 bytes leftover after parsing attributes in process `syz.0.367'.
[  123.447611][ T7288] netlink: 2 bytes leftover after parsing attributes in process `syz.0.367'.
[  123.515217][ T7288] xt_TCPMSS: Only works on TCP SYN packets
[  123.572624][ T7296] FAULT_INJECTION: forcing a failure.
[  123.572624][ T7296] name failslab, interval 1, probability 0, space 0, times 1
[  123.611053][ T7296] CPU: 0 UID: 0 PID: 7296 Comm: syz.4.371 Not tainted syzkaller #0 PREEMPT(full) 
[  123.611082][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  123.611104][ T7296] Call Trace:
[  123.611113][ T7296]  <TASK>
[  123.611122][ T7296]  dump_stack_lvl+0xe8/0x150
[  123.611175][ T7296]  should_fail_ex+0x412/0x560
[  123.611219][ T7296]  should_failslab+0xa8/0x100
[  123.611251][ T7296]  __kmalloc_noprof+0xe8/0x760
[  123.611277][ T7296]  ? bpf_test_init+0x9f/0x150
[  123.611309][ T7296]  bpf_test_init+0x9f/0x150
[  123.611341][ T7296]  bpf_prog_test_run_skb+0x389/0x21f0
[  123.611396][ T7296]  ? __fget_files+0x2a/0x420
[  123.611416][ T7296]  ? __fget_files+0x3a0/0x420
[  123.611435][ T7296]  ? __fget_files+0x2a/0x420
[  123.611458][ T7296]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  123.611486][ T7296]  bpf_prog_test_run+0x2c7/0x340
[  123.611514][ T7296]  __sys_bpf+0x643/0x950
[  123.611536][ T7296]  ? __pfx___sys_bpf+0x10/0x10
[  123.611579][ T7296]  ? rcu_is_watching+0x15/0xb0
[  123.611619][ T7296]  __x64_sys_bpf+0x7c/0x90
[  123.611650][ T7296]  do_syscall_64+0x14d/0xf80
[  123.611671][ T7296]  ? trace_irq_disable+0x3b/0x150
[  123.611689][ T7296]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.611711][ T7296]  ? clear_bhb_loop+0x40/0x90
[  123.611737][ T7296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.611759][ T7296] RIP: 0033:0x7f742899c819
[  123.611783][ T7296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.611800][ T7296] RSP: 002b:00007f74298fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  123.611830][ T7296] RAX: ffffffffffffffda RBX: 00007f7428c15fa0 RCX: 00007f742899c819
[  123.611845][ T7296] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  123.611858][ T7296] RBP: 00007f74298fd090 R08: 0000000000000000 R09: 0000000000000000
[  123.611871][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.611883][ T7296] R13: 00007f7428c16038 R14: 00007f7428c15fa0 R15: 00007fffd9216348
[  123.611917][ T7296]  </TASK>
[  126.863727][ T7304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  126.884464][ T7327] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[  126.892184][ T7327] __nla_validate_parse: 4 callbacks suppressed
[  126.892202][ T7327] netlink: 248 bytes leftover after parsing attributes in process `syz.0.379'.
[  126.938637][ T7330] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[  126.984753][ T7330] netlink: 248 bytes leftover after parsing attributes in process `syz.0.379'.
[  127.027588][ T7340] netlink: 40 bytes leftover after parsing attributes in process `syz.3.383'.
[  127.099028][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.382'.
[  127.123560][ T7342] netlink: 'syz.2.382': attribute type 7 has an invalid length.
[  127.134877][ T7343] netlink: 'syz.3.383': attribute type 1 has an invalid length.
[  127.153519][ T7342] netlink: 'syz.2.382': attribute type 8 has an invalid length.
[  127.161289][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'.
[  127.199820][ T7347] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.384'.
[  127.239481][ T7350] FAULT_INJECTION: forcing a failure.
[  127.239481][ T7350] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  127.253477][ T7350] CPU: 0 UID: 0 PID: 7350 Comm: syz.1.385 Not tainted syzkaller #0 PREEMPT(full) 
[  127.253506][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  127.253519][ T7350] Call Trace:
[  127.253527][ T7350]  <TASK>
[  127.253535][ T7350]  dump_stack_lvl+0xe8/0x150
[  127.253572][ T7350]  should_fail_ex+0x412/0x560
[  127.253609][ T7350]  _copy_from_user+0x2d/0xb0
[  127.253636][ T7350]  bpf_test_init+0xd8/0x150
[  127.253668][ T7350]  bpf_prog_test_run_skb+0x389/0x21f0
[  127.253715][ T7350]  ? __fget_files+0x2a/0x420
[  127.253734][ T7350]  ? __fget_files+0x3a0/0x420
[  127.253752][ T7350]  ? __fget_files+0x2a/0x420
[  127.253776][ T7350]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  127.253805][ T7350]  bpf_prog_test_run+0x2c7/0x340
[  127.253832][ T7350]  __sys_bpf+0x643/0x950
[  127.253856][ T7350]  ? __pfx___sys_bpf+0x10/0x10
[  127.253891][ T7350]  ? ksys_write+0x242/0x270
[  127.253918][ T7350]  ? __pfx_ksys_write+0x10/0x10
[  127.253949][ T7350]  __x64_sys_bpf+0x7c/0x90
[  127.253985][ T7350]  do_syscall_64+0x14d/0xf80
[  127.254007][ T7350]  ? trace_irq_disable+0x3b/0x150
[  127.254025][ T7350]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.254046][ T7350]  ? clear_bhb_loop+0x40/0x90
[  127.254071][ T7350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.254091][ T7350] RIP: 0033:0x7f1d6e79c819
[  127.254110][ T7350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.254127][ T7350] RSP: 002b:00007f1d6f6d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  127.254156][ T7350] RAX: ffffffffffffffda RBX: 00007f1d6ea15fa0 RCX: 00007f1d6e79c819
[  127.254170][ T7350] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  127.254183][ T7350] RBP: 00007f1d6f6d7090 R08: 0000000000000000 R09: 0000000000000000
[  127.254194][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.254206][ T7350] R13: 00007f1d6ea16038 R14: 00007f1d6ea15fa0 R15: 00007ffe9380aec8
[  127.254238][ T7350]  </TASK>
[  127.729125][ T7360] netlink: 'syz.2.388': attribute type 1 has an invalid length.
[  127.803194][ T7360] netlink: 224 bytes leftover after parsing attributes in process `syz.2.388'.
[  128.522667][ T7385] netlink: 'syz.0.392': attribute type 1 has an invalid length.
[  128.543096][ T7385] netlink: 96 bytes leftover after parsing attributes in process `syz.0.392'.
[  128.578325][ T7385] netlink: 'syz.0.392': attribute type 1 has an invalid length.
[  128.643975][ T7385] netlink: 'syz.0.392': attribute type 8 has an invalid length.
[  128.698262][ T7385] netlink: 606 bytes leftover after parsing attributes in process `syz.0.392'.
[  129.033209][ T7414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.397'.
[  129.081722][ T7408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.124181][ T7408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.139461][ T7408] bond0 (unregistering): Released all slaves
[  129.310165][ T7420] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  130.092909][ T7448] netlink: 'syz.4.400': attribute type 9 has an invalid length.
[  130.599103][ T7465] veth5: entered promiscuous mode
[  130.912303][ T7484] bond1: entered promiscuous mode
[  130.919101][ T7484] 8021q: adding VLAN 0 to HW filter on device bond1
[  131.038811][ T7484] 8021q: adding VLAN 0 to HW filter on device bond1
[  131.057618][ T7484] bond1: (slave sit1): The slave device specified does not support setting the MAC address
[  131.072166][ T7484] bond1: (slave sit1): Error -95 calling set_mac_address
[  131.438598][ T7499] x_tables: duplicate underflow at hook 1
[  131.552806][ T7502] !��9: entered promiscuous mode
[  131.573390][ T7509] !��9: left promiscuous mode
[  132.383099][ T7517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.510408][ T7545] __nla_validate_parse: 3 callbacks suppressed
[  132.510429][ T7545] netlink: 212084 bytes leftover after parsing attributes in process `syz.1.429'.
[  132.589487][ T7550] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  132.738108][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'.
[  132.974171][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  133.577274][ T7580] validate_nla: 2 callbacks suppressed
[  133.577296][ T7580] netlink: 'syz.1.439': attribute type 4 has an invalid length.
[  133.628235][ T7576] netlink: 'syz.1.439': attribute type 4 has an invalid length.
[  133.657489][ T7577] syzkaller0: entered promiscuous mode
[  133.663346][ T7577] syzkaller0: entered allmulticast mode
[  133.682092][ T7576] netlink: 'syz.1.439': attribute type 4 has an invalid length.
[  133.788074][ T7589] netlink: 212084 bytes leftover after parsing attributes in process `syz.4.442'.
[  133.963684][ T7593] FAULT_INJECTION: forcing a failure.
[  133.963684][ T7593] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.016811][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.4.444 Not tainted syzkaller #0 PREEMPT(full) 
[  134.016837][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  134.016849][ T7593] Call Trace:
[  134.016856][ T7593]  <TASK>
[  134.016864][ T7593]  dump_stack_lvl+0xe8/0x150
[  134.016898][ T7593]  should_fail_ex+0x412/0x560
[  134.016935][ T7593]  _copy_to_user+0x31/0xb0
[  134.016961][ T7593]  bpf_test_finish+0x22c/0x6b0
[  134.016997][ T7593]  ? __pfx_bpf_test_finish+0x10/0x10
[  134.017025][ T7593]  ? skb_checksum+0x7b9/0x8c0
[  134.017057][ T7593]  bpf_prog_test_run_skb+0x1105/0x21f0
[  134.017100][ T7593]  ? __fget_files+0x2a/0x420
[  134.017117][ T7593]  ? __fget_files+0x3a0/0x420
[  134.017133][ T7593]  ? __fget_files+0x2a/0x420
[  134.017154][ T7593]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  134.017183][ T7593]  bpf_prog_test_run+0x2c7/0x340
[  134.017209][ T7593]  __sys_bpf+0x643/0x950
[  134.017231][ T7593]  ? __pfx___sys_bpf+0x10/0x10
[  134.017266][ T7593]  ? ksys_write+0x242/0x270
[  134.017292][ T7593]  ? __pfx_ksys_write+0x10/0x10
[  134.017322][ T7593]  __x64_sys_bpf+0x7c/0x90
[  134.017352][ T7593]  do_syscall_64+0x14d/0xf80
[  134.017372][ T7593]  ? trace_irq_disable+0x3b/0x150
[  134.017390][ T7593]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.017410][ T7593]  ? clear_bhb_loop+0x40/0x90
[  134.017435][ T7593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.017456][ T7593] RIP: 0033:0x7f742899c819
[  134.017476][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.017493][ T7593] RSP: 002b:00007f74298fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  134.017516][ T7593] RAX: ffffffffffffffda RBX: 00007f7428c15fa0 RCX: 00007f742899c819
[  134.017532][ T7593] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  134.017545][ T7593] RBP: 00007f74298fd090 R08: 0000000000000000 R09: 0000000000000000
[  134.017569][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.017582][ T7593] R13: 00007f7428c16038 R14: 00007f7428c15fa0 R15: 00007fffd9216348
[  134.017616][ T7593]  </TASK>
[  134.752081][ T7609] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.451'.
[  134.764238][ T7609] netlink: 'syz.2.451': attribute type 1 has an invalid length.
[  134.865623][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.451'.
[  134.969474][ T7618] netlink: 212084 bytes leftover after parsing attributes in process `syz.1.454'.
[  135.006701][ T7609] bond2: entered promiscuous mode
[  135.033482][ T7609] 8021q: adding VLAN 0 to HW filter on device bond2
[  135.122241][ T7623] netlink: 92 bytes leftover after parsing attributes in process `syz.3.453'.
[  135.179530][ T7620] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  135.260983][ T7620] bond4 (unregistering): Released all slaves
[  135.333379][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'.
[  135.387776][ T7627] syzkaller0: entered promiscuous mode
[  135.423086][ T7627] syzkaller0: entered allmulticast mode
[  135.457394][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.456'.
[  135.544768][ T7633] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[  135.552713][ T7633] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.456'.
[  135.742365][ T7644] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  136.479294][ T7684] pim6reg1: entered promiscuous mode
[  136.506202][ T7684] pim6reg1: entered allmulticast mode
[  137.138825][ T7710] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  137.175222][ T7710] syzkaller0: entered promiscuous mode
[  137.184148][ T7716] lec:lec_atm_send: lec0: Unknown message type 12
[  137.199472][ T7710] syzkaller0: entered allmulticast mode
[  137.288251][ T7719] x_tables: ip_tables: osf match: only valid for protocol 6
[  137.481934][ T7670] lec:lec_atm_close: lec0: Shut down!
[  137.697310][ T7733] __nla_validate_parse: 4 callbacks suppressed
[  137.697335][ T7733] netlink: 212084 bytes leftover after parsing attributes in process `syz.2.480'.
[  138.444275][ T7757] netlink: 'syz.0.485': attribute type 15 has an invalid length.
[  138.828200][ T7772] bond0: Unable to set down delay as MII monitoring is disabled
[  138.844339][ T7772] bond0 (unregistering): Released all slaves
[  139.130930][ T7778] netlink: 14 bytes leftover after parsing attributes in process `syz.3.490'.
[  139.313319][ T5876] lec:lec_start_xmit: lec0:No lecd attached
[  139.530364][ T7788] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.492'.
[  140.587268][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.499'.
[  140.894540][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'.
[  141.221038][ T7844] bond0: entered promiscuous mode
[  141.237717][ T7844] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.703679][ T7848] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.754755][ T7848] bond0: (slave vcan1): The slave device specified does not support setting the MAC address
[  141.792475][ T7848] bond0: (slave vcan1): Error -95 calling set_mac_address
[  141.822866][ T7855] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.506'.
[  142.095867][ T7860] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  142.269779][ T7860] syzkaller0: entered promiscuous mode
[  142.281287][ T7860] syzkaller0: entered allmulticast mode
[  142.347322][ T7869] sock: sock_timestamping_bind_phc: sock not bind to device
[  142.944892][ T7885] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  143.012838][ T7885] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  143.034178][ T7888] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.518'.
[  143.080751][ T7890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.182724][ T7890] bond1: entered allmulticast mode
[  143.295711][ T7890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.418818][ T7903] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  143.447753][ T7903] syzkaller0: entered promiscuous mode
[  143.461172][ T7903] syzkaller0: entered allmulticast mode
[  143.473659][ T7889] bond1: left allmulticast mode
[  143.737037][ T7909] dummy0: entered promiscuous mode
[  143.742443][ T7909] dummy0: entered allmulticast mode
[  143.823828][ T7914] netlink: 'syz.1.527': attribute type 12 has an invalid length.
[  143.831728][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'.
[  143.851253][ T7914] netlink: 'syz.1.527': attribute type 12 has an invalid length.
[  143.862279][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.528'.
[  143.874209][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'.
[  143.891161][ T7915] netlink: 'syz.3.528': attribute type 8 has an invalid length.
[  143.922464][ T7915] netlink: 96 bytes leftover after parsing attributes in process `syz.3.528'.
[  143.990160][ T7915] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  144.430116][ T7937] netlink: 'syz.1.533': attribute type 1 has an invalid length.
[  144.482972][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5170 ms
[  144.491418][    C1] lec:lec_tx_timeout: lec0
[  144.498049][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  144.849627][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'.
[  144.940339][ T7942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.319730][ T7948] netlink: 212048 bytes leftover after parsing attributes in process `syz.2.535'.
[  145.647297][ T7961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.541'.
[  145.672083][ T7961] xt_CT: You must specify a L4 protocol and not use inversions on it
[  145.704952][ T7964] netlink: 'syz.2.542': attribute type 9 has an invalid length.
[  146.361762][ T7994] netlink: 'syz.3.550': attribute type 1 has an invalid length.
[  146.697898][ T8004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.552'.
[  147.266007][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'.
[  147.419051][ T8019] bond0: entered promiscuous mode
[  147.426772][ T8019] gretap0: entered promiscuous mode
[  147.446081][ T8019] hsr1: entered promiscuous mode
[  147.595614][ T8024] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  147.759412][ T8028] can: request_module (can-proto-0) failed.
[  147.781348][ T8034] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  147.885283][ T8032] 8021q: VLANs not supported on wg0
[  148.181920][ T8046] netlink: 'syz.4.564': attribute type 1 has an invalid length.
[  148.214917][ T8046] netlink: 'syz.4.564': attribute type 3 has an invalid length.
[  148.222905][ T8046] __nla_validate_parse: 4 callbacks suppressed
[  148.222923][ T8046] netlink: 224 bytes leftover after parsing attributes in process `syz.4.564'.
[  148.623543][ T8062] netlink: 'syz.2.568': attribute type 1 has an invalid length.
[  148.651308][ T8060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.570'.
[  148.793959][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'.
[  148.933776][ T8069] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  149.273859][ T8087] netlink: 48 bytes leftover after parsing attributes in process `syz.4.573'.
[  149.526721][ T8096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.578'.
[  149.708043][ T8096] raw_sendmsg: syz.0.578 forgot to set AF_INET. Fix it!
[  149.906460][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'.
[  149.915459][ T8106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.582'.
[  150.037396][ T8114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.582'.
[  150.083343][ T8114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.582'.
[  150.132227][ T8117] netlink: 'syz.2.585': attribute type 10 has an invalid length.
[  150.149889][ T8114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.582'.
[  150.242971][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  150.251191][    C1] lec:lec_tx_timeout: lec0
[  150.258667][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  150.378880][ T8117] dummy0: left promiscuous mode
[  150.388885][ T8117] dummy0: left allmulticast mode
[  150.416528][ T8117] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  150.441992][ T8119] ip6gre1: entered promiscuous mode
[  150.447726][ T8119] ip6gre1: entered allmulticast mode
[  150.483903][ T8126] team0: entered promiscuous mode
[  150.489055][ T8126] team_slave_0: entered promiscuous mode
[  150.525039][ T8126] team_slave_1: entered promiscuous mode
[  150.534202][ T8126] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  150.555891][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.597476][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.647744][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.667936][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.725282][ T8136] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  150.777064][ T8137] netlink: 'syz.3.590': attribute type 1 has an invalid length.
[  150.922759][ T8144] xt_socket: unknown flags 0x8
[  151.611587][ T8152] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  151.725071][ T8156] tipc: Started in network mode
[  151.730106][ T8156] tipc: Node identity e2bccdbb9872, cluster identity 4711
[  151.738352][ T8156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.948328][ T8167] FAULT_INJECTION: forcing a failure.
[  151.948328][ T8167] name failslab, interval 1, probability 0, space 0, times 0
[  152.012477][ T8167] CPU: 1 UID: 0 PID: 8167 Comm: syz.3.597 Not tainted syzkaller #0 PREEMPT(full) 
[  152.012508][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  152.012521][ T8167] Call Trace:
[  152.012530][ T8167]  <TASK>
[  152.012539][ T8167]  dump_stack_lvl+0xe8/0x150
[  152.012582][ T8167]  should_fail_ex+0x412/0x560
[  152.012622][ T8167]  should_failslab+0xa8/0x100
[  152.012653][ T8167]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  152.012678][ T8167]  ? __alloc_skb+0x186/0x7d0
[  152.012706][ T8167]  ? __alloc_skb+0x1d0/0x7d0
[  152.012732][ T8167]  ? __local_bh_enable_ip+0xd0/0x130
[  152.012767][ T8167]  __alloc_skb+0x1d0/0x7d0
[  152.012801][ T8167]  netlink_sendmsg+0x5d4/0xb40
[  152.012842][ T8167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  152.012875][ T8167]  ? aa_sock_msg_perm+0xf1/0x1b0
[  152.012899][ T8167]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  152.012933][ T8167]  ____sys_sendmsg+0x972/0x9f0
[  152.012974][ T8167]  ? __pfx_____sys_sendmsg+0x10/0x10
[  152.013013][ T8167]  ? import_iovec+0x73/0xa0
[  152.013043][ T8167]  ___sys_sendmsg+0x2a5/0x360
[  152.013081][ T8167]  ? __pfx____sys_sendmsg+0x10/0x10
[  152.013159][ T8167]  ? __fget_files+0x2a/0x420
[  152.013179][ T8167]  ? __fget_files+0x3a0/0x420
[  152.013210][ T8167]  __x64_sys_sendmsg+0x1bd/0x2a0
[  152.013246][ T8167]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  152.013289][ T8167]  ? __pfx_ksys_write+0x10/0x10
[  152.013326][ T8167]  do_syscall_64+0x14d/0xf80
[  152.013347][ T8167]  ? trace_irq_disable+0x3b/0x150
[  152.013366][ T8167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.013387][ T8167]  ? clear_bhb_loop+0x40/0x90
[  152.013414][ T8167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.013435][ T8167] RIP: 0033:0x7fa34379c819
[  152.013454][ T8167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.013473][ T8167] RSP: 002b:00007fa3446bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  152.013496][ T8167] RAX: ffffffffffffffda RBX: 00007fa343a16090 RCX: 00007fa34379c819
[  152.013511][ T8167] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  152.013524][ T8167] RBP: 00007fa3446bd090 R08: 0000000000000000 R09: 0000000000000000
[  152.013537][ T8167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.013549][ T8167] R13: 00007fa343a16128 R14: 00007fa343a16090 R15: 00007ffebba30cb8
[  152.013583][ T8167]  </TASK>
[  152.342502][ T8154] tipc: Disabling bearer <eth:syzkaller0>
[  152.426746][ T8174] netlink: 'syz.2.599': attribute type 1 has an invalid length.
[  153.109256][ T8211] netlink: 'syz.2.607': attribute type 1 has an invalid length.
[  153.191657][ T8215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.874858][ T8236] __nla_validate_parse: 173 callbacks suppressed
[  153.874878][ T8236] netlink: 10 bytes leftover after parsing attributes in process `syz.4.612'.
[  153.963717][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'.
[  154.016878][ T8236] vlan2: entered promiscuous mode
[  154.023025][ T8236] bridge0: entered promiscuous mode
[  154.292114][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.299954][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.518945][ T8247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.566223][ T8247] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.842834][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.618'.
[  154.872588][ T8266] netlink: 68 bytes leftover after parsing attributes in process `syz.4.618'.
[  154.892740][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.618'.
[  154.936886][ T8266] netlink: 68 bytes leftover after parsing attributes in process `syz.4.618'.
[  154.997451][ T1016] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.025795][ T1016] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.063137][ T1016] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.096801][ T1016] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.146103][ T1016] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.164163][ T1016] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.184613][ T1016] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.213064][ T1016] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.283586][ T8287] netlink: 'syz.2.624': attribute type 12 has an invalid length.
[  155.400066][ T8289] netlink: 'syz.2.624': attribute type 12 has an invalid length.
[  155.674467][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'.
[  155.694619][ T8294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.621'.
[  155.884968][ T8308] netlink: 'syz.4.627': attribute type 8 has an invalid length.
[  156.002978][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  156.011106][    C1] lec:lec_tx_timeout: lec0
[  156.016357][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  156.246180][ T8318] netlink: 'syz.3.629': attribute type 1 has an invalid length.
[  156.307029][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'.
[  156.352553][ T8318] 8021q: adding VLAN 0 to HW filter on device bond2
[  157.051020][ T8340] syzkaller1: entered promiscuous mode
[  157.080304][ T8340] syzkaller1: entered allmulticast mode
[  157.121548][ T8359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.640'.
[  157.939823][ T8390] netlink: 'syz.2.649': attribute type 1 has an invalid length.
[  159.140217][ T8435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.279028][ T8441] netlink: 'syz.1.663': attribute type 58 has an invalid length.
[  159.976540][ T8461] syzkaller0: entered promiscuous mode
[  159.982201][ T8461] syzkaller0: entered allmulticast mode
[  160.195786][ T8480] xt_limit: Overflow, try lower: 324382443/0
[  160.468791][ T8489] netlink: 'syz.4.674': attribute type 1 has an invalid length.
[  160.486046][ T8491] sctp: [Deprecated]: syz.3.673 (pid 8491) Use of struct sctp_assoc_value in delayed_ack socket option.
[  160.486046][ T8491] Use struct sctp_sack_info instead
[  160.554445][ T8493] sctp: [Deprecated]: syz.3.673 (pid 8493) Use of struct sctp_assoc_value in delayed_ack socket option.
[  160.554445][ T8493] Use struct sctp_sack_info instead
[  160.808980][ T8489] veth7: entered allmulticast mode
[  160.821673][ T8489] bond1: (slave veth7): Enslaving as a backup interface with a down link
[  160.859825][ T8502] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  160.905416][ T8498] syzkaller0: entered promiscuous mode
[  160.911128][ T8498] syzkaller0: entered allmulticast mode
[  161.032960][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  161.041110][    C1] lec:lec_tx_timeout: lec0
[  161.045880][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  161.053693][ T8510] __nla_validate_parse: 3 callbacks suppressed
[  161.053712][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'.
[  161.080577][ T8512] IPVS: Error connecting to the multicast addr
[  161.230593][ T8518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.594183][ T8526] bond4: Unable to set peer notification delay as MII monitoring is disabled
[  161.631780][ T8526] bond4 (unregistering): Released all slaves
[  161.728981][ T8525] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  162.075408][ T8548] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  162.132869][ T8547] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  162.175162][ T8547] syzkaller0: entered promiscuous mode
[  162.192028][ T8547] syzkaller0: entered allmulticast mode
[  162.742283][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'.
[  162.798349][ T8576] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  162.864733][ T8578] trusted_key: syz.0.698 sent an empty control message without MSG_MORE.
[  162.897992][ T8576] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  163.292726][ T8592] netlink: 204 bytes leftover after parsing attributes in process `syz.3.703'.
[  163.344234][ T8594] netlink: 84 bytes leftover after parsing attributes in process `syz.3.703'.
[  163.354128][ T8594] netlink: 84 bytes leftover after parsing attributes in process `syz.3.703'.
[  163.371288][ T8583] bond2: (slave bond_slave_1): Device is not our slave
[  163.398269][ T8598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.436612][ T8594] netlink: 84 bytes leftover after parsing attributes in process `syz.3.703'.
[  163.453111][ T8583] bond2: option active_slave: invalid value (bond_slave_1)
[  163.541941][ T8583] bond2 (unregistering): Released all slaves
[  163.885974][ T8608] nbd: socks must be embedded in a SOCK_ITEM attr
[  163.979163][ T8605] netlink: 2076 bytes leftover after parsing attributes in process `syz.1.705'.
[  164.003858][ T8605] sch_tbf: peakrate 7836759490224633571 is lower than or equals to rate 15540063224392467819 !
[  164.543238][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'.
[  164.572877][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'.
[  164.603103][ T8625] netlink: 'syz.0.708': attribute type 14 has an invalid length.
[  164.624918][ T8625] netlink: 'syz.0.708': attribute type 12 has an invalid length.
[  164.639437][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'.
[  164.656461][ T8629] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  164.665965][ T8625] netlink: 'syz.0.708': attribute type 14 has an invalid length.
[  164.678090][ T8629] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  164.688237][ T8625] netlink: 'syz.0.708': attribute type 12 has an invalid length.
[  165.182147][ T8658] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  165.251948][ T8658] syzkaller0: entered promiscuous mode
[  165.275817][ T8658] syzkaller0: entered allmulticast mode
[  165.290871][ T8658] FAULT_INJECTION: forcing a failure.
[  165.290871][ T8658] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.304717][ T8658] CPU: 0 UID: 0 PID: 8658 Comm: syz.0.721 Not tainted syzkaller #0 PREEMPT(full) 
[  165.304744][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  165.304758][ T8658] Call Trace:
[  165.304766][ T8658]  <TASK>
[  165.304775][ T8658]  dump_stack_lvl+0xe8/0x150
[  165.304810][ T8658]  should_fail_ex+0x412/0x560
[  165.304850][ T8658]  _copy_from_user+0x2d/0xb0
[  165.304878][ T8658]  ___sys_sendmsg+0x1c6/0x360
[  165.304917][ T8658]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.304987][ T8658]  ? __fget_files+0x2a/0x420
[  165.305013][ T8658]  ? __fget_files+0x3a0/0x420
[  165.305044][ T8658]  __x64_sys_sendmsg+0x1bd/0x2a0
[  165.305079][ T8658]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  165.305122][ T8658]  ? __pfx_ksys_write+0x10/0x10
[  165.305159][ T8658]  do_syscall_64+0x14d/0xf80
[  165.305180][ T8658]  ? trace_irq_disable+0x3b/0x150
[  165.305198][ T8658]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.305220][ T8658]  ? clear_bhb_loop+0x40/0x90
[  165.305246][ T8658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.305267][ T8658] RIP: 0033:0x7fd71159c819
[  165.305287][ T8658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.305305][ T8658] RSP: 002b:00007fd71252a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.305327][ T8658] RAX: ffffffffffffffda RBX: 00007fd711815fa0 RCX: 00007fd71159c819
[  165.305343][ T8658] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[  165.305356][ T8658] RBP: 00007fd71252a090 R08: 0000000000000000 R09: 0000000000000000
[  165.305369][ T8658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.305381][ T8658] R13: 00007fd711816038 R14: 00007fd711815fa0 R15: 00007ffdeacddc98
[  165.305420][ T8658]  </TASK>
[  166.052988][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  166.061121][    C1] lec:lec_tx_timeout: lec0
[  166.066165][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  166.341584][ T8700] xt_hashlimit: size too large, truncated to 1048576
[  166.405692][ T8716] __nla_validate_parse: 6 callbacks suppressed
[  166.405715][ T8716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.736'.
[  166.446293][ T8713] syzkaller0: entered promiscuous mode
[  166.483203][ T8713] syzkaller0: entered allmulticast mode
[  166.956536][ T8743] IPv6: addrconf: prefix option has invalid lifetime
[  167.228625][ T8760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.746'.
[  167.285762][ T8754] 8021q: adding VLAN 0 to HW filter on device bond4
[  167.422797][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'.
[  167.451210][ T8766] bridge_slave_1: left allmulticast mode
[  167.457404][ T8766] bridge_slave_1: left promiscuous mode
[  167.464787][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.703738][ T8771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'.
[  167.753481][ T8780] netlink: 14 bytes leftover after parsing attributes in process `syz.2.751'.
[  167.817353][ T8771] netlink: 'syz.3.749': attribute type 2 has an invalid length.
[  167.835951][ T8771] netlink: 'syz.3.749': attribute type 1 has an invalid length.
[  167.883031][ T8771] netlink: 152 bytes leftover after parsing attributes in process `syz.3.749'.
[  167.952228][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'.
[  167.983264][ T8780] bond0: (slave dummy0): Releasing backup interface
[  168.227236][ T8792] netlink: 632 bytes leftover after parsing attributes in process `syz.4.757'.
[  168.343798][ T8801] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  168.500497][ T8803] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  168.527895][ T8803] syzkaller0: entered promiscuous mode
[  168.539252][ T8803] syzkaller0: entered allmulticast mode
[  168.540914][ T8807] netlink: 'syz.1.762': attribute type 4 has an invalid length.
[  168.572721][ T8806] geneve3: entered promiscuous mode
[  168.706313][ T8813] netlink: 32 bytes leftover after parsing attributes in process `syz.1.762'.
[  168.988924][ T8827] netlink: 44 bytes leftover after parsing attributes in process `syz.2.765'.
[  169.018135][ T8830] syzkaller0: entered promiscuous mode
[  169.024783][ T8830] syzkaller0: entered allmulticast mode
[  169.072321][ T8830] tipc: Started in network mode
[  169.087383][ T8830] tipc: Node identity ea7061600f7e, cluster identity 4711
[  169.123838][ T8830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.156805][ T8828] pim6reg: entered allmulticast mode
[  169.187078][ T8832] pim6reg: left allmulticast mode
[  169.501656][ T8828] gre0: entered promiscuous mode
[  169.516501][ T8828] gre0: entered allmulticast mode
[  169.534544][ T8835] tipc: Resetting bearer <eth:syzkaller0>
[  169.559196][ T8829] tipc: Resetting bearer <eth:syzkaller0>
[  169.597848][ T8829] tipc: Disabling bearer <eth:syzkaller0>
[  169.675178][ T8859] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  169.687948][ T8859] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  169.723049][ T8859] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  169.760526][ T8860] xt_hashlimit: size too large, truncated to 1048576
[  169.848910][ T8863] openvswitch: netlink: IP tunnel TTL not specified.
[  171.072978][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  171.081076][    C1] lec:lec_tx_timeout: lec0
[  171.086261][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  171.365599][ T8938] bond5 (unregistering): Released all slaves
[  171.486019][ T8946] __nla_validate_parse: 11 callbacks suppressed
[  171.486041][ T8946] netlink: 108 bytes leftover after parsing attributes in process `syz.2.799'.
[  171.507566][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.800'.
[  171.519747][ T8949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  171.581717][ T8950] 8021q: adding VLAN 0 to HW filter on device bond3
[  171.674000][ T8950] macsec1: entered promiscuous mode
[  171.679360][ T8950] bond3: entered promiscuous mode
[  171.692236][ T8950] bond3: left promiscuous mode
[  171.801941][ T8960] netlink: 'syz.4.802': attribute type 11 has an invalid length.
[  172.133346][ T8974] FAULT_INJECTION: forcing a failure.
[  172.133346][ T8974] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.147097][ T8974] CPU: 0 UID: 0 PID: 8974 Comm: syz.1.809 Not tainted syzkaller #0 PREEMPT(full) 
[  172.147125][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  172.147137][ T8974] Call Trace:
[  172.147146][ T8974]  <TASK>
[  172.147155][ T8974]  dump_stack_lvl+0xe8/0x150
[  172.147191][ T8974]  should_fail_ex+0x412/0x560
[  172.147232][ T8974]  _copy_to_user+0x31/0xb0
[  172.147262][ T8974]  simple_read_from_buffer+0xe1/0x170
[  172.147300][ T8974]  proc_fail_nth_read+0x1bb/0x230
[  172.147335][ T8974]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  172.147372][ T8974]  ? rw_verify_area+0x2a6/0x4d0
[  172.147396][ T8974]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  172.147430][ T8974]  vfs_read+0x20c/0xa70
[  172.147452][ T8974]  ? fdget_pos+0x246/0x320
[  172.147478][ T8974]  ? __pfx___mutex_lock+0x10/0x10
[  172.147508][ T8974]  ? __pfx_vfs_read+0x10/0x10
[  172.147534][ T8974]  ? __fget_files+0x2a/0x420
[  172.147559][ T8974]  ? __fget_files+0x3a0/0x420
[  172.147577][ T8974]  ? __fget_files+0x2a/0x420
[  172.147607][ T8974]  ksys_read+0x150/0x270
[  172.147634][ T8974]  ? __pfx_ksys_read+0x10/0x10
[  172.147671][ T8974]  do_syscall_64+0x14d/0xf80
[  172.147692][ T8974]  ? trace_irq_disable+0x3b/0x150
[  172.147711][ T8974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.147733][ T8974]  ? clear_bhb_loop+0x40/0x90
[  172.147760][ T8974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.147781][ T8974] RIP: 0033:0x7f1d6e75d04e
[  172.147801][ T8974] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  172.147819][ T8974] RSP: 002b:00007f1d6f6d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  172.147840][ T8974] RAX: ffffffffffffffda RBX: 00007f1d6f6d76c0 RCX: 00007f1d6e75d04e
[  172.147855][ T8974] RDX: 000000000000000f RSI: 00007f1d6f6d70a0 RDI: 0000000000000004
[  172.147868][ T8974] RBP: 00007f1d6f6d7090 R08: 0000000000000000 R09: 0000000000000000
[  172.147880][ T8974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  172.147893][ T8974] R13: 00007f1d6ea16038 R14: 00007f1d6ea15fa0 R15: 00007ffe9380aec8
[  172.147928][ T8974]  </TASK>
[  172.728765][ T8986] team0: entered promiscuous mode
[  172.741060][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.814'.
[  172.763986][ T8986] team_slave_0: entered promiscuous mode
[  172.772033][ T8986] team_slave_1: entered promiscuous mode
[  172.818312][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.814'.
[  172.970577][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'.
[  172.990816][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'.
[  173.202157][ T9008] bond3: option fail_over_mac: invalid value (127)
[  173.264683][ T9008] bond3 (unregistering): Released all slaves
[  173.356403][ T9024] netlink: 'syz.3.822': attribute type 4 has an invalid length.
[  173.540825][ T9038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.827'.
[  173.722765][ T9050] syzkaller1: entered promiscuous mode
[  173.729138][ T9050] syzkaller1: entered allmulticast mode
[  173.791416][ T9050] gretap0: Device is already in use.
[  174.298946][ T9056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.465011][ T9065] netlink: 'syz.4.834': attribute type 4 has an invalid length.
[  174.479142][ T9065] netlink: 'syz.4.834': attribute type 8 has an invalid length.
[  174.488316][ T9065] netlink: 'syz.4.834': attribute type 1 has an invalid length.
[  174.496889][ T9065] netlink: 188 bytes leftover after parsing attributes in process `syz.4.834'.
[  174.508348][ T9065] NCSI netlink: No device for ifindex 0
[  174.722021][ T9079] FAULT_INJECTION: forcing a failure.
[  174.722021][ T9079] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.756508][ T9079] CPU: 1 UID: 0 PID: 9079 Comm: syz.0.839 Not tainted syzkaller #0 PREEMPT(full) 
[  174.756538][ T9079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  174.756550][ T9079] Call Trace:
[  174.756558][ T9079]  <TASK>
[  174.756566][ T9079]  dump_stack_lvl+0xe8/0x150
[  174.756602][ T9079]  should_fail_ex+0x412/0x560
[  174.756640][ T9079]  _copy_from_user+0x2d/0xb0
[  174.756668][ T9079]  ___sys_sendmsg+0x1c6/0x360
[  174.756707][ T9079]  ? __pfx____sys_sendmsg+0x10/0x10
[  174.756776][ T9079]  ? __fget_files+0x2a/0x420
[  174.756795][ T9079]  ? __fget_files+0x3a0/0x420
[  174.756825][ T9079]  __x64_sys_sendmsg+0x1bd/0x2a0
[  174.756860][ T9079]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  174.756904][ T9079]  ? __pfx_ksys_write+0x10/0x10
[  174.756940][ T9079]  do_syscall_64+0x14d/0xf80
[  174.756960][ T9079]  ? trace_irq_disable+0x3b/0x150
[  174.756979][ T9079]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.757000][ T9079]  ? clear_bhb_loop+0x40/0x90
[  174.757027][ T9079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.757047][ T9079] RIP: 0033:0x7fd71159c819
[  174.757067][ T9079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.757085][ T9079] RSP: 002b:00007fd71252a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.757107][ T9079] RAX: ffffffffffffffda RBX: 00007fd711815fa0 RCX: 00007fd71159c819
[  174.757122][ T9079] RDX: 0000000020004080 RSI: 00002000000000c0 RDI: 0000000000000003
[  174.757136][ T9079] RBP: 00007fd71252a090 R08: 0000000000000000 R09: 0000000000000000
[  174.757149][ T9079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.757161][ T9079] R13: 00007fd711816038 R14: 00007fd711815fa0 R15: 00007ffdeacddc98
[  174.757195][ T9079]  </TASK>
[  174.950667][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'.
[  174.981637][ T9084] 8021q: adding VLAN 0 to HW filter on device bond5
[  175.114734][ T9089] xt_hashlimit: size too large, truncated to 1048576
[  175.195272][ T9093] �: renamed from wg2 (while UP)
[  175.313557][ T9093] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  175.332097][ T9092] netlink: 'syz.1.845': attribute type 8 has an invalid length.
[  175.409972][ T9106] netlink: 80 bytes leftover after parsing attributes in process `syz.4.847'.
[  175.768608][ T9135] bridge_slave_1: left allmulticast mode
[  175.802034][ T9135] bridge_slave_1: left promiscuous mode
[  175.835746][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.093090][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  176.101313][    C1] lec:lec_tx_timeout: lec0
[  176.106373][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  176.156226][ T9152] xt_hashlimit: max too large, truncated to 1048576
[  176.234324][ T9152] syzkaller0: entered promiscuous mode
[  176.239908][ T9152] syzkaller0: entered allmulticast mode
[  176.266134][ T9157] netlink: zone id is out of range
[  176.298270][ T9157] netlink: zone id is out of range
[  176.318299][ T9157] netlink: zone id is out of range
[  176.335885][ T9157] netlink: zone id is out of range
[  176.372301][ T9157] netlink: zone id is out of range
[  176.385038][ T9157] netlink: zone id is out of range
[  176.386031][ T9132] openvswitch: netlink: IP tunnel dst address not specified
[  176.411006][ T9157] netlink: zone id is out of range
[  176.416732][ T9157] netlink: zone id is out of range
[  176.763121][ T9168] netlink: 'syz.0.860': attribute type 11 has an invalid length.
[  177.079031][ T9182] __nla_validate_parse: 66 callbacks suppressed
[  177.079053][ T9182] netlink: 644 bytes leftover after parsing attributes in process `syz.2.864'.
[  177.216121][ T9182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.864'.
[  177.447067][ T9197] netlink: 220 bytes leftover after parsing attributes in process `syz.2.869'.
[  177.456621][ T9197] netlink: 'syz.2.869': attribute type 2 has an invalid length.
[  177.964927][ T9223] syzkaller0: entered promiscuous mode
[  177.975817][ T9223] syzkaller0: entered allmulticast mode
[  178.007143][ T9223] tc action pedit offset 14680064 out of bounds
[  178.066026][ T9229] syzkaller0: entered promiscuous mode
[  178.093098][ T9229] syzkaller0: entered allmulticast mode
[  178.245835][ T9237] FAULT_INJECTION: forcing a failure.
[  178.245835][ T9237] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.261029][ T9237] CPU: 1 UID: 0 PID: 9237 Comm: syz.0.885 Not tainted syzkaller #0 PREEMPT(full) 
[  178.261057][ T9237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  178.261070][ T9237] Call Trace:
[  178.261079][ T9237]  <TASK>
[  178.261088][ T9237]  dump_stack_lvl+0xe8/0x150
[  178.261125][ T9237]  should_fail_ex+0x412/0x560
[  178.261165][ T9237]  _copy_from_user+0x2d/0xb0
[  178.261193][ T9237]  kstrtouint_from_user+0xd6/0x180
[  178.261218][ T9237]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  178.261259][ T9237]  proc_fail_nth_write+0x8e/0x210
[  178.261293][ T9237]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  178.261332][ T9237]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  178.261367][ T9237]  vfs_write+0x29a/0xb90
[  178.261402][ T9237]  ? __pfx_vfs_write+0x10/0x10
[  178.261429][ T9237]  ? __fget_files+0x2a/0x420
[  178.261454][ T9237]  ? __fget_files+0x3a0/0x420
[  178.261472][ T9237]  ? __fget_files+0x2a/0x420
[  178.261503][ T9237]  ksys_write+0x150/0x270
[  178.261530][ T9237]  ? __pfx_ksys_write+0x10/0x10
[  178.261569][ T9237]  do_syscall_64+0x14d/0xf80
[  178.261590][ T9237]  ? trace_irq_disable+0x3b/0x150
[  178.261609][ T9237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.261630][ T9237]  ? clear_bhb_loop+0x40/0x90
[  178.261657][ T9237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.261679][ T9237] RIP: 0033:0x7fd71155d04e
[  178.261699][ T9237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  178.261745][ T9237] RSP: 002b:00007fd712529fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  178.261768][ T9237] RAX: ffffffffffffffda RBX: 00007fd71252a6c0 RCX: 00007fd71155d04e
[  178.261784][ T9237] RDX: 0000000000000001 RSI: 00007fd71252a0a0 RDI: 0000000000000004
[  178.261797][ T9237] RBP: 00007fd71252a090 R08: 0000000000000000 R09: 0000000000000000
[  178.261809][ T9237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.261822][ T9237] R13: 00007fd711816038 R14: 00007fd711815fa0 R15: 00007ffdeacddc98
[  178.261857][ T9237]  </TASK>
[  178.520998][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'.
[  178.903873][ T9253] netlink: 48 bytes leftover after parsing attributes in process `syz.0.890'.
[  179.009115][ T9262] vlan4: entered allmulticast mode
[  179.037851][ T9262] bond0: entered allmulticast mode
[  179.134137][ T9264] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  179.466018][ T9292] netlink: 'syz.1.901': attribute type 1 has an invalid length.
[  179.781280][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.907'.
[  179.793396][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.907'.
[  179.806307][ T9312] netlink: 'syz.1.907': attribute type 5 has an invalid length.
[  179.988727][ T9326] dummy0: entered promiscuous mode
[  180.075553][ T9328] FAULT_INJECTION: forcing a failure.
[  180.075553][ T9328] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.106341][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'.
[  180.115935][ T9328] CPU: 1 UID: 0 PID: 9328 Comm: syz.3.911 Not tainted syzkaller #0 PREEMPT(full) 
[  180.115963][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  180.115976][ T9328] Call Trace:
[  180.115985][ T9328]  <TASK>
[  180.115993][ T9328]  dump_stack_lvl+0xe8/0x150
[  180.116030][ T9328]  should_fail_ex+0x412/0x560
[  180.116069][ T9328]  _copy_from_user+0x2d/0xb0
[  180.116101][ T9328]  ___sys_sendmsg+0x1c6/0x360
[  180.116139][ T9328]  ? __pfx____sys_sendmsg+0x10/0x10
[  180.116205][ T9328]  ? __fget_files+0x2a/0x420
[  180.116225][ T9328]  ? __fget_files+0x3a0/0x420
[  180.116254][ T9328]  __x64_sys_sendmsg+0x1bd/0x2a0
[  180.116290][ T9328]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  180.116333][ T9328]  ? __pfx_ksys_write+0x10/0x10
[  180.116367][ T9328]  do_syscall_64+0x14d/0xf80
[  180.116387][ T9328]  ? trace_irq_disable+0x3b/0x150
[  180.116406][ T9328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.116426][ T9328]  ? clear_bhb_loop+0x40/0x90
[  180.116452][ T9328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.116472][ T9328] RIP: 0033:0x7fa34379c819
[  180.116492][ T9328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.116509][ T9328] RSP: 002b:00007fa3446de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.116531][ T9328] RAX: ffffffffffffffda RBX: 00007fa343a15fa0 RCX: 00007fa34379c819
[  180.116546][ T9328] RDX: 0000000020004080 RSI: 00002000000000c0 RDI: 0000000000000003
[  180.116560][ T9328] RBP: 00007fa3446de090 R08: 0000000000000000 R09: 0000000000000000
[  180.116573][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.116585][ T9328] R13: 00007fa343a16038 R14: 00007fa343a15fa0 R15: 00007ffebba30cb8
[  180.116628][ T9328]  </TASK>
[  180.358986][ T9335] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  180.778677][ T9358] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.921'.
[  181.112974][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  181.121290][    C1] lec:lec_tx_timeout: lec0
[  181.125935][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  181.241440][ T9385] netlink: 44 bytes leftover after parsing attributes in process `syz.3.930'.
[  181.411435][ T9389] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  181.446095][ T9389] netlink: 'syz.1.932': attribute type 6 has an invalid length.
[  181.455194][ T9389] syzkaller0: entered promiscuous mode
[  181.460764][ T9389] syzkaller0: entered allmulticast mode
[  181.639880][ T9405] tipc: Started in network mode
[  181.646121][ T9405] tipc: Node identity 080211, cluster identity 4711
[  181.657268][ T9405] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.691971][ T9405] tipc: Resetting bearer <eth:syzkaller0>
[  182.411623][ T9447] __nla_validate_parse: 2 callbacks suppressed
[  182.411645][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'.
[  182.449134][ T9450] dvmrp0: entered allmulticast mode
[  182.468567][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'.
[  182.673097][ T5903] tipc: Node number set to 134353152
[  182.806773][ T5903] net_ratelimit: 11 callbacks suppressed
[  182.806793][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.830146][ T9469] tipc: Failed to remove unknown binding: 66,0,0/0:1668976314/1668976315
[  182.841028][ T9469] tipc: Failed to remove unknown binding: 66,0,0/0:1668976314/1668976315
[  182.999541][ T9476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.955'.
[  183.413756][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.959'.
[  183.565749][ T9503] gretap1: entered promiscuous mode
[  183.843241][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.060238][ T9532] netlink: 204 bytes leftover after parsing attributes in process `syz.2.964'.
[  184.071551][ T9532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.964'.
[  184.081392][ T9531] Cannot find del_set index 0 as target
[  184.083774][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.111483][ T9530] netlink: 'syz.3.965': attribute type 2 has an invalid length.
[  184.131154][ T9530] : entered promiscuous mode
[  184.141369][ T9530] netlink: 'syz.3.965': attribute type 3 has an invalid length.
[  184.149866][ T9530] netlink: 'syz.3.965': attribute type 3 has an invalid length.
[  184.168121][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.965'.
[  184.185491][ T9535] netlink: 'syz.1.967': attribute type 3 has an invalid length.
[  184.236889][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'.
[  184.271276][ T5956] IPVS: starting estimator thread 0...
[  184.403487][ T9540] IPVS: using max 26 ests per chain, 62400 per kthread
[  184.489198][ T9550] netlink: 'syz.3.971': attribute type 21 has an invalid length.
[  184.498015][ T9550] netlink: 132 bytes leftover after parsing attributes in process `syz.3.971'.
[  184.513090][ T9550] netlink: 'syz.3.971': attribute type 1 has an invalid length.
[  184.563912][ T9550] syzkaller1: entered promiscuous mode
[  184.581534][ T9550] syzkaller1: entered allmulticast mode
[  184.643285][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.803887][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.813184][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.822733][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.901780][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.934479][ T9564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.974'.
[  185.057967][ T9572] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  185.123031][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.268294][ T9582] FAULT_INJECTION: forcing a failure.
[  185.268294][ T9582] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  185.281698][ T9582] CPU: 0 UID: 0 PID: 9582 Comm: syz.0.981 Not tainted syzkaller #0 PREEMPT(full) 
[  185.281727][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  185.281739][ T9582] Call Trace:
[  185.281748][ T9582]  <TASK>
[  185.281756][ T9582]  dump_stack_lvl+0xe8/0x150
[  185.281793][ T9582]  should_fail_ex+0x412/0x560
[  185.281834][ T9582]  _copy_from_user+0x2d/0xb0
[  185.281862][ T9582]  kstrtouint_from_user+0xd6/0x180
[  185.281887][ T9582]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  185.281929][ T9582]  proc_fail_nth_write+0x8e/0x210
[  185.281963][ T9582]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  185.282002][ T9582]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  185.282038][ T9582]  vfs_write+0x29a/0xb90
[  185.282074][ T9582]  ? __pfx_vfs_write+0x10/0x10
[  185.282101][ T9582]  ? __fget_files+0x2a/0x420
[  185.282127][ T9582]  ? __fget_files+0x3a0/0x420
[  185.282145][ T9582]  ? __fget_files+0x2a/0x420
[  185.282176][ T9582]  ksys_write+0x150/0x270
[  185.282204][ T9582]  ? __pfx_ksys_write+0x10/0x10
[  185.282242][ T9582]  do_syscall_64+0x14d/0xf80
[  185.282264][ T9582]  ? trace_irq_disable+0x3b/0x150
[  185.282283][ T9582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.282305][ T9582]  ? clear_bhb_loop+0x40/0x90
[  185.282332][ T9582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.282354][ T9582] RIP: 0033:0x7fd71155d04e
[  185.282374][ T9582] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  185.282391][ T9582] RSP: 002b:00007fd712529fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  185.282413][ T9582] RAX: ffffffffffffffda RBX: 00007fd71252a6c0 RCX: 00007fd71155d04e
[  185.282437][ T9582] RDX: 0000000000000001 RSI: 00007fd71252a0a0 RDI: 0000000000000004
[  185.282450][ T9582] RBP: 00007fd71252a090 R08: 0000000000000000 R09: 0000000000000000
[  185.282463][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.282475][ T9582] R13: 00007fd711816038 R14: 00007fd711815fa0 R15: 00007ffdeacddc98
[  185.282511][ T9582]  </TASK>
[  185.686215][ T9584] dvmrp0: left allmulticast mode
[  185.820361][ T9599] FAULT_INJECTION: forcing a failure.
[  185.820361][ T9599] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  185.860448][ T9599] CPU: 1 UID: 0 PID: 9599 Comm: syz.2.986 Not tainted syzkaller #0 PREEMPT(full) 
[  185.860478][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  185.860491][ T9599] Call Trace:
[  185.860500][ T9599]  <TASK>
[  185.860509][ T9599]  dump_stack_lvl+0xe8/0x150
[  185.860544][ T9599]  should_fail_ex+0x412/0x560
[  185.860581][ T9599]  _copy_from_iter+0x1d3/0x1670
[  185.860604][ T9599]  ? rcu_is_watching+0x15/0xb0
[  185.860636][ T9599]  ? trace_kmem_cache_alloc+0x29/0xf0
[  185.860659][ T9599]  ? __build_skb+0x62/0x440
[  185.860690][ T9599]  ? __build_skb+0x62/0x440
[  185.860719][ T9599]  ? __pfx__copy_from_iter+0x10/0x10
[  185.860745][ T9599]  ? __build_skb+0x2a2/0x440
[  185.860776][ T9599]  ? netlink_sendmsg+0x650/0xb40
[  185.860804][ T9599]  ? skb_put+0x11b/0x210
[  185.860837][ T9599]  netlink_sendmsg+0x6c0/0xb40
[  185.860877][ T9599]  ? __pfx_netlink_sendmsg+0x10/0x10
[  185.860909][ T9599]  ? aa_sock_msg_perm+0xf1/0x1b0
[  185.860931][ T9599]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  185.860960][ T9599]  ____sys_sendmsg+0x972/0x9f0
[  185.861007][ T9599]  ? __pfx_____sys_sendmsg+0x10/0x10
[  185.861049][ T9599]  ? import_iovec+0x73/0xa0
[  185.861078][ T9599]  ___sys_sendmsg+0x2a5/0x360
[  185.861140][ T9599]  ? __pfx____sys_sendmsg+0x10/0x10
[  185.861211][ T9599]  ? __fget_files+0x2a/0x420
[  185.861230][ T9599]  ? __fget_files+0x3a0/0x420
[  185.861261][ T9599]  __x64_sys_sendmsg+0x1bd/0x2a0
[  185.861297][ T9599]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  185.861341][ T9599]  ? __pfx_ksys_write+0x10/0x10
[  185.861386][ T9599]  do_syscall_64+0x14d/0xf80
[  185.861407][ T9599]  ? trace_irq_disable+0x3b/0x150
[  185.861426][ T9599]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.861448][ T9599]  ? clear_bhb_loop+0x40/0x90
[  185.861475][ T9599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.861496][ T9599] RIP: 0033:0x7fcc5b79c819
[  185.861516][ T9599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.861534][ T9599] RSP: 002b:00007fcc5c69a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.861556][ T9599] RAX: ffffffffffffffda RBX: 00007fcc5ba15fa0 RCX: 00007fcc5b79c819
[  185.861571][ T9599] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  185.861583][ T9599] RBP: 00007fcc5c69a090 R08: 0000000000000000 R09: 0000000000000000
[  185.861594][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.861606][ T9599] R13: 00007fcc5ba16038 R14: 00007fcc5ba15fa0 R15: 00007ffd59209978
[  185.861638][ T9599]  </TASK>
[  186.132968][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  186.141117][    C1] lec:lec_tx_timeout: lec0
[  186.150181][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  187.009984][ T9635] FAULT_INJECTION: forcing a failure.
[  187.009984][ T9635] name failslab, interval 1, probability 0, space 0, times 0
[  187.050207][ T9635] CPU: 1 UID: 0 PID: 9635 Comm: syz.3.998 Not tainted syzkaller #0 PREEMPT(full) 
[  187.050237][ T9635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  187.050251][ T9635] Call Trace:
[  187.050268][ T9635]  <TASK>
[  187.050277][ T9635]  dump_stack_lvl+0xe8/0x150
[  187.050314][ T9635]  should_fail_ex+0x412/0x560
[  187.050356][ T9635]  should_failslab+0xa8/0x100
[  187.050385][ T9635]  ? skb_clone+0x212/0x3a0
[  187.050405][ T9635]  kmem_cache_alloc_noprof+0x87/0x650
[  187.050429][ T9635]  ? __netlink_lookup+0xc6/0x8b0
[  187.050469][ T9635]  skb_clone+0x212/0x3a0
[  187.050493][ T9635]  __netlink_deliver_tap+0x404/0x850
[  187.050537][ T9635]  ? netlink_deliver_tap+0x2e/0x1b0
[  187.050568][ T9635]  netlink_deliver_tap+0x19c/0x1b0
[  187.050599][ T9635]  netlink_unicast+0x7e3/0x9b0
[  187.050635][ T9635]  ? __pfx_netlink_unicast+0x10/0x10
[  187.050664][ T9635]  ? netlink_sendmsg+0x650/0xb40
[  187.050692][ T9635]  ? skb_put+0x11b/0x210
[  187.050727][ T9635]  netlink_sendmsg+0x813/0xb40
[  187.050769][ T9635]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.050803][ T9635]  ? aa_sock_msg_perm+0xf1/0x1b0
[  187.050827][ T9635]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  187.050857][ T9635]  ____sys_sendmsg+0x972/0x9f0
[  187.050901][ T9635]  ? __pfx_____sys_sendmsg+0x10/0x10
[  187.050945][ T9635]  ? import_iovec+0x73/0xa0
[  187.050976][ T9635]  ___sys_sendmsg+0x2a5/0x360
[  187.051014][ T9635]  ? __pfx____sys_sendmsg+0x10/0x10
[  187.051089][ T9635]  ? __fget_files+0x2a/0x420
[  187.051109][ T9635]  ? __fget_files+0x3a0/0x420
[  187.051147][ T9635]  __x64_sys_sendmsg+0x1bd/0x2a0
[  187.051184][ T9635]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  187.051228][ T9635]  ? __pfx_ksys_write+0x10/0x10
[  187.051273][ T9635]  do_syscall_64+0x14d/0xf80
[  187.051295][ T9635]  ? trace_irq_disable+0x3b/0x150
[  187.051313][ T9635]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.051335][ T9635]  ? clear_bhb_loop+0x40/0x90
[  187.051369][ T9635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.051390][ T9635] RIP: 0033:0x7fa34379c819
[  187.051411][ T9635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.051428][ T9635] RSP: 002b:00007fa3446de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  187.051451][ T9635] RAX: ffffffffffffffda RBX: 00007fa343a15fa0 RCX: 00007fa34379c819
[  187.051466][ T9635] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  187.051480][ T9635] RBP: 00007fa3446de090 R08: 0000000000000000 R09: 0000000000000000
[  187.051493][ T9635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.051505][ T9635] R13: 00007fa343a16038 R14: 00007fa343a15fa0 R15: 00007ffebba30cb8
[  187.051540][ T9635]  </TASK>
[  187.431164][ T9631] __nla_validate_parse: 6 callbacks suppressed
[  187.431188][ T9631] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.996'.
[  187.782718][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'.
[  187.795666][ T9646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1003'.
[  187.804990][ T9646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1003'.
[  188.333382][ T5903] net_ratelimit: 9 callbacks suppressed
[  188.333401][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.674652][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'.
[  188.683820][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1019'.
[  188.722595][ T9684] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.741732][ T9690] ip6tnl2: entered allmulticast mode
[  188.750318][ T1165] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  188.759023][ T1165] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  188.770415][ T9684] syzkaller0: entered promiscuous mode
[  188.776614][ T9684] syzkaller0: entered allmulticast mode
[  188.783257][ T5903] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  188.825412][ T9684] tipc: Resetting bearer <eth:syzkaller0>
[  188.941617][ T9682] tipc: Resetting bearer <eth:syzkaller0>
[  188.964576][ T9682] tipc: Disabling bearer <eth:syzkaller0>
[  188.991727][ T9699] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.1024'.
[  189.015612][ T9700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.034205][ T5903] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  189.043559][ T9700] syzkaller0: entered promiscuous mode
[  189.080097][ T9700] syzkaller0: entered allmulticast mode
[  189.223653][ T9709] vlan0: entered promiscuous mode
[  189.228756][ T9709] geneve1: entered promiscuous mode
[  189.234686][ T9709] vlan0: entered allmulticast mode
[  189.239900][ T9709] geneve1: entered allmulticast mode
[  189.247522][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'.
[  189.256699][ T9700] tipc: Resetting bearer <eth:syzkaller0>
[  189.264342][ T9713] openvswitch: netlink: Missing key (keys=40, expected=80)
[  189.269651][ T9697] tipc: Resetting bearer <eth:syzkaller0>
[  189.350402][ T9697] tipc: Disabling bearer <eth:syzkaller0>
[  189.363396][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.487556][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'.
[  189.622221][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'.
[  189.647020][ T9726] IPVS: set_ctl: invalid protocol: 137 172.30.0.4:20004
[  189.843790][ T5903] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  190.405760][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.489668][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.564536][ T9115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.574060][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.585254][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.166668][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  191.174802][    C1] lec:lec_tx_timeout: lec0
[  191.179841][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  191.456560][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.809411][ T9784] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  191.865202][ T9784] syzkaller0: entered promiscuous mode
[  191.870758][ T9784] syzkaller0: entered allmulticast mode
[  192.267512][ T9803] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  192.482386][ T9806] l2tp: option downdelay: invalid value (18446744073709547007)
[  192.522009][ T9806] l2tp: option downdelay: allowed values 0 - 2147483647
[  192.545737][ T9796] __nla_validate_parse: 8 callbacks suppressed
[  192.545758][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'.
[  192.573334][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  192.611406][ T9806] l2tp (unregistering): Released all slaves
[  193.466730][ T9849] netlink: 'syz.0.1070': attribute type 1 has an invalid length.
[  193.482433][ T9850] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1071'.
[  193.504055][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'.
[  193.523659][   T29] net_ratelimit: 1 callbacks suppressed
[  193.523678][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.537476][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.563446][ T9850] bond4: entered promiscuous mode
[  193.569072][ T9850] 8021q: adding VLAN 0 to HW filter on device bond4
[  193.590330][ T9852] bridge3: entered promiscuous mode
[  193.596527][ T9852] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  193.612713][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1071'.
[  193.622445][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1071'.
[  193.663732][ T9850] bond4 (unregistering): (slave bridge3): Releasing backup interface
[  193.710426][ T9850] bridge3: left promiscuous mode
[  193.827968][ T9850] bond4 (unregistering): Released all slaves
[  194.082076][ T9868] syzkaller0: entered promiscuous mode
[  194.087889][ T9868] syzkaller0: entered allmulticast mode
[  194.135315][ T9875] netlink: 'syz.1.1077': attribute type 21 has an invalid length.
[  194.148552][ T9875] netlink: 'syz.1.1077': attribute type 22 has an invalid length.
[  194.173186][ T9875] netlink: 'syz.1.1077': attribute type 23 has an invalid length.
[  194.181086][ T9875] netlink: 'syz.1.1077': attribute type 25 has an invalid length.
[  194.223118][ T9875] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1077'.
[  194.407435][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  194.580060][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.608153][ T9893] netlink: 'syz.4.1084': attribute type 27 has an invalid length.
[  194.804866][ T9891] netlink: 'syz.3.1081': attribute type 2 has an invalid length.
[  194.819964][ T9891] netlink: 'syz.3.1081': attribute type 1 has an invalid length.
[  194.829977][ T9891] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1081'.
[  194.959212][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'.
[  195.603171][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.611766][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.960356][ T9910] macvlan2: entered allmulticast mode
[  195.987710][ T9910] hsr0: entered allmulticast mode
[  195.992813][ T9910] hsr_slave_0: entered allmulticast mode
[  195.999111][ T9910] hsr_slave_1: entered allmulticast mode
[  196.170190][ T9919] Bluetooth: MGMT ver 1.23
[  196.227659][ T9925] netlink: 'syz.0.1095': attribute type 2 has an invalid length.
[  196.463925][ T9938] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  196.549385][ T9938] syzkaller0: entered promiscuous mode
[  196.566060][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.574993][ T9938] syzkaller0: entered allmulticast mode
[  196.614377][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1101'.
[  196.623529][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1101'.
[  196.643016][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.652223][ T9948] openvswitch: netlink: Unknown nsh attribute 0
[  196.658923][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.714135][ T9940] netlink: 'syz.2.1101': attribute type 83 has an invalid length.
[  196.781757][ T9943] sctp: [Deprecated]: syz.3.1102 (pid 9943) Use of int in max_burst socket option deprecated.
[  196.781757][ T9943] Use struct sctp_assoc_value instead
[  196.963054][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  196.971160][    C1] lec:lec_tx_timeout: lec0
[  196.976254][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  197.007931][ T9955] IPVS: Unknown mcast interface: bridge_slave_0
[  197.301811][ T9972] netlink: zone id is out of range
[  197.496981][ T9962] bond4: entered promiscuous mode
[  197.502576][ T9962] 8021q: adding VLAN 0 to HW filter on device bond4
[  197.599101][ T9969] 8021q: adding VLAN 0 to HW filter on device bond4
[  197.606922][ T9969] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[  197.629472][ T9969] bond4: (slave vcan1): Error -95 calling set_mac_address
[  197.959424][T10008] pim6reg: entered allmulticast mode
[  197.978024][T10008] pim6reg: left allmulticast mode
[  198.052079][T10011] __nla_validate_parse: 5 callbacks suppressed
[  198.052100][T10011] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1122'.
[  198.072289][T10013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1125'.
[  198.095375][T10010] syzkaller0: entered promiscuous mode
[  198.100936][T10010] syzkaller0: entered allmulticast mode
[  198.164452][T10019] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20002
[  198.500262][T10034] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  198.525086][T10034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1130'.
[  198.538350][T10033] syzkaller0: entered promiscuous mode
[  198.546191][T10033] syzkaller0: entered allmulticast mode
[  198.575308][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'.
[  198.585668][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1132'.
[  198.669002][T10038] team0: Port device team_slave_0 removed
[  198.717347][T10048] netlink: 'syz.3.1137': attribute type 5 has an invalid length.
[  198.735507][ T5903] net_ratelimit: 15 callbacks suppressed
[  198.735526][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.003252][T10062] netlink: 'syz.4.1141': attribute type 1 has an invalid length.
[  199.022588][T10062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.037272][T10063] netlink: 'syz.2.1142': attribute type 1 has an invalid length.
[  199.159316][T10073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.175210][T10074] x_tables: ip6_tables: mark.1 match: invalid size 16 (kernel) != (user) 24
[  199.673669][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.793151][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.995576][T10093] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.163699][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.181162][T10103] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  200.246430][ T5914] IPVS: starting estimator thread 0...
[  200.333117][T10104] IPVS: using max 24 ests per chain, 57600 per kthread
[  200.613698][T10119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.676299][T10119] netlink: 'syz.2.1156': attribute type 10 has an invalid length.
[  200.787826][T10119] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  200.803235][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  200.812741][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.019628][T10132] netlink: 'syz.1.1160': attribute type 1 has an invalid length.
[  201.029018][T10132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.560741][T10144] IPv6: addrconf: prefix option has invalid lifetime
[  201.770110][T10155] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.1169'.
[  201.811014][T10153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1168'.
[  201.872768][T10157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1170'.
[  201.958594][T10160] netlink: 'syz.4.1171': attribute type 1 has an invalid length.
[  202.003380][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  202.011524][    C1] lec:lec_tx_timeout: lec0
[  202.017262][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  202.208008][T10171] netlink: 'syz.3.1175': attribute type 46 has an invalid length.
[  202.216232][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'.
[  202.556917][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'.
[  203.173169][T10207] netlink: 'syz.2.1186': attribute type 1 has an invalid length.
[  203.185130][T10206] netlink: 'syz.4.1188': attribute type 39 has an invalid length.
[  203.923374][ T5903] net_ratelimit: 7 callbacks suppressed
[  203.923394][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.539992][T10244] __nla_validate_parse: 3 callbacks suppressed
[  204.540012][T10244] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1200'.
[  204.622483][T10250] netlink: 'syz.1.1202': attribute type 322 has an invalid length.
[  204.648445][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.698968][T10255] openvswitch: netlink: IPv4 tun info is not correct
[  204.871629][T10258] netlink: 'syz.1.1205': attribute type 4 has an invalid length.
[  204.930384][T10264] netlink: 'syz.1.1205': attribute type 4 has an invalid length.
[  204.978794][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.021263][T10272] netlink: 'syz.2.1207': attribute type 1 has an invalid length.
[  205.093818][T10273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.203114][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.218688][T10277] netlink: 'syz.4.1211': attribute type 10 has an invalid length.
[  205.266063][T10277] dummy0: entered promiscuous mode
[  205.292393][T10279] netlink: 'syz.4.1211': attribute type 10 has an invalid length.
[  205.320480][T10277] team0: Port device dummy0 added
[  205.611485][T10279] team0: Port device dummy0 removed
[  205.793438][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.863177][T10279] dummy0: left promiscuous mode
[  206.016110][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.061146][T10294] syzkaller0: entered promiscuous mode
[  206.070295][T10294] syzkaller0: entered allmulticast mode
[  206.243026][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.290171][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'.
[  206.305441][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1218'.
[  206.454627][T10312] netlink: 'syz.3.1220': attribute type 1 has an invalid length.
[  206.567329][T10301] delete_channel: no stack
[  206.642823][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'.
[  206.652063][T10314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1219'.
[  206.723078][T10253] Bluetooth: hci3: command 0x0406 tx timeout
[  206.729385][T10253] Bluetooth: hci0: command 0x0406 tx timeout
[  206.738719][T10253] Bluetooth: hci2: command 0x0406 tx timeout
[  206.744868][T10253] Bluetooth: hci1: command 0x0406 tx timeout
[  206.918773][T10324] netlink: get zone limit has 8 unknown bytes
[  207.032970][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  207.041110][    C1] lec:lec_tx_timeout: lec0
[  207.046411][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  207.187692][T10338] netlink: 'syz.2.1226': attribute type 1 has an invalid length.
[  207.622386][T10348] netlink: 'syz.1.1229': attribute type 4 has an invalid length.
[  207.660376][T10348] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  207.949768][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'.
[  208.082439][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'.
[  208.288860][T10364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1237'.
[  208.313237][T10364] nbd: illegal input index -1113835520
[  208.390599][T10372] FAULT_INJECTION: forcing a failure.
[  208.390599][T10372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.438183][T10372] CPU: 1 UID: 0 PID: 10372 Comm: syz.0.1238 Not tainted syzkaller #0 PREEMPT(full) 
[  208.438219][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  208.438233][T10372] Call Trace:
[  208.438242][T10372]  <TASK>
[  208.438250][T10372]  dump_stack_lvl+0xe8/0x150
[  208.438286][T10372]  should_fail_ex+0x412/0x560
[  208.438326][T10372]  _copy_from_user+0x2d/0xb0
[  208.438355][T10372]  ___sys_sendmsg+0x1c6/0x360
[  208.438394][T10372]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.438465][T10372]  ? __fget_files+0x2a/0x420
[  208.438485][T10372]  ? __fget_files+0x3a0/0x420
[  208.438517][T10372]  __x64_sys_sendmsg+0x1bd/0x2a0
[  208.438560][T10372]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  208.438603][T10372]  ? __pfx_ksys_write+0x10/0x10
[  208.438640][T10372]  do_syscall_64+0x14d/0xf80
[  208.438661][T10372]  ? trace_irq_disable+0x3b/0x150
[  208.438677][T10372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.438699][T10372]  ? clear_bhb_loop+0x40/0x90
[  208.438725][T10372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.438746][T10372] RIP: 0033:0x7fd71159c819
[  208.438766][T10372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.438785][T10372] RSP: 002b:00007fd7124e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.438808][T10372] RAX: ffffffffffffffda RBX: 00007fd711816180 RCX: 00007fd71159c819
[  208.438824][T10372] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000004
[  208.438838][T10372] RBP: 00007fd7124e8090 R08: 0000000000000000 R09: 0000000000000000
[  208.438851][T10372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.438863][T10372] R13: 00007fd711816218 R14: 00007fd711816180 R15: 00007ffdeacddc98
[  208.438897][T10372]  </TASK>
[  208.671092][T10382] netlink: 'syz.3.1239': attribute type 5 has an invalid length.
[  208.875305][T10374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1239'.
[  209.127527][   T29] net_ratelimit: 5 callbacks suppressed
[  209.127549][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.174669][T10397] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.706030][T10421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.715163][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.749764][T10421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.762043][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.793200][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.822112][T10425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.884061][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.892605][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.308485][T10421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.333120][T10421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.768856][T10421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.833370][T10421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.855619][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1263'.
[  210.937519][T10421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.976187][T10421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.031656][T10466] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1265'.
[  211.164849][T10421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  211.187529][T10421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.260802][T10472] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1265'.
[  211.468664][T10485] validate_nla: 1 callbacks suppressed
[  211.468682][T10485] netlink: 'syz.0.1268': attribute type 1 has an invalid length.
[  211.500115][ T9114] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  211.511477][ T9114] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.520536][T10486] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1270'.
[  211.541914][ T9114] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  211.551064][ T9114] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.614782][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1269'.
[  211.642470][ T9114] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  211.662489][ T9114] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.783053][ T9114] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  211.791428][ T9114] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.052962][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  212.061071][    C1] lec:lec_tx_timeout: lec0
[  212.066048][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  212.149449][ T5883] hid-generic 0005:0002:0043.0001: unknown main item tag 0x3
[  212.179403][ T5883] hid-generic 0005:0002:0043.0001: unexpected long global item
[  212.207951][ T5883] hid-generic 0005:0002:0043.0001: probe with driver hid-generic failed with error -22
[  212.292562][T10519] FAULT_INJECTION: forcing a failure.
[  212.292562][T10519] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.363074][T10519] CPU: 1 UID: 0 PID: 10519 Comm: syz.2.1276 Not tainted syzkaller #0 PREEMPT(full) 
[  212.363104][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  212.363118][T10519] Call Trace:
[  212.363127][T10519]  <TASK>
[  212.363136][T10519]  dump_stack_lvl+0xe8/0x150
[  212.363172][T10519]  should_fail_ex+0x412/0x560
[  212.363213][T10519]  _copy_from_iter+0x1d3/0x1670
[  212.363241][T10519]  ? rcu_is_watching+0x15/0xb0
[  212.363279][T10519]  ? __pfx__copy_from_iter+0x10/0x10
[  212.363318][T10519]  ? netlink_sendmsg+0x650/0xb40
[  212.363347][T10519]  ? skb_put+0x11b/0x210
[  212.363381][T10519]  netlink_sendmsg+0x6c0/0xb40
[  212.363421][T10519]  ? __pfx_netlink_sendmsg+0x10/0x10
[  212.363455][T10519]  ? aa_sock_msg_perm+0xf1/0x1b0
[  212.363477][T10519]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  212.363507][T10519]  ____sys_sendmsg+0x972/0x9f0
[  212.363549][T10519]  ? __pfx_____sys_sendmsg+0x10/0x10
[  212.363591][T10519]  ? import_iovec+0x73/0xa0
[  212.363621][T10519]  ___sys_sendmsg+0x2a5/0x360
[  212.363660][T10519]  ? __pfx____sys_sendmsg+0x10/0x10
[  212.363730][T10519]  ? __fget_files+0x2a/0x420
[  212.363750][T10519]  ? __fget_files+0x3a0/0x420
[  212.363781][T10519]  __x64_sys_sendmsg+0x1bd/0x2a0
[  212.363816][T10519]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  212.363864][T10519]  ? __pfx_ksys_write+0x10/0x10
[  212.363902][T10519]  do_syscall_64+0x14d/0xf80
[  212.363923][T10519]  ? trace_irq_disable+0x3b/0x150
[  212.363942][T10519]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.363964][T10519]  ? clear_bhb_loop+0x40/0x90
[  212.363990][T10519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.364012][T10519] RIP: 0033:0x7fcc5b79c819
[  212.364032][T10519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.364050][T10519] RSP: 002b:00007fcc5c658028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  212.364073][T10519] RAX: ffffffffffffffda RBX: 00007fcc5ba16180 RCX: 00007fcc5b79c819
[  212.364089][T10519] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000004
[  212.364103][T10519] RBP: 00007fcc5c658090 R08: 0000000000000000 R09: 0000000000000000
[  212.364116][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.364129][T10519] R13: 00007fcc5ba16218 R14: 00007fcc5ba16180 R15: 00007ffd59209978
[  212.364163][T10519]  </TASK>
[  212.631428][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'.
[  212.642839][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'.
[  212.652664][T10524] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.660692][T10524] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.684126][T10524] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.758368][T10524] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.014564][T10537] netlink: 'syz.2.1283': attribute type 1 has an invalid length.
[  213.071497][T10543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1284'.
[  213.086424][T10537] 8021q: adding VLAN 0 to HW filter on device bond3
[  213.168372][T10538] bond3: (slave ip6gretap1): making interface the new active one
[  213.202695][T10538] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  213.353611][T10558] sctp: [Deprecated]: syz.1.1290 (pid 10558) Use of int in max_burst socket option.
[  213.353611][T10558] Use struct sctp_assoc_value instead
[  213.506285][T10568] netlink: 'syz.2.1291': attribute type 1 has an invalid length.
[  213.906437][T10589] syzkaller1: entered promiscuous mode
[  213.914006][T10589] syzkaller1: entered allmulticast mode
[  214.323452][   T29] net_ratelimit: 24 callbacks suppressed
[  214.323473][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.419935][T10602] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1299'.
[  214.466781][T10602] syzkaller0: entered promiscuous mode
[  214.475408][T10602] syzkaller0: entered allmulticast mode
[  214.585753][T10616] xt_hashlimit: size too large, truncated to 1048576
[  214.744861][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'.
[  214.823342][T10624] netlink: 'syz.2.1302': attribute type 4 has an invalid length.
[  214.896745][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.047466][T10631] netlink: 'syz.3.1307': attribute type 30 has an invalid length.
[  215.055897][T10631] netlink: 'syz.3.1307': attribute type 29 has an invalid length.
[  215.096396][T10642] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  215.115752][T10634] ieee802154 phy1 wpan1: encryption failed: -22
[  215.206669][T10646] netlink: 'syz.0.1312': attribute type 1 has an invalid length.
[  215.227730][T10646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.354345][T10645] netlink: 'syz.1.1311': attribute type 3 has an invalid length.
[  215.364220][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.393458][T10645] netlink: 'syz.1.1311': attribute type 3 has an invalid length.
[  215.741675][   T30] audit: type=1107 audit(1775878367.622:3): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  216.414707][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.570450][T10707] __nla_validate_parse: 4 callbacks suppressed
[  216.570473][T10707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1326'.
[  216.730161][T10716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.738880][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.803185][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  216.833534][T10721] netlink: 'syz.4.1330': attribute type 13 has an invalid length.
[  217.005335][T10721] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.025349][T10721] team_slave_0: left promiscuous mode
[  217.031176][T10721] team_slave_1: left promiscuous mode
[  217.073139][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  217.081297][    C1] lec:lec_tx_timeout: lec0
[  217.086006][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  217.142618][T10721] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.160299][T10721] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.222338][T10721] veth1_vlan: left allmulticast mode
[  217.374335][T10718] netlink: 'syz.0.1329': attribute type 2 has an invalid length.
[  217.393019][T10718] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1329'.
[  217.411925][   T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.439499][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.461548][   T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.463847][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.489977][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.556490][   T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.593063][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.609163][T10737] netlink: 'syz.4.1332': attribute type 1 has an invalid length.
[  217.618281][T10737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.632764][   T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.653225][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.927776][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.085090][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1341'.
[  218.096448][T10763] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1344'.
[  218.134886][T10759] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1341'.
[  218.189977][T10765] xt_hashlimit: size too large, truncated to 1048576
[  218.264272][T10766] veth0_to_bridge: entered promiscuous mode
[  218.423892][T10776] netlink: 'syz.0.1345': attribute type 5 has an invalid length.
[  218.606036][T10783] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1352'.
[  218.701943][T10789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1354'.
[  218.734998][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1354'.
[  218.776815][T10791] batman_adv: batadv0: Adding interface: macvtap1
[  218.804944][T10791] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  218.840928][T10791] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  219.141984][T10764] veth0_to_bridge: left promiscuous mode
[  219.190620][T10808] FAULT_INJECTION: forcing a failure.
[  219.190620][T10808] name failslab, interval 1, probability 0, space 0, times 0
[  219.200447][T10805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.205428][T10808] CPU: 0 UID: 0 PID: 10808 Comm: syz.1.1359 Not tainted syzkaller #0 PREEMPT(full) 
[  219.205497][T10808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  219.205541][T10808] Call Trace:
[  219.205564][T10808]  <TASK>
[  219.205587][T10808]  dump_stack_lvl+0xe8/0x150
[  219.205692][T10808]  should_fail_ex+0x412/0x560
[  219.205805][T10808]  should_failslab+0xa8/0x100
[  219.205898][T10808]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  219.205976][T10808]  ? __alloc_skb+0x186/0x7d0
[  219.206048][T10808]  ? __alloc_skb+0x1d0/0x7d0
[  219.206116][T10808]  ? __local_bh_enable_ip+0xd0/0x130
[  219.206215][T10808]  __alloc_skb+0x1d0/0x7d0
[  219.206335][T10808]  netlink_sendmsg+0x5d4/0xb40
[  219.206463][T10808]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.206554][T10808]  ? aa_sock_msg_perm+0xf1/0x1b0
[  219.206620][T10808]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  219.206698][T10808]  ____sys_sendmsg+0x972/0x9f0
[  219.206811][T10808]  ? __pfx_____sys_sendmsg+0x10/0x10
[  219.206923][T10808]  ? import_iovec+0x73/0xa0
[  219.207013][T10808]  ___sys_sendmsg+0x2a5/0x360
[  219.207115][T10808]  ? __pfx____sys_sendmsg+0x10/0x10
[  219.207304][T10808]  ? __fget_files+0x2a/0x420
[  219.207353][T10808]  ? __fget_files+0x3a0/0x420
[  219.207443][T10808]  __x64_sys_sendmsg+0x1bd/0x2a0
[  219.207543][T10808]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  219.207665][T10808]  ? __pfx_ksys_write+0x10/0x10
[  219.207797][T10808]  do_syscall_64+0x14d/0xf80
[  219.207852][T10808]  ? trace_irq_disable+0x3b/0x150
[  219.207906][T10808]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.207969][T10808]  ? clear_bhb_loop+0x40/0x90
[  219.208039][T10808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.208104][T10808] RIP: 0033:0x7f1d6e79c819
[  219.208160][T10808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.208207][T10808] RSP: 002b:00007f1d6f6d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.208281][T10808] RAX: ffffffffffffffda RBX: 00007f1d6ea15fa0 RCX: 00007f1d6e79c819
[  219.208326][T10808] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  219.208360][T10808] RBP: 00007f1d6f6d7090 R08: 0000000000000000 R09: 0000000000000000
[  219.208395][T10808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.208438][T10808] R13: 00007f1d6ea16038 R14: 00007f1d6ea15fa0 R15: 00007ffe9380aec8
[  219.208528][T10808]  </TASK>
[  219.348869][T10810] netlink: 'syz.2.1360': attribute type 1 has an invalid length.
[  219.446021][T10809] net_ratelimit: 1 callbacks suppressed
[  219.446088][T10809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.607095][T10817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1363'.
[  219.645267][T10818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1363'.
[  219.714461][T10817] netlink: 'syz.3.1363': attribute type 16 has an invalid length.
[  219.722354][T10817] netlink: 'syz.3.1363': attribute type 17 has an invalid length.
[  219.811682][T10817] team0: left promiscuous mode
[  219.816797][T10817] team_slave_0: left promiscuous mode
[  219.822677][T10817] team_slave_1: left promiscuous mode
[  219.830929][T10817] 8021q: adding VLAN 0 to HW filter on device team0
[  219.845233][T10817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.980332][T10820] veth11: entered allmulticast mode
[  219.995254][T10820] bond2: (slave veth11): Enslaving as an active interface with an up link
[  220.117819][T10820] bond2 (unregistering): (slave veth11): Releasing backup interface
[  220.148013][T10820] bond2 (unregistering): Released all slaves
[  220.321034][T10847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  220.412578][T10849] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  221.234537][T10901] netlink: 'syz.0.1394': attribute type 3 has an invalid length.
[  222.092955][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  222.101087][    C1] lec:lec_tx_timeout: lec0
[  222.105803][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  222.150027][T10959] __nla_validate_parse: 10 callbacks suppressed
[  222.150049][T10959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1413'.
[  222.211791][T10953] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1413'.
[  222.287817][T10955] netlink: 'syz.2.1415': attribute type 9 has an invalid length.
[  222.430631][T10970] FAULT_INJECTION: forcing a failure.
[  222.430631][T10970] name failslab, interval 1, probability 0, space 0, times 0
[  222.506968][T10970] CPU: 1 UID: 0 PID: 10970 Comm: syz.0.1417 Not tainted syzkaller #0 PREEMPT(full) 
[  222.506998][T10970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  222.507010][T10970] Call Trace:
[  222.507018][T10970]  <TASK>
[  222.507027][T10970]  dump_stack_lvl+0xe8/0x150
[  222.507061][T10970]  should_fail_ex+0x412/0x560
[  222.507098][T10970]  should_failslab+0xa8/0x100
[  222.507127][T10970]  __kmalloc_noprof+0xe8/0x760
[  222.507150][T10970]  ? bpf_test_init+0x9f/0x150
[  222.507175][T10970]  ? kstrtouint+0x6e/0xe0
[  222.507209][T10970]  bpf_test_init+0x9f/0x150
[  222.507241][T10970]  bpf_prog_test_run_xdp+0x529/0x1160
[  222.507287][T10970]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  222.507321][T10970]  ? __fget_files+0x2a/0x420
[  222.507347][T10970]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  222.507377][T10970]  bpf_prog_test_run+0x2c7/0x340
[  222.507404][T10970]  __sys_bpf+0x643/0x950
[  222.507429][T10970]  ? __pfx___sys_bpf+0x10/0x10
[  222.507476][T10970]  ? ksys_write+0x242/0x270
[  222.507502][T10970]  ? __pfx_ksys_write+0x10/0x10
[  222.507535][T10970]  __x64_sys_bpf+0x7c/0x90
[  222.507567][T10970]  do_syscall_64+0x14d/0xf80
[  222.507588][T10970]  ? trace_irq_disable+0x3b/0x150
[  222.507607][T10970]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.507629][T10970]  ? clear_bhb_loop+0x40/0x90
[  222.507656][T10970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.507677][T10970] RIP: 0033:0x7fd71159c819
[  222.507699][T10970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.507718][T10970] RSP: 002b:00007fd71252a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  222.507742][T10970] RAX: ffffffffffffffda RBX: 00007fd711815fa0 RCX: 00007fd71159c819
[  222.507759][T10970] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  222.507773][T10970] RBP: 00007fd71252a090 R08: 0000000000000000 R09: 0000000000000000
[  222.507786][T10970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.507799][T10970] R13: 00007fd711816038 R14: 00007fd711815fa0 R15: 00007ffdeacddc98
[  222.507834][T10970]  </TASK>
[  222.784169][T10977] FAULT_INJECTION: forcing a failure.
[  222.784169][T10977] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  222.797390][T10977] CPU: 1 UID: 0 PID: 10977 Comm: syz.1.1418 Not tainted syzkaller #0 PREEMPT(full) 
[  222.797419][T10977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  222.797432][T10977] Call Trace:
[  222.797440][T10977]  <TASK>
[  222.797448][T10977]  dump_stack_lvl+0xe8/0x150
[  222.797484][T10977]  should_fail_ex+0x412/0x560
[  222.797525][T10977]  _copy_from_iter+0x4ff/0x1670
[  222.797561][T10977]  ? __pfx__copy_from_iter+0x10/0x10
[  222.797593][T10977]  ? netlink_sendmsg+0x650/0xb40
[  222.797621][T10977]  ? skb_put+0x11b/0x210
[  222.797655][T10977]  netlink_sendmsg+0x6c0/0xb40
[  222.797693][T10977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.797726][T10977]  ? aa_sock_msg_perm+0xf1/0x1b0
[  222.797748][T10977]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  222.797777][T10977]  ____sys_sendmsg+0x972/0x9f0
[  222.797819][T10977]  ? __pfx_____sys_sendmsg+0x10/0x10
[  222.797861][T10977]  ? import_iovec+0x73/0xa0
[  222.797891][T10977]  ___sys_sendmsg+0x2a5/0x360
[  222.797930][T10977]  ? __pfx____sys_sendmsg+0x10/0x10
[  222.798001][T10977]  ? __fget_files+0x2a/0x420
[  222.798021][T10977]  ? __fget_files+0x3a0/0x420
[  222.798051][T10977]  __x64_sys_sendmsg+0x1bd/0x2a0
[  222.798087][T10977]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  222.798156][T10977]  ? __pfx_ksys_write+0x10/0x10
[  222.798194][T10977]  do_syscall_64+0x14d/0xf80
[  222.798214][T10977]  ? trace_irq_disable+0x3b/0x150
[  222.798233][T10977]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.798255][T10977]  ? clear_bhb_loop+0x40/0x90
[  222.798281][T10977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.798301][T10977] RIP: 0033:0x7f1d6e79c819
[  222.798320][T10977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.798338][T10977] RSP: 002b:00007f1d6f6d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.798360][T10977] RAX: ffffffffffffffda RBX: 00007f1d6ea15fa0 RCX: 00007f1d6e79c819
[  222.798376][T10977] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  222.798389][T10977] RBP: 00007f1d6f6d7090 R08: 0000000000000000 R09: 0000000000000000
[  222.798402][T10977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.798414][T10977] R13: 00007f1d6ea16038 R14: 00007f1d6ea15fa0 R15: 00007ffe9380aec8
[  222.798449][T10977]  </TASK>
[  223.217914][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'.
[  223.671856][T11001] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  224.481481][T11023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1430'.
[  224.491335][T11023] netlink: 'syz.1.1430': attribute type 7 has an invalid length.
[  224.500382][T11023] netlink: 'syz.1.1430': attribute type 8 has an invalid length.
[  224.538903][T11025] FAULT_INJECTION: forcing a failure.
[  224.538903][T11025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  224.553607][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'.
[  224.567192][T11025] CPU: 0 UID: 0 PID: 11025 Comm: syz.2.1431 Not tainted syzkaller #0 PREEMPT(full) 
[  224.567222][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  224.567236][T11025] Call Trace:
[  224.567245][T11025]  <TASK>
[  224.567254][T11025]  dump_stack_lvl+0xe8/0x150
[  224.567290][T11025]  should_fail_ex+0x412/0x560
[  224.567339][T11025]  _copy_from_user+0x2d/0xb0
[  224.567367][T11025]  bpf_test_init+0xd8/0x150
[  224.567401][T11025]  bpf_prog_test_run_xdp+0x529/0x1160
[  224.567449][T11025]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  224.567485][T11025]  ? __fget_files+0x2a/0x420
[  224.567512][T11025]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  224.567543][T11025]  bpf_prog_test_run+0x2c7/0x340
[  224.567571][T11025]  __sys_bpf+0x643/0x950
[  224.567595][T11025]  ? __pfx___sys_bpf+0x10/0x10
[  224.567635][T11025]  ? ksys_write+0x242/0x270
[  224.567663][T11025]  ? __pfx_ksys_write+0x10/0x10
[  224.567697][T11025]  __x64_sys_bpf+0x7c/0x90
[  224.567729][T11025]  do_syscall_64+0x14d/0xf80
[  224.567750][T11025]  ? trace_irq_disable+0x3b/0x150
[  224.567769][T11025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.567792][T11025]  ? clear_bhb_loop+0x40/0x90
[  224.567819][T11025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.567841][T11025] RIP: 0033:0x7fcc5b79c819
[  224.567861][T11025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.567880][T11025] RSP: 002b:00007fcc5c69a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  224.567903][T11025] RAX: ffffffffffffffda RBX: 00007fcc5ba15fa0 RCX: 00007fcc5b79c819
[  224.567919][T11025] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  224.567933][T11025] RBP: 00007fcc5c69a090 R08: 0000000000000000 R09: 0000000000000000
[  224.567947][T11025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.567960][T11025] R13: 00007fcc5ba16038 R14: 00007fcc5ba15fa0 R15: 00007ffd59209978
[  224.567995][T11025]  </TASK>
[  224.570063][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1430'.
[  224.814061][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1430'.
[  225.211113][T11048] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.1439'.
[  225.240232][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'.
[  225.546769][T11068] FAULT_INJECTION: forcing a failure.
[  225.546769][T11068] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.561917][T11068] CPU: 1 UID: 0 PID: 11068 Comm: syz.0.1444 Not tainted syzkaller #0 PREEMPT(full) 
[  225.561946][T11068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  225.561960][T11068] Call Trace:
[  225.561969][T11068]  <TASK>
[  225.561978][T11068]  dump_stack_lvl+0xe8/0x150
[  225.562015][T11068]  should_fail_ex+0x412/0x560
[  225.562055][T11068]  _copy_to_user+0x31/0xb0
[  225.562085][T11068]  bpf_test_finish+0x1db/0x6b0
[  225.562124][T11068]  ? __pfx_bpf_test_finish+0x10/0x10
[  225.562160][T11068]  ? _copy_from_user+0x94/0xb0
[  225.562187][T11068]  ? bpf_test_init+0x113/0x150
[  225.562216][T11068]  bpf_prog_test_run_xdp+0x8fa/0x1160
[  225.562265][T11068]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  225.562300][T11068]  ? __fget_files+0x2a/0x420
[  225.562327][T11068]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  225.562358][T11068]  bpf_prog_test_run+0x2c7/0x340
[  225.562386][T11068]  __sys_bpf+0x643/0x950
[  225.562411][T11068]  ? __pfx___sys_bpf+0x10/0x10
[  225.562449][T11068]  ? ksys_write+0x242/0x270
[  225.562477][T11068]  ? __pfx_ksys_write+0x10/0x10
[  225.562511][T11068]  __x64_sys_bpf+0x7c/0x90
[  225.562543][T11068]  do_syscall_64+0x14d/0xf80
[  225.562565][T11068]  ? trace_irq_disable+0x3b/0x150
[  225.562585][T11068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.562608][T11068]  ? clear_bhb_loop+0x40/0x90
[  225.562635][T11068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.562656][T11068] RIP: 0033:0x7fd71159c819
[  225.562676][T11068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.562695][T11068] RSP: 002b:00007fd71252a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  225.562718][T11068] RAX: ffffffffffffffda RBX: 00007fd711815fa0 RCX: 00007fd71159c819
[  225.562735][T11068] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  225.562749][T11068] RBP: 00007fd71252a090 R08: 0000000000000000 R09: 0000000000000000
[  225.562762][T11068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.562775][T11068] R13: 00007fd711816038 R14: 00007fd711815fa0 R15: 00007ffdeacddc98
[  225.562814][T11068]  </TASK>
[  226.614869][T11106] FAULT_INJECTION: forcing a failure.
[  226.614869][T11106] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  226.653965][T11106] CPU: 0 UID: 0 PID: 11106 Comm: syz.1.1456 Not tainted syzkaller #0 PREEMPT(full) 
[  226.653994][T11106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  226.654007][T11106] Call Trace:
[  226.654015][T11106]  <TASK>
[  226.654024][T11106]  dump_stack_lvl+0xe8/0x150
[  226.654058][T11106]  should_fail_ex+0x412/0x560
[  226.654098][T11106]  _copy_to_user+0x31/0xb0
[  226.654128][T11106]  bpf_test_finish+0x22c/0x6b0
[  226.654177][T11106]  ? __pfx_bpf_test_finish+0x10/0x10
[  226.654212][T11106]  ? _copy_from_user+0x94/0xb0
[  226.654236][T11106]  ? bpf_test_init+0x113/0x150
[  226.654263][T11106]  bpf_prog_test_run_xdp+0x8fa/0x1160
[  226.654309][T11106]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  226.654341][T11106]  ? __fget_files+0x2a/0x420
[  226.654367][T11106]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  226.654397][T11106]  bpf_prog_test_run+0x2c7/0x340
[  226.654424][T11106]  __sys_bpf+0x643/0x950
[  226.654448][T11106]  ? __pfx___sys_bpf+0x10/0x10
[  226.654484][T11106]  ? ksys_write+0x242/0x270
[  226.654512][T11106]  ? __pfx_ksys_write+0x10/0x10
[  226.654544][T11106]  __x64_sys_bpf+0x7c/0x90
[  226.654575][T11106]  do_syscall_64+0x14d/0xf80
[  226.654595][T11106]  ? trace_irq_disable+0x3b/0x150
[  226.654614][T11106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.654637][T11106]  ? clear_bhb_loop+0x40/0x90
[  226.654663][T11106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.654684][T11106] RIP: 0033:0x7f1d6e79c819
[  226.654704][T11106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.654722][T11106] RSP: 002b:00007f1d6f6d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  226.654745][T11106] RAX: ffffffffffffffda RBX: 00007f1d6ea15fa0 RCX: 00007f1d6e79c819
[  226.654761][T11106] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  226.654774][T11106] RBP: 00007f1d6f6d7090 R08: 0000000000000000 R09: 0000000000000000
[  226.654787][T11106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.654798][T11106] R13: 00007f1d6ea16038 R14: 00007f1d6ea15fa0 R15: 00007ffe9380aec8
[  226.654832][T11106]  </TASK>
[  226.890411][T11109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.016030][T11109] syzkaller0: entered promiscuous mode
[  227.041997][T11109] syzkaller0: entered allmulticast mode
[  227.052853][T11109] tipc: Resetting bearer <eth:syzkaller0>
[  227.112978][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  227.121254][    C1] lec:lec_tx_timeout: lec0
[  227.126477][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  227.250161][ T9115] tipc: Resetting bearer <eth:syzkaller0>
[  227.265700][T11107] tipc: Resetting bearer <eth:syzkaller0>
[  228.850311][T11107] tipc: Disabling bearer <eth:syzkaller0>
[  228.868075][T11132] bond_slave_0: entered promiscuous mode
[  228.874053][T11132] bond_slave_1: entered promiscuous mode
[  228.879756][T11132] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  228.889730][T11132] macsec1: entered allmulticast mode
[  228.895549][T11132] bond0: entered allmulticast mode
[  228.900956][T11132] bond_slave_0: entered allmulticast mode
[  228.907159][T11132] bond_slave_1: entered allmulticast mode
[  228.913222][T11132] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  228.923310][T11132] bond0: left allmulticast mode
[  228.928323][T11132] bond_slave_0: left allmulticast mode
[  228.934225][T11132] bond_slave_1: left allmulticast mode
[  228.939935][T11132] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  228.947005][T11132] bond_slave_0: left promiscuous mode
[  228.952439][T11132] bond_slave_1: left promiscuous mode
[  228.957917][T11132] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  228.974783][  T796] tipc: Node number set to 2060373435
[  228.990162][T11146] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  229.195195][T11153] FAULT_INJECTION: forcing a failure.
[  229.195195][T11153] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  229.209387][T11153] CPU: 1 UID: 0 PID: 11153 Comm: syz.4.1470 Not tainted syzkaller #0 PREEMPT(full) 
[  229.209417][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  229.209428][T11153] Call Trace:
[  229.209435][T11153]  <TASK>
[  229.209443][T11153]  dump_stack_lvl+0xe8/0x150
[  229.209476][T11153]  should_fail_ex+0x412/0x560
[  229.209511][T11153]  _copy_to_user+0x31/0xb0
[  229.209536][T11153]  bpf_test_finish+0x53c/0x6b0
[  229.209573][T11153]  ? __pfx_bpf_test_finish+0x10/0x10
[  229.209617][T11153]  ? _copy_from_user+0x94/0xb0
[  229.209639][T11153]  ? bpf_test_init+0x113/0x150
[  229.209663][T11153]  bpf_prog_test_run_xdp+0x8fa/0x1160
[  229.209701][T11153]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  229.209731][T11153]  ? __fget_files+0x2a/0x420
[  229.209752][T11153]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  229.209778][T11153]  bpf_prog_test_run+0x2c7/0x340
[  229.209805][T11153]  __sys_bpf+0x643/0x950
[  229.209827][T11153]  ? __pfx___sys_bpf+0x10/0x10
[  229.209864][T11153]  ? ksys_write+0x242/0x270
[  229.209895][T11153]  ? __pfx_ksys_write+0x10/0x10
[  229.209926][T11153]  __x64_sys_bpf+0x7c/0x90
[  229.209957][T11153]  do_syscall_64+0x14d/0xf80
[  229.209977][T11153]  ? trace_irq_disable+0x3b/0x150
[  229.209995][T11153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.210016][T11153]  ? clear_bhb_loop+0x40/0x90
[  229.210041][T11153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.210061][T11153] RIP: 0033:0x7f742899c819
[  229.210081][T11153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.210099][T11153] RSP: 002b:00007f74298fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  229.210122][T11153] RAX: ffffffffffffffda RBX: 00007f7428c15fa0 RCX: 00007f742899c819
[  229.210137][T11153] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  229.210150][T11153] RBP: 00007f74298fd090 R08: 0000000000000000 R09: 0000000000000000
[  229.210164][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.210176][T11153] R13: 00007f7428c16038 R14: 00007f7428c15fa0 R15: 00007fffd9216348
[  229.210208][T11153]  </TASK>
[  229.574089][T11162] netlink: 'syz.4.1473': attribute type 7 has an invalid length.
[  229.593459][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'.
[  229.640274][T11162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1473'.
[  229.665698][T11166] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1473'.
[  229.986214][T11180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1480'.
[  229.997935][T11180] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1480'.
[  230.180004][T11191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1484'.
[  230.200889][T11189] FAULT_INJECTION: forcing a failure.
[  230.200889][T11189] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  230.246198][T11189] CPU: 0 UID: 0 PID: 11189 Comm: syz.4.1483 Not tainted syzkaller #0 PREEMPT(full) 
[  230.246226][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  230.246240][T11189] Call Trace:
[  230.246249][T11189]  <TASK>
[  230.246257][T11189]  dump_stack_lvl+0xe8/0x150
[  230.246293][T11189]  should_fail_ex+0x412/0x560
[  230.246335][T11189]  _copy_to_user+0x31/0xb0
[  230.246365][T11189]  simple_read_from_buffer+0xe1/0x170
[  230.246403][T11189]  proc_fail_nth_read+0x1bb/0x230
[  230.246440][T11189]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  230.246477][T11189]  ? rw_verify_area+0x2a6/0x4d0
[  230.246501][T11189]  ? __fget_files+0x2a/0x420
[  230.246519][T11189]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  230.246559][T11189]  vfs_read+0x20c/0xa70
[  230.246581][T11189]  ? fdget_pos+0x246/0x320
[  230.246606][T11189]  ? __pfx___mutex_lock+0x10/0x10
[  230.246630][T11189]  ? __pfx_vfs_read+0x10/0x10
[  230.246655][T11189]  ? __fget_files+0x2a/0x420
[  230.246680][T11189]  ? __fget_files+0x3a0/0x420
[  230.246699][T11189]  ? __fget_files+0x2a/0x420
[  230.246729][T11189]  ksys_read+0x150/0x270
[  230.246756][T11189]  ? __pfx_ksys_read+0x10/0x10
[  230.246803][T11189]  do_syscall_64+0x14d/0xf80
[  230.246824][T11189]  ? trace_irq_disable+0x3b/0x150
[  230.246843][T11189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.246866][T11189]  ? clear_bhb_loop+0x40/0x90
[  230.246893][T11189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.246915][T11189] RIP: 0033:0x7f742895d04e
[  230.246936][T11189] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  230.246955][T11189] RSP: 002b:00007f74298fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  230.246978][T11189] RAX: ffffffffffffffda RBX: 00007f74298fd6c0 RCX: 00007f742895d04e
[  230.246995][T11189] RDX: 000000000000000f RSI: 00007f74298fd0a0 RDI: 0000000000000004
[  230.247008][T11189] RBP: 00007f74298fd090 R08: 0000000000000000 R09: 0000000000000000
[  230.247022][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.247035][T11189] R13: 00007f7428c16038 R14: 00007f7428c15fa0 R15: 00007fffd9216348
[  230.247071][T11189]  </TASK>
[  230.350899][T11197] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1484'.
[  230.480995][T11197] openvswitch: netlink: Key type 769 is out of range max 32
[  230.624891][T11202] netlink: 'syz.4.1485': attribute type 1 has an invalid length.
[  230.677564][T11202] 8021q: adding VLAN 0 to HW filter on device bond2
[  230.751154][T11204] bond2: (slave geneve2): making interface the new active one
[  230.798719][T11204] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  230.808170][ T9121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.819670][ T9121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.841240][ T9121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.858842][T11210] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1487'.
[  230.929908][ T9121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.000066][T11261] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1��^!�Y������
[  232.000066][T11261] 3�UH�5r�Bn���
[  232.132986][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  232.141109][    C1] lec:lec_tx_timeout: lec0
[  232.146175][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  232.324786][T11275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1511'.
[  232.422080][T11272] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1508'.
[  232.504562][T11287] syzkaller1: entered promiscuous mode
[  232.533650][T11287] syzkaller1: entered allmulticast mode
[  232.803652][ T5144] Bluetooth: hci4: command tx timeout
[  233.274661][T11332] netlink: 'syz.1.1528': attribute type 12 has an invalid length.
[  233.418177][T11333] netlink: 'syz.0.1525': attribute type 1 has an invalid length.
[  233.456394][T11333] nbd: illegal input index 871591272
[  233.699001][T11347] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  233.773007][T11347] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  233.868049][T11347] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  233.883134][T11347] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  233.981193][T11347] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  234.039961][T11347] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  234.129455][T11347] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  234.154835][T11347] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  235.217614][T11422] syzkaller1: entered promiscuous mode
[  235.274842][T11422] syzkaller1: entered allmulticast mode
[  235.387065][T11429] __nla_validate_parse: 4 callbacks suppressed
[  235.387089][T11429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1548'.
[  235.460935][T11434] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1551'.
[  235.757533][T11452] bond4: option lacp_rate: invalid value (128)
[  235.830688][T11452] bond4 (unregistering): Released all slaves
[  235.912632][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'.
[  235.935669][T11467] syzkaller0: entered promiscuous mode
[  235.953250][T11467] syzkaller0: entered allmulticast mode
[  235.983338][T11466] netlink: 'syz.0.1553': attribute type 66 has an invalid length.
[  236.058147][T11467] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1555'.
[  236.111711][T11459] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI
[  236.123777][T11459] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  236.132418][T11459] CPU: 1 UID: 0 PID: 11459 Comm: syz.0.1553 Not tainted syzkaller #0 PREEMPT(full) 
[  236.141845][T11459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  236.151994][T11459] RIP: 0010:memcpy_sglist+0x420/0x730
[  236.157426][T11459] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d
[  236.177173][T11459] RSP: 0018:ffffc90004fbf698 EFLAGS: 00010202
[  236.183412][T11459] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000
[  236.191510][T11459] RDX: ffffc90005b51000 RSI: 000000000000023f RDI: 0000000000000240
[  236.199881][T11459] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  236.207885][T11459] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000007
[  236.215886][T11459] R13: ffff8880327eddc0 R14: ffff88802af6c0a0 R15: 0000000000000008
[  236.223886][T11459] FS:  00007fd71252a6c0(0000) GS:ffff88812554e000(0000) knlGS:0000000000000000
[  236.232842][T11459] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  236.239559][T11459] CR2: 0000200000020000 CR3: 000000009179e000 CR4: 00000000003526f0
[  236.247560][T11459] Call Trace:
[  236.250860][T11459]  <TASK>
[  236.253829][T11459]  aead_recvmsg+0x719/0x1030
[  236.258467][T11459]  ? __pfx_aead_recvmsg+0x10/0x10
[  236.263523][T11459]  ? __pfx_aead_recvmsg+0x10/0x10
[  236.268586][T11459]  sock_recvmsg_nosec+0x10c/0x140
[  236.273660][T11459]  ____sys_recvmsg+0x3e3/0x4a0
[  236.278472][T11459]  ? __pfx_____sys_recvmsg+0x10/0x10
[  236.283817][T11459]  ? import_iovec+0x73/0xa0
[  236.288380][T11459]  ___sys_recvmsg+0x215/0x590
[  236.293113][T11459]  ? __lock_acquire+0x6b5/0x2cf0
[  236.298095][T11459]  ? __pfx____sys_recvmsg+0x10/0x10
[  236.303442][T11459]  ? get_futex_key+0x8cd/0x1690
[  236.308346][T11459]  do_recvmmsg+0x334/0x800
[  236.312902][T11459]  ? __pfx_do_recvmmsg+0x10/0x10
[  236.317921][T11459]  ? __pfx_do_futex+0x10/0x10
[  236.322660][T11459]  __x64_sys_recvmmsg+0x198/0x250
[  236.327718][T11459]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  236.333303][T11459]  do_syscall_64+0x14d/0xf80
[  236.337942][T11459]  ? trace_irq_disable+0x3b/0x150
[  236.342997][T11459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.349110][T11459]  ? clear_bhb_loop+0x40/0x90
[  236.353819][T11459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.359824][T11459] RIP: 0033:0x7fd71159c819
[  236.364276][T11459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.384000][T11459] RSP: 002b:00007fd71252a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  236.392449][T11459] RAX: ffffffffffffffda RBX: 00007fd711815fa0 RCX: 00007fd71159c819
[  236.400452][T11459] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 000000000000000d
[  236.408447][T11459] RBP: 00007fd711632c91 R08: 0000000000000000 R09: 0000000000000000
[  236.416478][T11459] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000
[  236.424477][T11459] R13: 00007fd711816038 R14: 00007fd711815fa0 R15: 00007ffdeacddc98
[  236.432489][T11459]  </TASK>
[  236.435542][T11459] Modules linked in:
[  236.440265][T11459] ---[ end trace 0000000000000000 ]---
[  236.449150][T11469] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht'
[  236.505792][T11459] RIP: 0010:memcpy_sglist+0x420/0x730
[  236.518264][T11459] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d
[  236.544339][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'.
[  236.555185][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'.
[  236.586928][T11459] RSP: 0018:ffffc90004fbf698 EFLAGS: 00010202
[  236.596691][T11459] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000
[  236.621949][T11459] RDX: ffffc90005b51000 RSI: 000000000000023f RDI: 0000000000000240
[  236.651326][T11459] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  236.661602][T11459] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000007
[  236.671914][T11487] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  236.686209][T11459] R13: ffff8880327eddc0 R14: ffff88802af6c0a0 R15: 0000000000000008
[  236.704420][T11459] FS:  00007fd71252a6c0(0000) GS:ffff88812554e000(0000) knlGS:0000000000000000
[  236.714228][T11459] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  236.721135][T11459] CR2: 00007f7428be92f8 CR3: 000000009179e000 CR4: 00000000003526f0
[  236.730548][T11459] Kernel panic - not syncing: Fatal exception
[  236.737284][T11459] Kernel Offset: disabled
[  236.741625][T11459] Rebooting in 86400 seconds..