last executing test programs:

9.082651078s ago: executing program 4 (id=3677):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00')
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x20, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
mkdirat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x1ff)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf250700000028000180060005004e22000014000400fe8000000000000000000000000022e8cef36d753f410000"], 0x3c}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800) (async)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf250700000028000180060005004e22000014000400fe8000000000000000000000000022e8cef36d753f410000"], 0x3c}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000800)={'erspan0\x00', <r8=>r5, 0x1, 0x700, 0x980, 0x3, {{0x1c, 0x4, 0x2, 0x3, 0x70, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0xc, 0x8c, 0x0, 0xd, [0xab, 0x7ff]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xf6, 0x0, 0x2, [0x2a0, 0x5]}, @lsrr={0x83, 0xb, 0x7d, [@multicast2, @dev={0xac, 0x14, 0x14, 0x19}]}, @ssrr={0x89, 0x1f, 0x3e, [@local, @multicast1, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010101, @private=0xa010100]}, @timestamp={0x44, 0x10, 0xfe, 0x0, 0xc, [0xc, 0x9, 0x6]}, @ra={0x94, 0x4}]}}}}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="0200000058efe89a16be51567583f37b370018bf4f0fdab6e154233d8a149469be473e38c5e70b726e729021e814938519f0d1af0332179cf211bbf2ad5a67a4ef39cd3e751d65270ead02929d", @ANYRES16=r7, @ANYBLOB="000426bd7000fddbdf250a00000034000180080006001c00000008000300e00000010500020010000000060001000a00000008000700", @ANYRES32=r5, @ANYBLOB="08000600100000001c0006800800060005000000060001000a00000005000200500000003c00018014000400fe8000000000000000000000000000bb060005004e20000014000400ff010000000000000000000000000001060001000a000000080002000400000008000300050000001c000680080006000a000000060005004e21000008000700", @ANYRES32=r8, @ANYBLOB="05000500080000002c000680050002009e000000060001000a000000060005004e20000008000700", @ANYRES32=r5, @ANYBLOB="08000600100000000800030003000000"], 0x108}, 0x1, 0x0, 0x0, 0x40004}, 0x10) (async)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="0200000058efe89a16be51567583f37b370018bf4f0fdab6e154233d8a149469be473e38c5e70b726e729021e814938519f0d1af0332179cf211bbf2ad5a67a4ef39cd3e751d65270ead02929d", @ANYRES16=r7, @ANYBLOB="000426bd7000fddbdf250a00000034000180080006001c00000008000300e00000010500020010000000060001000a00000008000700", @ANYRES32=r5, @ANYBLOB="08000600100000001c0006800800060005000000060001000a00000005000200500000003c00018014000400fe8000000000000000000000000000bb060005004e20000014000400ff010000000000000000000000000001060001000a000000080002000400000008000300050000001c000680080006000a000000060005004e21000008000700", @ANYRES32=r8, @ANYBLOB="05000500080000002c000680050002009e000000060001000a000000060005004e20000008000700", @ANYRES32=r5, @ANYBLOB="08000600100000000800030003000000"], 0x108}, 0x1, 0x0, 0x0, 0x40004}, 0x10)
socket$alg(0x26, 0x5, 0x0) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r9, 0x0, 0x0, 0x800) (async)
r10 = accept4(r9, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0) (async)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x3}}}]}]}]}}]}, 0x50}}, 0x1d56ce4333ce878e)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x24048851)

8.382363719s ago: executing program 4 (id=3681):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000020c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

8.130854725s ago: executing program 4 (id=3682):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd7000000000000000f0ff", @ANYRES32=r2, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r1)
sendmsg$nl_route(r3, 0x0, 0x4008010)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)

8.063163529s ago: executing program 4 (id=3683):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x300}}, 0xf0}}, 0x0)
close(0x3)

7.111215332s ago: executing program 4 (id=3688):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0xfdff, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)

6.833652791s ago: executing program 4 (id=3693):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x21}, 0xe75}], 0x3aa0, 0x60002000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113340000000000bfa000000000000007000000ee0016055e0301000000000025050000cedfffff69163e0000000000bf07000000000000260507000fff0720d706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b498"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000200002000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2e}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000f00000018110000", @ANYRES32=<r10=>r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0x18, 0x0, &(0x7f0000000300)="00000000000000000000002aeb1265a4b05c7dbff9000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'dvmrp0\x00', {0x9}, 0x8})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r13, 0x11, 0x64, 0x0, &(0x7f0000000000)=0x255374afca783ed0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r9, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRESDEC=r10], 0x20}, 0x1, 0x0, 0x0, 0x4000880}, 0x4004054)
r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r14, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r14, &(0x7f0000000000)="0c000000010001", 0x7)
sendmsg$NL80211_CMD_RELOAD_REGDB(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r12, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\'\x00/\x00', @ANYRES16=r12, @ANYBLOB="000225bd7000fddbdf255c00000008006b00f000000008006b000a00000008006b003c00000008006b000a000000"], 0x34}, 0x1, 0x0, 0x0, 0x20044010}, 0x80)

6.334711413s ago: executing program 1 (id=3697):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800", 0x2}], 0x1}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = epoll_create1(0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x5ba8aec43a755617, 0x70ad27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6358b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x15}, 0xc084)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x30000018})
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r1})
bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d43, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20007fff, 0x4, 0x11}]}}]}}, @TCA_RATE={0x6, 0x5, {0x8d, 0x3}}]}, 0xb0}}, 0x24040084)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="e05a5de397ee362f573ea834553caa1d10689e25a2cbda2dbb0b", 0x1a}], 0x1, 0x0, 0x0, 0x4048015}], 0x1, 0x4000000)
recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x1, 0xea6, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x0, 0x0, 0x10, 0x4, 0x0, @empty, @local}}}})

5.581848711s ago: executing program 1 (id=3699):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x31e800000000000, 0xe, 0x6})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054)

3.502162298s ago: executing program 2 (id=3712):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000)
r0 = socket(0xa, 0x3, 0x3a)
unshare(0x24060400)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_int(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@loopback, 0x4d5, 0x33}, @in=@multicast1, {0x3, 0x0, 0x0, 0x8}, {}, {0x0, 0x22}, 0x70bd27, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x1b000000, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0)
shutdown(r0, 0x56660e91fa37aa0c)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc040)

3.356391224s ago: executing program 2 (id=3713):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20)
unshare(0x20020600)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x40000, 0x0, 0xffffffffffffffdc, &(0x7f0000000080)}, 0x9a)

3.182154411s ago: executing program 0 (id=3715):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x0, 0x0, 0x0)
clock_gettime(0x87f60f7a31614e95, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="01154e", 0x3, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f00000028c0), 0x0, 0x40)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, 0x0, 0x72)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000121, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r6, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000280)=""/65, 0x41}], 0x5}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}], 0x3, 0x40000102, 0x0)
syz_emit_ethernet(0xd81, &(0x7f0000002980)={@random="652c1d569d1e", @remote, @void, {@mpls_uc={0x8847, {[], @ipv4=@igmp={{0x6, 0x4, 0x1, 0x5, 0xd73, 0x67, 0x0, 0x7f, 0x2, 0x0, @multicast2, @local, {[@ssrr={0x89, 0x3, 0x2c}]}}, {0x17, 0x8, 0x0, @remote, "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"}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850)

3.142631426s ago: executing program 2 (id=3716):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x600}}, 0xf0}}, 0x0)
close(0x3)

2.975045656s ago: executing program 0 (id=3718):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000040000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

2.776067687s ago: executing program 0 (id=3720):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x642, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x60}}, 0x8000)

2.153347413s ago: executing program 0 (id=3722):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x8e22, 0x0, @rand_addr, 0x10000}, 0x1c)
close(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='b 5:* w'], 0x8)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000f0000000"], 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000ad777a1d15", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080a0041000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x48, 0x0, 0x0, 0x1}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r6)

2.062439706s ago: executing program 3 (id=3724):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x5, 0x6, 0x2832d002fddab76c, 0x20, 0x0, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @local}}]}, 0x60}, 0x1, 0x7}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x2}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$XFS_IOC_FSGEOMETRY(r3, 0x8100587e, &(0x7f0000000900))
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
socket$inet_sctp(0x2, 0x1, 0x84)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd700000100000010000000c00020009000000000000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00050022012a6b85c8118f7b208bb79f735d806168010000681964865e91d9bc72f8bed5d370d0baefb8c797f7370c75ef1c30ffffffffffff00000000e976"], 0x48}}, 0x400400c)

1.950591694s ago: executing program 2 (id=3725):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)={0xa0, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c)
sendto$packet(r1, 0x0, 0x0, 0x80, &(0x7f0000000680)={0x11, 0x5, 0x0, 0x1, 0xb1, 0x6, @random="d95e786bbe90"}, 0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0xa, 0x5, 0x0)
socket$pptp(0x18, 0x1, 0x2)
sendmsg$inet_sctp(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)='(', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x28008841)
setsockopt$inet6_int(r5, 0x29, 0x4d, 0x0, 0x0)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000380)={<r6=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000400)={<r7=>0x0, 0x7}, &(0x7f0000000740)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000880)={r7, @in6={{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x5}}, [0x7fffffffffffffff, 0x400, 0x4, 0x3f800000000, 0x5, 0x0, 0x10000, 0x5, 0x5, 0x4, 0xcd21, 0x6, 0x3, 0x100000001, 0xc7]}, &(0x7f0000000980)=0x100)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002dc0)=@getsa={0x34, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {@in6=@remote, 0x4d6, 0x2, 0xff}, [@mark={0xc, 0x15, {0x350759, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x90)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x9}}, 0x14}}, 0x4044000)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x840)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000023c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c0002800500010000000000080007400000000008001640000000008cf244178dde4c2780304a3556d78683129b0005a1937a200844c1fe1351cc83682e08dde1224cfd19c905536849fd8612b05ecc64417c747c8ef50194a9d1df8986d570a2892bfb76be"], 0x9c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0xc033f5d5d62c55d}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x44}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000140)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @jmp={0x5, 0x0, 0xa, 0x0, 0x7, 0xfffffffffffffffe, 0x10}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}], &(0x7f00000000c0)='GPL\x00', 0xf}, 0x94)

1.188077653s ago: executing program 3 (id=3726):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000080000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01cbc100", @ANYRES16=r3, @ANYBLOB="05062dbd7000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0500530000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4)
syz_emit_ethernet(0x5a, &(0x7f0000000a00)=ANY=[], 0x0)
socket$inet6(0xa, 0x1, 0x1)
r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800)
bind$nfc_llcp(r5, &(0x7f0000000200)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x8, "d9294c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e4220000000000000000000002f5000000fff700", 0x3c}, 0x60)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r6, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x4000800)
bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000440)=0x10)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000300)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x804c044}, 0x881)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_buf(r10, 0x6, 0xd, &(0x7f0000000040)="03", 0x1)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r11, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f)

1.183164901s ago: executing program 0 (id=3727):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf25000000ff", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0)

1.02760051s ago: executing program 2 (id=3728):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
connect(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t.\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r1, &(0x7f0000000340)="81ff9a45eb0a003540b36145f887dbb51d80be859311c195c70e1e4a", &(0x7f0000000580)=""/112}, 0x20)
r2 = socket(0x11, 0x3, 0x0)
setsockopt(r2, 0x107, 0xf, &(0x7f0000000300)="02008634afc1fcc9e92e3f", 0xb)
r3 = socket$inet6(0x10, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000140000001c0007800400030000000000000000000c0004000000000000000000"], 0x30}}, 0x8810)
sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
write(r3, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000930000480080001000000"], 0xb0}}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4)
setsockopt$packet_tx_ring(r9, 0x107, 0xd, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pi6   \x00'}, 0x20)
ioctl$XFS_IOC_SWAPEXT(r8, 0xc0c0586d, &(0x7f0000000440)={0x0, r10, r9, 0xd, 0x3, '\x00', {0x0, 0x9, 0x10, 0x7, 0x2, 0x7fffffff, 0x1ff, 0x2, {0x6, 0x9}, {0x100000001, 0x8b}, {0x8, 0x401}, 0x4, 0xd, 0xa0, 0x4, 0x7ff, 0x5, 0x7, 0x200, 0x4, 0x1, '\x00', 0x2, 0x3, 0x7f, 0x2b7}})
socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfa, 0x2ffffffff}, 0xc)
r11 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370)
socket$inet6_sctp(0xa, 0x5, 0x84)
epoll_create(0x4)

979.618133ms ago: executing program 1 (id=3729):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x64, 0x6, 0x638, 0x3b0, 0x1d0, 0x480, 0x2e0, 0x2e0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0x110, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2b000000}}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, [0x0, 0xffff00, 0x7f, 0xffffff00], [0xff000000, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x1, 0x3, 0x2, 0x22}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698)

722.281748ms ago: executing program 3 (id=3730):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x7, 0x4, 0x3}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f00000000c0)}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa19ed79b911b486dd6c00000000082cff00000000000000fbf704572071388501ff020000013c00045166000000"], 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x607, 0x0, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004581c}, 0x0)

680.627331ms ago: executing program 0 (id=3731):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
unshare(0x2c020400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000380), &(0x7f00000000c0)=r2}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x8, 0x0, 0x0}}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x70}}, 0x484)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180)=0xcb3, 0x4)
unshare(0x28000600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080))
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r6, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0xb5, 0x40, 0x0, @multicast}, 0x10)
sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
openat$cgroup_ro(r7, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r8, 0x913e0000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r10, 0x84, 0x74, &(0x7f0000000240)=""/83, &(0x7f00000002c0)=0x53)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)

667.609298ms ago: executing program 1 (id=3732):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xa}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x3f, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xa, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x27}, 0x94)

458.661471ms ago: executing program 3 (id=3733):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x1, 0x635e, 0x5, 0x0, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200d1eb14000600602fb96dbcf706e10500000386ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

458.386483ms ago: executing program 1 (id=3734):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x20004004)

325.911047ms ago: executing program 1 (id=3735):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x900}}, 0xf0}}, 0x0)
close(0x3)

191.282893ms ago: executing program 3 (id=3736):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100003400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010)

2.220104ms ago: executing program 3 (id=3737):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000002e000000080001007063690300000800303030303a30303a09002e3000000003000000"], 0x38}, 0x1, 0x0, 0x0, 0xc008}, 0x4048010)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8813}, 0x40000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x20, &(0x7f0000000c40)={&(0x7f0000000180)=""/77, 0x4d, <r2=>0x0, &(0x7f0000000b40)=""/237, 0xed}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fb, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6)
sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)

0s ago: executing program 2 (id=3738):
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

kernel console output (not intermixed with test programs):

ridge_slave_0: entered allmulticast mode
[  410.250272][T15601] bridge_slave_0: entered promiscuous mode
[  410.266227][T15601] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.274162][T15601] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.274347][T15601] bridge_slave_1: entered allmulticast mode
[  410.294247][T15601] bridge_slave_1: entered promiscuous mode
[  410.353967][T15601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  410.368010][T15601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.406908][ T5628] block nbd44: Receive control failed (result -32)
[  410.418120][ T5630] block nbd44: Receive control failed (result -32)
[  410.438900][T15601] team0: Port device team_slave_0 added
[  410.449674][T15601] team0: Port device team_slave_1 added
[  410.578273][T15601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  410.578320][T15601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  410.598960][T15601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  410.613544][T15601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  410.613563][T15601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  410.613591][T15601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  410.698088][T15728] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3000'.
[  410.850967][ T5630] Bluetooth: hci5: command tx timeout
[  410.916842][T15601] hsr_slave_0: entered promiscuous mode
[  410.930189][T15601] hsr_slave_1: entered promiscuous mode
[  410.931346][T15601] debugfs: 'hsr0' already exists in 'hsr'
[  410.931386][T15601] Cannot create hsr debugfs directory
[  411.569458][T15752] Unknown options in mask 6
[  411.572086][T15752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3006'.
[  411.572958][T15752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3006'.
[  411.621129][T15749] netlink: 'syz.2.3006': attribute type 1 has an invalid length.
[  411.621171][T15749] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3006'.
[  411.733582][T15601] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  411.744967][T15601] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.773323][T15743] lo speed is unknown, defaulting to 1000
[  411.926164][T15601] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  411.936786][T15601] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.053280][T15601] batman_adv: batadv0: Interface deactivated: netdevsim1
[  412.094647][T15601] batman_adv: batadv0: Removing interface: netdevsim1
[  412.103641][T15601] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  412.115033][T15601] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.263351][T15601] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  412.273982][T15601] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.698913][T15601] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  412.719340][T15601] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  412.725956][T15601] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  412.753902][T15601] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  412.770779][T15601] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  412.787479][T15601] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  412.797158][T15601] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  412.815618][T15601] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  412.930042][ T5630] Bluetooth: hci5: command tx timeout
[  412.998468][T15601] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.032662][T15601] 8021q: adding VLAN 0 to HW filter on device team0
[  413.056878][  T706] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.057059][  T706] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.074388][T15790] Unknown options in mask 6
[  413.076582][T15790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3017'.
[  413.105793][T15786] netlink: 'syz.3.3017': attribute type 1 has an invalid length.
[  413.113789][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.113986][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.373733][T15804] net_ratelimit: 17 callbacks suppressed
[  413.380303][T15804] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  413.592676][T15812] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  414.270517][T15601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.409845][T15824] lo speed is unknown, defaulting to 1000
[  414.451178][T15601] veth0_vlan: entered promiscuous mode
[  414.632657][T15601] veth1_vlan: entered promiscuous mode
[  414.825235][T15601] veth0_macvtap: entered promiscuous mode
[  414.837757][T15601] veth1_macvtap: entered promiscuous mode
[  414.869517][T15601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  414.886288][T15601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.985146][ T5986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.985301][ T5986] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.985540][ T5986] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.985647][ T5986] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.016584][ T5630] Bluetooth: hci5: command tx timeout
[  415.232229][T15864] __nla_validate_parse: 11 callbacks suppressed
[  415.232293][T15864] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3037'.
[  415.232342][T15864] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3037'.
[  415.271269][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.271324][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.364376][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.364421][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.414581][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3037'.
[  415.446540][T15867] ipvlan2: entered allmulticast mode
[  415.452205][T15867] syz_tun: entered allmulticast mode
[  415.494796][T15835] lo speed is unknown, defaulting to 1000
[  416.148235][T15885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3042'.
[  416.169224][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  416.182276][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  416.189656][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  416.200806][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  416.208329][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  417.091716][ T5628] Bluetooth: hci5: command tx timeout
[  417.907419][T15884] lo speed is unknown, defaulting to 1000
[  418.285030][T15955] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3062'.
[  418.295635][ T5628] Bluetooth: hci3: command tx timeout
[  418.896342][T15955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  418.918437][T15955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  418.946450][T15955] bond0 (unregistering): Released all slaves
[  418.973925][T15961] syz_tun: entered allmulticast mode
[  418.992695][T15930] lo speed is unknown, defaulting to 1000
[  418.998973][T15953] syz_tun: left allmulticast mode
[  418.999604][T15966] netlink: 316 bytes leftover after parsing attributes in process `syz.3.3065'.
[  419.527763][T15884] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.540098][T15884] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.551795][T15884] bridge_slave_0: entered allmulticast mode
[  419.564835][T15884] bridge_slave_0: entered promiscuous mode
[  419.578217][T15884] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.587453][T15884] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.596920][T15884] bridge_slave_1: entered allmulticast mode
[  419.607582][T15884] bridge_slave_1: entered promiscuous mode
[  419.677262][T15990] FAULT_INJECTION: forcing a failure.
[  419.677262][T15990] name failslab, interval 1, probability 0, space 0, times 0
[  419.677326][T15990] CPU: 1 UID: 0 PID: 15990 Comm: syz.3.3071 Not tainted syzkaller #0 PREEMPT(full) 
[  419.677350][T15990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  419.677363][T15990] Call Trace:
[  419.677371][T15990]  <TASK>
[  419.677379][T15990]  dump_stack_lvl+0xe8/0x150
[  419.677412][T15990]  should_fail_ex+0x410/0x560
[  419.677445][T15990]  should_failslab+0xa8/0x100
[  419.677471][T15990]  __kmalloc_cache_noprof+0xa3/0x600
[  419.677503][T15990]  ? rtnl_newlink+0x143/0x1c30
[  419.677581][T15990]  ? rtnl_newlink+0x143/0x1c30
[  419.677700][T15990]  rtnl_newlink+0x143/0x1c30
[  419.677805][T15990]  ? __lock_acquire+0x6df/0x2e50
[  419.677875][T15990]  ? __pfx_rtnl_newlink+0x10/0x10
[  419.677957][T15990]  ? __lock_acquire+0x6df/0x2e50
[  419.678017][T15990]  ? __lock_acquire+0x6df/0x2e50
[  419.678103][T15990]  ? lock_acquire+0x115/0x350
[  419.678202][T15990]  ? lock_acquire+0x115/0x350
[  419.678275][T15990]  ? is_bpf_text_address+0x26/0x2b0
[  419.678349][T15990]  ? __lock_acquire+0x6df/0x2e50
[  419.678411][T15990]  ? kernel_text_address+0xa5/0xe0
[  419.678475][T15990]  ? __kernel_text_address+0xd/0x30
[  419.678525][T15990]  ? unwind_get_return_address+0x4d/0x90
[  419.678584][T15990]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  419.678700][T15990]  ? arch_stack_walk+0xfb/0x150
[  419.678813][T15990]  ? lock_acquire+0x115/0x350
[  419.678857][T15990]  ? __pfx_rtnl_newlink+0x10/0x10
[  419.678963][T15990]  ? __pfx_rtnl_newlink+0x10/0x10
[  419.679040][T15990]  rtnetlink_rcv_msg+0x802/0xc00
[  419.679128][T15990]  ? netlink_sendmsg+0x5d4/0xb40
[  419.679197][T15990]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  419.679278][T15990]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  419.679356][T15990]  ? __lock_acquire+0x6df/0x2e50
[  419.679441][T15990]  netlink_rcv_skb+0x226/0x4a0
[  419.679498][T15990]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  419.679576][T15990]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  419.679664][T15990]  ? netlink_deliver_tap+0x2e/0x1b0
[  419.679724][T15990]  ? netlink_deliver_tap+0x2e/0x1b0
[  419.679800][T15990]  netlink_unicast+0x7bd/0x940
[  419.679877][T15990]  netlink_sendmsg+0x813/0xb40
[  419.679953][T15990]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.680031][T15990]  ? apparmor_socket_sendmsg+0x98/0x360
[  419.680113][T15990]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.680168][T15990]  sock_sendmsg_nosec+0x13a/0x180
[  419.680238][T15990]  ____sys_sendmsg+0x54e/0x850
[  419.680294][T15990]  ? __pfx_____sys_sendmsg+0x10/0x10
[  419.680369][T15990]  ? import_iovec+0x73/0xa0
[  419.680480][T15990]  ___sys_sendmsg+0x2a5/0x360
[  419.680533][T15990]  ? __lock_acquire+0x6df/0x2e50
[  419.680591][T15990]  ? __pfx____sys_sendmsg+0x10/0x10
[  419.680725][T15990]  ? __fget_files+0x2a/0x420
[  419.680801][T15990]  ? __fget_files+0x3a2/0x420
[  419.680889][T15990]  __x64_sys_sendmsg+0x1b1/0x290
[  419.680951][T15990]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  419.681051][T15990]  do_syscall_64+0x166/0x520
[  419.681117][T15990]  ? trace_irq_disable+0x3b/0x140
[  419.681165][T15990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.681220][T15990]  ? clear_bhb_loop+0x70/0xc0
[  419.681282][T15990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.681339][T15990] RIP: 0033:0x7f216839e159
[  419.681387][T15990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.681447][T15990] RSP: 002b:00007f2169283028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  419.681499][T15990] RAX: ffffffffffffffda RBX: 00007f2168625fa0 RCX: 00007f216839e159
[  419.681537][T15990] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  419.681573][T15990] RBP: 00007f2169283090 R08: 0000000000000000 R09: 0000000000000000
[  419.681603][T15990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.681631][T15990] R13: 00007f2168626038 R14: 00007f2168625fa0 R15: 00007ffe8b585f08
[  419.681721][T15990]  </TASK>
[  420.144128][T15884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.165591][T15884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.258922][T15884] team0: Port device team_slave_0 added
[  420.267886][T15884] team0: Port device team_slave_1 added
[  420.350675][T15884] batman_adv: batadv0: Adding interface: batadv_slave_0
[  420.357799][T15884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  420.384267][T15884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  420.392615][ T5628] Bluetooth: hci3: command tx timeout
[  420.406218][T15884] batman_adv: batadv0: Adding interface: batadv_slave_1
[  420.406266][T15884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  420.406297][T15884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  420.516803][T15884] hsr_slave_0: entered promiscuous mode
[  420.525606][T15884] hsr_slave_1: entered promiscuous mode
[  420.534113][T15884] debugfs: 'hsr0' already exists in 'hsr'
[  420.534183][T15884] Cannot create hsr debugfs directory
[  420.779020][T15884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.779086][T15884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.883828][T15884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.883895][T15884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.939187][T15884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.939249][T15884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.055853][T15884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.069978][T15884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.096521][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3077'.
[  421.466688][T16025] xt_TPROXY: Can be used only with -p tcp or -p udp
[  421.653706][T16031] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  421.767179][T16038] netlink: 'syz.4.3086': attribute type 1 has an invalid length.
[  421.771763][T16038] netlink: 'syz.4.3086': attribute type 1 has an invalid length.
[  421.919070][T16047] Bluetooth: MGMT ver 1.23
[  422.286089][T15975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  422.313833][T15884] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  422.346833][T15884] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  422.355450][T15884] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  422.402722][T15884] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  422.404284][T15884] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  422.428170][T15884] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  422.438652][T15884] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  422.455875][T15884] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  422.463431][ T5628] Bluetooth: hci3: command tx timeout
[  422.691909][T15884] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.720246][T15884] 8021q: adding VLAN 0 to HW filter on device team0
[  422.735061][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.735407][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  422.799136][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.799419][ T5990] bridge0: port 2(bridge_slave_1) entered forwarding state
[  423.279243][T16073] x_tables: ip_tables: icmp match: only valid for protocol 1
[  423.491413][T16081] netlink: 'syz.1.3099': attribute type 3 has an invalid length.
[  423.712735][T16100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3104'.
[  423.745679][T16100] veth1_to_team: entered promiscuous mode
[  423.752923][T16100] gretap0: entered promiscuous mode
[  423.758697][T16100] debugfs: 'hsr1' already exists in 'hsr'
[  423.763264][T16100] Cannot create hsr debugfs directory
[  423.763323][T16100] hsr1: entered promiscuous mode
[  423.896110][T16113] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  423.896183][T16113] FAULT_INJECTION: forcing a failure.
[  423.896183][T16113] name failslab, interval 1, probability 0, space 0, times 0
[  423.896689][T16113] CPU: 1 UID: 0 PID: 16113 Comm: syz.0.3106 Not tainted syzkaller #0 PREEMPT(full) 
[  423.896716][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  423.896729][T16113] Call Trace:
[  423.896737][T16113]  <TASK>
[  423.896746][T16113]  dump_stack_lvl+0xe8/0x150
[  423.896780][T16113]  should_fail_ex+0x410/0x560
[  423.896814][T16113]  ? __alloc_skb+0x1db/0x7a0
[  423.896845][T16113]  should_failslab+0xa8/0x100
[  423.896872][T16113]  ? __alloc_skb+0x1db/0x7a0
[  423.896899][T16113]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  423.896930][T16113]  ? __alloc_skb+0x18d/0x7a0
[  423.896964][T16113]  ? __alloc_skb+0x1db/0x7a0
[  423.897002][T16113]  __alloc_skb+0x1db/0x7a0
[  423.897036][T16113]  netlink_ack+0x136/0xb30
[  423.897057][T16113]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  423.897087][T16113]  ? ref_tracker_free+0x689/0x830
[  423.897122][T16113]  ? __pfx_ref_tracker_free+0x10/0x10
[  423.897166][T16113]  netlink_rcv_skb+0x2a4/0x4a0
[  423.897190][T16113]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  423.897224][T16113]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  423.897263][T16113]  ? netlink_deliver_tap+0x2e/0x1b0
[  423.897286][T16113]  ? netlink_deliver_tap+0x2e/0x1b0
[  423.897325][T16113]  netlink_unicast+0x7bd/0x940
[  423.897358][T16113]  netlink_sendmsg+0x813/0xb40
[  423.897392][T16113]  ? __pfx_netlink_sendmsg+0x10/0x10
[  423.897427][T16113]  ? apparmor_socket_sendmsg+0x98/0x360
[  423.897461][T16113]  ? __pfx_netlink_sendmsg+0x10/0x10
[  423.897484][T16113]  sock_sendmsg_nosec+0x13a/0x180
[  423.897516][T16113]  ____sys_sendmsg+0x54e/0x850
[  423.897543][T16113]  ? __pfx_____sys_sendmsg+0x10/0x10
[  423.897571][T16113]  ? import_iovec+0x73/0xa0
[  423.897601][T16113]  ___sys_sendmsg+0x2a5/0x360
[  423.897617][T16113]  ? __lock_acquire+0x6df/0x2e50
[  423.897638][T16113]  ? __pfx____sys_sendmsg+0x10/0x10
[  423.897682][T16113]  ? __fget_files+0x2a/0x420
[  423.897709][T16113]  ? __fget_files+0x3a2/0x420
[  423.897757][T16113]  __x64_sys_sendmsg+0x1b1/0x290
[  423.897796][T16113]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  423.897833][T16113]  do_syscall_64+0x166/0x520
[  423.897856][T16113]  ? trace_irq_disable+0x3b/0x140
[  423.897873][T16113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.897892][T16113]  ? clear_bhb_loop+0x70/0xc0
[  423.897913][T16113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.897931][T16113] RIP: 0033:0x7fd73c39e159
[  423.897948][T16113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  423.897963][T16113] RSP: 002b:00007fd73d1e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  423.897983][T16113] RAX: ffffffffffffffda RBX: 00007fd73c625fa0 RCX: 00007fd73c39e159
[  423.897995][T16113] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  423.898005][T16113] RBP: 00007fd73d1e2090 R08: 0000000000000000 R09: 0000000000000000
[  423.898016][T16113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  423.898026][T16113] R13: 00007fd73c626038 R14: 00007fd73c625fa0 R15: 00007ffd49d871e8
[  423.898054][T16113]  </TASK>
[  424.299180][T15884] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.371539][T15884] veth0_vlan: entered promiscuous mode
[  424.389506][T15884] veth1_vlan: entered promiscuous mode
[  424.430960][T15884] veth0_macvtap: entered promiscuous mode
[  424.444921][T15884] veth1_macvtap: entered promiscuous mode
[  424.497687][T15884] batman_adv: batadv0: Interface activated: batadv_slave_0
[  424.528601][T16123] FAULT_INJECTION: forcing a failure.
[  424.528601][T16123] name failslab, interval 1, probability 0, space 0, times 0
[  424.529164][T16123] CPU: 1 UID: 0 PID: 16123 Comm: syz.3.3108 Not tainted syzkaller #0 PREEMPT(full) 
[  424.529191][T16123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  424.529205][T16123] Call Trace:
[  424.529213][T16123]  <TASK>
[  424.529222][T16123]  dump_stack_lvl+0xe8/0x150
[  424.529266][T16123]  should_fail_ex+0x410/0x560
[  424.529301][T16123]  should_failslab+0xa8/0x100
[  424.529329][T16123]  __kmalloc_cache_noprof+0xa3/0x600
[  424.529373][T16123]  ? rtnl_newlink+0x143/0x1c30
[  424.529401][T16123]  ? rtnl_newlink+0x143/0x1c30
[  424.529435][T16123]  rtnl_newlink+0x143/0x1c30
[  424.529463][T16123]  ? __lock_acquire+0x6df/0x2e50
[  424.529491][T16123]  ? __pfx_rtnl_newlink+0x10/0x10
[  424.529522][T16123]  ? __lock_acquire+0x6df/0x2e50
[  424.529548][T16123]  ? __lock_acquire+0x6df/0x2e50
[  424.529581][T16123]  ? lock_acquire+0x115/0x350
[  424.529607][T16123]  ? lock_acquire+0x115/0x350
[  424.529635][T16123]  ? is_bpf_text_address+0x26/0x2b0
[  424.529665][T16123]  ? __lock_acquire+0x6df/0x2e50
[  424.529688][T16123]  ? kernel_text_address+0xa5/0xe0
[  424.529713][T16123]  ? __kernel_text_address+0xd/0x30
[  424.529735][T16123]  ? unwind_get_return_address+0x4d/0x90
[  424.529759][T16123]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  424.529793][T16123]  ? arch_stack_walk+0xfb/0x150
[  424.529828][T16123]  ? lock_acquire+0x115/0x350
[  424.529848][T16123]  ? __pfx_rtnl_newlink+0x10/0x10
[  424.529888][T16123]  ? __pfx_rtnl_newlink+0x10/0x10
[  424.529916][T16123]  rtnetlink_rcv_msg+0x802/0xc00
[  424.529942][T16123]  ? netlink_sendmsg+0x5d4/0xb40
[  424.529969][T16123]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  424.529997][T16123]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  424.530027][T16123]  ? __lock_acquire+0x6df/0x2e50
[  424.530059][T16123]  netlink_rcv_skb+0x226/0x4a0
[  424.530082][T16123]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  424.530112][T16123]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  424.530146][T16123]  ? netlink_deliver_tap+0x2e/0x1b0
[  424.530168][T16123]  ? netlink_deliver_tap+0x2e/0x1b0
[  424.530196][T16123]  netlink_unicast+0x7bd/0x940
[  424.530228][T16123]  netlink_sendmsg+0x813/0xb40
[  424.530268][T16123]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.530300][T16123]  ? apparmor_socket_sendmsg+0x98/0x360
[  424.530331][T16123]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.530353][T16123]  sock_sendmsg_nosec+0x13a/0x180
[  424.530380][T16123]  ____sys_sendmsg+0x54e/0x850
[  424.530404][T16123]  ? __pfx_____sys_sendmsg+0x10/0x10
[  424.530433][T16123]  ? import_iovec+0x73/0xa0
[  424.530468][T16123]  ___sys_sendmsg+0x2a5/0x360
[  424.530487][T16123]  ? __lock_acquire+0x6df/0x2e50
[  424.530512][T16123]  ? __pfx____sys_sendmsg+0x10/0x10
[  424.530566][T16123]  ? __fget_files+0x2a/0x420
[  424.530592][T16123]  ? __fget_files+0x3a2/0x420
[  424.530627][T16123]  __x64_sys_sendmsg+0x1b1/0x290
[  424.530649][T16123]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  424.530689][T16123]  do_syscall_64+0x166/0x520
[  424.530716][T16123]  ? trace_irq_disable+0x3b/0x140
[  424.530734][T16123]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.530755][T16123]  ? clear_bhb_loop+0x70/0xc0
[  424.530779][T16123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.530800][T16123] RIP: 0033:0x7f216839e159
[  424.530820][T16123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.530838][T16123] RSP: 002b:00007f2169283028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.530861][T16123] RAX: ffffffffffffffda RBX: 00007f2168625fa0 RCX: 00007f216839e159
[  424.530874][T16123] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  424.530888][T16123] RBP: 00007f2169283090 R08: 0000000000000000 R09: 0000000000000000
[  424.530900][T16123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  424.530912][T16123] R13: 00007f2168626038 R14: 00007f2168625fa0 R15: 00007ffe8b585f08
[  424.530941][T16123]  </TASK>
[  424.553434][   T52] Bluetooth: hci3: command tx timeout
[  424.798782][T15884] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.980922][  T706] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.993004][  T706] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.993069][  T706] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.087652][ T5990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.121189][ T5630] block nbd45: Receive control failed (result -32)
[  425.133635][ T5628] block nbd45: Receive control failed (result -32)
[  425.208713][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.208755][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.294986][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.295036][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.422528][T16128] x_tables: ip_tables: icmp match: only valid for protocol 1
[  425.564495][T16138] openvswitch: netlink: IP tunnel dst address not specified
[  425.600772][T16138] netlink: 'syz.2.3040': attribute type 21 has an invalid length.
[  425.600888][T16138] netlink: 'syz.2.3040': attribute type 6 has an invalid length.
[  425.600954][T16138] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3040'.
[  425.760451][   T74] IPVS: starting estimator thread 0...
[  425.787614][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  425.803188][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  425.811025][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  425.823130][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  425.831017][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  425.860026][T16144] IPVS: using max 29 ests per chain, 69600 per kthread
[  426.562759][T16170] syzkaller0: entered promiscuous mode
[  426.562802][T16170] syzkaller0: entered allmulticast mode
[  426.595233][T16170] FAULT_INJECTION: forcing a failure.
[  426.595233][T16170] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  426.595285][T16170] CPU: 1 UID: 0 PID: 16170 Comm: syz.0.3123 Not tainted syzkaller #0 PREEMPT(full) 
[  426.595310][T16170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  426.595354][T16170] Call Trace:
[  426.595386][T16170]  <TASK>
[  426.595415][T16170]  dump_stack_lvl+0xe8/0x150
[  426.595553][T16170]  should_fail_ex+0x410/0x560
[  426.595655][T16170]  _copy_from_user+0x2d/0xb0
[  426.595708][T16170]  __copy_msghdr+0x390/0x590
[  426.595802][T16170]  ___sys_sendmsg+0x213/0x360
[  426.595854][T16170]  ? __lock_acquire+0x6df/0x2e50
[  426.595927][T16170]  ? __pfx____sys_sendmsg+0x10/0x10
[  426.596068][T16170]  ? __fget_files+0x2a/0x420
[  426.596135][T16170]  ? __fget_files+0x3a2/0x420
[  426.596236][T16170]  __x64_sys_sendmsg+0x1b1/0x290
[  426.596299][T16170]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  426.596414][T16170]  do_syscall_64+0x166/0x520
[  426.596488][T16170]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.596543][T16170]  ? clear_bhb_loop+0x70/0xc0
[  426.596614][T16170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.596674][T16170] RIP: 0033:0x7fd73c39e159
[  426.596727][T16170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  426.596771][T16170] RSP: 002b:00007fd73d1e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  426.596846][T16170] RAX: ffffffffffffffda RBX: 00007fd73c625fa0 RCX: 00007fd73c39e159
[  426.596901][T16170] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  426.596940][T16170] RBP: 00007fd73d1e2090 R08: 0000000000000000 R09: 0000000000000000
[  426.596980][T16170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  426.597011][T16170] R13: 00007fd73c626038 R14: 00007fd73c625fa0 R15: 00007ffd49d871e8
[  426.597093][T16170]  </TASK>
[  427.178742][T16180] openvswitch: netlink: ufid size 1321 bytes exceeds the range (1, 16)
[  427.178793][T16180] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  427.450471][T16156] lo speed is unknown, defaulting to 1000
[  427.892189][ T5628] Bluetooth: hci1: command tx timeout
[  427.944311][T16210] FAULT_INJECTION: forcing a failure.
[  427.944311][T16210] name failslab, interval 1, probability 0, space 0, times 0
[  427.959762][T16210] CPU: 0 UID: 0 PID: 16210 Comm: syz.0.3133 Not tainted syzkaller #0 PREEMPT(full) 
[  427.959791][T16210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  427.959805][T16210] Call Trace:
[  427.959813][T16210]  <TASK>
[  427.959822][T16210]  dump_stack_lvl+0xe8/0x150
[  427.959859][T16210]  should_fail_ex+0x410/0x560
[  427.959900][T16210]  should_failslab+0xa8/0x100
[  427.959927][T16210]  __kmalloc_cache_noprof+0xa3/0x600
[  427.959958][T16210]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  427.959992][T16210]  ? __request_module+0x2d0/0x630
[  427.960017][T16210]  ? __request_module+0x2d0/0x630
[  427.960049][T16210]  __request_module+0x2d0/0x630
[  427.960081][T16210]  ? __pfx___request_module+0x10/0x10
[  427.960120][T16210]  ? rtnl_link_ops_get+0x23/0x250
[  427.960145][T16210]  ? rtnl_link_ops_get+0x23/0x250
[  427.960165][T16210]  ? rtnl_link_ops_get+0x215/0x250
[  427.960208][T16210]  rtnl_newlink+0x662/0x1c30
[  427.960245][T16210]  ? kmem_cache_free+0x182/0x650
[  427.960265][T16210]  ? nlmon_xmit+0xb0/0x100
[  427.960294][T16210]  ? dev_hard_start_xmit+0x2cd/0x830
[  427.960317][T16210]  ? __dev_queue_xmit+0x14c0/0x3820
[  427.960340][T16210]  ? __netlink_deliver_tap+0x5b4/0x860
[  427.960364][T16210]  ? netlink_deliver_tap+0x19c/0x1b0
[  427.960387][T16210]  ? netlink_unicast+0x781/0x940
[  427.960407][T16210]  ? netlink_sendmsg+0x813/0xb40
[  427.960434][T16210]  ? __pfx_rtnl_newlink+0x10/0x10
[  427.960465][T16210]  ? do_syscall_64+0x166/0x520
[  427.960494][T16210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.960555][T16210]  ? kasan_quarantine_put+0xbb/0x1f0
[  427.960591][T16210]  ? lockdep_hardirqs_on+0x7b/0x110
[  427.960625][T16210]  ? nlmon_xmit+0xb0/0x100
[  427.960653][T16210]  ? kmem_cache_free+0x182/0x650
[  427.960687][T16210]  ? __lock_acquire+0x6df/0x2e50
[  427.960714][T16210]  ? __dev_queue_xmit+0x29b/0x3820
[  427.960742][T16210]  ? __local_bh_enable_ip+0xd6/0x140
[  427.960773][T16210]  ? lockdep_hardirqs_on+0x7b/0x110
[  427.960802][T16210]  ? __dev_queue_xmit+0x29b/0x3820
[  427.960825][T16210]  ? __local_bh_enable_ip+0xd6/0x140
[  427.960854][T16210]  ? __dev_queue_xmit+0x29b/0x3820
[  427.960887][T16210]  ? lock_acquire+0x115/0x350
[  427.960925][T16210]  ? __pfx_rtnl_newlink+0x10/0x10
[  427.960957][T16210]  rtnetlink_rcv_msg+0x802/0xc00
[  427.961003][T16210]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  427.961036][T16210]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  427.961065][T16210]  ? ref_tracker_free+0x689/0x830
[  427.961102][T16210]  ? __pfx_ref_tracker_free+0x10/0x10
[  427.961147][T16210]  netlink_rcv_skb+0x226/0x4a0
[  427.961204][T16210]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  427.961239][T16210]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  427.961278][T16210]  ? netlink_deliver_tap+0x2e/0x1b0
[  427.961303][T16210]  ? netlink_deliver_tap+0x2e/0x1b0
[  427.961334][T16210]  netlink_unicast+0x7bd/0x940
[  427.961368][T16210]  netlink_sendmsg+0x813/0xb40
[  427.961403][T16210]  ? __pfx_netlink_sendmsg+0x10/0x10
[  427.961436][T16210]  ? apparmor_socket_sendmsg+0x98/0x360
[  427.961470][T16210]  ? __pfx_netlink_sendmsg+0x10/0x10
[  427.961495][T16210]  sock_sendmsg_nosec+0x13a/0x180
[  427.961525][T16210]  ____sys_sendmsg+0x54e/0x850
[  427.961553][T16210]  ? __pfx_____sys_sendmsg+0x10/0x10
[  427.961583][T16210]  ? import_iovec+0x73/0xa0
[  427.961621][T16210]  ___sys_sendmsg+0x2a5/0x360
[  427.961642][T16210]  ? __lock_acquire+0x6df/0x2e50
[  427.961669][T16210]  ? __pfx____sys_sendmsg+0x10/0x10
[  427.961729][T16210]  ? __fget_files+0x2a/0x420
[  427.961757][T16210]  ? __fget_files+0x3a2/0x420
[  427.961795][T16210]  __x64_sys_sendmsg+0x1b1/0x290
[  427.961821][T16210]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  427.961865][T16210]  do_syscall_64+0x166/0x520
[  427.961893][T16210]  ? trace_irq_disable+0x3b/0x140
[  427.961914][T16210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.961938][T16210]  ? clear_bhb_loop+0x70/0xc0
[  427.961965][T16210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.961996][T16210] RIP: 0033:0x7fd73c39e159
[  427.962017][T16210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  427.962034][T16210] RSP: 002b:00007fd73d1e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  427.962058][T16210] RAX: ffffffffffffffda RBX: 00007fd73c625fa0 RCX: 00007fd73c39e159
[  427.962075][T16210] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  427.962090][T16210] RBP: 00007fd73d1e2090 R08: 0000000000000000 R09: 0000000000000000
[  427.962104][T16210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  427.962130][T16210] R13: 00007fd73c626038 R14: 00007fd73c625fa0 R15: 00007ffd49d871e8
[  427.962163][T16210]  </TASK>
[  428.253366][T16199] netlink: 'syz.3.3129': attribute type 23 has an invalid length.
[  428.277630][T16210] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.963477][T16140] lo speed is unknown, defaulting to 1000
[  429.046765][T16196] lo speed is unknown, defaulting to 1000
[  429.072471][T16232] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  429.380537][T16236] FAULT_INJECTION: forcing a failure.
[  429.380537][T16236] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  429.394261][T16236] CPU: 0 UID: 0 PID: 16236 Comm: syz.4.3139 Not tainted syzkaller #0 PREEMPT(full) 
[  429.394290][T16236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  429.394302][T16236] Call Trace:
[  429.394311][T16236]  <TASK>
[  429.394320][T16236]  dump_stack_lvl+0xe8/0x150
[  429.394354][T16236]  should_fail_ex+0x410/0x560
[  429.394390][T16236]  _copy_from_iter+0x1d3/0x1660
[  429.394421][T16236]  ? __alloc_skb+0x27a/0x7a0
[  429.394454][T16236]  ? __alloc_skb+0x27a/0x7a0
[  429.394485][T16236]  ? __alloc_skb+0x27a/0x7a0
[  429.394516][T16236]  ? __pfx__copy_from_iter+0x10/0x10
[  429.394545][T16236]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  429.394576][T16236]  ? __alloc_skb+0x27a/0x7a0
[  429.394604][T16236]  ? __alloc_skb+0x27a/0x7a0
[  429.394639][T16236]  ? netlink_sendmsg+0x650/0xb40
[  429.394665][T16236]  ? skb_put+0x112/0x210
[  429.394699][T16236]  netlink_sendmsg+0x6c0/0xb40
[  429.394734][T16236]  ? __pfx_netlink_sendmsg+0x10/0x10
[  429.394767][T16236]  ? apparmor_socket_sendmsg+0x18b/0x360
[  429.394801][T16236]  ? __pfx_netlink_sendmsg+0x10/0x10
[  429.394825][T16236]  sock_sendmsg_nosec+0x13a/0x180
[  429.394863][T16236]  ____sys_sendmsg+0x54e/0x850
[  429.394891][T16236]  ? __pfx_____sys_sendmsg+0x10/0x10
[  429.394923][T16236]  ? import_iovec+0x73/0xa0
[  429.394960][T16236]  ___sys_sendmsg+0x2a5/0x360
[  429.394980][T16236]  ? __lock_acquire+0x6df/0x2e50
[  429.395007][T16236]  ? __pfx____sys_sendmsg+0x10/0x10
[  429.395084][T16236]  ? __fget_files+0x2a/0x420
[  429.395113][T16236]  ? __fget_files+0x3a2/0x420
[  429.395157][T16236]  __x64_sys_sendmsg+0x1b1/0x290
[  429.395183][T16236]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  429.395228][T16236]  do_syscall_64+0x166/0x520
[  429.395258][T16236]  ? trace_irq_disable+0x3b/0x140
[  429.395280][T16236]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.395303][T16236]  ? clear_bhb_loop+0x70/0xc0
[  429.395344][T16236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.395366][T16236] RIP: 0033:0x7fcaedf9e159
[  429.395386][T16236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  429.395404][T16236] RSP: 002b:00007fcaeed85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  429.395427][T16236] RAX: ffffffffffffffda RBX: 00007fcaee225fa0 RCX: 00007fcaedf9e159
[  429.395444][T16236] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006
[  429.395458][T16236] RBP: 00007fcaeed85090 R08: 0000000000000000 R09: 0000000000000000
[  429.395472][T16236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  429.395485][T16236] R13: 00007fcaee226038 R14: 00007fcaee225fa0 R15: 00007ffc96558c78
[  429.395520][T16236]  </TASK>
[  429.726582][T16239] ip6t_srh: unknown srh match flags  4000
[  429.874109][T16242] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  429.970143][ T5628] Bluetooth: hci1: command tx timeout
[  430.282732][ T5630] block nbd46: Receive control failed (result -32)
[  430.292204][ T5628] block nbd46: Receive control failed (result -32)
[  430.473333][T16140] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.479861][T16140] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.480174][T16140] bridge_slave_0: entered allmulticast mode
[  430.507982][T16140] bridge_slave_0: entered promiscuous mode
[  430.524389][T16140] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.524691][T16140] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.525105][T16140] bridge_slave_1: entered allmulticast mode
[  430.554209][T16140] bridge_slave_1: entered promiscuous mode
[  430.706169][T16140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.727281][T16140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.728782][T16276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3151'.
[  430.822483][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3153'.
[  430.878164][T16272] IPVS: Error connecting to the multicast addr
[  430.964514][T16140] team0: Port device team_slave_0 added
[  430.964915][T16281] veth0: entered promiscuous mode
[  430.965998][T16279] veth0: left promiscuous mode
[  430.994624][T16140] team0: Port device team_slave_1 added
[  431.111224][T16140] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.119362][T16140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.145930][T16140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.148129][T16140] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.148145][T16140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.148175][T16140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.209439][T16293] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3155'.
[  431.222870][T16292] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  431.311095][T16140] hsr_slave_0: entered promiscuous mode
[  431.317849][T16140] hsr_slave_1: entered promiscuous mode
[  431.325634][T16140] debugfs: 'hsr0' already exists in 'hsr'
[  431.331940][T16140] Cannot create hsr debugfs directory
[  431.346440][T16296] syzkaller0: entered promiscuous mode
[  431.346484][T16296] syzkaller0: entered allmulticast mode
[  431.439432][T16300] netlink: 316 bytes leftover after parsing attributes in process `syz.0.3160'.
[  431.533261][T16302] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  431.613534][T16307] ipvlan2: entered promiscuous mode
[  431.619049][T16307] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  431.633688][T16307] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  431.633895][T16307] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  431.692263][T16304] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.895452][T16322] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3167'.
[  432.050487][ T5628] Bluetooth: hci1: command tx timeout
[  432.084326][T16331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3171'.
[  432.094104][T16329] tipc: Started in network mode
[  432.094134][T16329] tipc: Node identity ac14140f, cluster identity 4711
[  432.108598][T16329] tipc: New replicast peer: 255.255.255.255
[  432.118506][T16329] tipc: Enabled bearer <udp:syz2>, priority 10
[  432.125114][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3169'.
[  432.172776][T16329] netlink: 'syz.0.3169': attribute type 1 has an invalid length.
[  432.207077][T16329] bond1: entered promiscuous mode
[  432.212790][T16329] 8021q: adding VLAN 0 to HW filter on device bond1
[  432.245652][T16329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3169'.
[  432.258369][T16329] bond1: entered allmulticast mode
[  432.290960][T16329] bond1: (slave bridge2): making interface the new active one
[  432.298654][T16329] bridge2: entered promiscuous mode
[  432.305507][T16329] bridge2: entered allmulticast mode
[  432.315066][T16329] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  432.752835][T16353] netlink: 316 bytes leftover after parsing attributes in process `syz.3.3175'.
[  432.869297][T16356] FAULT_INJECTION: forcing a failure.
[  432.869297][T16356] name failslab, interval 1, probability 0, space 0, times 0
[  432.883473][T16356] CPU: 0 UID: 0 PID: 16356 Comm: syz.0.3177 Not tainted syzkaller #0 PREEMPT(full) 
[  432.883501][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  432.883526][T16356] Call Trace:
[  432.883534][T16356]  <TASK>
[  432.883543][T16356]  dump_stack_lvl+0xe8/0x150
[  432.883577][T16356]  should_fail_ex+0x410/0x560
[  432.883610][T16356]  ? __alloc_skb+0x1db/0x7a0
[  432.883637][T16356]  should_failslab+0xa8/0x100
[  432.883662][T16356]  ? __alloc_skb+0x1db/0x7a0
[  432.883687][T16356]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  432.883717][T16356]  ? __alloc_skb+0x18d/0x7a0
[  432.883746][T16356]  ? __alloc_skb+0x1db/0x7a0
[  432.883780][T16356]  __alloc_skb+0x1db/0x7a0
[  432.883812][T16356]  netlink_sendmsg+0x5d4/0xb40
[  432.883845][T16356]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.883876][T16356]  ? apparmor_socket_sendmsg+0x98/0x360
[  432.883906][T16356]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.883928][T16356]  sock_sendmsg_nosec+0x13a/0x180
[  432.883957][T16356]  ____sys_sendmsg+0x54e/0x850
[  432.883983][T16356]  ? __pfx_____sys_sendmsg+0x10/0x10
[  432.884011][T16356]  ? import_iovec+0x73/0xa0
[  432.884044][T16356]  ___sys_sendmsg+0x2a5/0x360
[  432.884063][T16356]  ? __lock_acquire+0x6df/0x2e50
[  432.884087][T16356]  ? __pfx____sys_sendmsg+0x10/0x10
[  432.884138][T16356]  ? __fget_files+0x2a/0x420
[  432.884164][T16356]  ? __fget_files+0x3a2/0x420
[  432.884199][T16356]  __x64_sys_sendmsg+0x1b1/0x290
[  432.884240][T16356]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  432.884283][T16356]  do_syscall_64+0x166/0x520
[  432.884312][T16356]  ? trace_irq_disable+0x3b/0x140
[  432.884332][T16356]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.884355][T16356]  ? clear_bhb_loop+0x70/0xc0
[  432.884382][T16356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.884404][T16356] RIP: 0033:0x7fd73c39e159
[  432.884424][T16356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  432.884444][T16356] RSP: 002b:00007fd73d1e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  432.884468][T16356] RAX: ffffffffffffffda RBX: 00007fd73c625fa0 RCX: 00007fd73c39e159
[  432.884484][T16356] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003
[  432.884499][T16356] RBP: 00007fd73d1e2090 R08: 0000000000000000 R09: 0000000000000000
[  432.884521][T16356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  432.884534][T16356] R13: 00007fd73c626038 R14: 00007fd73c625fa0 R15: 00007ffd49d871e8
[  432.884569][T16356]  </TASK>
[  433.230002][T16335] tipc: Node number set to 2886997007
[  433.262094][T16364] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  433.645266][T16376] xt_TPROXY: Can be used only with -p tcp or -p udp
[  433.888866][T16140] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  433.915217][T16140] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  433.926410][T16140] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  433.948500][T16140] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  433.958718][T16140] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  433.989363][T16140] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  433.990458][T16140] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  434.028482][T16140] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  434.068845][T16384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3188'.
[  434.131618][ T5628] Bluetooth: hci1: command tx timeout
[  434.373973][T16140] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.400873][T16140] 8021q: adding VLAN 0 to HW filter on device team0
[  434.435643][T16402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.502120][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.502257][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.545828][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.545955][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.686465][T16437] netlink: 'syz.3.3202': attribute type 1 has an invalid length.
[  435.745281][T16441] netlink: 'syz.4.3203': attribute type 1 has an invalid length.
[  435.776211][T16140] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.831064][T16437] bond16: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  435.855748][T16443] netlink: 'syz.4.3203': attribute type 1 has an invalid length.
[  435.855788][T16443] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3203'.
[  436.000490][T16140] veth0_vlan: entered promiscuous mode
[  436.025900][T16140] veth1_vlan: entered promiscuous mode
[  436.063665][T16453] macvtap0: entered promiscuous mode
[  436.066041][T16453] macvtap0: entered allmulticast mode
[  436.066092][T16453] veth0_macvtap: entered allmulticast mode
[  436.088725][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3206'.
[  436.116786][T16140] veth0_macvtap: entered promiscuous mode
[  436.166226][T16140] veth1_macvtap: entered promiscuous mode
[  436.201489][T16140] batman_adv: batadv0: Interface activated: batadv_slave_0
[  436.226743][T16140] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.294165][ T5982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.331651][ T5982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.451175][  T706] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.499667][ T5986] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.653995][ T5986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.654034][ T5986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.767896][ T5982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.767953][ T5982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.924359][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'.
[  437.084627][T16483] FAULT_INJECTION: forcing a failure.
[  437.084627][T16483] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  437.099572][T16483] CPU: 0 UID: 0 PID: 16483 Comm: syz.1.3215 Not tainted syzkaller #0 PREEMPT(full) 
[  437.099601][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  437.099614][T16483] Call Trace:
[  437.099622][T16483]  <TASK>
[  437.099630][T16483]  dump_stack_lvl+0xe8/0x150
[  437.099666][T16483]  should_fail_ex+0x410/0x560
[  437.099701][T16483]  _copy_from_user+0x2d/0xb0
[  437.099723][T16483]  sock_do_ioctl+0x195/0x320
[  437.099752][T16483]  ? __pfx_sock_do_ioctl+0x10/0x10
[  437.099775][T16483]  ? hook_file_ioctl+0x1f2/0x600
[  437.099831][T16483]  sock_ioctl+0x57a/0x7e0
[  437.099857][T16483]  ? __pfx_sock_ioctl+0x10/0x10
[  437.099884][T16483]  ? __fget_files+0x2a/0x420
[  437.099942][T16483]  ? __fget_files+0x3a2/0x420
[  437.099966][T16483]  ? __fget_files+0x2a/0x420
[  437.099994][T16483]  ? bpf_lsm_file_ioctl+0x9/0x20
[  437.100021][T16483]  ? __pfx_sock_ioctl+0x10/0x10
[  437.100044][T16483]  __se_sys_ioctl+0xfc/0x170
[  437.100066][T16483]  do_syscall_64+0x166/0x520
[  437.100093][T16483]  ? trace_irq_disable+0x3b/0x140
[  437.100111][T16483]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.100132][T16483]  ? clear_bhb_loop+0x70/0xc0
[  437.100163][T16483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.100184][T16483] RIP: 0033:0x7f99cfd9e159
[  437.100202][T16483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.100220][T16483] RSP: 002b:00007f99d0c74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  437.100241][T16483] RAX: ffffffffffffffda RBX: 00007f99d0025fa0 RCX: 00007f99cfd9e159
[  437.100256][T16483] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003
[  437.100269][T16483] RBP: 00007f99d0c74090 R08: 0000000000000000 R09: 0000000000000000
[  437.100282][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.100294][T16483] R13: 00007f99d0026038 R14: 00007f99d0025fa0 R15: 00007ffde3e7a948
[  437.100324][T16483]  </TASK>
[  437.404589][T16484] syzkaller0: entered promiscuous mode
[  437.404632][T16484] syzkaller0: entered allmulticast mode
[  437.420279][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3213'.
[  437.497029][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  437.511818][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  437.519364][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  437.550252][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  437.559780][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  438.110712][ T5618] bond10: (slave syz_tun): Removing an active aggregator
[  438.111307][ T5618] bond10: (slave syz_tun): Releasing backup interface
[  438.422692][T16507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3222'.
[  438.422745][T16507] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  438.566134][T16513] netlink: 'syz.2.3225': attribute type 10 has an invalid length.
[  438.598676][T16513] team0: Port device dummy0 added
[  439.024808][T16525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3228'.
[  439.399483][T16490] lo speed is unknown, defaulting to 1000
[  439.650334][ T5628] Bluetooth: hci4: command tx timeout
[  439.848361][T16540] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  440.344900][T16520] lo speed is unknown, defaulting to 1000
[  440.489800][T16490] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.498133][T16490] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.505966][T16490] bridge_slave_0: entered allmulticast mode
[  440.514163][T16490] bridge_slave_0: entered promiscuous mode
[  440.544827][T16490] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.552584][T16490] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.560464][T16490] bridge_slave_1: entered allmulticast mode
[  440.568676][T16490] bridge_slave_1: entered promiscuous mode
[  440.778019][T16490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.844035][T16490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  441.087842][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3240'.
[  441.205593][T16490] team0: Port device team_slave_0 added
[  441.227804][T16490] team0: Port device team_slave_1 added
[  441.408588][T16584] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  441.420760][T16490] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.420784][T16490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.421851][T16490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.439493][T16490] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.439543][T16490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.439614][T16490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.730297][ T5628] Bluetooth: hci4: command tx timeout
[  441.964806][T16592] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  441.964876][T16592] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  441.964962][T16592] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  441.965591][T16592] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  441.965694][T16592] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  441.965784][T16592] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  441.965867][T16592] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  441.965961][T16592] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  441.966101][T16592] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  442.049302][T16602] FAULT_INJECTION: forcing a failure.
[  442.049302][T16602] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.049361][T16602] CPU: 1 UID: 0 PID: 16602 Comm: syz.4.3248 Not tainted syzkaller #0 PREEMPT(full) 
[  442.049384][T16602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  442.049445][T16602] Call Trace:
[  442.049472][T16602]  <TASK>
[  442.049499][T16602]  dump_stack_lvl+0xe8/0x150
[  442.049602][T16602]  should_fail_ex+0x410/0x560
[  442.049760][T16602]  _copy_from_iter+0x4ff/0x1660
[  442.049859][T16602]  ? __alloc_skb+0x27a/0x7a0
[  442.049931][T16602]  ? __pfx__copy_from_iter+0x10/0x10
[  442.050001][T16602]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  442.050078][T16602]  ? __alloc_skb+0x27a/0x7a0
[  442.050146][T16602]  ? __alloc_skb+0x27a/0x7a0
[  442.050237][T16602]  ? netlink_sendmsg+0x650/0xb40
[  442.050296][T16602]  ? skb_put+0x112/0x210
[  442.050375][T16602]  netlink_sendmsg+0x6c0/0xb40
[  442.050467][T16602]  ? __pfx_netlink_sendmsg+0x10/0x10
[  442.050544][T16602]  ? apparmor_socket_sendmsg+0x98/0x360
[  442.050623][T16602]  ? __pfx_netlink_sendmsg+0x10/0x10
[  442.050690][T16602]  sock_sendmsg_nosec+0x13a/0x180
[  442.050760][T16602]  ____sys_sendmsg+0x54e/0x850
[  442.050828][T16602]  ? __pfx_____sys_sendmsg+0x10/0x10
[  442.050925][T16602]  ? import_iovec+0x73/0xa0
[  442.051028][T16602]  ___sys_sendmsg+0x2a5/0x360
[  442.051094][T16602]  ? __lock_acquire+0x6df/0x2e50
[  442.051139][T16602]  ? __pfx____sys_sendmsg+0x10/0x10
[  442.051283][T16602]  ? __fget_files+0x2a/0x420
[  442.051355][T16602]  ? __fget_files+0x3a2/0x420
[  442.051459][T16602]  __x64_sys_sendmsg+0x1b1/0x290
[  442.051521][T16602]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  442.051636][T16602]  do_syscall_64+0x166/0x520
[  442.051725][T16602]  ? trace_irq_disable+0x3b/0x140
[  442.051786][T16602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.051848][T16602]  ? clear_bhb_loop+0x70/0xc0
[  442.051921][T16602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.051974][T16602] RIP: 0033:0x7fcaedf9e159
[  442.052032][T16602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.052076][T16602] RSP: 002b:00007fcaec1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  442.052137][T16602] RAX: ffffffffffffffda RBX: 00007fcaee226090 RCX: 00007fcaedf9e159
[  442.052189][T16602] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000005
[  442.052241][T16602] RBP: 00007fcaec1f6090 R08: 0000000000000000 R09: 0000000000000000
[  442.052286][T16602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.052322][T16602] R13: 00007fcaee226128 R14: 00007fcaee226090 R15: 00007ffc96558c78
[  442.052415][T16602]  </TASK>
[  442.507319][T16490] hsr_slave_0: entered promiscuous mode
[  442.514731][T16490] hsr_slave_1: entered promiscuous mode
[  442.524269][T16490] debugfs: 'hsr0' already exists in 'hsr'
[  442.531287][T16490] Cannot create hsr debugfs directory
[  442.785354][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3250'.
[  442.825849][T16613] netlink: 'syz.2.3249': attribute type 10 has an invalid length.
[  443.397999][T16634] lo: entered allmulticast mode
[  443.400222][T16634] lo: left allmulticast mode
[  443.618688][T16639] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  443.810459][ T5628] Bluetooth: hci4: command tx timeout
[  443.945721][T16659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3261'.
[  444.051346][T16666] netlink: 'syz.2.3263': attribute type 10 has an invalid length.
[  444.325599][T16659] veth1_to_team: entered promiscuous mode
[  444.339624][T16659] gretap0: entered promiscuous mode
[  444.350547][T16659] debugfs: 'hsr1' already exists in 'hsr'
[  444.350601][T16659] Cannot create hsr debugfs directory
[  444.351220][T16659] hsr1: entered promiscuous mode
[  444.745133][T16490] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  444.766234][T16490] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  444.774467][T16490] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  444.795513][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3268'.
[  444.807435][T16490] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  444.845530][T16490] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  444.868722][T16490] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  444.879452][T16490] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  444.909332][T16490] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  444.979232][T16687] net_ratelimit: 3260 callbacks suppressed
[  444.980110][T16687] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  445.088178][T16490] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.129552][T16706] FAULT_INJECTION: forcing a failure.
[  445.129552][T16706] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  445.143195][T16706] CPU: 0 UID: 0 PID: 16706 Comm: syz.2.3274 Not tainted syzkaller #0 PREEMPT(full) 
[  445.143225][T16706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  445.143239][T16706] Call Trace:
[  445.143248][T16706]  <TASK>
[  445.143257][T16706]  dump_stack_lvl+0xe8/0x150
[  445.143293][T16706]  should_fail_ex+0x410/0x560
[  445.143328][T16706]  _copy_from_iter+0x1d3/0x1660
[  445.143358][T16706]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  445.143385][T16706]  ? __pfx_policy_nodemask+0x10/0x10
[  445.143412][T16706]  ? lock_acquire+0x115/0x350
[  445.143433][T16706]  ? __pfx__copy_from_iter+0x10/0x10
[  445.143465][T16706]  ? alloc_pages_mpol+0x256/0x390
[  445.143499][T16706]  copy_page_from_iter+0x219/0x2d0
[  445.143534][T16706]  tun_get_user+0x1c16/0x44d0
[  445.143565][T16706]  ? tun_get_user+0x70a/0x44d0
[  445.143610][T16706]  ? aa_file_perm+0x4ed/0x15f0
[  445.143633][T16706]  ? __pfx_tun_get_user+0x10/0x10
[  445.143664][T16706]  ? __lock_acquire+0x6df/0x2e50
[  445.143698][T16706]  ? ref_tracker_alloc+0x341/0x4b0
[  445.143729][T16706]  ? lock_acquire+0x115/0x350
[  445.143750][T16706]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  445.143784][T16706]  ? lock_acquire+0x115/0x350
[  445.143805][T16706]  ? tun_get+0x1c/0x2f0
[  445.143838][T16706]  ? tun_get+0x1c/0x2f0
[  445.143865][T16706]  ? tun_get+0x1c/0x2f0
[  445.143898][T16706]  tun_chr_write_iter+0x113/0x200
[  445.143929][T16706]  vfs_write+0x612/0xba0
[  445.143966][T16706]  ? __pfx_vfs_write+0x10/0x10
[  445.144011][T16706]  ? __fget_files+0x2a/0x420
[  445.144047][T16706]  ksys_write+0x150/0x270
[  445.144098][T16706]  ? __pfx_ksys_write+0x10/0x10
[  445.144141][T16706]  do_syscall_64+0x166/0x520
[  445.144171][T16706]  ? trace_irq_disable+0x3b/0x140
[  445.144196][T16706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.144220][T16706]  ? clear_bhb_loop+0x70/0xc0
[  445.144248][T16706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.144271][T16706] RIP: 0033:0x7f005fd5e98e
[  445.144293][T16706] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  445.144313][T16706] RSP: 002b:00007f0060c0bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  445.144338][T16706] RAX: ffffffffffffffda RBX: 00007f0060c0c6c0 RCX: 00007f005fd5e98e
[  445.144355][T16706] RDX: 000000000000005e RSI: 0000200000000000 RDI: 00000000000000c8
[  445.144370][T16706] RBP: 00007f0060c0c090 R08: 0000000000000000 R09: 0000000000000000
[  445.144385][T16706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  445.144399][T16706] R13: 00007f0060026038 R14: 00007f0060025fa0 R15: 00007fff668beb38
[  445.144434][T16706]  </TASK>
[  445.238128][T16490] 8021q: adding VLAN 0 to HW filter on device team0
[  445.444432][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.444670][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.521979][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.522125][ T5990] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.533183][   T12] IPVS: starting estimator thread 0...
[  445.657105][T16707] IPVS: rr: FWM 3 0x00000003 - no destination available
[  445.666730][T16711] IPVS: rr: FWM 3 0x00000003 - no destination available
[  445.746633][T16713] IPVS: using max 27 ests per chain, 64800 per kthread
[  445.763863][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3273'.
[  445.853806][T16725] openvswitch: netlink: Multiple metadata blocks provided
[  445.895364][ T5628] Bluetooth: hci4: command tx timeout
[  446.123517][T16737] xt_TPROXY: Can be used only with -p tcp or -p udp
[  446.518738][T16751] netlink: 'syz.4.3285': attribute type 1 has an invalid length.
[  446.518790][T16751] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3285'.
[  446.662585][T16757] netlink: 'syz.0.3286': attribute type 3 has an invalid length.
[  446.729800][T16490] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.776642][T16763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3286'.
[  446.794123][T16759] netlink: 'syz.1.3287': attribute type 10 has an invalid length.
[  446.892873][T16759] team0: Port device dummy0 added
[  446.941797][T16766] openvswitch: netlink: Multiple metadata blocks provided
[  447.060692][T16490] veth0_vlan: entered promiscuous mode
[  447.115876][T16490] veth1_vlan: entered promiscuous mode
[  447.187901][T16772] openvswitch: netlink: Multiple metadata blocks provided
[  447.198008][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3293'.
[  447.214863][T16768] Unknown options in mask 6
[  447.215220][T16768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3290'.
[  447.218910][T16768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3290'.
[  447.234914][T16768] netlink: 'syz.2.3290': attribute type 1 has an invalid length.
[  447.234992][T16768] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3290'.
[  447.367949][T16490] veth0_macvtap: entered promiscuous mode
[  447.408603][T16490] veth1_macvtap: entered promiscuous mode
[  447.472663][T16490] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.508148][T16490] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.554034][T16784] FAULT_INJECTION: forcing a failure.
[  447.554034][T16784] name failslab, interval 1, probability 0, space 0, times 0
[  447.567350][T16784] CPU: 0 UID: 0 PID: 16784 Comm: syz.4.3295 Not tainted syzkaller #0 PREEMPT(full) 
[  447.567382][T16784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  447.567397][T16784] Call Trace:
[  447.567407][T16784]  <TASK>
[  447.567417][T16784]  dump_stack_lvl+0xe8/0x150
[  447.567457][T16784]  should_fail_ex+0x410/0x560
[  447.567494][T16784]  should_failslab+0xa8/0x100
[  447.567523][T16784]  __kmalloc_cache_noprof+0xa3/0x600
[  447.567561][T16784]  ? call_usermodehelper_setup+0x8e/0x270
[  447.567589][T16784]  ? call_usermodehelper_setup+0x8e/0x270
[  447.567618][T16784]  ? __request_module+0x2ec/0x630
[  447.567650][T16784]  call_usermodehelper_setup+0x8e/0x270
[  447.567676][T16784]  ? __pfx_free_modprobe_argv+0x10/0x10
[  447.567707][T16784]  __request_module+0x3ba/0x630
[  447.567736][T16784]  ? __pfx___request_module+0x10/0x10
[  447.567761][T16784]  ? kasan_quarantine_put+0xbb/0x1f0
[  447.567799][T16784]  ? __pfx___request_module+0x10/0x10
[  447.567830][T16784]  ? apparmor_capable+0x126/0x170
[  447.567868][T16784]  ? dev_load+0x21/0x1f0
[  447.567903][T16784]  dev_ioctl+0x384/0x1150
[  447.567950][T16784]  sock_do_ioctl+0x23e/0x320
[  447.567979][T16784]  ? __pfx_sock_do_ioctl+0x10/0x10
[  447.568004][T16784]  ? hook_file_ioctl+0x1f2/0x600
[  447.568051][T16784]  sock_ioctl+0x57a/0x7e0
[  447.568079][T16784]  ? __pfx_sock_ioctl+0x10/0x10
[  447.568105][T16784]  ? __fget_files+0x2a/0x420
[  447.568134][T16784]  ? __fget_files+0x3a2/0x420
[  447.568162][T16784]  ? __fget_files+0x2a/0x420
[  447.568194][T16784]  ? bpf_lsm_file_ioctl+0x9/0x20
[  447.568228][T16784]  ? __pfx_sock_ioctl+0x10/0x10
[  447.568259][T16784]  __se_sys_ioctl+0xfc/0x170
[  447.568284][T16784]  do_syscall_64+0x166/0x520
[  447.568313][T16784]  ? trace_irq_disable+0x3b/0x140
[  447.568334][T16784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.568356][T16784]  ? clear_bhb_loop+0x70/0xc0
[  447.568395][T16784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.568416][T16784] RIP: 0033:0x7fcaedf9e159
[  447.568435][T16784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.568454][T16784] RSP: 002b:00007fcaeed85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  447.568476][T16784] RAX: ffffffffffffffda RBX: 00007fcaee225fa0 RCX: 00007fcaedf9e159
[  447.568491][T16784] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003
[  447.568505][T16784] RBP: 00007fcaeed85090 R08: 0000000000000000 R09: 0000000000000000
[  447.568519][T16784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.568530][T16784] R13: 00007fcaee226038 R14: 00007fcaee225fa0 R15: 00007ffc96558c78
[  447.568561][T16784]  </TASK>
[  447.576348][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.576466][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.576560][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.576646][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  448.224382][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.224432][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.388817][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.388867][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.458861][T16808] bond1: option mode: unable to set because the bond device is up
[  448.492861][T16802] Unknown options in mask 6
[  448.495230][T16802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3303'.
[  448.495324][T16802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3303'.
[  448.518554][T16802] netlink: 'syz.0.3303': attribute type 1 has an invalid length.
[  448.518597][T16802] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3303'.
[  448.638614][T16812] netlink: 'syz.4.3309': attribute type 39 has an invalid length.
[  448.746648][T16817] netlink: 'syz.2.3308': attribute type 10 has an invalid length.
[  448.746840][T16817] FAULT_INJECTION: forcing a failure.
[  448.746840][T16817] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  448.746924][T16817] CPU: 1 UID: 0 PID: 16817 Comm: syz.2.3308 Not tainted syzkaller #0 PREEMPT(full) 
[  448.746980][T16817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  448.747018][T16817] Call Trace:
[  448.747039][T16817]  <TASK>
[  448.747054][T16817]  dump_stack_lvl+0xe8/0x150
[  448.747137][T16817]  should_fail_ex+0x410/0x560
[  448.747238][T16817]  _copy_to_user+0x31/0xb0
[  448.747308][T16817]  simple_read_from_buffer+0xe1/0x170
[  448.747398][T16817]  proc_fail_nth_read+0x1bb/0x230
[  448.747481][T16817]  ? common_file_perm+0x20e/0x2b0
[  448.747574][T16817]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  448.747671][T16817]  ? rw_verify_area+0x24a/0x4c0
[  448.747758][T16817]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  448.747839][T16817]  vfs_read+0x213/0xa80
[  448.747934][T16817]  ? __pfx_vfs_read+0x10/0x10
[  448.748023][T16817]  ? do_sys_openat2+0x14e/0x200
[  448.748125][T16817]  ksys_read+0x150/0x270
[  448.748218][T16817]  ? __pfx_ksys_read+0x10/0x10
[  448.748351][T16817]  do_syscall_64+0x166/0x520
[  448.748429][T16817]  ? trace_irq_disable+0x3b/0x140
[  448.748488][T16817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.748548][T16817]  ? clear_bhb_loop+0x70/0xc0
[  448.748630][T16817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.748690][T16817] RIP: 0033:0x7f005fd5e98e
[  448.748744][T16817] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  448.748792][T16817] RSP: 002b:00007f0060c0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  448.748864][T16817] RAX: ffffffffffffffda RBX: 00007f0060c0c6c0 RCX: 00007f005fd5e98e
[  448.748908][T16817] RDX: 000000000000000f RSI: 00007f0060c0c0a0 RDI: 0000000000000008
[  448.748949][T16817] RBP: 00007f0060c0c090 R08: 0000000000000000 R09: 0000000000000000
[  448.748985][T16817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.749025][T16817] R13: 00007f0060026038 R14: 00007f0060025fa0 R15: 00007fff668beb38
[  448.749119][T16817]  </TASK>
[  448.837132][T16814] tipc: Started in network mode
[  448.837215][T16814] tipc: Node identity 1e04a46c1a57, cluster identity 4711
[  448.837590][T16814] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.855967][T16814] syzkaller0: entered promiscuous mode
[  448.856083][T16814] syzkaller0: entered allmulticast mode
[  448.908241][T16822] netlink: 'syz.4.3309': attribute type 10 has an invalid length.
[  449.040879][T16822] bond7: (slave dummy0): Releasing backup interface
[  449.162751][T16814] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  449.296881][T16827] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[  449.357834][T16838] tipc: Resetting bearer <eth:syzkaller0>
[  449.493466][T16813] tipc: Resetting bearer <eth:syzkaller0>
[  449.582527][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  449.594937][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  449.603416][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  449.615601][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  449.623154][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  449.631390][T16813] tipc: Disabling bearer <eth:syzkaller0>
[  450.232699][T16874] FAULT_INJECTION: forcing a failure.
[  450.232699][T16874] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  450.232757][T16874] CPU: 1 UID: 0 PID: 16874 Comm: syz.1.3324 Not tainted syzkaller #0 PREEMPT(full) 
[  450.232781][T16874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  450.232830][T16874] Call Trace:
[  450.232861][T16874]  <TASK>
[  450.232888][T16874]  dump_stack_lvl+0xe8/0x150
[  450.233011][T16874]  should_fail_ex+0x410/0x560
[  450.233165][T16874]  _copy_from_user+0x2d/0xb0
[  450.233235][T16874]  do_sock_getsockopt+0x462/0x7e0
[  450.233351][T16874]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  450.233492][T16874]  ? __fget_files+0x3a2/0x420
[  450.233562][T16874]  ? __fget_files+0x2a/0x420
[  450.233660][T16874]  __x64_sys_getsockopt+0x1a4/0x240
[  450.233784][T16874]  do_syscall_64+0x166/0x520
[  450.233852][T16874]  ? trace_irq_disable+0x3b/0x140
[  450.233901][T16874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.233964][T16874]  ? clear_bhb_loop+0x70/0xc0
[  450.234029][T16874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.234084][T16874] RIP: 0033:0x7f99cfd9e159
[  450.234132][T16874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.234187][T16874] RSP: 002b:00007f99d0c74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  450.234245][T16874] RAX: ffffffffffffffda RBX: 00007f99d0025fa0 RCX: 00007f99cfd9e159
[  450.234303][T16874] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003
[  450.234328][T16874] RBP: 00007f99d0c74090 R08: 0000200000000000 R09: 0000000000000000
[  450.234369][T16874] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001
[  450.234415][T16874] R13: 00007f99d0026038 R14: 00007f99d0025fa0 R15: 00007ffde3e7a948
[  450.234520][T16874]  </TASK>
[  450.262594][T16863] Unknown options in mask 6
[  450.263610][T16863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3320'.
[  450.323277][T16870] netlink: 'syz.2.3320': attribute type 1 has an invalid length.
[  450.574773][T16882] netlink: 'syz.3.3327': attribute type 21 has an invalid length.
[  450.664200][T16880] IPv6: sit1: Disabled Multicast RS
[  450.680376][ T5990] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  450.680451][ T5990] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  450.680506][ T5990] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  450.680546][ T5990] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  450.764003][T16891] openvswitch: netlink: Unknown key attributes 20
[  450.914618][T16899] team0: Port device dummy0 removed
[  451.333938][T16916] FAULT_INJECTION: forcing a failure.
[  451.333938][T16916] name failslab, interval 1, probability 0, space 0, times 0
[  451.348370][T16916] CPU: 0 UID: 0 PID: 16916 Comm: syz.0.3338 Not tainted syzkaller #0 PREEMPT(full) 
[  451.348401][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  451.348415][T16916] Call Trace:
[  451.348425][T16916]  <TASK>
[  451.348434][T16916]  dump_stack_lvl+0xe8/0x150
[  451.348472][T16916]  should_fail_ex+0x410/0x560
[  451.348510][T16916]  should_failslab+0xa8/0x100
[  451.348539][T16916]  __kmalloc_noprof+0xfe/0x720
[  451.348574][T16916]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  451.348606][T16916]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  451.348670][T16916]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  451.348709][T16916]  genl_family_rcv_msg_doit+0xda/0x340
[  451.348746][T16916]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  451.348784][T16916]  ? apparmor_capable+0x126/0x170
[  451.348811][T16916]  ? bpf_lsm_capable+0x9/0x20
[  451.348844][T16916]  ? security_capable+0x7e/0x2c0
[  451.348887][T16916]  genl_rcv_msg+0x614/0x7a0
[  451.348920][T16916]  ? __pfx_genl_rcv_msg+0x10/0x10
[  451.348947][T16916]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  451.348973][T16916]  ? __pfx_ref_tracker_free+0x10/0x10
[  451.349012][T16916]  netlink_rcv_skb+0x226/0x4a0
[  451.349035][T16916]  ? __pfx_genl_rcv_msg+0x10/0x10
[  451.349081][T16916]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  451.349121][T16916]  ? down_read+0x2be/0x330
[  451.349157][T16916]  genl_rcv+0x28/0x40
[  451.349186][T16916]  netlink_unicast+0x7bd/0x940
[  451.349222][T16916]  netlink_sendmsg+0x813/0xb40
[  451.349259][T16916]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.349293][T16916]  ? apparmor_socket_sendmsg+0x98/0x360
[  451.349329][T16916]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.349354][T16916]  sock_sendmsg_nosec+0x13a/0x180
[  451.349386][T16916]  ____sys_sendmsg+0x54e/0x850
[  451.349413][T16916]  ? __pfx_____sys_sendmsg+0x10/0x10
[  451.349445][T16916]  ? import_iovec+0x73/0xa0
[  451.349482][T16916]  ___sys_sendmsg+0x2a5/0x360
[  451.349502][T16916]  ? __lock_acquire+0x6df/0x2e50
[  451.349530][T16916]  ? __pfx____sys_sendmsg+0x10/0x10
[  451.349590][T16916]  ? __fget_files+0x2a/0x420
[  451.349619][T16916]  ? __fget_files+0x3a2/0x420
[  451.349658][T16916]  __x64_sys_sendmsg+0x1b1/0x290
[  451.349685][T16916]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  451.349729][T16916]  do_syscall_64+0x166/0x520
[  451.349759][T16916]  ? trace_irq_disable+0x3b/0x140
[  451.349780][T16916]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.349803][T16916]  ? clear_bhb_loop+0x70/0xc0
[  451.349830][T16916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.349851][T16916] RIP: 0033:0x7fd73c39e159
[  451.349880][T16916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.349900][T16916] RSP: 002b:00007fd73d1e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  451.349924][T16916] RAX: ffffffffffffffda RBX: 00007fd73c625fa0 RCX: 00007fd73c39e159
[  451.349940][T16916] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000008
[  451.349956][T16916] RBP: 00007fd73d1e2090 R08: 0000000000000000 R09: 0000000000000000
[  451.349970][T16916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.349984][T16916] R13: 00007fd73c626038 R14: 00007fd73c625fa0 R15: 00007ffd49d871e8
[  451.350020][T16916]  </TASK>
[  451.616587][T16913] Unknown options in mask 6
[  451.623337][T16913] __nla_validate_parse: 9 callbacks suppressed
[  451.623397][T16913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3337'.
[  451.623465][T16913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3337'.
[  451.678145][T16913] netlink: 'syz.1.3337': attribute type 1 has an invalid length.
[  451.678206][T16913] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3337'.
[  451.740832][ T5628] Bluetooth: hci2: command tx timeout
[  451.785958][T16921] veth1_to_bond: entered allmulticast mode
[  451.816180][T16921] veth1_to_bond: entered promiscuous mode
[  451.822707][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3341'.
[  451.855341][T16921] veth1_to_bond (unregistering): left allmulticast mode
[  451.863148][T16921] veth1_to_bond (unregistering): left promiscuous mode
[  451.902809][T16921] bond0: (slave bond_slave_1): Releasing backup interface
[  452.111877][T16935] openvswitch: netlink: Multiple metadata blocks provided
[  452.151848][T16850] lo speed is unknown, defaulting to 1000
[  452.196462][T16939] FAULT_INJECTION: forcing a failure.
[  452.196462][T16939] name failslab, interval 1, probability 0, space 0, times 0
[  452.196538][T16939] CPU: 1 UID: 0 PID: 16939 Comm: syz.0.3347 Not tainted syzkaller #0 PREEMPT(full) 
[  452.196576][T16939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  452.196589][T16939] Call Trace:
[  452.196597][T16939]  <TASK>
[  452.196607][T16939]  dump_stack_lvl+0xe8/0x150
[  452.196699][T16939]  should_fail_ex+0x410/0x560
[  452.196804][T16939]  should_failslab+0xa8/0x100
[  452.196879][T16939]  __kmalloc_cache_noprof+0xa3/0x600
[  452.197037][T16939]  ? nfnetlink_rcv+0x1021/0x28c0
[  452.197085][T16939]  ? nfnetlink_rcv+0x1021/0x28c0
[  452.197158][T16939]  nfnetlink_rcv+0x1021/0x28c0
[  452.197326][T16939]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  452.197429][T16939]  ? ref_tracker_free+0x689/0x830
[  452.197577][T16939]  ? skb_clone+0x246/0x3a0
[  452.197657][T16939]  ? __netlink_deliver_tap+0x811/0x860
[  452.197742][T16939]  ? netlink_deliver_tap+0x2e/0x1b0
[  452.197813][T16939]  ? netlink_deliver_tap+0x2e/0x1b0
[  452.197894][T16939]  netlink_unicast+0x7bd/0x940
[  452.197978][T16939]  netlink_sendmsg+0x813/0xb40
[  452.198071][T16939]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.198163][T16939]  ? apparmor_socket_sendmsg+0x98/0x360
[  452.198268][T16939]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.198359][T16939]  sock_sendmsg_nosec+0x13a/0x180
[  452.198430][T16939]  ____sys_sendmsg+0x54e/0x850
[  452.198502][T16939]  ? __pfx_____sys_sendmsg+0x10/0x10
[  452.198579][T16939]  ? import_iovec+0x73/0xa0
[  452.198667][T16939]  ___sys_sendmsg+0x2a5/0x360
[  452.198717][T16939]  ? __lock_acquire+0x6df/0x2e50
[  452.198784][T16939]  ? __pfx____sys_sendmsg+0x10/0x10
[  452.198932][T16939]  ? __fget_files+0x2a/0x420
[  452.199006][T16939]  ? __fget_files+0x3a2/0x420
[  452.199094][T16939]  __x64_sys_sendmsg+0x1b1/0x290
[  452.199159][T16939]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  452.199268][T16939]  do_syscall_64+0x166/0x520
[  452.199345][T16939]  ? trace_irq_disable+0x3b/0x140
[  452.199400][T16939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.199451][T16939]  ? clear_bhb_loop+0x70/0xc0
[  452.199518][T16939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.199575][T16939] RIP: 0033:0x7fd73c39e159
[  452.199637][T16939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.199700][T16939] RSP: 002b:00007fd73d1e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  452.199761][T16939] RAX: ffffffffffffffda RBX: 00007fd73c625fa0 RCX: 00007fd73c39e159
[  452.199800][T16939] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  452.199831][T16939] RBP: 00007fd73d1e2090 R08: 0000000000000000 R09: 0000000000000000
[  452.199869][T16939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  452.199899][T16939] R13: 00007fd73c626038 R14: 00007fd73c625fa0 R15: 00007ffd49d871e8
[  452.199985][T16939]  </TASK>
[  452.583810][T16944] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3349'.
[  452.848409][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3354'.
[  452.895832][T16960] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode
[  452.903492][T16960] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode
[  452.918819][T16960] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3354'.
[  453.015922][T16963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3356'.
[  453.038744][T16965] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3355'.
[  453.265436][T16975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3359'.
[  453.417732][T16850] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.417965][T16850] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.418337][T16850] bridge_slave_0: entered allmulticast mode
[  453.439682][T16850] bridge_slave_0: entered promiscuous mode
[  453.449865][T16850] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.450179][T16850] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.450318][T16850] bridge_slave_1: entered allmulticast mode
[  453.456469][T16850] bridge_slave_1: entered promiscuous mode
[  453.579421][T16850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.598794][T16850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.700483][T16850] team0: Port device team_slave_0 added
[  453.717607][T16850] team0: Port device team_slave_1 added
[  453.803239][T16850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.810798][ T5628] Bluetooth: hci2: command tx timeout
[  453.816498][T16850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.816553][T16850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.859019][T16850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.866427][T16850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.892302][T16850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.975930][T16995] netlink: 'syz.3.3365': attribute type 3 has an invalid length.
[  454.043424][T17003] ip6tnl2: entered promiscuous mode
[  454.068947][ T5989] IPVS: starting estimator thread 0...
[  454.161071][T17008] IPVS: using max 26 ests per chain, 62400 per kthread
[  454.395643][T16850] hsr_slave_0: entered promiscuous mode
[  454.406321][T16850] hsr_slave_1: entered promiscuous mode
[  454.416317][T16850] debugfs: 'hsr0' already exists in 'hsr'
[  454.425543][T16850] Cannot create hsr debugfs directory
[  455.231995][T17052] netlink: 'syz.3.3382': attribute type 3 has an invalid length.
[  455.244838][T16850] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.377500][T17051] netlink: 'syz.0.3385': attribute type 10 has an invalid length.
[  455.442459][T16850] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.529732][T17051] team0: Port device dummy0 added
[  455.737607][T16850] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.902049][ T5628] Bluetooth: hci2: command tx timeout
[  456.193919][T16850] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.087726][T16850] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  457.109347][T16850] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  457.116819][T16850] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  457.194803][T16850] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  457.214545][T16850] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  457.301103][T16850] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  457.312869][T16850] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  457.391984][T16850] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  457.695541][T16850] 8021q: adding VLAN 0 to HW filter on device bond0
[  457.707992][T17129] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.831251][T16850] 8021q: adding VLAN 0 to HW filter on device team0
[  457.846943][T17112] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.847137][T17112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  457.873135][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.873253][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  457.970694][ T5628] Bluetooth: hci2: command tx timeout
[  458.361309][T17156] openvswitch: netlink: Multiple metadata blocks provided
[  458.658197][T17169] __nla_validate_parse: 17 callbacks suppressed
[  458.668333][T17169] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3413'.
[  458.678605][T17169] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3413'.
[  458.688882][T17169] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3413'.
[  458.808863][T17172] syzkaller0: entered promiscuous mode
[  458.817551][T17172] syzkaller0: entered allmulticast mode
[  459.060896][T16850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.289553][T17186] syzkaller0: entered promiscuous mode
[  459.289599][T17186] syzkaller0: entered allmulticast mode
[  459.367821][ T5628] block nbd47: Receive control failed (result -32)
[  459.367845][ T5630] block nbd47: Receive control failed (result -32)
[  459.612618][T17197] FAULT_INJECTION: forcing a failure.
[  459.612618][T17197] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  459.639013][T17197] CPU: 0 UID: 0 PID: 17197 Comm: syz.1.3421 Not tainted syzkaller #0 PREEMPT(full) 
[  459.639041][T17197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  459.639054][T17197] Call Trace:
[  459.639062][T17197]  <TASK>
[  459.639072][T17197]  dump_stack_lvl+0xe8/0x150
[  459.639107][T17197]  should_fail_ex+0x410/0x560
[  459.639140][T17197]  _copy_from_iter+0x1d3/0x1660
[  459.639171][T17197]  ? __alloc_skb+0x27a/0x7a0
[  459.639201][T17197]  ? __alloc_skb+0x27a/0x7a0
[  459.639230][T17197]  ? __alloc_skb+0x27a/0x7a0
[  459.639259][T17197]  ? __pfx__copy_from_iter+0x10/0x10
[  459.639286][T17197]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  459.639316][T17197]  ? __alloc_skb+0x27a/0x7a0
[  459.639343][T17197]  ? __alloc_skb+0x27a/0x7a0
[  459.639376][T17197]  ? netlink_sendmsg+0x650/0xb40
[  459.639397][T17197]  ? skb_put+0x112/0x210
[  459.639427][T17197]  netlink_sendmsg+0x6c0/0xb40
[  459.639459][T17197]  ? __pfx_netlink_sendmsg+0x10/0x10
[  459.639490][T17197]  ? apparmor_socket_sendmsg+0x98/0x360
[  459.639522][T17197]  ? __pfx_netlink_sendmsg+0x10/0x10
[  459.639545][T17197]  sock_sendmsg_nosec+0x13a/0x180
[  459.639575][T17197]  ____sys_sendmsg+0x54e/0x850
[  459.639601][T17197]  ? __pfx_____sys_sendmsg+0x10/0x10
[  459.639659][T17197]  ? import_iovec+0x73/0xa0
[  459.639693][T17197]  ___sys_sendmsg+0x2a5/0x360
[  459.639714][T17197]  ? __lock_acquire+0x6df/0x2e50
[  459.639739][T17197]  ? __pfx____sys_sendmsg+0x10/0x10
[  459.639793][T17197]  ? __fget_files+0x2a/0x420
[  459.639818][T17197]  ? __fget_files+0x3a2/0x420
[  459.639854][T17197]  __x64_sys_sendmsg+0x1b1/0x290
[  459.639880][T17197]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  459.639921][T17197]  do_syscall_64+0x166/0x520
[  459.639948][T17197]  ? trace_irq_disable+0x3b/0x140
[  459.639967][T17197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.639987][T17197]  ? clear_bhb_loop+0x70/0xc0
[  459.640013][T17197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.640034][T17197] RIP: 0033:0x7f99cfd9e159
[  459.640054][T17197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  459.640072][T17197] RSP: 002b:00007f99d0c74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  459.640095][T17197] RAX: ffffffffffffffda RBX: 00007f99d0025fa0 RCX: 00007f99cfd9e159
[  459.640111][T17197] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  459.640124][T17197] RBP: 00007f99d0c74090 R08: 0000000000000000 R09: 0000000000000000
[  459.640137][T17197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.640150][T17197] R13: 00007f99d0026038 R14: 00007f99d0025fa0 R15: 00007ffde3e7a948
[  459.640182][T17197]  </TASK>
[  463.306734][T16850] veth0_vlan: entered promiscuous mode
[  463.327376][T16850] veth1_vlan: entered promiscuous mode
[  463.387270][T16850] veth0_macvtap: entered promiscuous mode
[  463.408122][T17231] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.458346][T16850] veth1_macvtap: entered promiscuous mode
[  463.496079][T16850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.516674][T16850] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.580396][T17112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.602715][T17111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.611984][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.612796][   T74] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.829157][T17112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.829202][T17112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.838690][T17209] lo speed is unknown, defaulting to 1000
[  463.864953][T17234] netlink: 'syz.2.3432': attribute type 11 has an invalid length.
[  463.873804][T17234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'.
[  464.059495][T17111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.059538][T17111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.327021][T17246] xt_TPROXY: Can be used only with -p tcp or -p udp
[  464.569790][T17240] syzkaller0: entered promiscuous mode
[  464.569839][T17240] syzkaller0: entered allmulticast mode
[  464.711167][T17269] netlink: 316 bytes leftover after parsing attributes in process `syz.2.3436'.
[  465.165729][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3440'.
[  465.561626][ T5630] block nbd48: Receive control failed (result -32)
[  465.568741][ T5628] block nbd48: Receive control failed (result -32)
[  467.629334][T17259] syzkaller0: entered promiscuous mode
[  467.629384][T17259] syzkaller0: entered allmulticast mode
[  467.662074][T17275] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.669338][T17292] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  467.968400][T17304] xt_TPROXY: Can be used only with -p tcp or -p udp
[  468.426865][T17314] xt_socket: unknown flags 0x4
[  470.759531][T17297] tipc: Started in network mode
[  470.764927][T17297] tipc: Node identity e0000002, cluster identity 4711
[  470.764985][T17297] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  470.769183][T17315] lo: entered allmulticast mode
[  470.789689][T17315] lo: left allmulticast mode
[  470.916570][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3451'.
[  471.385251][T17334] syzkaller0: entered promiscuous mode
[  471.394263][T17334] syzkaller0: entered allmulticast mode
[  471.705099][T17351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3460'.
[  471.747574][T17353] netlink: 316 bytes leftover after parsing attributes in process `syz.2.3461'.
[  471.994776][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3466'.
[  472.094401][ T5630] block nbd49: Receive control failed (result -32)
[  472.103372][ T5628] block nbd49: Receive control failed (result -32)
[  472.296040][T17373] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3467'.
[  472.460754][T17368] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  472.475855][T17368] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  472.615731][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3464'.
[  472.694411][T17389] FAULT_INJECTION: forcing a failure.
[  472.694411][T17389] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  472.702599][T17113] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  472.702716][T17113] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  472.702804][T17113] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  472.702910][T17113] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  472.747091][T17389] CPU: 1 UID: 0 PID: 17389 Comm: syz.4.3473 Not tainted syzkaller #0 PREEMPT(full) 
[  472.747122][T17389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  472.747136][T17389] Call Trace:
[  472.747146][T17389]  <TASK>
[  472.747155][T17389]  dump_stack_lvl+0xe8/0x150
[  472.747193][T17389]  should_fail_ex+0x410/0x560
[  472.747231][T17389]  _copy_from_iter+0x1d3/0x1660
[  472.747262][T17389]  ? __alloc_skb+0x27a/0x7a0
[  472.747294][T17389]  ? __alloc_skb+0x27a/0x7a0
[  472.747327][T17389]  ? __alloc_skb+0x27a/0x7a0
[  472.747359][T17389]  ? __pfx__copy_from_iter+0x10/0x10
[  472.747387][T17389]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  472.747420][T17389]  ? __alloc_skb+0x27a/0x7a0
[  472.747448][T17389]  ? __alloc_skb+0x27a/0x7a0
[  472.747484][T17389]  ? netlink_sendmsg+0x650/0xb40
[  472.747510][T17389]  ? skb_put+0x112/0x210
[  472.747546][T17389]  netlink_sendmsg+0x6c0/0xb40
[  472.747581][T17389]  ? __pfx_netlink_sendmsg+0x10/0x10
[  472.747616][T17389]  ? apparmor_socket_sendmsg+0x98/0x360
[  472.747650][T17389]  ? __pfx_netlink_sendmsg+0x10/0x10
[  472.747680][T17389]  sock_sendmsg_nosec+0x13a/0x180
[  472.747710][T17389]  ____sys_sendmsg+0x54e/0x850
[  472.747739][T17389]  ? __pfx_____sys_sendmsg+0x10/0x10
[  472.747771][T17389]  ? import_iovec+0x73/0xa0
[  472.747808][T17389]  ___sys_sendmsg+0x2a5/0x360
[  472.747829][T17389]  ? __lock_acquire+0x6df/0x2e50
[  472.747855][T17389]  ? __pfx____sys_sendmsg+0x10/0x10
[  472.747914][T17389]  ? __fget_files+0x2a/0x420
[  472.747940][T17389]  ? __fget_files+0x3a2/0x420
[  472.747986][T17389]  __x64_sys_sendmsg+0x1b1/0x290
[  472.748012][T17389]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  472.748056][T17389]  do_syscall_64+0x166/0x520
[  472.748085][T17389]  ? trace_irq_disable+0x3b/0x140
[  472.748106][T17389]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.748129][T17389]  ? clear_bhb_loop+0x70/0xc0
[  472.748155][T17389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.748178][T17389] RIP: 0033:0x7fdd5099e159
[  472.748199][T17389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.748220][T17389] RSP: 002b:00007fdd51805028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  472.748244][T17389] RAX: ffffffffffffffda RBX: 00007fdd50c25fa0 RCX: 00007fdd5099e159
[  472.748260][T17389] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003
[  472.748274][T17389] RBP: 00007fdd51805090 R08: 0000000000000000 R09: 0000000000000000
[  472.748289][T17389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  472.748302][T17389] R13: 00007fdd50c26038 R14: 00007fdd50c25fa0 R15: 00007ffc9a396d18
[  472.748334][T17389]  </TASK>
[  473.211203][T17395] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3476'.
[  473.276605][T17399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.625286][T17412] FAULT_INJECTION: forcing a failure.
[  473.625286][T17412] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  473.642028][T17412] CPU: 1 UID: 0 PID: 17412 Comm: syz.0.3482 Not tainted syzkaller #0 PREEMPT(full) 
[  473.642061][T17412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  473.642077][T17412] Call Trace:
[  473.642086][T17412]  <TASK>
[  473.642097][T17412]  dump_stack_lvl+0xe8/0x150
[  473.642146][T17412]  should_fail_ex+0x410/0x560
[  473.642201][T17412]  _copy_to_user+0x31/0xb0
[  473.642226][T17412]  simple_read_from_buffer+0xe1/0x170
[  473.642263][T17412]  proc_fail_nth_read+0x1bb/0x230
[  473.642305][T17412]  ? common_file_perm+0x20e/0x2b0
[  473.642340][T17412]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  473.642374][T17412]  ? rw_verify_area+0x24a/0x4c0
[  473.642412][T17412]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  473.642462][T17412]  vfs_read+0x213/0xa80
[  473.642503][T17412]  ? __pfx___mutex_lock+0x10/0x10
[  473.642535][T17412]  ? __pfx_vfs_read+0x10/0x10
[  473.642567][T17412]  ? __fget_files+0x2a/0x420
[  473.642601][T17412]  ? __fget_files+0x3a2/0x420
[  473.642628][T17412]  ? __fget_files+0x2a/0x420
[  473.642667][T17412]  ksys_read+0x150/0x270
[  473.642701][T17412]  ? __pfx_ksys_read+0x10/0x10
[  473.642730][T17412]  ? fput+0xa0/0xd0
[  473.642767][T17412]  do_syscall_64+0x166/0x520
[  473.642796][T17412]  ? trace_irq_disable+0x3b/0x140
[  473.642818][T17412]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.642842][T17412]  ? clear_bhb_loop+0x70/0xc0
[  473.642880][T17412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.642903][T17412] RIP: 0033:0x7fd73c35e98e
[  473.642923][T17412] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  473.642942][T17412] RSP: 002b:00007fd73d1e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  473.642965][T17412] RAX: ffffffffffffffda RBX: 00007fd73d1e26c0 RCX: 00007fd73c35e98e
[  473.642981][T17412] RDX: 000000000000000f RSI: 00007fd73d1e20a0 RDI: 0000000000000005
[  473.642995][T17412] RBP: 00007fd73d1e2090 R08: 0000000000000000 R09: 0000000000000000
[  473.643008][T17412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  473.643021][T17412] R13: 00007fd73c626038 R14: 00007fd73c625fa0 R15: 00007ffd49d871e8
[  473.643055][T17412]  </TASK>
[  473.983368][T17421] FAULT_INJECTION: forcing a failure.
[  473.983368][T17421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  473.998888][T17421] CPU: 1 UID: 0 PID: 17421 Comm: syz.0.3486 Not tainted syzkaller #0 PREEMPT(full) 
[  473.998919][T17421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  473.998934][T17421] Call Trace:
[  473.998943][T17421]  <TASK>
[  473.998953][T17421]  dump_stack_lvl+0xe8/0x150
[  473.998994][T17421]  should_fail_ex+0x410/0x560
[  473.999031][T17421]  _copy_from_iter+0x1d3/0x1660
[  473.999062][T17421]  ? __alloc_skb+0x27a/0x7a0
[  473.999095][T17421]  ? __alloc_skb+0x27a/0x7a0
[  473.999127][T17421]  ? __alloc_skb+0x27a/0x7a0
[  473.999156][T17421]  ? __pfx__copy_from_iter+0x10/0x10
[  473.999184][T17421]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  473.999216][T17421]  ? __alloc_skb+0x27a/0x7a0
[  473.999244][T17421]  ? __alloc_skb+0x27a/0x7a0
[  473.999280][T17421]  ? netlink_sendmsg+0x650/0xb40
[  473.999305][T17421]  ? skb_put+0x112/0x210
[  473.999339][T17421]  netlink_sendmsg+0x6c0/0xb40
[  473.999384][T17421]  ? __pfx_netlink_sendmsg+0x10/0x10
[  473.999418][T17421]  ? apparmor_socket_sendmsg+0x98/0x360
[  473.999453][T17421]  ? __pfx_netlink_sendmsg+0x10/0x10
[  473.999477][T17421]  sock_sendmsg_nosec+0x13a/0x180
[  473.999507][T17421]  ____sys_sendmsg+0x54e/0x850
[  473.999535][T17421]  ? __pfx_____sys_sendmsg+0x10/0x10
[  473.999567][T17421]  ? import_iovec+0x73/0xa0
[  473.999603][T17421]  ___sys_sendmsg+0x2a5/0x360
[  473.999623][T17421]  ? __lock_acquire+0x6df/0x2e50
[  473.999650][T17421]  ? __pfx____sys_sendmsg+0x10/0x10
[  473.999708][T17421]  ? __fget_files+0x2a/0x420
[  473.999738][T17421]  ? __fget_files+0x3a2/0x420
[  473.999776][T17421]  __x64_sys_sendmsg+0x1b1/0x290
[  473.999800][T17421]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  473.999842][T17421]  do_syscall_64+0x166/0x520
[  473.999870][T17421]  ? trace_irq_disable+0x3b/0x140
[  473.999890][T17421]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.999912][T17421]  ? clear_bhb_loop+0x70/0xc0
[  473.999939][T17421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.999960][T17421] RIP: 0033:0x7fd73c39e159
[  473.999981][T17421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.000000][T17421] RSP: 002b:00007fd73d1e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  474.000024][T17421] RAX: ffffffffffffffda RBX: 00007fd73c625fa0 RCX: 00007fd73c39e159
[  474.000040][T17421] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003
[  474.000055][T17421] RBP: 00007fd73d1e2090 R08: 0000000000000000 R09: 0000000000000000
[  474.000069][T17421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.000083][T17421] R13: 00007fd73c626038 R14: 00007fd73c625fa0 R15: 00007ffd49d871e8
[  474.000118][T17421]  </TASK>
[  474.376263][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3487'.
[  474.419316][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3488'.
[  474.550126][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3492'.
[  474.727268][T17444] xt_TPROXY: Can be used only with -p tcp or -p udp
[  474.880596][T17447] syzkaller0: entered promiscuous mode
[  474.880648][T17447] syzkaller0: entered allmulticast mode
[  475.072879][T17456] FAULT_INJECTION: forcing a failure.
[  475.072879][T17456] name failslab, interval 1, probability 0, space 0, times 0
[  475.072939][T17456] CPU: 0 UID: 0 PID: 17456 Comm: syz.0.3499 Not tainted syzkaller #0 PREEMPT(full) 
[  475.072962][T17456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  475.073010][T17456] Call Trace:
[  475.073035][T17456]  <TASK>
[  475.073069][T17456]  dump_stack_lvl+0xe8/0x150
[  475.073173][T17456]  should_fail_ex+0x410/0x560
[  475.073282][T17456]  should_failslab+0xa8/0x100
[  475.073346][T17456]  ? skb_clone+0x212/0x3a0
[  475.073414][T17456]  kmem_cache_alloc_noprof+0xa1/0x600
[  475.073506][T17456]  ? skb_clone+0x212/0x3a0
[  475.073575][T17456]  skb_clone+0x212/0x3a0
[  475.073641][T17456]  __netlink_deliver_tap+0x413/0x860
[  475.073735][T17456]  ? netlink_deliver_tap+0x2e/0x1b0
[  475.073829][T17456]  netlink_deliver_tap+0x19c/0x1b0
[  475.073903][T17456]  netlink_unicast+0x781/0x940
[  475.074000][T17456]  netlink_sendmsg+0x813/0xb40
[  475.074085][T17456]  ? __pfx_netlink_sendmsg+0x10/0x10
[  475.074176][T17456]  ? apparmor_socket_sendmsg+0x98/0x360
[  475.074265][T17456]  ? __pfx_netlink_sendmsg+0x10/0x10
[  475.074326][T17456]  sock_sendmsg_nosec+0x13a/0x180
[  475.074423][T17456]  ____sys_sendmsg+0x54e/0x850
[  475.074516][T17456]  ? __pfx_____sys_sendmsg+0x10/0x10
[  475.074611][T17456]  ? import_iovec+0x73/0xa0
[  475.074712][T17456]  ___sys_sendmsg+0x2a5/0x360
[  475.074762][T17456]  ? __lock_acquire+0x6df/0x2e50
[  475.074833][T17456]  ? __pfx____sys_sendmsg+0x10/0x10
[  475.074986][T17456]  ? __fget_files+0x2a/0x420
[  475.075066][T17456]  ? __fget_files+0x3a2/0x420
[  475.075167][T17456]  __x64_sys_sendmsg+0x1b1/0x290
[  475.075229][T17456]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  475.075348][T17456]  do_syscall_64+0x166/0x520
[  475.075439][T17456]  ? trace_irq_disable+0x3b/0x140
[  475.075495][T17456]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.075552][T17456]  ? clear_bhb_loop+0x70/0xc0
[  475.075619][T17456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.075687][T17456] RIP: 0033:0x7fd73c39e159
[  475.075739][T17456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.075796][T17456] RSP: 002b:00007fd73d1e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  475.075860][T17456] RAX: ffffffffffffffda RBX: 00007fd73c625fa0 RCX: 00007fd73c39e159
[  475.075920][T17456] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003
[  475.075976][T17456] RBP: 00007fd73d1e2090 R08: 0000000000000000 R09: 0000000000000000
[  475.076016][T17456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.076048][T17456] R13: 00007fd73c626038 R14: 00007fd73c625fa0 R15: 00007ffd49d871e8
[  475.076140][T17456]  </TASK>
[  475.924477][T17478] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  475.934323][T17479] xt_TPROXY: Can be used only with -p tcp or -p udp
[  476.014481][T17482] __nla_validate_parse: 2 callbacks suppressed
[  476.021105][T17482] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3510'.
[  476.257235][T17495] openvswitch: netlink: Multiple metadata blocks provided
[  476.284751][T17493] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3512'.
[  476.504450][T17499] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.505413][T17499] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.636297][T17512] sctp: [Deprecated]: syz.2.3515 (pid 17512) Use of int in maxseg socket option.
[  476.636297][T17512] Use struct sctp_assoc_value instead
[  476.704459][T17499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.726333][T17499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  477.112435][   T74] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.112508][   T74] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.112609][   T74] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.113151][   T74] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.193904][T17510] syzkaller0: entered promiscuous mode
[  477.193946][T17510] syzkaller0: entered allmulticast mode
[  477.277184][T17526] syzkaller0: entered promiscuous mode
[  477.286249][T17526] syzkaller0: entered allmulticast mode
[  481.791744][T17574] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  482.005778][T17580] siw: device registration error -23
[  482.059320][T17585] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3526'.
[  482.120294][T17590] FAULT_INJECTION: forcing a failure.
[  482.120294][T17590] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  482.134069][T17590] CPU: 1 UID: 0 PID: 17590 Comm: syz.3.3530 Not tainted syzkaller #0 PREEMPT(full) 
[  482.134099][T17590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  482.134114][T17590] Call Trace:
[  482.134123][T17590]  <TASK>
[  482.134142][T17590]  dump_stack_lvl+0xe8/0x150
[  482.134180][T17590]  should_fail_ex+0x410/0x560
[  482.134222][T17590]  _copy_to_user+0x31/0xb0
[  482.134246][T17590]  simple_read_from_buffer+0xe1/0x170
[  482.134282][T17590]  proc_fail_nth_read+0x1bb/0x230
[  482.134314][T17590]  ? common_file_perm+0x20e/0x2b0
[  482.134351][T17590]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  482.134388][T17590]  ? rw_verify_area+0x24a/0x4c0
[  482.134421][T17590]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  482.134454][T17590]  vfs_read+0x213/0xa80
[  482.134490][T17590]  ? __pfx___mutex_lock+0x10/0x10
[  482.134521][T17590]  ? __pfx_vfs_read+0x10/0x10
[  482.134553][T17590]  ? __fget_files+0x2a/0x420
[  482.134586][T17590]  ? __fget_files+0x3a2/0x420
[  482.134613][T17590]  ? __fget_files+0x2a/0x420
[  482.134651][T17590]  ksys_read+0x150/0x270
[  482.134685][T17590]  ? __pfx_ksys_read+0x10/0x10
[  482.134729][T17590]  do_syscall_64+0x166/0x520
[  482.134758][T17590]  ? trace_irq_disable+0x3b/0x140
[  482.134779][T17590]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.134803][T17590]  ? clear_bhb_loop+0x70/0xc0
[  482.134830][T17590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.134852][T17590] RIP: 0033:0x7f566c75e98e
[  482.134872][T17590] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  482.134896][T17590] RSP: 002b:00007f566d5b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  482.134918][T17590] RAX: ffffffffffffffda RBX: 00007f566d5b76c0 RCX: 00007f566c75e98e
[  482.134935][T17590] RDX: 000000000000000f RSI: 00007f566d5b70a0 RDI: 0000000000000004
[  482.134949][T17590] RBP: 00007f566d5b7090 R08: 0000000000000000 R09: 0000000000000000
[  482.134962][T17590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  482.134975][T17590] R13: 00007f566ca26038 R14: 00007f566ca25fa0 R15: 00007ffcb7c2c048
[  482.135010][T17590]  </TASK>
[  482.473394][T17597] xt_TPROXY: Can be used only with -p tcp or -p udp
[  482.576188][T17600] openvswitch: netlink: Multiple metadata blocks provided
[  482.717668][T17615] netlink: 'syz.3.3536': attribute type 10 has an invalid length.
[  482.746396][T17595] sock: sock_timestamping_bind_phc: sock not bind to device
[  483.005788][T17632] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3538'.
[  483.287090][T17615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  483.307126][T17615] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  483.605893][T17646] syzkaller0: entered promiscuous mode
[  483.606120][T17646] syzkaller0: entered allmulticast mode
[  483.638880][T17648] batman_adv: batadv0: Adding interface: veth0
[  483.638923][T17648] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  483.638960][T17648] batman_adv: batadv0: Interface activated: veth0
[  484.326202][T17667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3548'.
[  484.459651][T17669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3549'.
[  486.360640][T17648] batman_adv: batadv0: Removing interface: batadv_slave_0
[  486.372470][T17648] batman_adv: batadv0: Removing interface: batadv_slave_1
[  486.384674][T17648] batman_adv: batadv0: Interface deactivated: veth0
[  486.391644][T17648] batman_adv: batadv0: Removing interface: veth0
[  486.417343][T17669] veth1_to_team: entered promiscuous mode
[  486.424905][T17669] gretap0: entered promiscuous mode
[  486.431596][T17669] debugfs: 'hsr1' already exists in 'hsr'
[  486.438421][T17669] Cannot create hsr debugfs directory
[  486.444524][T17669] hsr1: entered promiscuous mode
[  487.128771][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3559'.
[  487.170590][T17696] ovs-system: entered promiscuous mode
[  487.380169][T17709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3563'.
[  487.465187][T17709] syzkaller0: entered promiscuous mode
[  487.465242][T17709] syzkaller0: entered allmulticast mode
[  488.333922][T17743] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3570'.
[  488.913676][T17758] batadv_slave_1: entered promiscuous mode
[  488.939375][T17758] batadv_slave_1: left promiscuous mode
[  488.946332][T17758] openvswitch: netlink: Multiple metadata blocks provided
[  489.008963][T17768] xt_TPROXY: Can be used only with -p tcp or -p udp
[  491.339412][T17841] netlink: 'syz.3.3593': attribute type 10 has an invalid length.
[  491.348605][T17841] team0: Device dummy0 is up. Set it down before adding it as a team port
[  492.203523][T17870] netlink: 316 bytes leftover after parsing attributes in process `syz.0.3604'.
[  492.448769][T17877] netlink: 'syz.0.3605': attribute type 10 has an invalid length.
[  493.077663][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3614'.
[  493.278651][T17909] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.297687][T17909] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.297828][T17909] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.328349][T17909] team0: Port device bridge0 added
[  493.336652][T17914] openvswitch: netlink: Multiple metadata blocks provided
[  493.361184][T17883] lo speed is unknown, defaulting to 1000
[  493.390484][T17913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3617'.
[  493.522034][T17918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3620'.
[  493.533725][T17920] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3621'.
[  493.596139][T17918] veth1_to_team: entered promiscuous mode
[  493.615873][T17918] gretap0: entered promiscuous mode
[  493.628837][T17918] debugfs: 'hsr1' already exists in 'hsr'
[  493.628887][T17918] Cannot create hsr debugfs directory
[  493.631411][T17918] hsr1: entered promiscuous mode
[  494.472312][T17928] ipvlan2: entered promiscuous mode
[  494.478306][T17928] bridge0: port 3(ipvlan2) entered blocking state
[  494.485116][T17928] bridge0: port 3(ipvlan2) entered disabled state
[  494.492407][T17928] ipvlan2: entered allmulticast mode
[  494.497844][T17928] bridge0: entered allmulticast mode
[  494.505898][T17928] ipvlan2: left allmulticast mode
[  494.511950][T17928] bridge0: left allmulticast mode
[  494.600856][T17938] ip6erspan0: entered allmulticast mode
[  494.627300][T17941] pim6reg0: tun_chr_ioctl cmd 1074812118
[  494.793791][T17960] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  494.803662][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3629'.
[  494.914261][T17965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3629'.
[  495.057047][T17965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3629'.
[  495.057299][T17965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3629'.
[  495.057510][T17965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3629'.
[  495.151714][T17999] openvswitch: netlink: Multiple metadata blocks provided
[  495.956844][T18027] ipvlan2: entered promiscuous mode
[  495.964480][T18027] bridge0: port 3(ipvlan2) entered blocking state
[  495.964885][T18027] bridge0: port 3(ipvlan2) entered disabled state
[  495.965296][T18027] ipvlan2: entered allmulticast mode
[  495.965346][T18027] bridge0: entered allmulticast mode
[  495.994279][T18027] ipvlan2: left allmulticast mode
[  495.995279][T18027] bridge0: left allmulticast mode
[  496.194461][T17953] lo speed is unknown, defaulting to 1000
[  496.210884][T18023] smc: removing ib device syz0
[  496.521677][T18023] smbdirect: ib_dev[syz0] removed
[  497.596195][T18081] __nla_validate_parse: 23 callbacks suppressed
[  497.604755][T18081] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3655'.
[  497.822090][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3656'.
[  497.822138][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3656'.
[  497.822183][T18089] netlink: 'syz.4.3656': attribute type 11 has an invalid length.
[  497.881950][T18093] ip_tables: iptables: counters copy to user failed while replacing table
[  497.992329][T18095] xt_TPROXY: Can be used only with -p tcp or -p udp
[  498.174944][T18098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3662'.
[  498.185799][T18102] netlink: 'syz.4.3663': attribute type 2 has an invalid length.
[  498.195884][T18101] netlink: 316 bytes leftover after parsing attributes in process `syz.1.3664'.
[  498.332931][T18106] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  498.611744][T18112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3666'.
[  499.265683][ T5628] block nbd50: Receive control failed (result -32)
[  499.286122][ T5630] block nbd50: Receive control failed (result -32)
[  499.577330][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3672'.
[  500.158663][   T13] IPVS: starting estimator thread 0...
[  500.270556][T18152] IPVS: using max 35 ests per chain, 84000 per kthread
[  500.323572][T18158] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  501.478557][T18175] sctp: [Deprecated]: syz.3.3684 (pid 18175) Use of struct sctp_assoc_value in delayed_ack socket option.
[  501.478557][T18175] Use struct sctp_sack_info instead
[  501.842303][T18187] netlink: 316 bytes leftover after parsing attributes in process `syz.3.3687'.
[  502.935571][T18216] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.974159][T18221] netlink: 'syz.0.3696': attribute type 1 has an invalid length.
[  503.205438][T18216] netlink: 'syz.0.3696': attribute type 16 has an invalid length.
[  503.205481][T18216] netlink: 'syz.0.3696': attribute type 17 has an invalid length.
[  503.428721][T18216] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.428977][T18216] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.544642][T18216] mac80211_hwsim hwsim30 wlan0: left promiscuous mode
[  503.553681][T18216] mac80211_hwsim hwsim30 wlan0: left allmulticast mode
[  503.567839][T18216] hsr1: left promiscuous mode
[  503.584836][T18216] bond1: left promiscuous mode
[  503.584876][T18216] bridge2: left promiscuous mode
[  503.585240][T18216] bond1: left allmulticast mode
[  503.585264][T18216] bridge2: left allmulticast mode
[  503.614856][T18216] 8021q: adding VLAN 0 to HW filter on device bond2
[  503.628422][T18216] ip6erspan0: left allmulticast mode
[  503.648714][T17106] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.648851][T17106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.866774][T18237] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3700'.
[  503.879707][T18237] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3700'.
[  504.059433][T18240] xt_TPROXY: Can be used only with -p tcp or -p udp
[  504.486200][T18252] netlink: 'syz.2.3705': attribute type 10 has an invalid length.
[  504.625609][T18256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3705'.
[  505.113661][T18274] Cannot find del_set index 1 as target
[  506.196104][T18294] xt_bpf: check failed: parse error
[  506.468472][T18299] nbd51: detected capacity change from 0 to 127
[  506.484738][ T5628] block nbd51: Receive control failed (result -32)
[  506.497650][ T1730] block nbd51: Dead connection, failed to find a fallback
[  506.504321][ T1730] block nbd51: shutting down sockets
[  506.507439][ T1730] I/O error, dev nbd51, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  506.508115][ T1730] Buffer I/O error on dev nbd51, logical block 0, async page read
[  506.509604][ T1730] I/O error, dev nbd51, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  506.509700][ T1730] Buffer I/O error on dev nbd51, logical block 1, async page read
[  506.512288][ T1730] I/O error, dev nbd51, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[  506.512320][ T1730] Buffer I/O error on dev nbd51, logical block 2, async page read
[  506.512339][ T1730] Buffer I/O error on dev nbd51, logical block 3, async page read
[  506.527071][ T1730] I/O error, dev nbd51, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  506.527163][ T1730] Buffer I/O error on dev nbd51, logical block 0, async page read
[  506.527215][ T1730] Buffer I/O error on dev nbd51, logical block 1, async page read
[  506.527264][ T1730] Buffer I/O error on dev nbd51, logical block 2, async page read
[  506.527306][ T1730] Buffer I/O error on dev nbd51, logical block 3, async page read
[  506.534762][ T1730] I/O error, dev nbd51, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  506.534846][ T1730] Buffer I/O error on dev nbd51, logical block 0, async page read
[  506.534889][ T1730] Buffer I/O error on dev nbd51, logical block 1, async page read
[  506.537429][ T1730] I/O error, dev nbd51, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  506.538127][ T1730] I/O error, dev nbd51, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  506.540970][ T1730] I/O error, dev nbd51, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  506.544434][ T1730] I/O error, dev nbd51, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  506.545073][ T1730] I/O error, dev nbd51, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  506.548125][ T5633] ldm_validate_partition_table(): Disk read failed.
[  506.560497][ T5633] Dev nbd51: unable to read RDB block 0
[  506.570416][ T5633]  nbd51: unable to read partition table
[  506.729320][ T5633] ldm_validate_partition_table(): Disk read failed.
[  506.741638][ T5633] Dev nbd51: unable to read RDB block 0
[  506.750171][ T5633]  nbd51: unable to read partition table
[  507.026630][T18310] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  507.625303][ T5628] block nbd52: Receive control failed (result -32)
[  507.626906][ T5630] block nbd52: Receive control failed (result -32)
[  507.900870][T18317] ipvlan2: entered promiscuous mode
[  507.917760][T18317] bridge0: port 3(ipvlan2) entered blocking state
[  507.924747][T18317] bridge0: port 3(ipvlan2) entered disabled state
[  507.935812][T18317] ipvlan2: entered allmulticast mode
[  507.942629][T18317] bridge0: entered allmulticast mode
[  507.981735][T18317] ipvlan2: left allmulticast mode
[  507.981776][T18317] bridge0: left allmulticast mode
[  508.103634][T18324] xt_TPROXY: Can be used only with -p tcp or -p udp
[  508.124355][T18325] netlink: 'syz.2.3728': attribute type 4 has an invalid length.
[  508.133115][T18325] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3728'.
[  508.174666][T18325] netlink: 'syz.2.3728': attribute type 1 has an invalid length.
[  508.174709][T18325] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3728'.
[  508.266643][T18329] ip6gretap0: entered promiscuous mode
[  508.405326][T18325] xt_CT: No such helper "snmp_trap"
[  508.509061][T18337] syzkaller0: entered promiscuous mode
[  508.515261][T18337] syzkaller0: entered allmulticast mode
[  509.000851][T18347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3738'.
[  509.016878][T18345] xt_hashlimit: size too large, truncated to 1048576
[  509.048373][T18347] 
[  509.050776][T18347] ======================================================
[  509.057828][T18347] WARNING: possible circular locking dependency detected
[  509.064986][T18347] syzkaller #0 Not tainted
[  509.069442][T18347] ------------------------------------------------------
[  509.076494][T18347] syz.2.3738/18347 is trying to acquire lock:
[  509.082604][T18347] ffff8880338c1998 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0
[  509.091948][T18347] 
[  509.091948][T18347] but task is already holding lock:
[  509.099352][T18347] ffff888026d35958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  509.108823][T18347] 
[  509.108823][T18347] which lock already depends on the new lock.
[  509.108823][T18347] 
[  509.119678][T18347] 
[  509.119678][T18347] the existing dependency chain (in reverse order) is:
[  509.128937][T18347] 
[  509.128937][T18347] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[  509.136815][T18347]        __mutex_lock+0x19d/0x1550
[  509.142000][T18347]        elevator_change+0x1af/0x480
[  509.147342][T18347]        elevator_set_none+0xb5/0x140
[  509.152767][T18347]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  509.159224][T18347]        nbd_start_device+0x189/0xb30
[  509.164628][T18347]        nbd_genl_connect+0x167d/0x1cd0
[  509.170214][T18347]        genl_family_rcv_msg_doit+0x233/0x340
[  509.176317][T18347]        genl_rcv_msg+0x614/0x7a0
[  509.181376][T18347]        netlink_rcv_skb+0x226/0x4a0
[  509.186677][T18347]        genl_rcv+0x28/0x40
[  509.191205][T18347]        netlink_unicast+0x7bd/0x940
[  509.196520][T18347]        netlink_sendmsg+0x813/0xb40
[  509.201826][T18347]        sock_sendmsg_nosec+0x13a/0x180
[  509.207391][T18347]        ____sys_sendmsg+0x54e/0x850
[  509.212703][T18347]        ___sys_sendmsg+0x2a5/0x360
[  509.217919][T18347]        __x64_sys_sendmsg+0x1b1/0x290
[  509.223385][T18347]        do_syscall_64+0x166/0x520
[  509.228513][T18347]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.234941][T18347] 
[  509.234941][T18347] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  509.243584][T18347]        blk_alloc_queue+0x544/0x690
[  509.248907][T18347]        __blk_mq_alloc_disk+0x194/0x390
[  509.254569][T18347]        nbd_dev_add+0x494/0xb60
[  509.259528][T18347]        nbd_init+0x168/0x1f0
[  509.264399][T18347]        do_one_initcall+0x250/0x870
[  509.269714][T18347]        do_initcall_level+0x10a/0x1a0
[  509.275330][T18347]        do_initcalls+0x59/0xa0
[  509.280221][T18347]        kernel_init_freeable+0x29d/0x3e0
[  509.285970][T18347]        kernel_init+0x22/0x1d0
[  509.290848][T18347]        ret_from_fork+0x514/0xb70
[  509.296009][T18347]        ret_from_fork_asm+0x1a/0x30
[  509.301334][T18347] 
[  509.301334][T18347] -> #4 (fs_reclaim){+.+.}-{0:0}:
[  509.308583][T18347]        fs_reclaim_acquire+0x71/0x100
[  509.314071][T18347]        __kmalloc_cache_node_noprof+0x66/0x620
[  509.320339][T18347]        create_worker+0x112/0x7c0
[  509.325467][T18347]        workqueue_prepare_cpu+0xe4/0x170
[  509.331206][T18347]        cpuhp_invoke_callback+0x434/0x810
[  509.337038][T18347]        _cpu_up+0x2ce/0x5b0
[  509.341642][T18347]        cpu_up+0x1d2/0x220
[  509.346183][T18347]        cpuhp_bringup_mask+0xb2/0x1a0
[  509.351772][T18347]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  509.358130][T18347]        bringup_nonboot_cpus+0x17/0x30
[  509.363700][T18347]        smp_init+0x32/0x110
[  509.368354][T18347]        kernel_init_freeable+0x27f/0x3e0
[  509.374105][T18347]        kernel_init+0x22/0x1d0
[  509.378979][T18347]        ret_from_fork+0x514/0xb70
[  509.384116][T18347]        ret_from_fork_asm+0x1a/0x30
[  509.389430][T18347] 
[  509.389430][T18347] -> #3 (cpu_hotplug_lock){++++}-{0:0}:
[  509.397179][T18347]        cpus_read_lock+0x42/0x160
[  509.402315][T18347]        static_key_slow_inc+0x12/0x30
[  509.407786][T18347]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  509.414073][T18347]        nbd_genl_foreach_sock+0x265/0x450
[  509.419893][T18347]        nbd_genl_reconfigure+0xbbb/0x1040
[  509.425716][T18347]        genl_family_rcv_msg_doit+0x233/0x340
[  509.431807][T18347]        genl_rcv_msg+0x614/0x7a0
[  509.436882][T18347]        netlink_rcv_skb+0x226/0x4a0
[  509.442185][T18347]        genl_rcv+0x28/0x40
[  509.446716][T18347]        netlink_unicast+0x7bd/0x940
[  509.452033][T18347]        netlink_sendmsg+0x813/0xb40
[  509.457341][T18347]        sock_sendmsg_nosec+0x13a/0x180
[  509.462909][T18347]        ____sys_sendmsg+0x54e/0x850
[  509.468258][T18347]        ___sys_sendmsg+0x2a5/0x360
[  509.473472][T18347]        __x64_sys_sendmsg+0x1b1/0x290
[  509.478948][T18347]        do_syscall_64+0x166/0x520
[  509.484088][T18347]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.490521][T18347] 
[  509.490521][T18347] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  509.498198][T18347]        __mutex_lock+0x19d/0x1550
[  509.503327][T18347]        nbd_queue_rq+0x373/0xff0
[  509.508375][T18347]        blk_mq_dispatch_rq_list+0x499/0x1990
[  509.514469][T18347]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  509.521371][T18347]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  509.527903][T18347]        blk_mq_run_work_fn+0x16c/0x300
[  509.533486][T18347]        process_scheduled_works+0xc3d/0x1630
[  509.539587][T18347]        worker_thread+0xa47/0xfb0
[  509.544730][T18347]        kthread+0x38b/0x480
[  509.549341][T18347]        ret_from_fork+0x514/0xb70
[  509.554493][T18347]        ret_from_fork_asm+0x1a/0x30
[  509.559833][T18347] 
[  509.559833][T18347] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  509.567083][T18347]        __mutex_lock+0x19d/0x1550
[  509.572265][T18347]        nbd_queue_rq+0xc1/0xff0
[  509.577225][T18347]        blk_mq_dispatch_rq_list+0x499/0x1990
[  509.583324][T18347]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  509.590203][T18347]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  509.596753][T18347]        blk_mq_run_work_fn+0x16c/0x300
[  509.602327][T18347]        process_scheduled_works+0xc3d/0x1630
[  509.608423][T18347]        worker_thread+0xa47/0xfb0
[  509.613557][T18347]        kthread+0x38b/0x480
[  509.618164][T18347]        ret_from_fork+0x514/0xb70
[  509.623303][T18347]        ret_from_fork_asm+0x1a/0x30
[  509.628611][T18347] 
[  509.628611][T18347] -> #0 (set->srcu){.+.+}-{0:0}:
[  509.635755][T18347]        __lock_acquire+0x15ff/0x2e50
[  509.641144][T18347]        lock_sync+0xb3/0x130
[  509.645845][T18347]        __synchronize_srcu+0xc9/0x2f0
[  509.651316][T18347]        elevator_switch+0x1e8/0x7b0
[  509.656631][T18347]        elevator_change+0x2fa/0x480
[  509.661938][T18347]        elevator_set_default+0x375/0x440
[  509.667677][T18347]        blk_register_queue+0x3f3/0x4e0
[  509.673252][T18347]        __add_disk+0x6cb/0xe30
[  509.678115][T18347]        add_disk_fwnode+0x100/0x3a0
[  509.683420][T18347]        nbd_dev_add+0x733/0xb60
[  509.688416][T18347]        nbd_genl_connect+0x96c/0x1cd0
[  509.693902][T18347]        genl_family_rcv_msg_doit+0x233/0x340
[  509.700019][T18347]        genl_rcv_msg+0x614/0x7a0
[  509.705070][T18347]        netlink_rcv_skb+0x226/0x4a0
[  509.710373][T18347]        genl_rcv+0x28/0x40
[  509.714893][T18347]        netlink_unicast+0x7bd/0x940
[  509.720194][T18347]        netlink_sendmsg+0x813/0xb40
[  509.725493][T18347]        sock_sendmsg_nosec+0x13a/0x180
[  509.731058][T18347]        ____sys_sendmsg+0x54e/0x850
[  509.736382][T18347]        ___sys_sendmsg+0x2a5/0x360
[  509.741596][T18347]        __x64_sys_sendmsg+0x1b1/0x290
[  509.747074][T18347]        do_syscall_64+0x166/0x520
[  509.752209][T18347]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.758646][T18347] 
[  509.758646][T18347] other info that might help us debug this:
[  509.758646][T18347] 
[  509.768884][T18347] Chain exists of:
[  509.768884][T18347]   set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock
[  509.768884][T18347] 
[  509.782545][T18347]  Possible unsafe locking scenario:
[  509.782545][T18347] 
[  509.790002][T18347]        CPU0                    CPU1
[  509.795383][T18347]        ----                    ----
[  509.800766][T18347]   lock(&q->elevator_lock);
[  509.805387][T18347]                                lock(&q->q_usage_counter(io)#49);
[  509.813309][T18347]                                lock(&q->elevator_lock);
[  509.820438][T18347]   sync(set->srcu);
[  509.824344][T18347] 
[  509.824344][T18347]  *** DEADLOCK ***
[  509.824344][T18347] 
[  509.832498][T18347] locks held by syz.2.3738/18347: 6, last CPU#0:
[  509.838841][T18347]  #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  509.847057][T18347]  #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  509.856055][T18347]  #2: ffff8880595ac9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0
[  509.866428][T18347]  #3: ffff888026d359e0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0
[  509.876295][T18347]  #4: ffff888026d35468 (&q->q_usage_counter(queue)#90){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[  509.887304][T18347]  #5: ffff888026d35958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  509.897173][T18347] 
[  509.897173][T18347] stack backtrace:
[  509.903083][T18347] CPU: 0 UID: 0 PID: 18347 Comm: syz.2.3738 Not tainted syzkaller #0 PREEMPT(full) 
[  509.912484][T18347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  509.922576][T18347] Call Trace:
[  509.925873][T18347]  <TASK>
[  509.928818][T18347]  dump_stack_lvl+0xe8/0x150
[  509.933430][T18347]  print_circular_bug+0x2e2/0x300
[  509.938477][T18347]  check_noncircular+0x12f/0x150
[  509.943446][T18347]  __lock_acquire+0x15ff/0x2e50
[  509.948318][T18347]  ? check_noncircular+0xdb/0x150
[  509.953360][T18347]  ? lockdep_unlock+0x5c/0xd0
[  509.958056][T18347]  ? __lock_acquire+0x14b9/0x2e50
[  509.963095][T18347]  lock_sync+0xb3/0x130
[  509.967273][T18347]  ? __synchronize_srcu+0xb5/0x2f0
[  509.972415][T18347]  ? __synchronize_srcu+0xb5/0x2f0
[  509.977541][T18347]  __synchronize_srcu+0xc9/0x2f0
[  509.982489][T18347]  ? __pfx___synchronize_srcu+0x10/0x10
[  509.988042][T18347]  ? do_raw_spin_lock+0x12b/0x2f0
[  509.993088][T18347]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  509.998916][T18347]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  510.004496][T18347]  ? synchronize_srcu+0x20a/0x260
[  510.009537][T18347]  elevator_switch+0x1e8/0x7b0
[  510.014330][T18347]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  510.019817][T18347]  elevator_change+0x2fa/0x480
[  510.024599][T18347]  ? do_raw_spin_unlock+0xf5/0x200
[  510.029734][T18347]  elevator_set_default+0x375/0x440
[  510.034970][T18347]  ? __pfx_elevator_set_default+0x10/0x10
[  510.040714][T18347]  ? disk_register_independent_access_ranges+0x2d8/0x380
[  510.047762][T18347]  ? blk_crypto_sysfs_register+0x11c/0x170
[  510.053596][T18347]  blk_register_queue+0x3f3/0x4e0
[  510.058653][T18347]  __add_disk+0x6cb/0xe30
[  510.063002][T18347]  add_disk_fwnode+0x100/0x3a0
[  510.067794][T18347]  nbd_dev_add+0x733/0xb60
[  510.072240][T18347]  ? __pfx_nbd_dev_add+0x10/0x10
[  510.077205][T18347]  ? __pfx_nbd_genl_foreach_sock+0x10/0x10
[  510.083039][T18347]  ? security_capable+0x7e/0x2c0
[  510.088007][T18347]  nbd_genl_connect+0x96c/0x1cd0
[  510.092970][T18347]  ? __pfx_nbd_genl_connect+0x10/0x10
[  510.098373][T18347]  ? rcu_is_watching+0x16/0xb0
[  510.103162][T18347]  ? trace_kmalloc+0x2a/0xf0
[  510.107784][T18347]  ? __kmalloc_noprof+0x38c/0x720
[  510.112830][T18347]  ? __nla_parse+0x40/0x60
[  510.117268][T18347]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  510.123628][T18347]  genl_family_rcv_msg_doit+0x233/0x340
[  510.129203][T18347]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  510.135309][T18347]  ? __lock_acquire+0x6df/0x2e50
[  510.140266][T18347]  ? __lock_acquire+0x6df/0x2e50
[  510.145235][T18347]  genl_rcv_msg+0x614/0x7a0
[  510.149769][T18347]  ? __pfx_genl_rcv_msg+0x10/0x10
[  510.154827][T18347]  ? __pfx_nbd_genl_connect+0x10/0x10
[  510.160235][T18347]  netlink_rcv_skb+0x226/0x4a0
[  510.165016][T18347]  ? __pfx_genl_rcv_msg+0x10/0x10
[  510.170063][T18347]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  510.175389][T18347]  ? down_read+0x2be/0x330
[  510.179834][T18347]  genl_rcv+0x28/0x40
[  510.183841][T18347]  netlink_unicast+0x7bd/0x940
[  510.188631][T18347]  netlink_sendmsg+0x813/0xb40
[  510.193420][T18347]  ? __pfx_netlink_sendmsg+0x10/0x10
[  510.198730][T18347]  ? apparmor_socket_sendmsg+0x98/0x360
[  510.204303][T18347]  ? __pfx_netlink_sendmsg+0x10/0x10
[  510.209609][T18347]  sock_sendmsg_nosec+0x13a/0x180
[  510.214661][T18347]  ____sys_sendmsg+0x54e/0x850
[  510.219450][T18347]  ? __pfx_____sys_sendmsg+0x10/0x10
[  510.224759][T18347]  ? import_iovec+0x73/0xa0
[  510.229287][T18347]  ___sys_sendmsg+0x2a5/0x360
[  510.233976][T18347]  ? __lock_acquire+0x6df/0x2e50
[  510.238930][T18347]  ? __pfx____sys_sendmsg+0x10/0x10
[  510.244145][T18347]  ? futex_wait+0x2a2/0x390
[  510.248720][T18347]  ? __fget_files+0x2a/0x420
[  510.253333][T18347]  ? __fget_files+0x3a2/0x420
[  510.258040][T18347]  __x64_sys_sendmsg+0x1b1/0x290
[  510.262996][T18347]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  510.268477][T18347]  do_syscall_64+0x166/0x520
[  510.273086][T18347]  ? trace_irq_disable+0x3b/0x140
[  510.278126][T18347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.284205][T18347]  ? clear_bhb_loop+0x70/0xc0
[  510.288931][T18347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.294869][T18347] RIP: 0033:0x7f005fd9e159
[  510.299305][T18347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  510.318948][T18347] RSP: 002b:00007f0060c0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  510.327378][T18347] RAX: ffffffffffffffda RBX: 00007f0060025fa0 RCX: 00007f005fd9e159
[  510.335360][T18347] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000005
[  510.343387][T18347] RBP: 00007f005fe35024 R08: 0000000000000000 R09: 0000000000000000
[  510.351373][T18347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  510.359351][T18347] R13: 00007f0060026038 R14: 00007f0060025fa0 R15: 00007fff668beb38
[  510.367340][T18347]  </TASK>
[  510.423140][T18347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3738'.
[  510.464497][T18349] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.475912][T18349] bridge_slave_0 (unregistering): left allmulticast mode
[  510.475953][T18349] bridge_slave_0 (unregistering): left promiscuous mode
[  510.476121][T18349] bridge0: port 1(bridge_slave_0) entered disabled state