last executing test programs:

3.204878768s ago: executing program 1 (id=3939):
unshare(0x6a040000)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x70)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x20}, 0x80)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0)
r2 = accept4$ax25(r1, 0x0, 0x0, 0x800)
ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000240)={0x3, @default})
ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000300)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffd}, 0x1c)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r0, 0x1)

2.821076669s ago: executing program 2 (id=3944):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000204000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r7, 0x0, 0x0, 0x0)
getsockname$packet(r7, 0x0, 0x0)
connect$rose(r7, 0x0, 0x0)
recvfrom$ax25(r7, &(0x7f0000000180)=""/4, 0x4, 0x10021, &(0x7f0000000440)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, 0x0, 0x0)

2.367863446s ago: executing program 2 (id=3950):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0xd}]}}}]}, 0x44}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x80000e45}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%-5lx  \x00'}, 0x20)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x9, [{0x1, 0x3}]}, @ptr={0x9}]}, {0x0, [0x5f]}}, &(0x7f0000000340)=""/100, 0x3f, 0x64, 0x0, 0x6}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x6445, '\x00', 0x0, r3, 0x2, 0x5, 0x3}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x9, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@ipv6={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xffffff00, 0xff000000, 0xff], 'netpci0\x00', 'macvlan0\x00', {0xff}, {}, 0x3c, 0x8, 0x5, 0x8}, 0x0, 0x200, 0x260, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0x964e, 0xb39, 0x40, 0x7, 0xff, 0x9, 0x365, 0x5000, 0x18}, {0x5eeb}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [0xffffff00, 0xffff00], 0x4e22, 0x4e22, 0x4e21, 0x4e21, 0x5e2dab06, 0x7ff, 0x0, 0x7fff, 0x5}}}, {{@ipv6={@local, @empty, [0xffffff00, 0xff, 0xff, 0xff], [0x0, 0xff000000, 0xff000000, 0xff], 'wg0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x87, 0x41, 0x2, 0x63}, 0x0, 0x120, 0x188, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0xd0, 0x19}}, @common=@hbh={{0x48}, {0x101, 0x6, 0x1, [0x0, 0x100, 0x9, 0x5, 0x7, 0x3, 0xc97, 0x4d1c, 0x6, 0xf4b5, 0x7, 0x2cfa, 0x6, 0xfffd, 0x8], 0xb}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0x9, 0x5, 0x2, 'syz1\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)

2.320730861s ago: executing program 0 (id=3951):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1a, 0x4, 0x0, 0x1, 0x800}, 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', 0x0})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10)
writev(r0, &(0x7f0000000880)=[{&(0x7f00000003c0)="f51af523", 0x4}], 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)

2.192831203s ago: executing program 2 (id=3952):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000002070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800)

2.170157325s ago: executing program 1 (id=3954):
r0 = epoll_create(0x3ff)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)
setsockopt$sock_int(r1, 0x1, 0x25, &(0x7f0000000300)=0x8, 0x4)
recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3f, 0xffffffffffffffff, &(0x7f00000000c0)={0x72000002})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x38)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008"], 0x44}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')

1.91313483s ago: executing program 4 (id=3955):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18f9ff8d4d953200000000000000000000000000000000fc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = accept4(r1, 0x0, 0x0, 0x800)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x1)
sendmmsg$alg(r4, &(0x7f0000002dc0)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="d0f0ce3a9bd97d5ac25fd2dae7cc50c63b3960c032ecfface63870854a004dece698e7a692cca7fe04e317", 0x2b}, {&(0x7f00000003c0)="63c6ffe4c7", 0x5}, {&(0x7f0000000400)="72aeee5eae63e0a597e285887c2eca8a5f9d55b4b0456265535815d95a65dc1a866cfa641a438d65a532c5d16fe1e0b403b8b288a632d82b6fff5a8af3fc660a8f231ff0857002bcfeba9fa44ddb7eecd941b8199ad8f140512dfcdc33b0f0380b873f54a56ae5937e74f207b6e188f4189e8892ba51e98adeb8f0f06428e8086fd3cfa0150ab7dd1ab5b5b4ca00a445e3da6c96b2246f05b3", 0x99}, {&(0x7f00000004c0)="ee04ef77fa46a6363700429f863a3da84d6d063f7b7da285e786931f6dffc6eb89ae5497180413a9fe17f043b7ea83a208a68043045a9289e64afe981cf6decf14b0758c4bc991", 0x47}], 0x4, 0x0, 0x0, 0x20048010}], 0x1, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket(0x11, 0x2, 0x0)
setsockopt(r5, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x1, 0x6, {{0x5, 0x4, 0x2, 0x3e, 0x14, 0x68, 0x0, 0xf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}})
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)

1.85233758s ago: executing program 2 (id=3956):
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x1, 0x1014}, 0x50)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x148, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xb}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0xd88}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f7ca637}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7b39}, {0x6, 0x11, 0x81}, {0x8, 0x13, 0x80000000}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x81}, {0x8, 0x13, 0x31}, {0x5, 0x14, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x51}, 0x41)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="611053000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)

1.757168814s ago: executing program 1 (id=3958):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
writev(r0, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}], 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r1, 0xc) (async)
connect$x25(r1, &(0x7f0000000a80), 0x12) (async)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10)

1.616424103s ago: executing program 1 (id=3959):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f63, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.497683216s ago: executing program 3 (id=3960):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32, @ANYBLOB="08000b00e000000108000200ac1414bb140006"], 0x60}}, 0x814)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={<r3=>0x0, @local, @initdev}, &(0x7f0000000340)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', <r4=>0x0, 0x29, 0x5, 0x80, 0x1ff, 0x38, @mcast2, @remote, 0x70, 0x40, 0x18000, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6gre0\x00', <r5=>0x0, 0x2f, 0x0, 0x4, 0x7ff, 0x20, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x700, 0x10000, 0x9}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000600)={'sit0\x00', <r6=>0x0, 0x7800, 0x8, 0xc, 0x5, {{0xb, 0x4, 0x3, 0x32, 0x2c, 0x65, 0x0, 0xeb, 0x2f, 0x0, @empty, @broadcast, {[@noop, @lsrr={0x83, 0xf, 0x3, [@dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010100, @empty]}, @ssrr={0x89, 0x7, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', <r7=>0x0})
getpeername$packet(r2, &(0x7f00000007c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14)
r9 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x868, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x83c, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x100, 0x3}}, @TCA_U32_SEL={0x104, 0x5, {0xf, 0x5, 0x10, 0x1, 0x1, 0x644e, 0x7, 0x4, [{0xe, 0x7ff, 0x5f, 0x6}, {0x8, 0x101, 0x7d, 0xfffffffa}, {0x3, 0x4, 0x6e86, 0x4}, {0x6, 0x2230, 0x0, 0x8}, {0x0, 0x401, 0xffff, 0xff}, {0x1, 0x8, 0xff, 0x4}, {0x8, 0x7f, 0x6, 0x8}, {0xf02, 0xa, 0x3, 0xffff}, {0x5, 0x81, 0x2, 0x2}, {0x9, 0x4, 0x216, 0x5}, {0x401, 0xdc6, 0xadb, 0x6}, {0x0, 0x6, 0xb62, 0x5}, {0x4, 0x79ff, 0x4, 0x4}, {0x101, 0x200, 0xfffffbfc, 0x400}, {0x0, 0x0, 0x6, 0x3}]}}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0x7}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xc}}, @TCA_U32_SEL={0x704, 0x5, {0xb, 0x3a, 0x2, 0x3, 0x9, 0x3, 0x401, 0x8a0, [{0x0, 0x7cee, 0x2}, {0x1, 0x7, 0x9, 0xffffffff}, {0x10, 0x6d6, 0x3, 0x3d4}, {0x7, 0x8000, 0x9, 0x6}, {0x5, 0x6d97, 0x81, 0x4}, {0x9, 0x8, 0x81, 0x2}, {0x9, 0x4, 0x7fffffff, 0x2}, {0x3, 0x3c, 0xff40, 0x1002}, {0x6, 0x1, 0x9, 0x5}, {0x5, 0x8, 0xffffffff, 0x7}, {0x96, 0x5a3, 0x2, 0x9}, {0x3ff, 0x0, 0xc7, 0xda3}, {0x0, 0x194b, 0x2b4, 0x401}, {0xcf97, 0x9, 0xb4, 0x8}, {0x2, 0x6, 0xe, 0xfffffff8}, {0x4, 0x7, 0x7, 0x8e8f}, {0x567, 0x3, 0x1, 0x84a1}, {0x5, 0xd52, 0x4, 0x4}, {0x0, 0x9, 0x6, 0x200}, {0xfffffffb, 0x8, 0xab1}, {0x0, 0x49, 0x7, 0xffff}, {0xfffff827, 0x3, 0x8, 0x580f}, {0x1, 0x9, 0x1, 0x101}, {0x4, 0x5, 0x10000, 0xffffffff}, {0x100, 0x2, 0x3, 0x4}, {0x7, 0x84, 0xe65c, 0x1000}, {0x5a1a, 0x5, 0x105, 0xb8f}, {0x1, 0x4, 0x8, 0x8}, {0x3ff, 0x8001, 0xd06, 0x5}, {0x5, 0x800, 0x1, 0x80}, {0x7fff, 0x4, 0x2, 0x99}, {0x2, 0x7, 0x3, 0x80000000}, {0x0, 0x0, 0x2, 0xffffff02}, {0x8, 0x4, 0x1, 0x7ff}, {0x0, 0xa00000, 0x1}, {0xabc, 0x7f, 0x9, 0x1000}, {0x5, 0x3, 0xc3, 0x6}, {0x400, 0x7fff, 0x0, 0x7}, {0x400, 0xe2, 0x7, 0x7f}, {0x101, 0x8, 0x9, 0x6a9}, {0xf, 0x2, 0x101, 0x7}, {0x1b1a, 0x5, 0x9, 0xcd3}, {0x101, 0x209a806b, 0x7fffffff, 0x6}, {0x3, 0x80000001, 0x8, 0x7}, {0x9, 0x5c, 0xc, 0x7fff}, {0x6d25, 0x0, 0xe, 0x4}, {0xfffffff7, 0x6, 0x1, 0x4}, {0x8, 0x9, 0x101, 0x63de}, {0x4, 0x3, 0x7, 0x4}, {0x4, 0x0, 0x3e49, 0x3}, {0x400, 0x1, 0xffffe32a, 0xc}, {0x9, 0x2, 0x4a8, 0x7fffffff}, {0x400, 0x5, 0x4, 0xe0000000}, {0x0, 0x5e, 0x5, 0x401}, {0x0, 0x5, 0xfffffe00, 0x3}, {0x0, 0x3ff, 0x2, 0xe11c}, {0x5, 0x6, 0x93, 0xf}, {0x3, 0x3, 0x7, 0x5}, {0x2, 0x6, 0x7fffffff, 0x24e0}, {0x9, 0x3, 0x8}, {0x118ca14e, 0x3, 0x800, 0x4}, {0xffffffff, 0x9, 0x0, 0x7fc}, {0x9, 0x7c8, 0x1, 0x8}, {0x4, 0x4, 0x3, 0x81}, {0x94, 0x7, 0xbbf8}, {0x4, 0x5, 0x2, 0x20}, {0x9, 0x0, 0x9, 0x4}, {0x9, 0x134, 0x1, 0x9}, {0x65a, 0x10001, 0x8, 0x3}, {0x4, 0x6}, {0x9, 0x8, 0x80000001, 0x9ad}, {0x6, 0x10000, 0x4, 0xfffffffe}, {0x80000001, 0xffffff81, 0x43e4, 0x4}, {0x4, 0x8, 0x8, 0x78f}, {0x1, 0x2, 0x7fff, 0x54}, {0x6fb, 0xfffffffc, 0x9}, {0x6, 0x7, 0x2, 0x6}, {0xc384, 0xd7, 0xfffffffd, 0x4}, {0xd3, 0x5, 0x2, 0x6}, {0x0, 0x2, 0xfffffff8, 0x3}, {0x8, 0x1, 0xfff, 0x5}, {0x1, 0x40, 0x5e2, 0x299}, {0x2, 0x4, 0x8, 0xfffffffa}, {0xd870, 0x5, 0x7, 0x3}, {0x856, 0x40, 0x4, 0x6}, {0x7, 0xa6, 0xffff43b3, 0x1}, {0x3, 0x73f7a8ca, 0x520000, 0x4}, {0x6, 0x9, 0x1, 0x2}, {0x1, 0x5, 0x34c, 0x6}, {0x4, 0x18000, 0x9, 0x8}, {0x5, 0x5, 0x5, 0xffff}, {0x3, 0x40, 0x2, 0x4}, {0x9, 0x9, 0x40, 0x800e0}, {0x5, 0x7ff, 0x8, 0x200}, {0xffff, 0xf567, 0x90c, 0x9}, {0x3, 0x5, 0xffffe546, 0x5}, {0xfffffff8, 0x6, 0x70, 0x3}, {0x6, 0x10001, 0x9, 0x9b}, {0xfffffff7, 0xfffffffd, 0x3}, {0x9, 0x16cb, 0x6, 0x4}, {0x9, 0x1ff, 0x8000, 0x8}, {0xfffffffc, 0x9, 0x200, 0x400}, {0x7, 0x2, 0x1, 0x3}, {0x932, 0x6, 0x1, 0xfffffff8}, {0xb, 0x2, 0x9, 0x71a}, {0x3, 0x7, 0x4, 0x3}, {0x10000, 0x8, 0xd, 0x6}, {0x9, 0x8, 0x0, 0xa7}, {0x8, 0x4, 0x7, 0x44e}, {0x6f, 0x6, 0x3, 0x80000000}, {0xffffffff, 0x778, 0xf, 0x10000}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xbe}]}}]}, 0x868}}, 0x4080)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'ip_vti0\x00', <r11=>0x0, 0x1, 0x8, 0xb637, 0x1, {{0x12, 0x4, 0x2, 0x0, 0x48, 0x65, 0x0, 0x0, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x18, 0x4d, 0x0, 0x5, [0x3ff, 0x8001, 0x9, 0x2, 0x6]}, @noop, @rr={0x7, 0x1b, 0x34, [@dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010100, @multicast2, @multicast1, @multicast2, @private=0xa010102]}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000940)=0x14)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000c40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x25c, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3430f7bb773ae0b3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r14)
r15 = socket$unix(0x1, 0x1, 0x0)
r16 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r17=>0x0})
sendmsg$nl_route_sched(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=@newqdisc={0x128, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x8000000, {0x0, 0x0, 0x0, r17, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf8, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0xb0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x8, 0x8, 0x80}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x400, 0xf, 0x7b}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x5, 0xa, 0x7, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x2, 0xffffffff, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x4, 0x5, 0x200}}, @NETEM_LOSS_GI={0x18, 0x1, {0x200, 0x2, 0x0, 0x798, 0x80}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x1, 0x24aa, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0xd1, 0xf, 0xfce, 0x5}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x4, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r14, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.416071416s ago: executing program 4 (id=3961):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000003000000180000000300000000000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc5c79a324b7d4b3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000007000000008275000000000018a876b3662190c52ffe2c2de5230000bc4b359af1496aefbc6d44d758", @ANYRES32, @ANYBLOB="00000000020000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
unshare(0x68040200)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000043c0)={'tunl0\x00', {0x2, 0x4e23, @empty}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000250200"/28], 0x1c}}, 0x44044)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff)
socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x8, 0xf, 0xb}, 0x80, &(0x7f0000000140)}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20800001", @ANYRES16=r7, @ANYBLOB="000227bd7000ffdbdf25740000000c0099000700000006000000"], 0x20}, 0x1, 0x0, 0x0, 0x4044801}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000100)=r11, 0x8)
sendmsg(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="b76e121c72ad6f0d20d0a5507e606cd53eb366c2add3f7c67c5aea236b38db6e47", 0x33fe0}], 0x1}, 0x8000)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

1.097809764s ago: executing program 3 (id=3962):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa000100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0xa0, 0x2b}, 0x0, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0)

955.046534ms ago: executing program 3 (id=3963):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x8, 0x3, 0x0)
socket(0x2b, 0x80801, 0x1)
socket$inet6(0xa, 0x80003, 0xff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6(0xa, 0x5, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x44084)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44080)

953.865654ms ago: executing program 1 (id=3964):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000180000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

864.950482ms ago: executing program 2 (id=3965):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000010000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)

849.262475ms ago: executing program 1 (id=3966):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1a, 0x4, 0x0, 0x1, 0x800}, 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', 0x0})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) (fail_nth: 4)
writev(r0, &(0x7f0000000880)=[{&(0x7f00000003c0)="f51af523", 0x4}], 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)

784.74564ms ago: executing program 2 (id=3967):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2281, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x7017}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4cc4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r4, 0x0)
r5 = accept(r4, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47)
recvmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, r8, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4e9}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x2000c855)
bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0xf)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000001140)={0x0, 0x6}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000403fd03f180100002020782500000000002020207b1af8ff000000006d0afeff000000000701b092f8ffffffb702000008000000b70300000f200000a500feff0600000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x101a, &(0x7f0000000840)=""/4122, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

771.339147ms ago: executing program 0 (id=3968):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x8000000)

590.657519ms ago: executing program 0 (id=3969):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x1, 0x6, 0x2})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4404500a}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x140, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x24040004}, 0x48004)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0)
getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0xf8, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000006c0)={@mcast2, <r5=>0x0}, &(0x7f0000000700)=0x14)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xc0, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0xc0}}, 0x24000080)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00'})
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f00000008c0)={0x33, @empty, 0x4e24, 0x4, 'wrr\x00', 0x20, 0x8, 0x72}, 0x2c)
recvmmsg(r0, &(0x7f0000002100)=[{{&(0x7f0000000900)=@rc, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/130, 0x82}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/157, 0x9d}], 0x1}, 0x2}, {{&(0x7f0000000b80), 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c00)}], 0x1, &(0x7f0000000c80)=""/5, 0x5}, 0x6}, {{&(0x7f0000000cc0)=@isdn, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d40)=""/66, 0x42}, {&(0x7f0000000dc0)=""/81, 0x51}, {&(0x7f0000000e40)=""/228, 0xe4}], 0x3, &(0x7f0000000f80)=""/23, 0x17}, 0x8}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1, &(0x7f0000002000)=""/15, 0xf}, 0x81}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000002040)=""/65, 0x41}], 0x1}, 0xca9}], 0x6, 0x10041, &(0x7f0000002280)={0x0, 0x989680})
sendfile(r6, r0, &(0x7f00000022c0)=0x9, 0x6)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000002300)={<r8=>0x0, 0x1000, "dc40b850a47bc0e29a3e708e37eb31f763e9f7ace6df61b84358be3ec7a058d9b01bcabbe1f3c5dc609e1a1e9a084a05d6fee6cb5bec403533ee88584821a067f5da45c0d0373e53cd10e98ce7192b8542e4a8283d946563dca1754cd2a7139263fa77584232d3fabeecb9de4e4d3605f97df05864e930a70a426fe93e6fd58323f24e419187c9e9e86fc25e61463ac551e6f8661bc142252a301de332a0cc454ce618417ac4735c47a995ea9fa2643d3d733dcbf1abe80e8ca8f2264a9bbb2ba1c189e21bf50bc22a2464247fc0a87e89467c1a6f47eee4eee62b33a5cce462c41757f6f888bf901f48199b52d1c8a01b7c0e7f9c80bc8e4831cefd7bc3ca7aa6dd92363be96664d182dd8a7ee2828c6e765396a40a0ff7add828a04bbfc2b292ec54abbc5c53ff9c5673f2eaf21fe7067a074952a6d51feb963ea1b6aa36b8d48cb198f94e947312245f0b82d80039b625c82dc0168cef860c5e10724e35166bd91486b3f1c1013bb547fcccea3cb3dabbcd57b103b0a6c497838d5fc2ece90c29076e436631e7f0a3659ec46f5942f2d718dc378c3d2de297fc617ea051bd2b4df73fb8048b05ec1ddbfc8044e9869a711f9d056dafdd8707f7f23273a71c8ff91e98ba54018ca89eeb26da9ce6bc1094d5fbfa66019b3e3845570d73d0177e6856f7d4f7dfbcd3f009ce3c7b0db314b669ef446a9ad529fef6595edb7edd0309e737b5b225393f463b143eb82dedd0f2eb4bfab33d65a410415004a98f9689f0ccecc37fa68aed56d7eb05c70b06c19cbea5110dee3cb12a99ba63ef429c8e36fb7b6f37e1a1c8b82e5b8b9cf8bfd3da059dbbf0fdcba2b4904020a80fdd7a6e756da881f8272ef79b96fba34699ff6385fb6615aa045af9f30f9d25c4edcfa577af4a77df1144deb61d95aac7c2e8f2f4635a839b64d578fbaebf64d74f1c3897e91475df0a3dcb23e37baa2594a1d37535d41e6767a6616aaea394d64d8012ca61d0d8676ec941e645406979a19980518381eafb0cce17882a95b02009af5ed66783c350ea0a0196a79d483821fe76cf71b8161d0aedf1d43b6f08c15a992df8e4b4b8c7e27fbfe896fbc219bc5041d4d9e29dc0b1e2316d85b0f9e3cfae5ad506410676678a0835c110ad2819dd050b3c34b2649471188a7db8e92acf1e1892b62dd19d0d84cbc6ec8c2c8f5e189cb698fc2bc629d397b6aa1f56169f9c651140862255cf4e7f3e0e23a2357e53cd051a78b778a5ff5698e655be55d985540e4157b914465acdecde02bc0dca67d6efca552096caa8837f6cc7cc629c4e998aeeb1eff6ae8835847e86c09e8d74e56558ffa16566169cdb9532b1c0906db65a29279520a21dee5e3799e048b1094e6a7b64817f2c064cce45072c5385caa1ef94eab3d2ebaf34b64c99eef312e0c73b0ef3c0f1328107621547ef05636ff6b68775441c0928c9ed5580588f5cccb8cafd5263954fe976b21b09a3dfa8b56fd98f2de4296950ce57482296b5f3648456cf6d42a1b5a0cf604234e1c4a78133fddf33146e38857be6c6f9c69c3f868808d721c8a6c70c7b2424c80a0a936700d46b4a216505700eabf4624d43e69287b10bf4c388f9df8fcf43b8b238be6f20bac89a1e4265fcd7429dad61c5177544f91f4e46f6c671f48850cd44599b0163525e0237c25f82d7df0b08c08c3576533646deafbb98621875a427969d18fce9530ed9f7c8945db132d739794abff3f2b2c03ed19a7a9c10fdfc5c5dcd175781fdb4f24392c40bbc6964f0cfef3b78bf044a178618a864abe276b0703e0f4b78b14f83d3cb2ffea5ebddbf6d83a736e42b8aa6ddabc36b927891e956a6106e961a9bd6bad25e90d0bbf2848244792907f35b7a29f0f881d8f8edf8429f64513aebd993bd2dacb63676fe8a6c03c31d50a5b5f6511e5b2959b655ceba20366c7e6cbc8fe9ab2587f4111fe7e2c65ad43cd9b6090bd34837dd945bee451cf241678ef2116a2b12021451e0f0e0cb16c47a5cee7afeb2b47e8654fb86d831e33008fb26f1ec537b9137e1157d5ca27138b7fc4f89c86096f63981fe621f5f289b8794bd68347e0918a12798475c14f1e50104cbc6529dc8eaf59787968f52d0140234097a5318f54889efffb9692835ee464b53d5880e3b478b293131526b3ed402adb6390e34a1dde82a69374efeb2f5b1d0b1f0e83ae1cbda3b1d8f7ffef05e900d521fc680c9b1caca11713108b05ed8117f1c55e7d8ab5f15c31fd7070f1a189bdd0f4c15a02d372492dbeb557f2c8c48df9a85f0afb3194cbeed90d072b9d3d71afa125a462416ae36ae5e17edee377bbf202538949b3a101bc3c68a7ccaaecc079b337523168f25b6f2a33880769737fb35b31fcbe2625785c1b5874c49c1599003e837372f654c4dc12317b76b38e01cef97b45ff6b65caa1f87f00a710c234770efced1a5a22de44ba506f1b04c938881f02d5e99e8e5df4a801a83119fc99eea09b8999f2d9345e85ba6c7140d22834f701a89ead1dabc431205299840a44d8a98e89112269732f1bd88e2910a498c65f5a697b9528d51ffd466fa9c49c0aaa9b97c9793fdb17496d93ff2e310514c24ba411dd9aec6276f3f495f315c8d04c3af19f29514c305920f1380cf1f62b36327f47a4b0faed5021afba0f8dedcccb265b4ef549ef70b2c70380657e45e7ef8a5d5c6d99ca8988d556e858309d2517af284c965572d959d0740b383bd0a46318b2cf6fb0f7c1ef991088abb6171cab96260d6025960e1f2c478a59cee774fe121446091e5bb1b08e2598435d8f46f059abd3c5408d6448ce6e2c4474bc32d52443705af3afe1b2a679847593e3ea4f2ad022f72eac8d6bf1696defd6d8e439c9cbd3620f329191e1a3ed6d00f341370a3ecacc1cbe65719e6833de1948f2e16eb2edfca9424f95150e5236926c8b1c0e4febf39e1ebd4ae14c54cfba01586fd4781678d2a854803e8a953f4171acca03caf8aa6c8ad8090987437a67caf638dd1ea607ebf45f558fe4de7837dd59bc198c8d1627678e52300ccf152c88fccb5ec4780c98fbc868b2a61969765377d44796e8690a3ae19c99605cc5e9588eea761cb2f287a1b4d6da5175acc1e9a1992462c592e20a158094e11351704410b4faa1113ef4e174d72c2373179740971623c6869773f1c69791fcf48bbb19715953e2f59776423990b1762ac7313535e60c8674e95d5f1f0bf63e80ede903a73571278e592c96f898b4762dfa057fd912cd4d4ed9c6c41ea3d35d1aa0eb02c23ab2503e2621e7506de09f1f54a05db001de4bcd482f879709f57429670fcae49a2ee4298a71ec03655c897d6ecc53eff8fb5e1209520706ea3aab0be61179b6a3cbac5995c8185f19396c10c774aca39fb7563fd8715f137b2e1e0dff2cc0a3b91682f8224f0c778ba8afb693a127339853284da7e7b045360cb1c44a7e9b15b378696483557ca1e5912f53629ec994b9dc0546143ec80ad5c8025e67a2ed2fe4187c07769dcf5a47204ef0913f3d0f371049966b2e65a43beaac98e16d7f20217370241051fd8aabee7a552518d031107190794b1a4fac1a14bcbe5697d5a84ea8dbe625d11f3ea82c8eda3704f5af4d6b7e97b3ef2ab624e04ecffce17a6dfb3713566d257874acc96b90782032031be696157eb386202ecc0ce38400e322e4455ea6b0e8014a3d8379f9bd5aea1a1f6a51db5826ff4804ceba795447a09db9c4dec0114be3a8e88e28080cd962a0b0d2966876443d89fd817d4a3a10779e0242a542d92ab0e438798044a05ba7ecb208f2868630fc5758c7fd7f7094f9870800799120504c3083c091f115cc1b55297e7113d11e2d85bb6cd499bb3d84f261d8821d22089e1d9aca967a9644fca9497095923ede2c218a43ff541d2a3c085e0b98562f56f6ce66e1f4160f34d55377b86be93e4b439a140c4b404e8d97caa73d3482f0eccf16767b8a697040497edcb16e7ec83ff6afd3893fd04a7b15baa9ee7cbd8ca56401e2485366674d788081b1bdaaca5efc1016a9bde75b91a18b570edc2d8bc0ed16e194e6d414c946c93f6aba37f40ff71d406c0457e2b0f22f9b46f8aaf7ff2f980c7afcb47ec420c35af703a886d56a977c45a8c8f31f9bad630100bc8a5da4ab7a9c90c1ea87c0897c4e1ffd6260b1cae9bca2f7547b30420b96227cf8723461a3e2456c3bc484e282561272f32767367b2edc78028f72bf20c5d806dbe97d46bf178d9c1e67d124b9b8086a8e712c094ba8c895a756e8b5bfcc68c7d14b55a7ca3a0a8305345dc46b7649304ddfac3ccb18a64e949a5a88cbe11cef3ebaed392b436faddf081251a6bc7348c1c8f7a4ee78c9f20c5d603d8748c8e50c978a3dc01279c10f878a5cdaf374e7ebf259afec9ed134c3d67d99f401e5ce0cc7e997fe810ee3002bc2b20ce7781737db6d072b9e434d7bea6185720b50e019134e9f39cf464b6cd8603f9b19debc9a22b544784b4af995f9321c0a6e4d60ddff5a0750e7d610e93512b783f9268f70108dc367877014d2cdaab4cecae4d0d573baff4e53a650424e855fac6d718aa3e7ba39206e6b99b3ec524ea7612633bee6d04fb49326d95165302391b73e5e5b19736ac82c61b7bc95f5d3776f0ae1854f655482dbfd78e14f339abea242fef8dd92be7fc7a97b27fecb65c4d51769908a102ffd6d09bc1abfef74073cf4fe0d6c30a8960fed2adb640a842a38d995515fd6826f84e35036f8f6a9ae2cdb07c328b91471cf7696fb3b8fe8586359943ee2c0b081e0a4e0799939f5425feb24194061fda449d14d7097f679ef316a790406f1d372b5f7b38dc5593e46e08a19100fb31228799f90b672931a1e17c75b51fe24979ccba1a2371e79c3ddb81917cfda0f70b11ecf31a28ac069b65026b2406d276f585e5b94de1996da1f8902e8e0dc90fb6b42bb8911346e1096a5187989c37fc6b41d12da6dd4afbd35bb09bd09197e5c956d5c29e8ed0293349263c8abffb4edf758fe4c3f7d1f6221875c7d42471a4f0125c341e421814f20e12f4b713d3f4690b523d53face15dcbe7481a90f7b08b4ec9e51c4b8d7f0039df43d0e78aa2ffc023ac0b82bc98c44c329368067d69223b381a9ab71fbea67616e4bc4328d0734e8c427bcb590feb6ea1a39773eb1f9bd9382f498ac421f5d66f4f29df06799d4103e7b05592f99d36528a2c320babd05c4cb7f400edf2e0770fd586b0aa3d8334a24aaf1840cf6e1d92ffb35dbb9e11266e007588a4a87dd5c38615efa9720e01c001cf5d754ccd413e676e8dbd64530dab9bc78f3faf18e560791c0c2f7bdabaa18e28618174092a6551a29c3f07f801ff06b8d39fe0aa2b832be7bc6320cf347b7e455efba4868c5b11e3d939c32c75777dd119da31ee3d166831f0fd3658a2b786058069713dbca27bc3233b766fa4fc4ee7b191eb88bee21b06f17147751e75a336817bb100b7682d9eea5ae57b1c21db589188900023571418b77bd1fbfe28a10bd9faba6d58c915dd99e5d7403af7f76a7a96bed4b0860b4411841b1d08e2f439f97a382932db6d5c861faf1f9d3e3ec314601723c61ff7eb8c188e0b554faceefd0797a10d520798bf69bebf42bb3935ea982927c167273e961e7c2ff1db5e7a0eb299faddb0f79f5651a71647d30d726753ff3c0ebba77b657f90d708f55f199ce87df6097f89992bcf41a4445a32449af4ab9210f1c0b390c0d6a4c3b3a14dc74d63ce6234aafbb1bbd3e1edf3ad20d01f655ae6b30d6240f0a92b7ac10c5be"}, &(0x7f0000003340)=0x1008)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000003380)={r8, @in6={{0xa, 0x4e24, 0x3b0b9f3a, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}}, 0xe, 0x1, 0x7, 0x6, 0x8000}, &(0x7f0000003440)=0x98)
pselect6(0x40, &(0x7f0000003480)={0x7, 0x4, 0x8000000, 0x9, 0x2a, 0x9, 0x6, 0x9}, &(0x7f00000034c0)={0x7, 0x0, 0x10, 0x7, 0xe813, 0x1, 0x9, 0x4a65}, &(0x7f0000003500)={0x7, 0x7fff, 0x200, 0xc48, 0x67, 0x0, 0x100000000, 0x9}, &(0x7f0000003540), &(0x7f00000035c0)={&(0x7f0000003580)={[0x9]}, 0x8})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000003600)={0x0, 0x1, 0x6, r3, 0xffffff9f}, 0xc)
sendto$inet6(r7, &(0x7f0000003640)="3a6c716988b8b99d9a9b1e05c0b688a6ca34329869238cdf7b47d3467b834aeab04299370ba4cad1b7ab46f904b97513ef25850cffe97c81a9b40c51f0a1351cbbe6441eb87e507af27c7ffb1c553961a7d9aa7b6f", 0x55, 0x4, &(0x7f00000036c0)={0xa, 0x4e22, 0x55, @private1, 0x7f}, 0x1c)
r9 = accept4$x25(r0, &(0x7f0000003700), &(0x7f0000003740)=0x12, 0x80000)
ioctl$SIOCX25GDTEFACILITIES(r9, 0x89ea, &(0x7f0000003780))
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000037c0))
r10 = accept(r7, &(0x7f0000003800)=@ieee802154={0x24, @short}, &(0x7f0000003880)=0x80)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000038c0)={r8, 0x6}, &(0x7f0000003900)=0x8)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r9, 0xfa0bf000)
r11 = socket$netlink(0x10, 0x3, 0x7)
syz_genetlink_get_family_id$batadv(&(0x7f0000003940), r11)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000003980)=0x9, 0x8)
recvmsg$can_j1939(r10, &(0x7f0000003d80)={&(0x7f00000039c0)=@tipc=@id, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003a40)=""/48, 0x30}, {&(0x7f0000003a80)=""/227, 0xe3}, {&(0x7f0000003b80)=""/171, 0xab}], 0x3, &(0x7f0000003c80)=""/247, 0xf7}, 0x10120)
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000003dc0)={'veth0_macvtap\x00', 0x2043})

589.029059ms ago: executing program 4 (id=3970):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002711cb259efe796654c6591a2d00010026bd7000ecdbdf250400000004000e80"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)

452.878827ms ago: executing program 4 (id=3971):
r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) (rerun: 32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x400, 0x452c}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

452.243179ms ago: executing program 3 (id=3972):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002000240012800b0001006d616373656300001400028005000a00010000000500090001"], 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="87476ef67389ec9481962a976f911e37013d54be607f542d64aa0c95795e03e00862d9ad30dc4857169721ef7d1f6767dc2def5a211264915853a53447675d092a6143ac5155205d0dacbee6189ca2aa278d83449b92a62dcfc8e34278b5dc0874", 0x61, 0x4040880, &(0x7f0000000200)={0x11, 0x17, r3, 0x1, 0x1}, 0x14)
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2)

402.003381ms ago: executing program 0 (id=3973):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
setsockopt(r1, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000380))
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000000)=0xfff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x14}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)

309.379519ms ago: executing program 4 (id=3974):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200010100000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="540000804e0031"], 0x70}}, 0x0)
recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000020, 0x0)

211.544063ms ago: executing program 3 (id=3975):
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) (async)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) (async)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
recvfrom(r2, &(0x7f0000000080)=""/28, 0x1c, 0x40000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c00000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c000064001280090001007866726d0000000054000280080002000200000008000200030000000800010000000000080001000300000008000200010000000800010003000000080001000300000008000200020000000800020001000000080002000300000008000a00", @ANYRES32=0x0, @ANYBLOB="804b16a6e64cc7789c6b0e5be8bec0cfc07170dda9df6d5d196993ea4b35f5e9b330f1c5edf530d39c90c763a0142eb9d7bb5d03d229499a9c68a12a79c6aae86ba811c7687d14c9bb232a1828c0e45851384d3719eb6578b1"], 0x8c}}, 0x48010)
close(r5)

133.92656ms ago: executing program 0 (id=3976):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000200000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

66.514532ms ago: executing program 3 (id=3977):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0303fdfffffffcffffff0c00000008000300", @ANYRES32=r3], 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x44, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

940.531µs ago: executing program 4 (id=3978):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x22, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x82}}, 0x0)

0s ago: executing program 0 (id=3979):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x8000000)

kernel console output (not intermixed with test programs):

69.970168][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.014083][T16131] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.018028][T16133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3043'.
[  470.021860][T16131] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.112388][T16135] tipc: Started in network mode
[  470.117585][T16135] tipc: Node identity d690a855eb99, cluster identity 4711
[  470.139698][T16135] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  470.196041][T16135] tipc: Resetting bearer <eth:syzkaller0>
[  470.246734][T16143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3047'.
[  470.256665][T16143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3047'.
[  470.421900][T16134] tipc: Disabling bearer <eth:syzkaller0>
[  470.485729][T16145] netlink: 'syz.0.3049': attribute type 1 has an invalid length.
[  470.566345][T16108] chnl_net:caif_netlink_parms(): no params data found
[  470.727293][T16163] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3053'.
[  470.841869][T16108] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.865295][T16108] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.878032][T16108] bridge_slave_0: entered allmulticast mode
[  470.889182][T16108] bridge_slave_0: entered promiscuous mode
[  470.902457][T16167] netlink: 'syz.3.3055': attribute type 2 has an invalid length.
[  470.919006][T16108] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.933602][T16167] netlink: 'syz.3.3055': attribute type 1 has an invalid length.
[  470.948703][T16108] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.962226][T16108] bridge_slave_1: entered allmulticast mode
[  470.984720][T16108] bridge_slave_1: entered promiscuous mode
[  471.009926][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.018200][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.112410][T16108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.179726][T16108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  471.273610][T16108] team0: Port device team_slave_0 added
[  471.292984][T16108] team0: Port device team_slave_1 added
[  471.370375][T16108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  471.377525][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.416401][T16108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  471.461909][T16108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.479236][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.540359][T16108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.707593][T16108] hsr_slave_0: entered promiscuous mode
[  471.725849][T16108] hsr_slave_1: entered promiscuous mode
[  471.756007][T16108] debugfs: 'hsr0' already exists in 'hsr'
[  471.769228][T16108] Cannot create hsr debugfs directory
[  471.812770][ T5877] Bluetooth: hci4: command tx timeout
[  472.049238][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.133506][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'.
[  472.181983][   T30] audit: type=1800 audit(1758184772.190:5): pid=16204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3067" name="memory.events" dev="tmpfs" ino=3175 res=0 errno=0
[  472.286753][T16213] veth0: entered promiscuous mode
[  472.297492][T16213] veth0: left promiscuous mode
[  472.541370][T16201] lo speed is unknown, defaulting to 1000
[  472.739559][T16218] lo speed is unknown, defaulting to 1000
[  472.799316][T16220] netlink: 'syz.1.3072': attribute type 1 has an invalid length.
[  473.091528][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.099856][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.198109][T16232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3075'.
[  473.221770][T16232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3075'.
[  473.503861][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'.
[  473.537345][T16248] macvtap1: entered promiscuous mode
[  473.549676][T16248] veth0: entered promiscuous mode
[  473.556163][T16248] macvtap1: entered allmulticast mode
[  473.582254][T16248] veth0: entered allmulticast mode
[  473.604645][T16246] netlink: 'syz.3.3082': attribute type 1 has an invalid length.
[  473.844656][T16108] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  473.887513][T16108] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  473.889520][ T5877] Bluetooth: hci4: command tx timeout
[  473.902607][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3085'.
[  473.918615][T16257] lo speed is unknown, defaulting to 1000
[  473.927755][T16108] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  474.000018][T16108] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  474.131301][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.139557][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.216464][T16283] pimreg: entered allmulticast mode
[  474.245702][T16283] pimreg: left allmulticast mode
[  474.371098][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3093'.
[  474.460600][T16289] veth0: entered promiscuous mode
[  474.466399][T16289] macvtap1: entered promiscuous mode
[  474.473549][T16289] macvtap1: entered allmulticast mode
[  474.489138][T16289] veth0: entered allmulticast mode
[  474.725347][T16302] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.809333][T16317] netlink: 'syz.3.3104': attribute type 4 has an invalid length.
[  474.854724][T16108] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.033494][T16302] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.121730][T16108] 8021q: adding VLAN 0 to HW filter on device team0
[  475.148038][T16329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3110'.
[  475.161903][T12537] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.167027][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3111'.
[  475.169102][T12537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.170530][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.195664][T16329] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3110'.
[  475.220387][T12537] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.227563][T12537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.240735][T16331] macvlan1: entered promiscuous mode
[  475.250327][T16331] macvlan1: entered allmulticast mode
[  475.262530][T16331] veth1_vlan: entered allmulticast mode
[  475.387099][T16302] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.601340][T16302] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.782362][T12537] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  475.829670][T12537] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.873696][   T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.921959][   T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  475.970387][ T5877] Bluetooth: hci4: command tx timeout
[  476.094047][T16369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3121'.
[  476.159883][T16108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  476.209455][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.217604][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.250398][T16371] lo speed is unknown, defaulting to 1000
[  476.357729][T16108] veth0_vlan: entered promiscuous mode
[  476.398557][T16372] lo speed is unknown, defaulting to 1000
[  476.409334][T16108] veth1_vlan: entered promiscuous mode
[  476.463396][T16375] lo speed is unknown, defaulting to 1000
[  476.646798][T16108] veth0_macvtap: entered promiscuous mode
[  476.659551][T16108] veth1_macvtap: entered promiscuous mode
[  476.878498][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3124'.
[  476.899057][T16381] macvtap2: entered promiscuous mode
[  476.905039][T16381] macvtap2: entered allmulticast mode
[  476.975181][T16108] batman_adv: batadv0: Interface activated: batadv_slave_0
[  477.096764][T16108] batman_adv: batadv0: Interface activated: batadv_slave_1
[  477.190478][   T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  477.220296][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  477.252312][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.285200][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  477.346979][   T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  477.509231][T16396] lo speed is unknown, defaulting to 1000
[  477.554076][T16397] vlan0: entered promiscuous mode
[  477.591706][T16397] erspan0: entered promiscuous mode
[  477.630494][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.644729][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.836595][T16404] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  478.097643][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.116862][T16416] lo speed is unknown, defaulting to 1000
[  478.147876][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.291518][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.299768][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.317318][T16428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.333807][T16428] tipc: Resetting bearer <eth:syzkaller0>
[  478.405863][T16427] tipc: Disabling bearer <eth:syzkaller0>
[  478.535410][  T921] IPVS: starting estimator thread 0...
[  478.637490][T16437] tipc: Started in network mode
[  478.661486][T16437] tipc: Node identity ac1414aa, cluster identity 4711
[  478.663329][T16442] netlink: zone id is out of range
[  478.674512][T16439] IPVS: using max 32 ests per chain, 76800 per kthread
[  478.683134][T16442] netlink: zone id is out of range
[  478.688286][T16442] netlink: zone id is out of range
[  478.695669][T16437] tipc: Enabled bearer <udp:s>, priority 10
[  478.698660][T16442] netlink: zone id is out of range
[  478.713143][T16442] netlink: zone id is out of range
[  478.730633][T16447] netlink: zone id is out of range
[  478.764689][T16442] netlink: zone id is out of range
[  478.790374][T16447] netlink: zone id is out of range
[  478.807389][T16434] lo speed is unknown, defaulting to 1000
[  478.843749][T16450] __nla_validate_parse: 2 callbacks suppressed
[  478.843768][T16450] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3143'.
[  479.056773][T16457] netlink: 'syz.3.3145': attribute type 39 has an invalid length.
[  479.299785][T16457] veth0_macvtap: left promiscuous mode
[  479.512297][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3147'.
[  479.583309][T16462] veth0: entered promiscuous mode
[  479.611183][T16462] veth0: left promiscuous mode
[  479.708320][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3148'.
[  479.742182][T16468] veth0: entered promiscuous mode
[  479.755333][T16468] macvtap1: entered promiscuous mode
[  479.781213][T16468] macvtap1: entered allmulticast mode
[  479.800247][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3148'.
[  479.807281][T16468] veth0: entered allmulticast mode
[  479.815248][ T5926] tipc: Node number set to 2886997162
[  479.920238][T16470] veth0: left allmulticast mode
[  479.938691][T16470] veth0: left promiscuous mode
[  479.989123][T16475] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  480.017297][T16472] syzkaller0: entered promiscuous mode
[  480.049195][T16472] syzkaller0: entered allmulticast mode
[  480.257230][T16475] tipc: Resetting bearer <eth:syzkaller0>
[  480.366606][T16471] tipc: Resetting bearer <eth:syzkaller0>
[  480.440724][T16471] tipc: Disabling bearer <eth:syzkaller0>
[  480.483658][T16484] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  480.522425][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  480.534223][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  480.545820][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  480.557417][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  480.580391][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  480.843180][T16489] lo speed is unknown, defaulting to 1000
[  480.855889][T16498] lo speed is unknown, defaulting to 1000
[  480.916096][T12539] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.032902][T12539] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.127652][T12539] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.185069][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3163'.
[  481.232649][T12539] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.255670][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3163'.
[  481.284981][T16512] wg0: entered promiscuous mode
[  481.296538][T16512] wg0: entered allmulticast mode
[  481.624137][T16489] chnl_net:caif_netlink_parms(): no params data found
[  481.821571][T16528] pimreg: entered allmulticast mode
[  481.865886][T12539] batman_adv: batadv0: Interface deactivated: gretap3
[  482.261519][T12539] bond8 (unregistering): (slave ip6gretap2): Releasing backup interface
[  482.277801][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3172'.
[  482.592327][T12539] bond2 (unregistering): (slave gretap1): Releasing active interface
[  482.631862][T12539] bond3 (unregistering): (slave gretap2): Releasing active interface
[  482.663289][T12539] batman_adv: batadv0: Removing interface: gretap3
[  482.688863][ T5877] Bluetooth: hci3: command tx timeout
[  482.701798][T12539] bond11 (unregistering): (slave gretap4): Releasing active interface
[  483.104975][T12539] team0: Port device bond0 removed
[  483.116752][T12539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  483.131586][T12539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  483.146212][T12539] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  483.159753][T12539] bond0 (unregistering): Released all slaves
[  483.293197][T16540] netlink: 'syz.1.3173': attribute type 1 has an invalid length.
[  483.329991][T12539] bond1 (unregistering): Released all slaves
[  483.344280][T12539] bond2 (unregistering): Released all slaves
[  483.358669][T12539] bond3 (unregistering): Released all slaves
[  483.371267][T12539] bond4 (unregistering): Released all slaves
[  483.385638][T12539] bond5 (unregistering): Released all slaves
[  483.400741][T12539] bond6 (unregistering): Released all slaves
[  483.415851][T12539] bond7 (unregistering): Released all slaves
[  483.432726][T12539] bond8 (unregistering): Released all slaves
[  483.449728][T12539] bond9 (unregistering): Released all slaves
[  483.493275][    C1] net_ratelimit: 21 callbacks suppressed
[  483.493294][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.507148][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.601672][T12539] bond10 (unregistering): Released all slaves
[  483.614787][T12539] bond11 (unregistering): Released all slaves
[  483.627559][T12539] bond12 (unregistering): Released all slaves
[  483.641348][T12539] bond13 (unregistering): Released all slaves
[  483.657285][T12539] bond14 (unregistering): Released all slaves
[  483.674479][T12539] bond15 (unregistering): Released all slaves
[  483.689783][T12539] bond16 (unregistering): Released all slaves
[  483.706989][T12539] bond17 (unregistering): Released all slaves
[  483.737643][T16532] dvmrp8: entered allmulticast mode
[  483.746253][T16532] pimreg: left allmulticast mode
[  483.765746][T16532] dvmrp8: left allmulticast mode
[  483.883430][T16546] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3175'.
[  483.936982][T16538] veth0: entered promiscuous mode
[  483.961219][T16538] veth0: left promiscuous mode
[  484.024807][T16540] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  484.061759][T12539] : left promiscuous mode
[  484.229927][T16556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3176'.
[  484.263038][T12539] tipc: Left network mode
[  484.274869][T16489] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.298649][T16489] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.324952][T16489] bridge_slave_0: entered allmulticast mode
[  484.344222][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3179'.
[  484.362130][T16489] bridge_slave_0: entered promiscuous mode
[  484.362725][T16555] netlink: 'syz.4.3177': attribute type 1 has an invalid length.
[  484.387012][T16559] veth0: entered promiscuous mode
[  484.393807][T16559] macvtap0: entered promiscuous mode
[  484.401560][T16559] macvtap0: entered allmulticast mode
[  484.402409][T16564] FAULT_INJECTION: forcing a failure.
[  484.402409][T16564] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  484.407281][T16559] veth0: entered allmulticast mode
[  484.426668][T16564] CPU: 1 UID: 0 PID: 16564 Comm: syz.3.3179 Not tainted syzkaller #0 PREEMPT(full) 
[  484.426695][T16564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  484.426709][T16564] Call Trace:
[  484.426717][T16564]  <TASK>
[  484.426726][T16564]  dump_stack_lvl+0x189/0x250
[  484.426754][T16564]  ? __pfx____ratelimit+0x10/0x10
[  484.426772][T16564]  ? __pfx_dump_stack_lvl+0x10/0x10
[  484.426793][T16564]  ? __pfx__printk+0x10/0x10
[  484.426818][T16564]  ? __might_fault+0xb0/0x130
[  484.426856][T16564]  should_fail_ex+0x414/0x560
[  484.426887][T16564]  _copy_from_user+0x2d/0xb0
[  484.426912][T16564]  ___sys_sendmsg+0x158/0x2a0
[  484.426941][T16564]  ? __pfx____sys_sendmsg+0x10/0x10
[  484.427005][T16564]  ? __fget_files+0x2a/0x420
[  484.427022][T16564]  ? __fget_files+0x3a0/0x420
[  484.427051][T16564]  __x64_sys_sendmsg+0x19b/0x260
[  484.427080][T16564]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  484.427117][T16564]  ? __pfx_ksys_write+0x10/0x10
[  484.427149][T16564]  ? do_syscall_64+0xbe/0x3b0
[  484.427172][T16564]  do_syscall_64+0xfa/0x3b0
[  484.427188][T16564]  ? lockdep_hardirqs_on+0x9c/0x150
[  484.427206][T16564]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.427223][T16564]  ? clear_bhb_loop+0x60/0xb0
[  484.427244][T16564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.427260][T16564] RIP: 0033:0x7f0f25b8eba9
[  484.427277][T16564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.427293][T16564] RSP: 002b:00007f0f269e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  484.427313][T16564] RAX: ffffffffffffffda RBX: 00007f0f25dd6090 RCX: 00007f0f25b8eba9
[  484.427327][T16564] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000014
[  484.427338][T16564] RBP: 00007f0f269e9090 R08: 0000000000000000 R09: 0000000000000000
[  484.427349][T16564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  484.427360][T16564] R13: 00007f0f25dd6128 R14: 00007f0f25dd6090 R15: 00007fff24ee2be8
[  484.427399][T16564]  </TASK>
[  484.629814][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.638054][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.682085][T16489] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.698855][T16489] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.713524][T16489] bridge_slave_1: entered allmulticast mode
[  484.725029][T16489] bridge_slave_1: entered promiscuous mode
[  484.743443][T16557] bond1: (slave gretap1): making interface the new active one
[  484.754832][T16557] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  484.768900][ T5877] Bluetooth: hci3: command tx timeout
[  485.004941][T16577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3183'.
[  485.022546][T16577] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3183'.
[  485.057104][T16571] netlink: 'syz.1.3181': attribute type 1 has an invalid length.
[  485.159865][T16588] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3186'.
[  485.306090][T16489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.339786][T16583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3186'.
[  485.349333][T16583] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3186'.
[  485.433674][T16489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.597398][T16605] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3194'.
[  485.617005][T12539] hsr_slave_0: left promiscuous mode
[  485.624320][T12539] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  485.633926][T12539] batman_adv: batadv0: Removing interface: batadv_slave_0
[  485.642608][T12539] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  485.651015][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.651522][T12539] batman_adv: batadv0: Removing interface: batadv_slave_1
[  485.700813][T12539] veth0: left allmulticast mode
[  485.706515][T12539] veth0: left promiscuous mode
[  485.719889][T12539] veth1_macvtap: left promiscuous mode
[  485.728273][T12539] veth0_macvtap: left promiscuous mode
[  486.267415][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3197'.
[  486.507973][T12539] team0 (unregistering): Port device team_slave_1 removed
[  486.564398][T12539] team0 (unregistering): Port device team_slave_0 removed
[  486.693085][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.701569][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.849729][ T5877] Bluetooth: hci3: command tx timeout
[  486.962653][T12539] team0 (unregistering): Port device dummy0 removed
[  487.209884][T16489] team0: Port device team_slave_0 added
[  487.230099][T16489] team0: Port device team_slave_1 added
[  487.268686][T16622] veth0: entered promiscuous mode
[  487.295037][T16622] veth0: left promiscuous mode
[  487.421244][T16489] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.428644][T16489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  487.483100][T16489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.520958][T16489] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.528049][T16489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  487.575700][T16489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  487.722954][T16639] hsr0: entered promiscuous mode
[  487.727963][T16639] hsr0: entered allmulticast mode
[  487.735029][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.745873][T16639] hsr_slave_0: entered allmulticast mode
[  487.753493][T16639] hsr_slave_1: entered allmulticast mode
[  487.821007][T16489] hsr_slave_0: entered promiscuous mode
[  487.830269][T16489] hsr_slave_1: entered promiscuous mode
[  487.855951][T16489] debugfs: 'hsr0' already exists in 'hsr'
[  487.869195][T16489] Cannot create hsr debugfs directory
[  488.050451][T16649] macvtap1: entered promiscuous mode
[  488.057969][T16649] macvtap1: entered allmulticast mode
[  488.150681][T16650] lo speed is unknown, defaulting to 1000
[  488.159348][T12539] IPVS: stop unused estimator thread 0...
[  488.260380][T16656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  488.338075][T16656] tipc: Resetting bearer <eth:syzkaller0>
[  488.362923][T16655] tipc: Disabling bearer <eth:syzkaller0>
[  488.771664][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.779895][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.808179][T16682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  488.889062][T16688] __nla_validate_parse: 4 callbacks suppressed
[  488.889081][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'.
[  488.928882][ T5877] Bluetooth: hci3: command tx timeout
[  489.035170][T16682] syzkaller0: entered promiscuous mode
[  489.041184][T16682] syzkaller0: entered allmulticast mode
[  489.060801][T16688] macvtap3: entered promiscuous mode
[  489.068978][T16688] macvtap3: entered allmulticast mode
[  489.124187][T16693] tipc: Resetting bearer <eth:syzkaller0>
[  489.194234][T16681] tipc: Resetting bearer <eth:syzkaller0>
[  489.812233][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.820514][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.905284][  T921] tipc: Node number set to 1024043093
[  490.853295][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.232148][T16681] tipc: Disabling bearer <eth:syzkaller0>
[  491.269957][T16714] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  491.469665][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3231'.
[  491.508632][T16727] macsec0: entered promiscuous mode
[  491.521044][T16727] macsec0: entered allmulticast mode
[  491.526390][T16727] veth1_macvtap: entered allmulticast mode
[  491.537101][T16489] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  491.568222][T16489] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  491.593094][T16489] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  491.607627][T16489] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  491.672927][T16742] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3235'.
[  491.699526][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'.
[  491.780547][T16489] 8021q: adding VLAN 0 to HW filter on device bond0
[  491.856240][T16489] 8021q: adding VLAN 0 to HW filter on device team0
[  491.889834][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.898016][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.937579][T12537] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.944803][T12537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  491.975209][T12537] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.982465][T12537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.097329][T16489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  492.144091][T16489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  492.495102][T16767] netlink: 'syz.1.3241': attribute type 1 has an invalid length.
[  492.676573][T16489] 8021q: adding VLAN 0 to HW filter on device batadv0
[  492.689134][T16779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3246'.
[  492.700607][T16781] FAULT_INJECTION: forcing a failure.
[  492.700607][T16781] name failslab, interval 1, probability 0, space 0, times 0
[  492.720151][T16781] CPU: 0 UID: 0 PID: 16781 Comm: syz.3.3248 Not tainted syzkaller #0 PREEMPT(full) 
[  492.720178][T16781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  492.720190][T16781] Call Trace:
[  492.720198][T16781]  <TASK>
[  492.720207][T16781]  dump_stack_lvl+0x189/0x250
[  492.720236][T16781]  ? __pfx____ratelimit+0x10/0x10
[  492.720255][T16781]  ? __pfx_dump_stack_lvl+0x10/0x10
[  492.720278][T16781]  ? __pfx__printk+0x10/0x10
[  492.720307][T16781]  ? __pfx___might_resched+0x10/0x10
[  492.720326][T16781]  ? fs_reclaim_acquire+0x7d/0x100
[  492.720360][T16781]  should_fail_ex+0x414/0x560
[  492.720393][T16781]  should_failslab+0xa8/0x100
[  492.720422][T16781]  __kmalloc_noprof+0xcb/0x4f0
[  492.720444][T16781]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  492.720477][T16781]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  492.720510][T16781]  genl_family_rcv_msg_doit+0xb8/0x300
[  492.720541][T16781]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  492.720588][T16781]  ? apparmor_capable+0x137/0x1b0
[  492.720614][T16781]  ? bpf_lsm_capable+0x9/0x20
[  492.720638][T16781]  ? security_capable+0x7e/0x2e0
[  492.720674][T16781]  genl_rcv_msg+0x60e/0x790
[  492.720716][T16781]  ? __pfx_genl_rcv_msg+0x10/0x10
[  492.720742][T16781]  ? __pfx_team_nl_options_set_doit+0x10/0x10
[  492.720769][T16781]  ? __asan_memcpy+0x40/0x70
[  492.720789][T16781]  ? __pfx_ref_tracker_free+0x10/0x10
[  492.720815][T16781]  netlink_rcv_skb+0x205/0x470
[  492.720835][T16781]  ? __lock_acquire+0xab9/0xd20
[  492.720862][T16781]  ? __pfx_genl_rcv_msg+0x10/0x10
[  492.720891][T16781]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  492.720929][T16781]  ? down_read+0x1ad/0x2e0
[  492.720951][T16781]  genl_rcv+0x28/0x40
[  492.720976][T16781]  netlink_unicast+0x82c/0x9e0
[  492.721006][T16781]  ? __pfx_netlink_unicast+0x10/0x10
[  492.721029][T16781]  ? netlink_sendmsg+0x642/0xb30
[  492.721049][T16781]  ? skb_put+0x11b/0x210
[  492.721077][T16781]  netlink_sendmsg+0x805/0xb30
[  492.721111][T16781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  492.721137][T16781]  ? aa_sock_msg_perm+0xf1/0x1d0
[  492.721159][T16781]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  492.721179][T16781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  492.721203][T16781]  __sock_sendmsg+0x21c/0x270
[  492.721227][T16781]  ____sys_sendmsg+0x505/0x830
[  492.721259][T16781]  ? __pfx_____sys_sendmsg+0x10/0x10
[  492.721294][T16781]  ? import_iovec+0x74/0xa0
[  492.721324][T16781]  ___sys_sendmsg+0x21f/0x2a0
[  492.721361][T16781]  ? __pfx____sys_sendmsg+0x10/0x10
[  492.721426][T16781]  ? __fget_files+0x2a/0x420
[  492.721441][T16781]  ? __fget_files+0x3a0/0x420
[  492.721470][T16781]  __x64_sys_sendmsg+0x19b/0x260
[  492.721500][T16781]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  492.721535][T16781]  ? __pfx_ksys_write+0x10/0x10
[  492.721558][T16781]  ? rcu_is_watching+0x15/0xb0
[  492.721583][T16781]  ? do_syscall_64+0xbe/0x3b0
[  492.721608][T16781]  do_syscall_64+0xfa/0x3b0
[  492.721627][T16781]  ? lockdep_hardirqs_on+0x9c/0x150
[  492.721646][T16781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.721664][T16781]  ? clear_bhb_loop+0x60/0xb0
[  492.721694][T16781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.721713][T16781] RIP: 0033:0x7f0f25b8eba9
[  492.721731][T16781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  492.721748][T16781] RSP: 002b:00007f0f26a0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  492.721769][T16781] RAX: ffffffffffffffda RBX: 00007f0f25dd5fa0 RCX: 00007f0f25b8eba9
[  492.721783][T16781] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000003
[  492.721796][T16781] RBP: 00007f0f26a0a090 R08: 0000000000000000 R09: 0000000000000000
[  492.721808][T16781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  492.721819][T16781] R13: 00007f0f25dd6038 R14: 00007f0f25dd5fa0 R15: 00007fff24ee2be8
[  492.721853][T16781]  </TASK>
[  492.805482][T16489] veth0_vlan: entered promiscuous mode
[  493.113610][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.255321][T16489] veth1_vlan: entered promiscuous mode
[  493.382172][T16489] veth0_macvtap: entered promiscuous mode
[  493.424920][T16801] lo speed is unknown, defaulting to 1000
[  493.437173][T16489] veth1_macvtap: entered promiscuous mode
[  493.527660][T16489] batman_adv: batadv0: Interface activated: batadv_slave_0
[  493.593241][T16489] batman_adv: batadv0: Interface activated: batadv_slave_1
[  493.722149][T12537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  493.748706][T12537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  493.769607][T12537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  493.783854][T12537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  493.805589][T16820] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  493.817103][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3262'.
[  493.972197][T16825] lo speed is unknown, defaulting to 1000
[  493.982209][T12537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.006323][T12537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.129354][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.137625][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.152755][T12537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.160946][T12537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.178973][T16832] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3264'.
[  494.699009][T16849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3271'.
[  494.708013][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'.
[  495.049686][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3276'.
[  495.115893][T16871] FAULT_INJECTION: forcing a failure.
[  495.115893][T16871] name failslab, interval 1, probability 0, space 0, times 0
[  495.167119][T16874] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3278'.
[  495.177707][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.185926][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.199026][T16871] CPU: 1 UID: 0 PID: 16871 Comm: syz.0.3276 Not tainted syzkaller #0 PREEMPT(full) 
[  495.199079][T16871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  495.199089][T16871] Call Trace:
[  495.199096][T16871]  <TASK>
[  495.199104][T16871]  dump_stack_lvl+0x189/0x250
[  495.199130][T16871]  ? __pfx____ratelimit+0x10/0x10
[  495.199148][T16871]  ? __pfx_dump_stack_lvl+0x10/0x10
[  495.199167][T16871]  ? __pfx__printk+0x10/0x10
[  495.199195][T16871]  ? __pfx___might_resched+0x10/0x10
[  495.199210][T16871]  ? fs_reclaim_acquire+0x7d/0x100
[  495.199239][T16871]  should_fail_ex+0x414/0x560
[  495.199268][T16871]  should_failslab+0xa8/0x100
[  495.199294][T16871]  __kmalloc_cache_noprof+0x70/0x3d0
[  495.199315][T16871]  ? rtnl_newlink+0xed/0x1c70
[  495.199330][T16871]  ? kasan_save_free_info+0x46/0x50
[  495.199349][T16871]  rtnl_newlink+0xed/0x1c70
[  495.199365][T16871]  ? netlink_sendmsg+0x805/0xb30
[  495.199381][T16871]  ? __sock_sendmsg+0x21c/0x270
[  495.199393][T16871]  ? ____sys_sendmsg+0x505/0x830
[  495.199413][T16871]  ? ___sys_sendmsg+0x21f/0x2a0
[  495.199433][T16871]  ? __x64_sys_sendmsg+0x19b/0x260
[  495.199453][T16871]  ? do_syscall_64+0xfa/0x3b0
[  495.199468][T16871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.199496][T16871]  ? __pfx_rtnl_newlink+0x10/0x10
[  495.199538][T16871]  ? kasan_quarantine_put+0xdd/0x220
[  495.199559][T16871]  ? lockdep_hardirqs_on+0x9c/0x150
[  495.199581][T16871]  ? nlmon_xmit+0xb0/0x100
[  495.199600][T16871]  ? kmem_cache_free+0x18f/0x400
[  495.199629][T16871]  ? __local_bh_enable_ip+0x12d/0x1c0
[  495.199646][T16871]  ? lockdep_hardirqs_on+0x9c/0x150
[  495.199664][T16871]  ? __local_bh_enable_ip+0x12d/0x1c0
[  495.199680][T16871]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  495.199708][T16871]  ? __dev_queue_xmit+0x27b/0x3b50
[  495.199734][T16871]  ? __dev_queue_xmit+0x27b/0x3b50
[  495.199759][T16871]  ? __dev_queue_xmit+0x27b/0x3b50
[  495.199787][T16871]  ? __dev_queue_xmit+0x1d79/0x3b50
[  495.199819][T16871]  ? __lock_acquire+0xab9/0xd20
[  495.199873][T16871]  ? __pfx_rtnl_newlink+0x10/0x10
[  495.199894][T16871]  rtnetlink_rcv_msg+0x7cc/0xb70
[  495.199919][T16871]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  495.199939][T16871]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  495.199959][T16871]  ? ref_tracker_free+0x63a/0x7d0
[  495.199978][T16871]  ? __asan_memcpy+0x40/0x70
[  495.199999][T16871]  ? __pfx_ref_tracker_free+0x10/0x10
[  495.200029][T16871]  netlink_rcv_skb+0x205/0x470
[  495.200053][T16871]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  495.200077][T16871]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  495.200112][T16871]  ? netlink_deliver_tap+0x2e/0x1b0
[  495.200143][T16871]  netlink_unicast+0x82c/0x9e0
[  495.200172][T16871]  ? __pfx_netlink_unicast+0x10/0x10
[  495.200194][T16871]  ? netlink_sendmsg+0x642/0xb30
[  495.200215][T16871]  ? skb_put+0x11b/0x210
[  495.200242][T16871]  netlink_sendmsg+0x805/0xb30
[  495.200275][T16871]  ? __pfx_netlink_sendmsg+0x10/0x10
[  495.200301][T16871]  ? aa_sock_msg_perm+0xf1/0x1d0
[  495.200323][T16871]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  495.200344][T16871]  ? __pfx_netlink_sendmsg+0x10/0x10
[  495.200367][T16871]  __sock_sendmsg+0x21c/0x270
[  495.200390][T16871]  ____sys_sendmsg+0x505/0x830
[  495.200421][T16871]  ? __pfx_____sys_sendmsg+0x10/0x10
[  495.200456][T16871]  ? import_iovec+0x74/0xa0
[  495.200485][T16871]  ___sys_sendmsg+0x21f/0x2a0
[  495.200513][T16871]  ? __pfx____sys_sendmsg+0x10/0x10
[  495.200576][T16871]  ? __fget_files+0x2a/0x420
[  495.200593][T16871]  ? __fget_files+0x3a0/0x420
[  495.200621][T16871]  __x64_sys_sendmsg+0x19b/0x260
[  495.200650][T16871]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  495.200686][T16871]  ? __pfx_ksys_write+0x10/0x10
[  495.200724][T16871]  ? do_syscall_64+0xbe/0x3b0
[  495.200749][T16871]  do_syscall_64+0xfa/0x3b0
[  495.200767][T16871]  ? lockdep_hardirqs_on+0x9c/0x150
[  495.200785][T16871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.200804][T16871]  ? clear_bhb_loop+0x60/0xb0
[  495.200827][T16871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.200846][T16871] RIP: 0033:0x7f0c26b8eba9
[  495.200864][T16871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  495.200881][T16871] RSP: 002b:00007f0c2797a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  495.200901][T16871] RAX: ffffffffffffffda RBX: 00007f0c26dd6090 RCX: 00007f0c26b8eba9
[  495.200916][T16871] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000014
[  495.200928][T16871] RBP: 00007f0c2797a090 R08: 0000000000000000 R09: 0000000000000000
[  495.200940][T16871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  495.200951][T16871] R13: 00007f0c26dd6128 R14: 00007f0c26dd6090 R15: 00007ffe445642e8
[  495.200981][T16871]  </TASK>
[  495.203859][T16866] ip6tnl0: entered promiscuous mode
[  495.592440][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  495.616296][T16866] ip6tnl0: entered allmulticast mode
[  495.635224][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  495.699108][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  495.709950][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  495.717709][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  495.830667][T16878] syzkaller0: entered promiscuous mode
[  495.839597][T16878] syzkaller0: entered allmulticast mode
[  495.852557][T16883] Bluetooth: MGMT ver 1.23
[  495.885060][T16889] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  496.209329][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.275860][T16901] netlink: 'syz.3.3287': attribute type 1 has an invalid length.
[  496.455745][T16907] netlink: 'syz.0.3289': attribute type 1 has an invalid length.
[  497.252340][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.260563][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.813978][ T5871] Bluetooth: hci0: command tx timeout
[  498.172601][T16905] bond2: (slave gretap1): making interface the new active one
[  498.183747][T16905] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  498.213864][T16908] batman_adv: batadv0: Adding interface: gretap1
[  498.220624][T16908] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  498.235723][T16877] lo speed is unknown, defaulting to 1000
[  498.289061][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.531839][T16928] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3293'.
[  498.553571][T16928] batadv1: entered promiscuous mode
[  498.559574][T16928] batadv1: entered allmulticast mode
[  498.583635][T16877] chnl_net:caif_netlink_parms(): no params data found
[  498.740302][T16877] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.747694][T16877] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.756920][T16877] bridge_slave_0: entered allmulticast mode
[  498.765703][T16877] bridge_slave_0: entered promiscuous mode
[  498.781785][T16936] lo speed is unknown, defaulting to 1000
[  498.782952][T16877] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.795088][T16877] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.802509][T16877] bridge_slave_1: entered allmulticast mode
[  498.810495][T16877] bridge_slave_1: entered promiscuous mode
[  498.867241][T16877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  498.883787][T16877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  498.935888][T16877] team0: Port device team_slave_0 added
[  498.949270][T16877] team0: Port device team_slave_1 added
[  498.983766][T16877] batman_adv: batadv0: Adding interface: batadv_slave_0
[  498.991209][T16877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.020677][T16877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.035356][T16877] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.042628][T16877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.069136][T16877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.131755][T16877] hsr_slave_0: entered promiscuous mode
[  499.139289][T16877] hsr_slave_1: entered promiscuous mode
[  499.146223][T16877] debugfs: 'hsr0' already exists in 'hsr'
[  499.152848][T16877] Cannot create hsr debugfs directory
[  499.240595][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3299'.
[  499.271586][T16944] veth0: entered promiscuous mode
[  499.276876][T16944] macvtap1: entered promiscuous mode
[  499.283141][T16944] macvtap1: entered allmulticast mode
[  499.289208][T16944] veth0: entered allmulticast mode
[  499.318305][T16947] FAULT_INJECTION: forcing a failure.
[  499.318305][T16947] name failslab, interval 1, probability 0, space 0, times 0
[  499.329491][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.334456][T16947] CPU: 0 UID: 0 PID: 16947 Comm: syz.2.3299 Not tainted syzkaller #0 PREEMPT(full) 
[  499.334482][T16947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  499.334493][T16947] Call Trace:
[  499.334501][T16947]  <TASK>
[  499.334508][T16947]  dump_stack_lvl+0x189/0x250
[  499.334537][T16947]  ? __pfx____ratelimit+0x10/0x10
[  499.334557][T16947]  ? __pfx_dump_stack_lvl+0x10/0x10
[  499.334579][T16947]  ? __pfx__printk+0x10/0x10
[  499.334609][T16947]  ? __pfx___might_resched+0x10/0x10
[  499.334626][T16947]  ? fs_reclaim_acquire+0x7d/0x100
[  499.334661][T16947]  should_fail_ex+0x414/0x560
[  499.334694][T16947]  should_failslab+0xa8/0x100
[  499.334724][T16947]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  499.334750][T16947]  ? rtnl_prop_list_size+0x1ba/0x1e0
[  499.334767][T16947]  ? __alloc_skb+0x112/0x2d0
[  499.334794][T16947]  __alloc_skb+0x112/0x2d0
[  499.334821][T16947]  rtmsg_ifinfo_build_skb+0x84/0x260
[  499.334849][T16947]  rtnetlink_event+0x1b7/0x270
[  499.334876][T16947]  notifier_call_chain+0x1b3/0x3e0
[  499.334905][T16947]  netif_set_mac_address+0x37c/0x4c0
[  499.334938][T16947]  ? __pfx_netif_set_mac_address+0x10/0x10
[  499.334964][T16947]  ? down_write+0x162/0x1f0
[  499.334989][T16947]  ? finish_task_switch+0x266/0x950
[  499.335013][T16947]  ? validate_linkmsg+0x765/0x950
[  499.335040][T16947]  ? do_setlink+0x874/0x41c0
[  499.335068][T16947]  do_setlink+0x88c/0x41c0
[  499.335090][T16947]  ? rcu_is_watching+0x15/0xb0
[  499.335128][T16947]  ? __lock_acquire+0xab9/0xd20
[  499.335156][T16947]  ? __pfx_do_setlink+0x10/0x10
[  499.335178][T16947]  ? __lock_acquire+0xab9/0xd20
[  499.335238][T16947]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  499.335272][T16947]  ? rcu_is_watching+0x15/0xb0
[  499.335294][T16947]  ? __mutex_lock+0xd3b/0x1350
[  499.335318][T16947]  ? __mutex_lock+0x5bb/0x1350
[  499.335344][T16947]  ? rtnl_newlink+0x8db/0x1c70
[  499.335367][T16947]  ? __pfx___mutex_lock+0x10/0x10
[  499.335398][T16947]  ? ns_capable+0x8a/0xf0
[  499.335418][T16947]  ? rtnl_link_get_net_capable+0x16a/0x350
[  499.335446][T16947]  rtnl_newlink+0x160b/0x1c70
[  499.335466][T16947]  ? netlink_sendmsg+0x805/0xb30
[  499.335512][T16947]  ? __pfx_rtnl_newlink+0x10/0x10
[  499.335560][T16947]  ? kasan_quarantine_put+0xdd/0x220
[  499.335582][T16947]  ? lockdep_hardirqs_on+0x9c/0x150
[  499.335607][T16947]  ? nlmon_xmit+0xb0/0x100
[  499.335628][T16947]  ? kmem_cache_free+0x18f/0x400
[  499.335661][T16947]  ? __local_bh_enable_ip+0x12d/0x1c0
[  499.335680][T16947]  ? lockdep_hardirqs_on+0x9c/0x150
[  499.335700][T16947]  ? __local_bh_enable_ip+0x12d/0x1c0
[  499.335718][T16947]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  499.335742][T16947]  ? __dev_queue_xmit+0x27b/0x3b50
[  499.335768][T16947]  ? __dev_queue_xmit+0x27b/0x3b50
[  499.335793][T16947]  ? __dev_queue_xmit+0x27b/0x3b50
[  499.335821][T16947]  ? __dev_queue_xmit+0x1d79/0x3b50
[  499.335853][T16947]  ? __lock_acquire+0xab9/0xd20
[  499.335908][T16947]  ? __pfx_rtnl_newlink+0x10/0x10
[  499.335929][T16947]  rtnetlink_rcv_msg+0x7cc/0xb70
[  499.335955][T16947]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  499.335975][T16947]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  499.335995][T16947]  ? ref_tracker_free+0x63a/0x7d0
[  499.336014][T16947]  ? __asan_memcpy+0x40/0x70
[  499.336035][T16947]  ? __pfx_ref_tracker_free+0x10/0x10
[  499.336065][T16947]  netlink_rcv_skb+0x205/0x470
[  499.336088][T16947]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  499.336112][T16947]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  499.336152][T16947]  ? netlink_deliver_tap+0x2e/0x1b0
[  499.336183][T16947]  netlink_unicast+0x82c/0x9e0
[  499.336213][T16947]  ? __pfx_netlink_unicast+0x10/0x10
[  499.336234][T16947]  ? netlink_sendmsg+0x642/0xb30
[  499.336254][T16947]  ? skb_put+0x11b/0x210
[  499.336280][T16947]  netlink_sendmsg+0x805/0xb30
[  499.336313][T16947]  ? __pfx_netlink_sendmsg+0x10/0x10
[  499.336339][T16947]  ? aa_sock_msg_perm+0xf1/0x1d0
[  499.336362][T16947]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  499.336381][T16947]  ? __pfx_netlink_sendmsg+0x10/0x10
[  499.336406][T16947]  __sock_sendmsg+0x21c/0x270
[  499.336429][T16947]  ____sys_sendmsg+0x505/0x830
[  499.336459][T16947]  ? __pfx_____sys_sendmsg+0x10/0x10
[  499.336495][T16947]  ? import_iovec+0x74/0xa0
[  499.336524][T16947]  ___sys_sendmsg+0x21f/0x2a0
[  499.336551][T16947]  ? __pfx____sys_sendmsg+0x10/0x10
[  499.336617][T16947]  ? __fget_files+0x2a/0x420
[  499.336632][T16947]  ? __fget_files+0x3a0/0x420
[  499.336661][T16947]  __x64_sys_sendmsg+0x19b/0x260
[  499.336689][T16947]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  499.336725][T16947]  ? __pfx_ksys_write+0x10/0x10
[  499.336756][T16947]  ? do_syscall_64+0xbe/0x3b0
[  499.336780][T16947]  do_syscall_64+0xfa/0x3b0
[  499.336798][T16947]  ? lockdep_hardirqs_on+0x9c/0x150
[  499.336813][T16947]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.336830][T16947]  ? clear_bhb_loop+0x60/0xb0
[  499.336852][T16947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.336870][T16947] RIP: 0033:0x7f5a0338eba9
[  499.336887][T16947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  499.336904][T16947] RSP: 002b:00007f5a0419f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  499.336925][T16947] RAX: ffffffffffffffda RBX: 00007f5a035d6090 RCX: 00007f5a0338eba9
[  499.336939][T16947] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000014
[  499.336951][T16947] RBP: 00007f5a0419f090 R08: 0000000000000000 R09: 0000000000000000
[  499.336962][T16947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  499.336973][T16947] R13: 00007f5a035d6128 R14: 00007f5a035d6090 R15: 00007ffe0acccd68
[  499.337006][T16947]  </TASK>
[  499.379519][T16949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3301'.
[  499.380591][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.909520][ T5871] Bluetooth: hci0: command tx timeout
[  499.936616][T16947] veth0: left allmulticast mode
[  499.942816][T16947] veth0: left promiscuous mode
[  499.994807][T16952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  500.015795][T16954] syzkaller0: entered promiscuous mode
[  500.028298][T16954] syzkaller0: entered allmulticast mode
[  500.039236][T16958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3303'.
[  500.069782][T16956] tipc: Resetting bearer <eth:syzkaller0>
[  500.204038][T16945] tipc: Resetting bearer <eth:syzkaller0>
[  500.282247][T16945] tipc: Disabling bearer <eth:syzkaller0>
[  500.329646][T16973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  500.370912][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.379229][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.507884][T16979] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.3310'.
[  500.593545][T16982] lo speed is unknown, defaulting to 1000
[  500.856888][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3319'.
[  500.899038][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3318'.
[  501.007760][T16998] veth0: entered promiscuous mode
[  501.014087][T16998] macvtap2: entered promiscuous mode
[  501.034388][T16998] macvtap2: entered allmulticast mode
[  501.040461][T16998] veth0: entered allmulticast mode
[  501.051739][T17002] netlink: 'syz.0.3320': attribute type 1 has an invalid length.
[  501.080735][T17003] veth0: left allmulticast mode
[  501.086116][T17003] veth0: left promiscuous mode
[  501.250313][T17007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  501.291987][T17007] syzkaller0: entered promiscuous mode
[  501.308317][T17007] syzkaller0: entered allmulticast mode
[  501.346746][T17007] tipc: Resetting bearer <eth:syzkaller0>
[  501.370649][T17006] tipc: Resetting bearer <eth:syzkaller0>
[  501.394456][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3323'.
[  501.409327][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.434700][T17006] tipc: Disabling bearer <eth:syzkaller0>
[  501.465154][T17016] veth0: entered promiscuous mode
[  501.480901][T17016] macvtap1: entered promiscuous mode
[  501.486641][T17016] macvtap1: entered allmulticast mode
[  501.498038][T17016] veth0: entered allmulticast mode
[  501.532428][T17020] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.3324'.
[  501.698745][T16877] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  501.707154][T17024] openvswitch: netlink: Duplicate or invalid key (type 0).
[  501.728930][T17024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  501.742183][T17015] lo speed is unknown, defaulting to 1000
[  501.742514][T16877] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  501.780070][T16877] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  501.790932][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3325'.
[  501.802885][T17026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3325'.
[  501.851041][T16877] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  501.888033][T17026] netlink: 'syz.2.3325': attribute type 1 has an invalid length.
[  501.975805][ T5871] Bluetooth: hci0: command tx timeout
[  502.435211][T17054] lo speed is unknown, defaulting to 1000
[  502.448986][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.457185][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.469095][T16877] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.541366][T17065] netlink: 'syz.0.3348': attribute type 5 has an invalid length.
[  502.711584][T17071] sock: sock_timestamping_bind_phc: sock not bind to device
[  502.729574][T17073] sock: sock_timestamping_bind_phc: sock not bind to device
[  502.749905][T17072] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode
[  502.772543][T17072] macsec1: entered allmulticast mode
[  502.777904][T17072] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode
[  502.867160][T16877] 8021q: adding VLAN 0 to HW filter on device team0
[  502.932265][T17080] FAULT_INJECTION: forcing a failure.
[  502.932265][T17080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  502.942563][T12539] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.947093][T17080] CPU: 0 UID: 0 PID: 17080 Comm: syz.0.3345 Not tainted syzkaller #0 PREEMPT(full) 
[  502.947119][T17080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  502.947131][T17080] Call Trace:
[  502.947139][T17080]  <TASK>
[  502.947147][T17080]  dump_stack_lvl+0x189/0x250
[  502.947175][T17080]  ? __pfx____ratelimit+0x10/0x10
[  502.947195][T17080]  ? __pfx_dump_stack_lvl+0x10/0x10
[  502.947216][T17080]  ? __pfx__printk+0x10/0x10
[  502.947239][T17080]  ? __might_fault+0xb0/0x130
[  502.947270][T17080]  should_fail_ex+0x414/0x560
[  502.947302][T17080]  _copy_from_iter+0x1de/0x1790
[  502.947339][T17080]  ? __pfx__copy_from_iter+0x10/0x10
[  502.947363][T17080]  ? __build_skb_around+0x257/0x3e0
[  502.947389][T17080]  ? netlink_sendmsg+0x642/0xb30
[  502.947410][T17080]  ? skb_put+0x11b/0x210
[  502.947437][T17080]  netlink_sendmsg+0x6b2/0xb30
[  502.947469][T17080]  ? __pfx_netlink_sendmsg+0x10/0x10
[  502.947495][T17080]  ? aa_sock_msg_perm+0xf1/0x1d0
[  502.947515][T17080]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  502.947537][T17080]  ? __pfx_netlink_sendmsg+0x10/0x10
[  502.947560][T17080]  __sock_sendmsg+0x21c/0x270
[  502.947582][T17080]  __sys_sendto+0x3bd/0x520
[  502.947607][T17080]  ? __pfx___sys_sendto+0x10/0x10
[  502.947626][T17080]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  502.947660][T17080]  ? __fget_files+0x3a0/0x420
[  502.947697][T17080]  ? ksys_write+0x22a/0x250
[  502.947724][T17080]  ? __pfx_ksys_write+0x10/0x10
[  502.947746][T17080]  ? rcu_is_watching+0x15/0xb0
[  502.947771][T17080]  __x64_sys_sendto+0xde/0x100
[  502.947797][T17080]  do_syscall_64+0xfa/0x3b0
[  502.947816][T17080]  ? lockdep_hardirqs_on+0x9c/0x150
[  502.947834][T17080]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.947852][T17080]  ? clear_bhb_loop+0x60/0xb0
[  502.947875][T17080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.947893][T17080] RIP: 0033:0x7f0c26b8eba9
[  502.947909][T17080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  502.947925][T17080] RSP: 002b:00007f0c2799b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  502.947945][T17080] RAX: ffffffffffffffda RBX: 00007f0c26dd5fa0 RCX: 00007f0c26b8eba9
[  502.947959][T17080] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003
[  502.947971][T17080] RBP: 00007f0c2799b090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b
[  502.947984][T17080] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  502.947999][T17080] R13: 00007f0c26dd6038 R14: 00007f0c26dd5fa0 R15: 00007ffe445642e8
[  502.948030][T17080]  </TASK>
[  503.205193][T12539] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.311799][T12539] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.319196][T12539] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.809886][   T30] audit: type=1800 audit(1758184803.820:6): pid=17099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3350" name="memory.events" dev="tmpfs" ino=298 res=0 errno=0
[  503.917176][T17098] lo speed is unknown, defaulting to 1000
[  503.966098][T17113] veth0: entered promiscuous mode
[  503.972528][T17113] macvtap3: entered promiscuous mode
[  503.978527][T17113] macvtap3: entered allmulticast mode
[  503.984388][T17113] veth0: entered allmulticast mode
[  504.048599][ T5871] Bluetooth: hci0: command tx timeout
[  504.056059][T17114] FAULT_INJECTION: forcing a failure.
[  504.056059][T17114] name failslab, interval 1, probability 0, space 0, times 0
[  504.069434][T17114] CPU: 1 UID: 0 PID: 17114 Comm: syz.4.3354 Not tainted syzkaller #0 PREEMPT(full) 
[  504.069459][T17114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  504.069470][T17114] Call Trace:
[  504.069477][T17114]  <TASK>
[  504.069484][T17114]  dump_stack_lvl+0x189/0x250
[  504.069510][T17114]  ? __pfx____ratelimit+0x10/0x10
[  504.069527][T17114]  ? __pfx_dump_stack_lvl+0x10/0x10
[  504.069548][T17114]  ? __pfx__printk+0x10/0x10
[  504.069577][T17114]  ? __pfx___might_resched+0x10/0x10
[  504.069592][T17114]  ? fs_reclaim_acquire+0x7d/0x100
[  504.069623][T17114]  should_fail_ex+0x414/0x560
[  504.069654][T17114]  should_failslab+0xa8/0x100
[  504.069681][T17114]  __kmalloc_cache_noprof+0x70/0x3d0
[  504.069704][T17114]  ? netdevice_event+0x3a1/0x8a0
[  504.069731][T17114]  netdevice_event+0x3a1/0x8a0
[  504.069757][T17114]  ? __up_read+0x280/0x680
[  504.069775][T17114]  ? __pfx_netdevice_event+0x10/0x10
[  504.069807][T17114]  ? __pfx_del_netdev_ips+0x10/0x10
[  504.069828][T17114]  ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10
[  504.069853][T17114]  ? __pfx_add_default_gids+0x10/0x10
[  504.069873][T17114]  ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10
[  504.069897][T17114]  ? __pfx_add_netdev_ips+0x10/0x10
[  504.069917][T17114]  ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10
[  504.069941][T17114]  ? cfg802154_netdev_notifier_call+0xd8/0x930
[  504.069975][T17114]  notifier_call_chain+0x1b3/0x3e0
[  504.070001][T17114]  netif_set_mac_address+0x37c/0x4c0
[  504.070031][T17114]  ? __pfx_netif_set_mac_address+0x10/0x10
[  504.070054][T17114]  ? down_write+0x162/0x1f0
[  504.070076][T17114]  ? finish_task_switch+0x266/0x950
[  504.070096][T17114]  ? validate_linkmsg+0x765/0x950
[  504.070121][T17114]  ? do_setlink+0x874/0x41c0
[  504.070147][T17114]  do_setlink+0x88c/0x41c0
[  504.070166][T17114]  ? rcu_is_watching+0x15/0xb0
[  504.070194][T17114]  ? __lock_acquire+0xab9/0xd20
[  504.070218][T17114]  ? __pfx_do_setlink+0x10/0x10
[  504.070238][T17114]  ? __lock_acquire+0xab9/0xd20
[  504.070290][T17114]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  504.070320][T17114]  ? rcu_is_watching+0x15/0xb0
[  504.070339][T17114]  ? __mutex_lock+0xd3b/0x1350
[  504.070361][T17114]  ? __mutex_lock+0x5bb/0x1350
[  504.070383][T17114]  ? rtnl_newlink+0x8db/0x1c70
[  504.070405][T17114]  ? __pfx___mutex_lock+0x10/0x10
[  504.070432][T17114]  ? ns_capable+0x8a/0xf0
[  504.070450][T17114]  ? rtnl_link_get_net_capable+0x16a/0x350
[  504.070476][T17114]  rtnl_newlink+0x160b/0x1c70
[  504.070493][T17114]  ? netlink_sendmsg+0x805/0xb30
[  504.070525][T17114]  ? __pfx_rtnl_newlink+0x10/0x10
[  504.070567][T17114]  ? kasan_quarantine_put+0xdd/0x220
[  504.070587][T17114]  ? lockdep_hardirqs_on+0x9c/0x150
[  504.070609][T17114]  ? nlmon_xmit+0xb0/0x100
[  504.070627][T17114]  ? kmem_cache_free+0x18f/0x400
[  504.070656][T17114]  ? __local_bh_enable_ip+0x12d/0x1c0
[  504.070673][T17114]  ? lockdep_hardirqs_on+0x9c/0x150
[  504.070690][T17114]  ? __local_bh_enable_ip+0x12d/0x1c0
[  504.070705][T17114]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  504.070726][T17114]  ? __dev_queue_xmit+0x27b/0x3b50
[  504.070749][T17114]  ? __dev_queue_xmit+0x27b/0x3b50
[  504.070771][T17114]  ? __dev_queue_xmit+0x27b/0x3b50
[  504.070800][T17114]  ? __dev_queue_xmit+0x1d79/0x3b50
[  504.070829][T17114]  ? __lock_acquire+0xab9/0xd20
[  504.070876][T17114]  ? __pfx_rtnl_newlink+0x10/0x10
[  504.070895][T17114]  rtnetlink_rcv_msg+0x7cc/0xb70
[  504.070917][T17114]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  504.070935][T17114]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  504.070951][T17114]  ? ref_tracker_free+0x63a/0x7d0
[  504.070968][T17114]  ? __asan_memcpy+0x40/0x70
[  504.070986][T17114]  ? __pfx_ref_tracker_free+0x10/0x10
[  504.071012][T17114]  netlink_rcv_skb+0x205/0x470
[  504.071032][T17114]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  504.071052][T17114]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  504.071083][T17114]  ? netlink_deliver_tap+0x2e/0x1b0
[  504.071110][T17114]  netlink_unicast+0x82c/0x9e0
[  504.071135][T17114]  ? __pfx_netlink_unicast+0x10/0x10
[  504.071154][T17114]  ? netlink_sendmsg+0x642/0xb30
[  504.071172][T17114]  ? skb_put+0x11b/0x210
[  504.071210][T17114]  netlink_sendmsg+0x805/0xb30
[  504.071239][T17114]  ? __pfx_netlink_sendmsg+0x10/0x10
[  504.071262][T17114]  ? aa_sock_msg_perm+0xf1/0x1d0
[  504.071281][T17114]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  504.071300][T17114]  ? __pfx_netlink_sendmsg+0x10/0x10
[  504.071320][T17114]  __sock_sendmsg+0x21c/0x270
[  504.071339][T17114]  ____sys_sendmsg+0x505/0x830
[  504.071367][T17114]  ? __pfx_____sys_sendmsg+0x10/0x10
[  504.071398][T17114]  ? import_iovec+0x74/0xa0
[  504.071423][T17114]  ___sys_sendmsg+0x21f/0x2a0
[  504.071447][T17114]  ? __pfx____sys_sendmsg+0x10/0x10
[  504.071504][T17114]  ? __fget_files+0x2a/0x420
[  504.071517][T17114]  ? __fget_files+0x3a0/0x420
[  504.071543][T17114]  __x64_sys_sendmsg+0x19b/0x260
[  504.071567][T17114]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  504.071599][T17114]  ? __pfx_ksys_write+0x10/0x10
[  504.071626][T17114]  ? do_syscall_64+0xbe/0x3b0
[  504.071647][T17114]  do_syscall_64+0xfa/0x3b0
[  504.071663][T17114]  ? lockdep_hardirqs_on+0x9c/0x150
[  504.071679][T17114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.071695][T17114]  ? clear_bhb_loop+0x60/0xb0
[  504.071716][T17114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.071732][T17114] RIP: 0033:0x7f1c1098eba9
[  504.071747][T17114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  504.071763][T17114] RSP: 002b:00007f1c117dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  504.071781][T17114] RAX: ffffffffffffffda RBX: 00007f1c10bd6090 RCX: 00007f1c1098eba9
[  504.071798][T17114] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000014
[  504.071808][T17114] RBP: 00007f1c117dd090 R08: 0000000000000000 R09: 0000000000000000
[  504.071818][T17114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  504.071828][T17114] R13: 00007f1c10bd6128 R14: 00007f1c10bd6090 R15: 00007fff91e154e8
[  504.071856][T17114]  </TASK>
[  504.073153][T17114] veth0: left allmulticast mode
[  504.550709][    C1] net_ratelimit: 1 callbacks suppressed
[  504.550728][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.550789][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.693941][T17114] veth0: left promiscuous mode
[  504.863841][T17124] syzkaller0: entered promiscuous mode
[  504.879555][T17124] syzkaller0: entered allmulticast mode
[  505.569034][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.577235][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.609252][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.073931][T16877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  507.270427][T17161] rdma_op ffff8880621a19f0 conn xmit_rdma 0000000000000000
[  507.350733][T17165] __nla_validate_parse: 9 callbacks suppressed
[  507.350751][T17165] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.3368'.
[  507.373400][T17163] lo speed is unknown, defaulting to 1000
[  507.387104][T17165] FAULT_INJECTION: forcing a failure.
[  507.387104][T17165] name failslab, interval 1, probability 0, space 0, times 0
[  507.451314][T17170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3369'.
[  507.469744][T17165] CPU: 1 UID: 0 PID: 17165 Comm: syz.3.3368 Not tainted syzkaller #0 PREEMPT(full) 
[  507.469772][T17165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  507.469784][T17165] Call Trace:
[  507.469792][T17165]  <TASK>
[  507.469800][T17165]  dump_stack_lvl+0x189/0x250
[  507.469828][T17165]  ? __pfx____ratelimit+0x10/0x10
[  507.469848][T17165]  ? __pfx_dump_stack_lvl+0x10/0x10
[  507.469870][T17165]  ? __pfx__printk+0x10/0x10
[  507.469903][T17165]  ? __pfx___might_resched+0x10/0x10
[  507.469921][T17165]  ? fs_reclaim_acquire+0x7d/0x100
[  507.469956][T17165]  should_fail_ex+0x414/0x560
[  507.469989][T17165]  should_failslab+0xa8/0x100
[  507.470018][T17165]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  507.470046][T17165]  ? __alloc_skb+0x112/0x2d0
[  507.470073][T17165]  __alloc_skb+0x112/0x2d0
[  507.470098][T17165]  netlink_ack+0x146/0xa50
[  507.470117][T17165]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  507.470137][T17165]  ? ref_tracker_free+0x63a/0x7d0
[  507.470157][T17165]  ? __asan_memcpy+0x40/0x70
[  507.470178][T17165]  ? __pfx_ref_tracker_free+0x10/0x10
[  507.470208][T17165]  netlink_rcv_skb+0x28c/0x470
[  507.470239][T17165]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  507.470263][T17165]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  507.470307][T17165]  ? netlink_deliver_tap+0x2e/0x1b0
[  507.470339][T17165]  netlink_unicast+0x82c/0x9e0
[  507.470369][T17165]  ? __pfx_netlink_unicast+0x10/0x10
[  507.470392][T17165]  ? netlink_sendmsg+0x642/0xb30
[  507.470413][T17165]  ? skb_put+0x11b/0x210
[  507.470440][T17165]  netlink_sendmsg+0x805/0xb30
[  507.470473][T17165]  ? __pfx_netlink_sendmsg+0x10/0x10
[  507.470500][T17165]  ? aa_sock_msg_perm+0xf1/0x1d0
[  507.470522][T17165]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  507.470543][T17165]  ? __pfx_netlink_sendmsg+0x10/0x10
[  507.470567][T17165]  __sock_sendmsg+0x21c/0x270
[  507.470590][T17165]  __sys_sendto+0x3bd/0x520
[  507.470616][T17165]  ? __pfx___sys_sendto+0x10/0x10
[  507.470637][T17165]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  507.470669][T17165]  ? __fget_files+0x3a0/0x420
[  507.470698][T17165]  ? ksys_write+0x22a/0x250
[  507.470727][T17165]  ? __pfx_ksys_write+0x10/0x10
[  507.470749][T17165]  ? rcu_is_watching+0x15/0xb0
[  507.470774][T17165]  __x64_sys_sendto+0xde/0x100
[  507.470800][T17165]  do_syscall_64+0xfa/0x3b0
[  507.470819][T17165]  ? lockdep_hardirqs_on+0x9c/0x150
[  507.470846][T17165]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.470864][T17165]  ? clear_bhb_loop+0x60/0xb0
[  507.470888][T17165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.470907][T17165] RIP: 0033:0x7f0f25b8eba9
[  507.470924][T17165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  507.470941][T17165] RSP: 002b:00007f0f26a0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  507.470963][T17165] RAX: ffffffffffffffda RBX: 00007f0f25dd5fa0 RCX: 00007f0f25b8eba9
[  507.470978][T17165] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003
[  507.470990][T17165] RBP: 00007f0f26a0a090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b
[  507.471004][T17165] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  507.471016][T17165] R13: 00007f0f25dd6038 R14: 00007f0f25dd5fa0 R15: 00007fff24ee2be8
[  507.471049][T17165]  </TASK>
[  507.798720][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.806887][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.954010][T16877] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.250602][T17172] netlink: 'syz.2.3370': attribute type 1 has an invalid length.
[  508.455016][T17174] bond1: (slave gretap1): making interface the new active one
[  508.464653][T17174] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  508.535183][T16877] veth0_vlan: entered promiscuous mode
[  508.586390][T16877] veth1_vlan: entered promiscuous mode
[  508.607495][T17208] syzkaller0: entered promiscuous mode
[  508.614690][T17208] syzkaller0: entered allmulticast mode
[  508.675901][T17210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3383'.
[  508.694903][T16877] veth0_macvtap: entered promiscuous mode
[  508.721141][T16877] veth1_macvtap: entered promiscuous mode
[  508.763616][T16877] batman_adv: batadv0: Interface activated: batadv_slave_0
[  508.782666][T16877] batman_adv: batadv0: Interface activated: batadv_slave_1
[  508.806741][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  508.833326][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.849607][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.869512][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  508.894095][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  508.928055][T17218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3386'.
[  508.996030][T17223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3388'.
[  509.001271][T17220] lo speed is unknown, defaulting to 1000
[  509.189997][T12539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.200442][T12539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.294958][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.320474][T17234] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.3390'.
[  509.324138][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.592375][T17242] veth3: entered promiscuous mode
[  509.889920][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.898152][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.952314][T17255] netlink: 'syz.1.3399': attribute type 1 has an invalid length.
[  509.982226][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3399'.
[  509.991619][T17255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3399'.
[  510.007743][T17260] netlink: 'syz.2.3398': attribute type 1 has an invalid length.
[  510.058522][T17260] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3398'.
[  510.235744][T17268] lo speed is unknown, defaulting to 1000
[  510.332850][T17273] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.340852][T17273] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.373855][T17278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3404'.
[  510.916256][T17289] netlink: 'syz.4.3407': attribute type 1 has an invalid length.
[  510.929740][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.937963][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.155396][T17277] lo speed is unknown, defaulting to 1000
[  511.550663][T17303] lo speed is unknown, defaulting to 1000
[  511.970271][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.225237][T17327] netlink: 'syz.4.3420': attribute type 1 has an invalid length.
[  512.357131][T17325] lo speed is unknown, defaulting to 1000
[  512.747177][T17338] lo speed is unknown, defaulting to 1000
[  513.009477][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.017731][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.206771][T17353] lo speed is unknown, defaulting to 1000
[  513.208154][T17361] tipc: Started in network mode
[  513.273331][T17361] tipc: Node identity , cluster identity 4711
[  513.297560][T17361] tipc: Failed to obtain node identity
[  513.303621][T17361] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  513.537674][T17373] netlink: 'syz.1.3433': attribute type 5 has an invalid length.
[  513.591828][T17373] __nla_validate_parse: 3 callbacks suppressed
[  513.591849][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3433'.
[  513.645438][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3433'.
[  513.894273][T17370] netlink: 'syz.4.3432': attribute type 1 has an invalid length.
[  514.051672][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.343047][T17406] netlink: 'syz.1.3442': attribute type 10 has an invalid length.
[  514.384324][T17403] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  514.392422][ T5933] IPVS: starting estimator thread 0...
[  514.420898][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3445'.
[  514.478701][T17409] IPVS: using max 30 ests per chain, 72000 per kthread
[  514.641555][T17406] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  514.651782][T17411] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.660840][T17411] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.675449][T17413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  514.813142][T17425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3449'.
[  514.830271][T17416] tipc: Resetting bearer <eth:syzkaller0>
[  514.846019][T17405] tipc: Disabling bearer <eth:syzkaller0>
[  514.949589][T17427] lo speed is unknown, defaulting to 1000
[  515.090715][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.099025][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.357633][T17453] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  515.365869][ T5926] IPVS: starting estimator thread 0...
[  515.395168][T17453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'.
[  515.469218][T17455] IPVS: using max 28 ests per chain, 67200 per kthread
[  515.495394][T17459] netlink: 'syz.1.3460': attribute type 4 has an invalid length.
[  515.637880][T17468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  515.644934][T17467] netlink: 'syz.0.3463': attribute type 2 has an invalid length.
[  515.644959][T17467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3463'.
[  515.666189][T17468] tipc: Resetting bearer <eth:syzkaller0>
[  515.730124][T17466] tipc: Disabling bearer <eth:syzkaller0>
[  515.883898][T17479] lo speed is unknown, defaulting to 1000
[  516.042587][T17489] netlink: 'syz.1.3474': attribute type 1 has an invalid length.
[  516.129450][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.137743][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.197995][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3476'.
[  516.284097][T17491] netlink: 'syz.4.3472': attribute type 1 has an invalid length.
[  516.496519][T17515] netlink: 'syz.3.3482': attribute type 5 has an invalid length.
[  516.523045][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3482'.
[  516.547031][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3482'.
[  516.842161][T17532] lo speed is unknown, defaulting to 1000
[  516.872993][T17531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3490'.
[  517.169185][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.315777][T17549] lo speed is unknown, defaulting to 1000
[  517.585705][T17560] bond1: entered promiscuous mode
[  517.640349][T17560] 8021q: adding VLAN 0 to HW filter on device bond1
[  517.663520][T17567] geneve2: entered promiscuous mode
[  517.680412][T17572] netlink: 'syz.2.3504': attribute type 1 has an invalid length.
[  517.717016][T17573] 8021q: adding VLAN 0 to HW filter on device bond1
[  517.726953][T17573] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  517.742799][T17573] bond1: (slave wireguard0): Error -95 calling set_mac_address
[  517.946493][T17564] lo speed is unknown, defaulting to 1000
[  517.975041][T17588] lo speed is unknown, defaulting to 1000
[  518.209928][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.218140][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.578072][T17612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.725642][T17611] lo speed is unknown, defaulting to 1000
[  518.793624][T17620] syz_tun: entered allmulticast mode
[  518.840111][T17622] __nla_validate_parse: 5 callbacks suppressed
[  518.840130][T17622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3522'.
[  518.950433][T17620] syz_tun: left allmulticast mode
[  519.054812][T17628] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  519.600438][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3533'.
[  519.692713][T17655] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.3536'.
[  520.146265][T17663] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3539'.
[  520.281619][T17675] netlink: 'syz.0.3546': attribute type 10 has an invalid length.
[  520.290647][    C1] net_ratelimit: 1 callbacks suppressed
[  520.290669][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.304707][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.336672][T17676] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3544'.
[  520.359958][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3544'.
[  520.430385][T17683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  520.502256][T17683] syzkaller0: entered promiscuous mode
[  520.507765][T17683] syzkaller0: entered allmulticast mode
[  520.576413][T17683] tipc: Resetting bearer <eth:syzkaller0>
[  520.602926][T17682] tipc: Resetting bearer <eth:syzkaller0>
[  520.739314][T17682] tipc: Disabling bearer <eth:syzkaller0>
[  521.035150][T17708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3557'.
[  521.085280][T17710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3558'.
[  521.094738][T17710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3558'.
[  521.154158][T17712] netlink: 'syz.3.3559': attribute type 10 has an invalid length.
[  521.196337][T17712] team0: Port device dummy0 added
[  521.329400][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.337686][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.521721][T17725] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3564'.
[  521.709698][T17729] lo speed is unknown, defaulting to 1000
[  521.832582][T17734] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.840681][T17734] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.369498][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.545474][T17773] sctp: [Deprecated]: syz.0.3576 (pid 17773) Use of struct sctp_assoc_value in delayed_ack socket option.
[  522.545474][T17773] Use struct sctp_sack_info instead
[  522.633271][T17771] lo speed is unknown, defaulting to 1000
[  523.175347][T17790] tipc: Started in network mode
[  523.187767][T17790] tipc: Node identity , cluster identity 4711
[  523.194444][T17790] tipc: Failed to obtain node identity
[  523.201888][T17790] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  523.212475][T17790] syzkaller0: entered promiscuous mode
[  523.219443][T17790] syzkaller0: entered allmulticast mode
[  523.317921][T17792] tipc: Started in network mode
[  523.332092][T17792] tipc: Node identity , cluster identity 4711
[  523.338926][T17792] tipc: Failed to obtain node identity
[  523.344585][T17792] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  523.375844][T17792] syzkaller0: entered promiscuous mode
[  523.383459][T17792] syzkaller0: entered allmulticast mode
[  523.408962][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.417260][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.427239][T17804] FAULT_INJECTION: forcing a failure.
[  523.427239][T17804] name failslab, interval 1, probability 0, space 0, times 0
[  523.445881][T17804] CPU: 1 UID: 0 PID: 17804 Comm: syz.1.3590 Not tainted syzkaller #0 PREEMPT(full) 
[  523.445920][T17804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  523.445932][T17804] Call Trace:
[  523.445941][T17804]  <TASK>
[  523.445949][T17804]  dump_stack_lvl+0x189/0x250
[  523.445977][T17804]  ? __pfx____ratelimit+0x10/0x10
[  523.445998][T17804]  ? __pfx_dump_stack_lvl+0x10/0x10
[  523.446021][T17804]  ? __pfx__printk+0x10/0x10
[  523.446066][T17804]  ? __mutex_trylock_common+0x153/0x260
[  523.446092][T17804]  ? __pfx___mutex_trylock_common+0x10/0x10
[  523.446118][T17804]  should_fail_ex+0x414/0x560
[  523.446158][T17804]  should_failslab+0xa8/0x100
[  523.446189][T17804]  __kmalloc_cache_noprof+0x70/0x3d0
[  523.446250][T17804]  ? __hw_addr_add_ex+0x1f4/0x770
[  523.446287][T17804]  __hw_addr_add_ex+0x1f4/0x770
[  523.446320][T17804]  dev_addr_init+0x14f/0x230
[  523.446358][T17804]  ? __pfx_dev_addr_init+0x10/0x10
[  523.446400][T17804]  alloc_netdev_mqs+0x2ae/0x11b0
[  523.446432][T17804]  ? __pfx_ipgre_tunnel_setup+0x10/0x10
[  523.446468][T17804]  rtnl_create_link+0x31f/0xd10
[  523.446504][T17804]  rtnl_newlink_create+0x25c/0xb00
[  523.446535][T17804]  ? __mutex_lock+0x5bb/0x1350
[  523.446561][T17804]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  523.446591][T17804]  ? __pfx___mutex_lock+0x10/0x10
[  523.446622][T17804]  ? ns_capable+0x8a/0xf0
[  523.446646][T17804]  rtnl_newlink+0x16d6/0x1c70
[  523.446670][T17804]  ? netlink_sendmsg+0x805/0xb30
[  523.446706][T17804]  ? __pfx_rtnl_newlink+0x10/0x10
[  523.446755][T17804]  ? kasan_quarantine_put+0xdd/0x220
[  523.446778][T17804]  ? lockdep_hardirqs_on+0x9c/0x150
[  523.446803][T17804]  ? nlmon_xmit+0xb0/0x100
[  523.446825][T17804]  ? kmem_cache_free+0x18f/0x400
[  523.446860][T17804]  ? __local_bh_enable_ip+0x12d/0x1c0
[  523.446879][T17804]  ? lockdep_hardirqs_on+0x9c/0x150
[  523.446905][T17804]  ? __local_bh_enable_ip+0x12d/0x1c0
[  523.446923][T17804]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  523.446947][T17804]  ? __dev_queue_xmit+0x27b/0x3b50
[  523.446974][T17804]  ? __dev_queue_xmit+0x27b/0x3b50
[  523.446996][T17804]  ? __dev_queue_xmit+0x27b/0x3b50
[  523.447022][T17804]  ? __dev_queue_xmit+0x1d79/0x3b50
[  523.447055][T17804]  ? __lock_acquire+0xab9/0xd20
[  523.447108][T17804]  ? __pfx_rtnl_newlink+0x10/0x10
[  523.447127][T17804]  rtnetlink_rcv_msg+0x7cc/0xb70
[  523.447153][T17804]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  523.447172][T17804]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  523.447190][T17804]  ? ref_tracker_free+0x63a/0x7d0
[  523.447206][T17804]  ? __asan_memcpy+0x40/0x70
[  523.447226][T17804]  ? __pfx_ref_tracker_free+0x10/0x10
[  523.447256][T17804]  netlink_rcv_skb+0x205/0x470
[  523.447278][T17804]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  523.447301][T17804]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  523.447336][T17804]  ? netlink_deliver_tap+0x2e/0x1b0
[  523.447365][T17804]  netlink_unicast+0x82c/0x9e0
[  523.447392][T17804]  ? __pfx_netlink_unicast+0x10/0x10
[  523.447413][T17804]  ? netlink_sendmsg+0x642/0xb30
[  523.447432][T17804]  ? skb_put+0x11b/0x210
[  523.447457][T17804]  netlink_sendmsg+0x805/0xb30
[  523.447488][T17804]  ? __pfx_netlink_sendmsg+0x10/0x10
[  523.447513][T17804]  ? aa_sock_msg_perm+0xf1/0x1d0
[  523.447534][T17804]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  523.447554][T17804]  ? __pfx_netlink_sendmsg+0x10/0x10
[  523.447577][T17804]  __sock_sendmsg+0x21c/0x270
[  523.447600][T17804]  ____sys_sendmsg+0x505/0x830
[  523.447632][T17804]  ? __pfx_____sys_sendmsg+0x10/0x10
[  523.447665][T17804]  ? import_iovec+0x74/0xa0
[  523.447694][T17804]  ___sys_sendmsg+0x21f/0x2a0
[  523.447722][T17804]  ? __pfx____sys_sendmsg+0x10/0x10
[  523.447791][T17804]  ? __fget_files+0x2a/0x420
[  523.447808][T17804]  ? __fget_files+0x3a0/0x420
[  523.447838][T17804]  __x64_sys_sendmsg+0x19b/0x260
[  523.447868][T17804]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  523.447913][T17804]  ? __pfx_ksys_write+0x10/0x10
[  523.447936][T17804]  ? rcu_is_watching+0x15/0xb0
[  523.447961][T17804]  ? do_syscall_64+0xbe/0x3b0
[  523.447986][T17804]  do_syscall_64+0xfa/0x3b0
[  523.448004][T17804]  ? lockdep_hardirqs_on+0x9c/0x150
[  523.448022][T17804]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.448040][T17804]  ? clear_bhb_loop+0x60/0xb0
[  523.448064][T17804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.448082][T17804] RIP: 0033:0x7f0b4478eba9
[  523.448100][T17804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  523.448117][T17804] RSP: 002b:00007f0b4560c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  523.448138][T17804] RAX: ffffffffffffffda RBX: 00007f0b449d5fa0 RCX: 00007f0b4478eba9
[  523.448152][T17804] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  523.448165][T17804] RBP: 00007f0b4560c090 R08: 0000000000000000 R09: 0000000000000000
[  523.448176][T17804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  523.448188][T17804] R13: 00007f0b449d6038 R14: 00007f0b449d5fa0 R15: 00007ffc8a5354d8
[  523.448222][T17804]  </TASK>
[  524.312175][T17826] __nla_validate_parse: 3 callbacks suppressed
[  524.312194][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3599'.
[  524.389562][T17831] batadv_slave_1: entered promiscuous mode
[  524.431377][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3600'.
[  524.449530][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.476464][T17834] lo speed is unknown, defaulting to 1000
[  524.496414][T17831] bridge_slave_1: left allmulticast mode
[  524.522491][T17831] bridge_slave_1: left promiscuous mode
[  524.530002][T17831] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.546407][T17831] bridge_slave_0: left allmulticast mode
[  524.553958][T17831] bridge_slave_0: left promiscuous mode
[  524.563470][T17831] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.693081][T17842] FAULT_INJECTION: forcing a failure.
[  524.693081][T17842] name failslab, interval 1, probability 0, space 0, times 0
[  524.717577][T17842] CPU: 1 UID: 0 PID: 17842 Comm: syz.1.3604 Not tainted syzkaller #0 PREEMPT(full) 
[  524.717604][T17842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  524.717617][T17842] Call Trace:
[  524.717625][T17842]  <TASK>
[  524.717634][T17842]  dump_stack_lvl+0x189/0x250
[  524.717663][T17842]  ? __pfx____ratelimit+0x10/0x10
[  524.717681][T17842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  524.717703][T17842]  ? __pfx__printk+0x10/0x10
[  524.717736][T17842]  ? __pfx___might_resched+0x10/0x10
[  524.717761][T17842]  ? fs_reclaim_acquire+0x7d/0x100
[  524.717797][T17842]  should_fail_ex+0x414/0x560
[  524.717831][T17842]  ? alloc_netdev_mqs+0x8a0/0x11b0
[  524.717858][T17842]  should_failslab+0xa8/0x100
[  524.717886][T17842]  __kvmalloc_node_noprof+0x161/0x5f0
[  524.717912][T17842]  ? alloc_netdev_mqs+0x8a0/0x11b0
[  524.717946][T17842]  alloc_netdev_mqs+0x8a0/0x11b0
[  524.717982][T17842]  rtnl_create_link+0x31f/0xd10
[  524.718019][T17842]  rtnl_newlink_create+0x25c/0xb00
[  524.718050][T17842]  ? __mutex_lock+0x5bb/0x1350
[  524.718077][T17842]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  524.718105][T17842]  ? __pfx___mutex_lock+0x10/0x10
[  524.718136][T17842]  ? ns_capable+0x8a/0xf0
[  524.718159][T17842]  rtnl_newlink+0x16d6/0x1c70
[  524.718183][T17842]  ? netlink_sendmsg+0x805/0xb30
[  524.718221][T17842]  ? __pfx_rtnl_newlink+0x10/0x10
[  524.718269][T17842]  ? kasan_quarantine_put+0xdd/0x220
[  524.718293][T17842]  ? lockdep_hardirqs_on+0x9c/0x150
[  524.718319][T17842]  ? nlmon_xmit+0xb0/0x100
[  524.718342][T17842]  ? kmem_cache_free+0x18f/0x400
[  524.718376][T17842]  ? __local_bh_enable_ip+0x12d/0x1c0
[  524.718395][T17842]  ? lockdep_hardirqs_on+0x9c/0x150
[  524.718416][T17842]  ? __local_bh_enable_ip+0x12d/0x1c0
[  524.718435][T17842]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  524.718459][T17842]  ? __dev_queue_xmit+0x27b/0x3b50
[  524.718487][T17842]  ? __dev_queue_xmit+0x27b/0x3b50
[  524.718511][T17842]  ? __dev_queue_xmit+0x27b/0x3b50
[  524.718538][T17842]  ? __dev_queue_xmit+0x1d79/0x3b50
[  524.718571][T17842]  ? __lock_acquire+0xab9/0xd20
[  524.718629][T17842]  ? __pfx_rtnl_newlink+0x10/0x10
[  524.718650][T17842]  rtnetlink_rcv_msg+0x7cc/0xb70
[  524.718675][T17842]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  524.718696][T17842]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  524.718715][T17842]  ? ref_tracker_free+0x63a/0x7d0
[  524.718734][T17842]  ? __asan_memcpy+0x40/0x70
[  524.718763][T17842]  ? __pfx_ref_tracker_free+0x10/0x10
[  524.718794][T17842]  netlink_rcv_skb+0x205/0x470
[  524.718819][T17842]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  524.718843][T17842]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  524.718879][T17842]  ? netlink_deliver_tap+0x2e/0x1b0
[  524.718911][T17842]  netlink_unicast+0x82c/0x9e0
[  524.718940][T17842]  ? __pfx_netlink_unicast+0x10/0x10
[  524.718963][T17842]  ? netlink_sendmsg+0x642/0xb30
[  524.718984][T17842]  ? skb_put+0x11b/0x210
[  524.719013][T17842]  netlink_sendmsg+0x805/0xb30
[  524.719048][T17842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  524.719075][T17842]  ? aa_sock_msg_perm+0xf1/0x1d0
[  524.719097][T17842]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  524.719118][T17842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  524.719143][T17842]  __sock_sendmsg+0x21c/0x270
[  524.719166][T17842]  ____sys_sendmsg+0x505/0x830
[  524.719198][T17842]  ? __pfx_____sys_sendmsg+0x10/0x10
[  524.719235][T17842]  ? import_iovec+0x74/0xa0
[  524.719265][T17842]  ___sys_sendmsg+0x21f/0x2a0
[  524.719294][T17842]  ? __pfx____sys_sendmsg+0x10/0x10
[  524.719362][T17842]  ? __fget_files+0x2a/0x420
[  524.719379][T17842]  ? __fget_files+0x3a0/0x420
[  524.719408][T17842]  __x64_sys_sendmsg+0x19b/0x260
[  524.719438][T17842]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  524.719476][T17842]  ? __pfx_ksys_write+0x10/0x10
[  524.719499][T17842]  ? rcu_is_watching+0x15/0xb0
[  524.719525][T17842]  ? do_syscall_64+0xbe/0x3b0
[  524.719550][T17842]  do_syscall_64+0xfa/0x3b0
[  524.719569][T17842]  ? lockdep_hardirqs_on+0x9c/0x150
[  524.719587][T17842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.719607][T17842]  ? clear_bhb_loop+0x60/0xb0
[  524.719631][T17842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.719650][T17842] RIP: 0033:0x7f0b4478eba9
[  524.719667][T17842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  524.719686][T17842] RSP: 002b:00007f0b4560c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  524.719706][T17842] RAX: ffffffffffffffda RBX: 00007f0b449d5fa0 RCX: 00007f0b4478eba9
[  524.719721][T17842] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  524.719733][T17842] RBP: 00007f0b4560c090 R08: 0000000000000000 R09: 0000000000000000
[  524.719746][T17842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  524.719784][T17842] R13: 00007f0b449d6038 R14: 00007f0b449d5fa0 R15: 00007ffc8a5354d8
[  524.719814][T17842]  </TASK>
[  525.214006][T17827] lo speed is unknown, defaulting to 1000
[  525.288827][T17829] batadv_slave_1: left promiscuous mode
[  525.450607][T17847] netlink: 'syz.0.3606': attribute type 5 has an invalid length.
[  525.489079][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.497336][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.502847][T17847] ip6erspan0: entered promiscuous mode
[  525.536866][T17847] syzkaller1: entered promiscuous mode
[  525.543867][T17847] syzkaller1: entered allmulticast mode
[  526.184626][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3622'.
[  526.241125][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3619'.
[  526.529436][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.537650][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.810133][T17926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3631'.
[  526.893948][T17928] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3632'.
[  526.994917][T17937] FAULT_INJECTION: forcing a failure.
[  526.994917][T17937] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  527.031208][T17937] CPU: 0 UID: 0 PID: 17937 Comm: syz.3.3634 Not tainted syzkaller #0 PREEMPT(full) 
[  527.031245][T17937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  527.031259][T17937] Call Trace:
[  527.031266][T17937]  <TASK>
[  527.031275][T17937]  dump_stack_lvl+0x189/0x250
[  527.031305][T17937]  ? __pfx____ratelimit+0x10/0x10
[  527.031325][T17937]  ? __pfx_dump_stack_lvl+0x10/0x10
[  527.031348][T17937]  ? __pfx__printk+0x10/0x10
[  527.031376][T17937]  ? __might_fault+0xb0/0x130
[  527.031415][T17937]  should_fail_ex+0x414/0x560
[  527.031450][T17937]  _copy_from_user+0x2d/0xb0
[  527.031477][T17937]  ___sys_recvmsg+0x12e/0x510
[  527.031509][T17937]  ? __pfx____sys_recvmsg+0x10/0x10
[  527.031564][T17937]  ? __fget_files+0x3a0/0x420
[  527.031591][T17937]  do_recvmmsg+0x307/0x770
[  527.031628][T17937]  ? __pfx_do_recvmmsg+0x10/0x10
[  527.031669][T17937]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  527.031710][T17937]  __x64_sys_recvmmsg+0x190/0x240
[  527.031741][T17937]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  527.031775][T17937]  ? do_syscall_64+0xbe/0x3b0
[  527.031801][T17937]  do_syscall_64+0xfa/0x3b0
[  527.031820][T17937]  ? lockdep_hardirqs_on+0x9c/0x150
[  527.031840][T17937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.031860][T17937]  ? clear_bhb_loop+0x60/0xb0
[  527.031885][T17937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.031904][T17937] RIP: 0033:0x7f0f25b8eba9
[  527.031922][T17937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  527.031940][T17937] RSP: 002b:00007f0f269e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  527.031962][T17937] RAX: ffffffffffffffda RBX: 00007f0f25dd6090 RCX: 00007f0f25b8eba9
[  527.031982][T17937] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004
[  527.031995][T17937] RBP: 00007f0f269e9090 R08: 0000000000000000 R09: 0000000000000000
[  527.032009][T17937] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[  527.032021][T17937] R13: 00007f0f25dd6128 R14: 00007f0f25dd6090 R15: 00007fff24ee2be8
[  527.032055][T17937]  </TASK>
[  527.410145][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3638'.
[  527.535172][T17953] IPVS: length: 24 != 55320
[  527.569581][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.766536][T17965] netlink: 'syz.2.3644': attribute type 1 has an invalid length.
[  527.811176][T17967] lo speed is unknown, defaulting to 1000
[  527.893696][T17976] netlink: 'syz.1.3648': attribute type 7 has an invalid length.
[  528.106572][T17990] FAULT_INJECTION: forcing a failure.
[  528.106572][T17990] name failslab, interval 1, probability 0, space 0, times 0
[  528.161659][T17990] CPU: 0 UID: 0 PID: 17990 Comm: syz.2.3651 Not tainted syzkaller #0 PREEMPT(full) 
[  528.161688][T17990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  528.161701][T17990] Call Trace:
[  528.161710][T17990]  <TASK>
[  528.161719][T17990]  dump_stack_lvl+0x189/0x250
[  528.161749][T17990]  ? __pfx____ratelimit+0x10/0x10
[  528.161770][T17990]  ? __pfx_dump_stack_lvl+0x10/0x10
[  528.161793][T17990]  ? __pfx__printk+0x10/0x10
[  528.161823][T17990]  ? __pfx___might_resched+0x10/0x10
[  528.161842][T17990]  ? fs_reclaim_acquire+0x7d/0x100
[  528.161878][T17990]  should_fail_ex+0x414/0x560
[  528.161912][T17990]  should_failslab+0xa8/0x100
[  528.161943][T17990]  __kmalloc_noprof+0xcb/0x4f0
[  528.161968][T17990]  ? iovec_from_user+0x87/0x250
[  528.161998][T17990]  iovec_from_user+0x87/0x250
[  528.162027][T17990]  __import_iovec+0x163/0x7f0
[  528.162065][T17990]  import_iovec+0x74/0xa0
[  528.162109][T17990]  ___sys_recvmsg+0x43a/0x510
[  528.162143][T17990]  ? __pfx____sys_recvmsg+0x10/0x10
[  528.162196][T17990]  ? __fget_files+0x3a0/0x420
[  528.162225][T17990]  do_recvmmsg+0x307/0x770
[  528.162262][T17990]  ? __pfx_do_recvmmsg+0x10/0x10
[  528.162303][T17990]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  528.162343][T17990]  __x64_sys_recvmmsg+0x190/0x240
[  528.162376][T17990]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  528.162410][T17990]  ? do_syscall_64+0xbe/0x3b0
[  528.162436][T17990]  do_syscall_64+0xfa/0x3b0
[  528.162455][T17990]  ? lockdep_hardirqs_on+0x9c/0x150
[  528.162475][T17990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.162495][T17990]  ? clear_bhb_loop+0x60/0xb0
[  528.162520][T17990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.162539][T17990] RIP: 0033:0x7f5a0338eba9
[  528.162558][T17990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  528.162575][T17990] RSP: 002b:00007f5a0419f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  528.162597][T17990] RAX: ffffffffffffffda RBX: 00007f5a035d6090 RCX: 00007f5a0338eba9
[  528.162613][T17990] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004
[  528.162626][T17990] RBP: 00007f5a0419f090 R08: 0000000000000000 R09: 0000000000000000
[  528.162638][T17990] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[  528.162651][T17990] R13: 00007f5a035d6128 R14: 00007f5a035d6090 R15: 00007ffe0acccd68
[  528.162684][T17990]  </TASK>
[  528.578223][T18008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3655'.
[  528.609422][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.617625][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.875301][T18026] bridge_slave_0: left allmulticast mode
[  528.884434][T18026] bridge_slave_0: left promiscuous mode
[  528.890594][T18026] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.951158][T18026] bridge_slave_1: left allmulticast mode
[  528.980041][T18026] bridge_slave_1: left promiscuous mode
[  528.985868][T18026] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.029495][T18026] bond0: (slave bond_slave_0): Releasing backup interface
[  529.040760][T18039] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3667'.
[  529.063175][T18026] bond0: (slave bond_slave_1): Releasing backup interface
[  529.100838][T18026] team0: Port device team_slave_0 removed
[  529.150139][T18026] team0: Port device team_slave_1 removed
[  529.163225][T18026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  529.178828][T18026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  529.189214][T18026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  529.198678][T18026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  529.211047][T18026] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  529.214439][T18045] FAULT_INJECTION: forcing a failure.
[  529.214439][T18045] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  529.246609][T18045] CPU: 0 UID: 0 PID: 18045 Comm: syz.0.3668 Not tainted syzkaller #0 PREEMPT(full) 
[  529.246637][T18045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  529.246649][T18045] Call Trace:
[  529.246656][T18045]  <TASK>
[  529.246665][T18045]  dump_stack_lvl+0x189/0x250
[  529.246696][T18045]  ? __pfx____ratelimit+0x10/0x10
[  529.246716][T18045]  ? __pfx_dump_stack_lvl+0x10/0x10
[  529.246740][T18045]  ? __pfx__printk+0x10/0x10
[  529.246781][T18045]  should_fail_ex+0x414/0x560
[  529.246815][T18045]  _copy_to_user+0x31/0xb0
[  529.246840][T18045]  simple_read_from_buffer+0xe1/0x170
[  529.246873][T18045]  proc_fail_nth_read+0x1b3/0x220
[  529.246899][T18045]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  529.246925][T18045]  ? rw_verify_area+0x2a6/0x4d0
[  529.246948][T18045]  ? __lock_acquire+0xab9/0xd20
[  529.246986][T18045]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  529.247010][T18045]  vfs_read+0x200/0xa30
[  529.247032][T18045]  ? fdget_pos+0x247/0x320
[  529.247054][T18045]  ? __pfx___mutex_lock+0x10/0x10
[  529.247081][T18045]  ? __pfx_vfs_read+0x10/0x10
[  529.247107][T18045]  ? __fget_files+0x2a/0x420
[  529.247129][T18045]  ? __fget_files+0x3a0/0x420
[  529.247145][T18045]  ? __fget_files+0x2a/0x420
[  529.247173][T18045]  ksys_read+0x145/0x250
[  529.247201][T18045]  ? __pfx_ksys_read+0x10/0x10
[  529.247223][T18045]  ? rcu_is_watching+0x15/0xb0
[  529.247248][T18045]  ? do_syscall_64+0xbe/0x3b0
[  529.247272][T18045]  do_syscall_64+0xfa/0x3b0
[  529.247295][T18045]  ? lockdep_hardirqs_on+0x9c/0x150
[  529.247313][T18045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.247333][T18045]  ? clear_bhb_loop+0x60/0xb0
[  529.247357][T18045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.247376][T18045] RIP: 0033:0x7f0c26b8d5bc
[  529.247395][T18045] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  529.247412][T18045] RSP: 002b:00007f0c2797a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  529.247434][T18045] RAX: ffffffffffffffda RBX: 00007f0c26dd6090 RCX: 00007f0c26b8d5bc
[  529.247449][T18045] RDX: 000000000000000f RSI: 00007f0c2797a0a0 RDI: 0000000000000005
[  529.247461][T18045] RBP: 00007f0c2797a090 R08: 0000000000000000 R09: 0000000000000000
[  529.247472][T18045] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[  529.247484][T18045] R13: 00007f0c26dd6128 R14: 00007f0c26dd6090 R15: 00007ffe445642e8
[  529.247517][T18045]  </TASK>
[  529.572639][T18046] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  529.602821][T18046] batadv_slave_0: entered promiscuous mode
[  529.649232][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.660652][T18044] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  529.748029][T18063] netlink: 'syz.0.3671': attribute type 4 has an invalid length.
[  529.807034][T18067] netlink: 'syz.0.3671': attribute type 4 has an invalid length.
[  529.838191][T18060] netlink: 'syz.2.3673': attribute type 21 has an invalid length.
[  529.846846][T18059] netlink: 'syz.2.3673': attribute type 21 has an invalid length.
[  529.870214][T18060] netlink: 'syz.2.3673': attribute type 1 has an invalid length.
[  529.889925][T18060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3673'.
[  529.900362][T18059] netlink: 'syz.2.3673': attribute type 1 has an invalid length.
[  529.908121][T18059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3673'.
[  529.977043][T18065] netlink: 'syz.4.3674': attribute type 1 has an invalid length.
[  530.237080][T18085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3682'.
[  530.497655][T18102] netlink: 'syz.3.3688': attribute type 2 has an invalid length.
[  530.564546][T18102] þ
: entered promiscuous mode
[  530.626816][T18106] macvtap1: entered allmulticast mode
[  530.638881][T18106] veth0_macvtap: entered allmulticast mode
[  530.667074][T18106] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3690'.
[  530.679453][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3691'.
[  530.689201][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.697493][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.975492][T18117] pim6reg99999999: entered allmulticast mode
[  531.134223][T18134] netlink: 'syz.3.3698': attribute type 7 has an invalid length.
[  531.505925][T18151] bridge1: entered promiscuous mode
[  531.515170][T18151] bridge1: entered allmulticast mode
[  531.729478][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.737717][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.938217][T18167] netlink: 'syz.1.3709': attribute type 1 has an invalid length.
[  531.950237][T18166] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  531.971066][T18167] netlink: 'syz.1.3709': attribute type 1 has an invalid length.
[  531.971776][T18166] syzkaller0: entered promiscuous mode
[  531.983460][T18167] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3709'.
[  532.008260][T18166] syzkaller0: entered allmulticast mode
[  532.044880][T18172] netlink: 'syz.0.3711': attribute type 4 has an invalid length.
[  532.056544][T18166] tipc: Resetting bearer <eth:syzkaller0>
[  532.083562][T18165] tipc: Resetting bearer <eth:syzkaller0>
[  532.194899][T18183] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3714'.
[  532.197827][T18165] tipc: Disabling bearer <eth:syzkaller0>
[  532.246209][T18180] lo speed is unknown, defaulting to 1000
[  532.382689][T18194] netlink: 'syz.3.3716': attribute type 26 has an invalid length.
[  532.411342][T18194] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  532.554863][T18208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3719'.
[  532.569351][T18208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3719'.
[  532.769942][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.900215][T18223] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.3722'.
[  533.076591][T18202] batadv_slave_0: left promiscuous mode
[  533.090349][T18202] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  533.142409][T18202] veth1_vlan: left allmulticast mode
[  533.148005][T18202] macvlan1: left promiscuous mode
[  533.229136][T18202] veth0: left allmulticast mode
[  533.243744][T18202] macvtap0: left promiscuous mode
[  533.256300][T18202] macvtap1: left promiscuous mode
[  533.401453][   T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  533.417542][   T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  533.427531][   T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  533.455172][T18241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.476974][T18247] siw: device registration error -23
[  533.552954][T18232] syzkaller0: entered promiscuous mode
[  533.563083][T18232] syzkaller0: entered allmulticast mode
[  533.573436][   T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  533.587532][T18247] tc_dump_action: action bad kind
[  533.604419][T18250] syz_tun: entered promiscuous mode
[  533.626700][T18253] netlink: 'syz.0.3730': attribute type 4 has an invalid length.
[  533.649699][T18232] tipc: Resetting bearer <eth:syzkaller0>
[  533.690255][T18231] tipc: Resetting bearer <eth:syzkaller0>
[  533.809236][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.817457][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.851130][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.889305][T18281] netlink: 'syz.4.3738': attribute type 4 has an invalid length.
[  534.953229][T18282] netlink: 'syz.4.3738': attribute type 4 has an invalid length.
[  535.890033][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.898300][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.101057][T18231] tipc: Disabling bearer <eth:syzkaller0>
[  536.270228][T18291] __nla_validate_parse: 1 callbacks suppressed
[  536.270248][T18291] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3741'.
[  536.497792][T18296] netlink: 'syz.3.3743': attribute type 12 has an invalid length.
[  536.519408][T18304] netlink: 'syz.3.3743': attribute type 12 has an invalid length.
[  536.543488][T18293] netlink: 'syz.2.3742': attribute type 1 has an invalid length.
[  536.560787][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3747'.
[  536.634628][T18312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  536.652445][T18312] syzkaller0: entered promiscuous mode
[  536.667079][T18312] syzkaller0: entered allmulticast mode
[  536.720358][T18319] netlink: 'syz.0.3752': attribute type 10 has an invalid length.
[  536.745233][T18319] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  536.768303][T18312] tipc: Resetting bearer <eth:syzkaller0>
[  536.812428][T18311] tipc: Resetting bearer <eth:syzkaller0>
[  536.855487][T18311] tipc: Disabling bearer <eth:syzkaller0>
[  536.933097][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.941758][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.177467][T18336] netlink: 'syz.0.3759': attribute type 15 has an invalid length.
[  537.328238][T18342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  537.342590][T18342] syzkaller0: entered promiscuous mode
[  537.348220][T18342] syzkaller0: entered allmulticast mode
[  537.424095][T18342] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  537.561051][T18360] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  537.633473][T18363] netlink: 'syz.4.3766': attribute type 1 has an invalid length.
[  537.652262][T18351] tipc: Resetting bearer <eth:syzkaller0>
[  537.682327][T18351] tipc: Disabling bearer <eth:syzkaller0>
[  537.963573][T18372] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3767'.
[  537.969196][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.247782][T18364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.273694][T18364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  538.493984][T18363] geneve3: entered promiscuous mode
[  538.499363][T18363] geneve3: entered allmulticast mode
[  538.510026][T18373] netlink: 'syz.2.3767': attribute type 29 has an invalid length.
[  538.618622][T18386] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3771'.
[  539.009331][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.017613][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.109423][T18375] veth1_macvtap: left allmulticast mode
[  539.190424][T18377] tipc: Started in network mode
[  539.195728][T18377] tipc: Node identity 62c8d4739ace, cluster identity 4711
[  539.210072][T18377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  539.225033][   T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.244529][   T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  539.298883][T18393] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  539.320546][T18381] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  539.330435][   T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.350288][   T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  539.379794][T18381] tipc: Disabling bearer <eth:syzkaller0>
[  539.439995][   T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.485657][   T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  539.508550][   T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.517016][   T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  539.541595][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.558997][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.579419][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.597924][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.598629][T18403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3776'.
[  539.706595][T18413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3780'.
[  539.722613][T18407] block nbd1: server does not support multiple connections per device.
[  539.748743][T18407] block nbd1: shutting down sockets
[  539.816806][T18413] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  539.871463][T18413] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  539.951700][T18413] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  540.020472][T18413] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  540.049092][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.057972][T18424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3783'.
[  540.070691][T18424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3783'.
[  540.080380][T18424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3783'.
[  540.392414][T18437] netlink: 'syz.0.3788': attribute type 1 has an invalid length.
[  540.485410][T18441] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  540.722464][T18454] bond0: (slave erspan0): Error: Device type is different from other slaves
[  540.836592][ T2976] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  540.883739][ T2976] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  540.902562][ T2976] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  540.948673][ T2976] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  540.969546][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3796'.
[  540.984985][T18461] gtp0: entered promiscuous mode
[  540.999059][T18461] gtp0: entered allmulticast mode
[  541.043501][T18461] netlink: 'syz.2.3796': attribute type 4 has an invalid length.
[  541.089674][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.097907][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.116807][T18462] netlink: 'syz.2.3796': attribute type 4 has an invalid length.
[  541.409048][T18478] 
: renamed from bond_slave_0 (while UP)
[  541.455942][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3807'.
[  541.703181][T18502] geneve0: entered allmulticast mode
[  541.840331][T12537] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  541.902460][T18514] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3813'.
[  542.056855][T18526] netlink: 'syz.2.3816': attribute type 1 has an invalid length.
[  542.129310][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.137534][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.186052][T18526] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  542.422616][T18549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3821'.
[  542.631453][T18566] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001
[  542.647507][T18568] wg1 speed is unknown, defaulting to 1000
[  542.668950][T18568] wg1 speed is unknown, defaulting to 1000
[  542.686549][T18568] wg1 speed is unknown, defaulting to 1000
[  542.784143][T18568] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  542.852830][T18575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3829'.
[  542.867009][T18575] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3829'.
[  542.872070][T18568] wg1 speed is unknown, defaulting to 1000
[  542.915035][T18568] wg1 speed is unknown, defaulting to 1000
[  542.943430][T18568] wg1 speed is unknown, defaulting to 1000
[  542.950019][T18581] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  542.975056][T18568] wg1 speed is unknown, defaulting to 1000
[  543.033499][T18568] wg1 speed is unknown, defaulting to 1000
[  543.063534][T18568] wg1 speed is unknown, defaulting to 1000
[  543.095626][T18568] wg1 speed is unknown, defaulting to 1000
[  543.127605][T18589] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3833'.
[  543.169616][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.195755][T18568] wg1 speed is unknown, defaulting to 1000
[  543.277456][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3835'.
[  543.294522][T18598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3834'.
[  543.327547][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3835'.
[  543.447091][T18596] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3835'.
[  543.575337][T18591] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.583321][T18591] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.161049][T18591] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  544.184247][T18591] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  544.209356][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.217566][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.499703][T18591] veth0_macvtap: left allmulticast mode
[  544.505425][T18591] macvtap1: left allmulticast mode
[  544.513184][T18568] wg1 speed is unknown, defaulting to 1000
[  544.531125][T18598] hsr_slave_0: left promiscuous mode
[  544.542956][T18598] hsr_slave_1: left promiscuous mode
[  544.597136][T18607] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  544.617320][   T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.657233][   T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.691380][   T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.725832][   T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  544.801022][T18625] netlink: 'syz.0.3840': attribute type 1 has an invalid length.
[  544.802396][T18623] wg1 speed is unknown, defaulting to 1000
[  545.249971][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.328774][T18649] tc_dump_action: action bad kind
[  545.486208][T18654] wg1 speed is unknown, defaulting to 1000
[  545.872555][T18670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  545.882289][T18670] syzkaller0: entered promiscuous mode
[  545.887924][T18670] syzkaller0: entered allmulticast mode
[  545.981504][T18670] tipc: Resetting bearer <eth:syzkaller0>
[  546.044714][T18667] tipc: Resetting bearer <eth:syzkaller0>
[  546.102580][T18667] tipc: Disabling bearer <eth:syzkaller0>
[  546.125094][T18673] netlink: 'syz.2.3856': attribute type 1 has an invalid length.
[  546.289165][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.297388][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.461691][T18704] __nla_validate_parse: 3 callbacks suppressed
[  546.461709][T18704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3863'.
[  546.554544][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3864'.
[  546.580322][T18703] netlink: 'syz.4.3862': attribute type 1 has an invalid length.
[  546.834041][T18732] sctp: [Deprecated]: syz.2.3871 (pid 18732) Use of int in maxseg socket option.
[  546.834041][T18732] Use struct sctp_assoc_value instead
[  546.850799][T18731] sctp: [Deprecated]: syz.2.3871 (pid 18731) Use of int in maxseg socket option.
[  546.850799][T18731] Use struct sctp_assoc_value instead
[  546.872981][T18700] delete_channel: no stack
[  546.874998][T18732] netlink: 2996 bytes leftover after parsing attributes in process `syz.2.3871'.
[  546.888147][T18734] netlink: 2996 bytes leftover after parsing attributes in process `syz.2.3871'.
[  547.007655][T18736] netlink: 'syz.4.3872': attribute type 5 has an invalid length.
[  547.032307][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3872'.
[  547.059763][T18740] wg1 speed is unknown, defaulting to 1000
[  547.206755][T18750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3877'.
[  547.329106][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.337428][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.358919][T18755] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  547.617325][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3884'.
[  547.678309][T18776] wg1 speed is unknown, defaulting to 1000
[  548.368981][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.572477][T18818] netlink: 'syz.1.3902': attribute type 3 has an invalid length.
[  548.640926][T18818] netlink: 'syz.1.3902': attribute type 1 has an invalid length.
[  548.711702][T18819] wg1 speed is unknown, defaulting to 1000
[  548.994021][T18834] wg1 speed is unknown, defaulting to 1000
[  549.409949][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.418165][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.497612][T18856] netlink: 'syz.3.3913': attribute type 1 has an invalid length.
[  549.504956][T18861] wg1 speed is unknown, defaulting to 1000
[  550.252824][T18866] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3915'.
[  550.409664][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3918'.
[  550.449626][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.697869][T18880] wg1 speed is unknown, defaulting to 1000
[  550.785506][T18892] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.3923'.
[  551.035902][   T30] audit: type=1800 audit(1758184851.040:7): pid=18894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3920" name="memory.events" dev="tmpfs" ino=854 res=0 errno=0
[  551.037538][T18906] wg1 speed is unknown, defaulting to 1000
[  551.298030][T18911] wg1 speed is unknown, defaulting to 1000
[  551.491584][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.499948][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.600277][T18916] __nla_validate_parse: 2 callbacks suppressed
[  551.600296][T18916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3930'.
[  551.813256][T18922] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.3932'.
[  552.026062][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3937'.
[  552.340604][T18956] TCP: TCP_TX_DELAY enabled
[  552.361909][T18953] wg1 speed is unknown, defaulting to 1000
[  552.410101][T18956] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3942'.
[  552.516715][T18942] wg1 speed is unknown, defaulting to 1000
[  552.529038][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.537186][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.657193][T18963] wg1 speed is unknown, defaulting to 1000
[  552.984273][T18981] wg1 speed is unknown, defaulting to 1000
[  553.575330][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.636265][T19009] netlink: 'syz.4.3955': attribute type 10 has an invalid length.
[  553.664468][T19009] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.690838][T19009] team0: Port device bond0 added
[  553.771519][T19019] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  554.150045][T19027] wg1 speed is unknown, defaulting to 1000
[  554.225029][T19036] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3962'.
[  554.370318][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'.
[  554.425470][T19038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3963'.
[  554.540299][T19038] macvtap2: entered promiscuous mode
[  554.541767][T19050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  554.548387][T19038] batadv0: entered promiscuous mode
[  554.583366][T19038] macvtap2: entered allmulticast mode
[  554.594257][T19038] batadv0: entered allmulticast mode
[  554.603007][T19038] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  554.610925][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.619176][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.660199][T19046] batadv0: left allmulticast mode
[  554.665464][T19046] batadv0: left promiscuous mode
[  554.785959][T19044] wg1 speed is unknown, defaulting to 1000
[  555.070572][T19068] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  555.094744][T19070] netlink: 'syz.4.3974': attribute type 49 has an invalid length.
[  555.163293][T19075] netlink: 'syz.4.3974': attribute type 49 has an invalid length.
[  555.309463][    C1] ------------[ cut here ]------------
[  555.315351][    C1] WARNING: CPU: 1 PID: 19080 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730
[  555.325054][    C1] Modules linked in:
[  555.329307][    C1] CPU: 1 UID: 0 PID: 19080 Comm: syz.4.3978 Not tainted syzkaller #0 PREEMPT(full) 
[  555.338759][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  555.348954][    C1] RIP: 0010:inet_sock_destruct+0x623/0x730
[  555.354806][    C1] Code: 0f 0b 90 e9 62 fe ff ff e8 6a 6b bb f7 90 0f 0b 90 e9 95 fe ff ff e8 5c 6b bb f7 90 0f 0b 90 e9 bb fe ff ff e8 4e 6b bb f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc
[  555.374558][    C1] RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246
[  555.380691][    C1] RAX: ffffffff8a0453b2 RBX: dffffc0000000000 RCX: ffff8880566e3c00
[  555.388771][    C1] RDX: 0000000000000100 RSI: 0000000000000ffc RDI: 0000000000000000
[  555.396788][    C1] RBP: 0000000000000ffc R08: ffff88802ff0d3a7 R09: 1ffff11005fe1a74
[  555.404951][    C1] R10: dffffc0000000000 R11: ffffed1005fe1a75 R12: ffff88802ff0d100
[  555.413011][    C1] R13: dffffc0000000000 R14: ffff88802ff0d38c R15: 1ffff11005fe1a22
[  555.421073][    C1] FS:  0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000
[  555.430066][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  555.436671][    C1] CR2: 000000110c352fb6 CR3: 000000000df36000 CR4: 00000000003526f0
[  555.444739][    C1] Call Trace:
[  555.448032][    C1]  <IRQ>
[  555.450926][    C1]  ? inet6_cleanup_sock+0x197/0x230
[  555.456159][    C1]  ? __pfx_tcp6_destruct_sock+0x10/0x10
[  555.461802][    C1]  __sk_destruct+0x89/0x660
[  555.466355][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  555.471656][    C1]  ? rcu_core+0xc37/0x1770
[  555.476110][    C1]  rcu_core+0xcab/0x1770
[  555.480493][    C1]  ? __pfx_rcu_core+0x10/0x10
[  555.485240][    C1]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  555.490989][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  555.497323][    C1]  handle_softirqs+0x283/0x870
[  555.502207][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  555.507115][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  555.512524][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  555.517756][    C1]  __irq_exit_rcu+0xca/0x1f0
[  555.522643][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  555.528227][    C1]  irq_exit_rcu+0x9/0x30
[  555.532578][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  555.538267][    C1]  </IRQ>
[  555.541252][    C1]  <TASK>
[  555.544202][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  555.550275][    C1] RIP: 0010:lock_acquire+0xc9/0x360
[  555.555517][    C1] Code: 03 11 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 a0 a0 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c <8f> 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 d0
[  555.575222][    C1] RSP: 0018:ffffc9000f32f4e8 EFLAGS: 00000246
[  555.581355][    C1] RAX: ffff8880566e3c00 RBX: 0000000000000000 RCX: 59b3189406fa5d00
[  555.589417][    C1] RDX: 0000000000000000 RSI: ffffffff822e62f4 RDI: 1ffffffff1c2741c
[  555.597420][    C1] RBP: ffffffff822e62d7 R08: 0000000000000000 R09: 0000000000000000
[  555.605449][    C1] R10: dffffc0000000000 R11: fffff940002bbcd1 R12: 0000000000000002
[  555.607433][T19089] bond0: (slave vlan2): Opening slave failed
[  555.613481][    C1] R13: ffffffff8e13a0e0 R14: 0000000000000000 R15: 0000000000000000
[  555.613511][    C1]  ? page_table_check_clear+0x187/0x700
[  555.613548][    C1]  ? page_table_check_clear+0x1a4/0x700
[  555.613584][    C1]  ? pfn_valid+0xba/0x490
[  555.613614][    C1]  ? pfn_valid+0xba/0x490
[  555.613648][    C1]  ? page_table_check_clear+0x187/0x700
[  555.613676][    C1]  page_table_check_clear+0x1a4/0x700
[  555.613705][    C1]  ? page_table_check_clear+0x187/0x700
[  555.613734][    C1]  ? vm_normal_page+0xb7/0x210
[  555.613760][    C1]  unmap_page_range+0x3445/0x4370
[  555.613837][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  555.613870][    C1]  ? mas_find+0xb0e/0xd30
[  555.613892][    C1]  ? unmap_vmas+0x144/0x580
[  555.613917][    C1]  unmap_vmas+0x399/0x580
[  555.613951][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  555.614003][    C1]  exit_mmap+0x248/0xb50
[  555.614034][    C1]  ? uprobe_clear_state+0x20f/0x290
[  555.614065][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  555.614092][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  555.614132][    C1]  ? __pfx_exit_aio+0x10/0x10
[  555.614176][    C1]  ? uprobe_clear_state+0x274/0x290
[  555.614204][    C1]  __mmput+0x118/0x430
[  555.614226][    C1]  exit_mm+0x1da/0x2c0
[  555.614254][    C1]  ? __pfx_exit_mm+0x10/0x10
[  555.741794][    C1]  ? rcu_is_watching+0x15/0xb0
[  555.746585][    C1]  do_exit+0x648/0x2300
[  555.750823][    C1]  ? preempt_schedule_common+0x83/0xd0
[  555.756410][    C1]  ? preempt_schedule+0xae/0xc0
[  555.761389][    C1]  ? __pfx_do_exit+0x10/0x10
[  555.766032][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  555.771679][    C1]  do_group_exit+0x21c/0x2d0
[  555.776319][    C1]  __x64_sys_exit_group+0x3f/0x40
[  555.781562][    C1]  x64_sys_call+0x21f7/0x2200
[  555.786464][    C1]  do_syscall_64+0xfa/0x3b0
[  555.791165][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  555.796675][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.803021][    C1]  ? clear_bhb_loop+0x60/0xb0
[  555.807730][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.813713][    C1] RIP: 0033:0x7f1c1098eba9
[  555.818243][    C1] Code: Unable to access opcode bytes at 0x7f1c1098eb7f.
[  555.825414][    C1] RSP: 002b:00007fff91e15848 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  555.834158][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1c1098eba9
[  555.842289][    C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  555.850709][    C1] RBP: 00007fff91e158ac R08: 0000000491e1593f R09: 00000000000927c0
[  555.858790][    C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000e4
[  555.866787][    C1] R13: 00000000000927c0 R14: 0000000000087882 R15: 00007fff91e15900
[  555.874828][    C1]  </TASK>
[  555.877877][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  555.885177][    C1] CPU: 1 UID: 0 PID: 19080 Comm: syz.4.3978 Not tainted syzkaller #0 PREEMPT(full) 
[  555.894624][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  555.905044][    C1] Call Trace:
[  555.908497][    C1]  <IRQ>
[  555.911357][    C1]  dump_stack_lvl+0x99/0x250
[  555.916095][    C1]  ? __asan_memcpy+0x40/0x70
[  555.920687][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  555.925969][    C1]  ? __pfx__printk+0x10/0x10
[  555.930576][    C1]  vpanic+0x281/0x750
[  555.934564][    C1]  ? __pfx__printk+0x10/0x10
[  555.939153][    C1]  ? __pfx_vpanic+0x10/0x10
[  555.943654][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  555.948870][    C1]  panic+0xb9/0xc0
[  555.952589][    C1]  ? __pfx_panic+0x10/0x10
[  555.957076][    C1]  __warn+0x31b/0x4b0
[  555.961080][    C1]  ? inet_sock_destruct+0x623/0x730
[  555.966329][    C1]  ? inet_sock_destruct+0x623/0x730
[  555.971536][    C1]  report_bug+0x2be/0x4f0
[  555.976153][    C1]  ? inet_sock_destruct+0x623/0x730
[  555.981365][    C1]  ? inet_sock_destruct+0x623/0x730
[  555.986600][    C1]  ? inet_sock_destruct+0x625/0x730
[  555.991816][    C1]  handle_bug+0x84/0x160
[  555.996070][    C1]  exc_invalid_op+0x1a/0x50
[  556.000571][    C1]  asm_exc_invalid_op+0x1a/0x20
[  556.005420][    C1] RIP: 0010:inet_sock_destruct+0x623/0x730
[  556.011237][    C1] Code: 0f 0b 90 e9 62 fe ff ff e8 6a 6b bb f7 90 0f 0b 90 e9 95 fe ff ff e8 5c 6b bb f7 90 0f 0b 90 e9 bb fe ff ff e8 4e 6b bb f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc
[  556.030955][    C1] RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246
[  556.037027][    C1] RAX: ffffffff8a0453b2 RBX: dffffc0000000000 RCX: ffff8880566e3c00
[  556.045173][    C1] RDX: 0000000000000100 RSI: 0000000000000ffc RDI: 0000000000000000
[  556.053240][    C1] RBP: 0000000000000ffc R08: ffff88802ff0d3a7 R09: 1ffff11005fe1a74
[  556.061215][    C1] R10: dffffc0000000000 R11: ffffed1005fe1a75 R12: ffff88802ff0d100
[  556.069371][    C1] R13: dffffc0000000000 R14: ffff88802ff0d38c R15: 1ffff11005fe1a22
[  556.077548][    C1]  ? inet_sock_destruct+0x622/0x730
[  556.082754][    C1]  ? inet_sock_destruct+0x622/0x730
[  556.088214][    C1]  ? inet6_cleanup_sock+0x197/0x230
[  556.093426][    C1]  ? __pfx_tcp6_destruct_sock+0x10/0x10
[  556.099062][    C1]  __sk_destruct+0x89/0x660
[  556.103671][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  556.108867][    C1]  ? rcu_core+0xc37/0x1770
[  556.113294][    C1]  rcu_core+0xcab/0x1770
[  556.117583][    C1]  ? __pfx_rcu_core+0x10/0x10
[  556.122282][    C1]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  556.127927][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  556.134197][    C1]  handle_softirqs+0x283/0x870
[  556.139009][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  556.143788][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  556.149082][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  556.154295][    C1]  __irq_exit_rcu+0xca/0x1f0
[  556.159143][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  556.164346][    C1]  irq_exit_rcu+0x9/0x30
[  556.168585][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  556.174232][    C1]  </IRQ>
[  556.177332][    C1]  <TASK>
[  556.180284][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  556.186262][    C1] RIP: 0010:lock_acquire+0xc9/0x360
[  556.191466][    C1] Code: 03 11 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 a0 a0 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c <8f> 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 d0
[  556.211076][    C1] RSP: 0018:ffffc9000f32f4e8 EFLAGS: 00000246
[  556.217233][    C1] RAX: ffff8880566e3c00 RBX: 0000000000000000 RCX: 59b3189406fa5d00
[  556.225197][    C1] RDX: 0000000000000000 RSI: ffffffff822e62f4 RDI: 1ffffffff1c2741c
[  556.233444][    C1] RBP: ffffffff822e62d7 R08: 0000000000000000 R09: 0000000000000000
[  556.241453][    C1] R10: dffffc0000000000 R11: fffff940002bbcd1 R12: 0000000000000002
[  556.249439][    C1] R13: ffffffff8e13a0e0 R14: 0000000000000000 R15: 0000000000000000
[  556.257419][    C1]  ? page_table_check_clear+0x187/0x700
[  556.262976][    C1]  ? page_table_check_clear+0x1a4/0x700
[  556.268530][    C1]  ? pfn_valid+0xba/0x490
[  556.272861][    C1]  ? pfn_valid+0xba/0x490
[  556.277256][    C1]  ? page_table_check_clear+0x187/0x700
[  556.283080][    C1]  page_table_check_clear+0x1a4/0x700
[  556.288608][    C1]  ? page_table_check_clear+0x187/0x700
[  556.294338][    C1]  ? vm_normal_page+0xb7/0x210
[  556.299103][    C1]  unmap_page_range+0x3445/0x4370
[  556.304168][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  556.309820][    C1]  ? mas_find+0xb0e/0xd30
[  556.314155][    C1]  ? unmap_vmas+0x144/0x580
[  556.318652][    C1]  unmap_vmas+0x399/0x580
[  556.322982][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  556.327844][    C1]  exit_mmap+0x248/0xb50
[  556.332090][    C1]  ? uprobe_clear_state+0x20f/0x290
[  556.337383][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  556.342160][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  556.347927][    C1]  ? __pfx_exit_aio+0x10/0x10
[  556.352737][    C1]  ? uprobe_clear_state+0x274/0x290
[  556.357975][    C1]  __mmput+0x118/0x430
[  556.362045][    C1]  exit_mm+0x1da/0x2c0
[  556.366139][    C1]  ? __pfx_exit_mm+0x10/0x10
[  556.370731][    C1]  ? rcu_is_watching+0x15/0xb0
[  556.375497][    C1]  do_exit+0x648/0x2300
[  556.379668][    C1]  ? preempt_schedule_common+0x83/0xd0
[  556.385139][    C1]  ? preempt_schedule+0xae/0xc0
[  556.390013][    C1]  ? __pfx_do_exit+0x10/0x10
[  556.394617][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  556.399996][    C1]  do_group_exit+0x21c/0x2d0
[  556.404597][    C1]  __x64_sys_exit_group+0x3f/0x40
[  556.409619][    C1]  x64_sys_call+0x21f7/0x2200
[  556.414292][    C1]  do_syscall_64+0xfa/0x3b0
[  556.418795][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  556.424182][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.430280][    C1]  ? clear_bhb_loop+0x60/0xb0
[  556.434969][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.440880][    C1] RIP: 0033:0x7f1c1098eba9
[  556.445295][    C1] Code: Unable to access opcode bytes at 0x7f1c1098eb7f.
[  556.452312][    C1] RSP: 002b:00007fff91e15848 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  556.460723][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1c1098eba9
[  556.468697][    C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  556.476665][    C1] RBP: 00007fff91e158ac R08: 0000000491e1593f R09: 00000000000927c0
[  556.484631][    C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000e4
[  556.492608][    C1] R13: 00000000000927c0 R14: 0000000000087882 R15: 00007fff91e15900
[  556.500595][    C1]  </TASK>
[  556.503971][    C1] Kernel Offset: disabled
[  556.508303][    C1] Rebooting in 86400 seconds..